Security & Privacy
Is Microsoft Authenticator safe? What the Android token bug means
A now-fixed bug let a harmless-looking Android app borrow your work account's sign-in pass. Here's who was at risk and the one update to check today.
Security & Privacy
Scams, data leaks and simple ways to stay safe online.
Security & Privacy
AT&T data breach settlement payout date: when the money may land
A judge has approved AT&T's $177 million deal, but there's still no official payment date. Here's the timeline, what you could get and how to avoid scams.
Security & Privacy
Deleted AI chats on Android can come back, Georgia Tech tool shows
Researchers rebuilt wiped conversations from on-device AI assistants and even got them talking again. Here's who should worry and how to clear your tracks properly.
Security & Privacy
Ondřej Surý: the unpaid volunteer who rushed PHP’s fix to the web
When two critical PHP flaws put most websites at risk, the fix reached millions of servers through one Czech engineer's spare-time project. Here's why that matters.
Security & Privacy
Samsung TV privacy: hacker says sets borrow your soundbar’s mic
A researcher who rooted a 2025 Samsung TV says its software logs sounds, screens and ad habits. Here is what is proven, what isn't, and what to change tonight.
Security & Privacy
1Password for Agents puts your phone between AI and your bank
Meta's Muse, OpenAI's Dots and Anthropic's Claude Duet can ask 1Password to sign them in. You approve each request on your phone and the bot never sees the password.
Security & Privacy
PHP vulnerability PHP2Shell: why sites went dark and what to do
Two critical PHP flaws let attackers take over web servers without logging in. Patches are out, but millions of sites still need them.
Security & Privacy
SafePay ransomware: FBI warns of gang tied to Conduent breach
US, UK and German agencies say SafePay has hit at least 600 organizations since 2024. It steals data, wipes backups and even phones victims to pressure them.
Security & Privacy
eMudhra certificate keys were guessable: one was the number 4
Eight security certificates trusted by Chrome, Safari and Firefox had keys anyone could work out in seconds. Your browser is already protected. Some other software isn't.
Security & Privacy
OpenCode breach: why you should revoke your AI API keys today
A hacked OpenCode system may have leaked OpenAI, Anthropic and Google keys, and some users already report surprise bills. Here's who's affected and how to lock things down.
Security & Privacy
Grok Lego order leak exposes buyer payment and contact data
Musk's own screenshot of a Grok-placed Lego order showed addresses, card digits and an order number, and X users then used Lego's chatbot to meddle with it.
Security & Privacy
Danfoss refrigeration controllers led to mass defrost in France
Hackers used old Danfoss refrigeration controllers to switch on defrost cycles overnight, spoiling food in hundreds of French supermarkets.