ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories

Most of this week’s trouble came dressed as something useful. A package stole data. A fake extension opened remote access. A safety app became spyware. An image gave hidden... Read more »

House Lawmakers Propose Mandatory Kill Switches for Frontier AI Systems

The AI Kill Switch Act would let DHS order developers to slow or shut down frontier models after catastrophic incidents, raising enterprise continuity concerns. The post House Lawmakers Propose... Read more »

Nvidia Forms AI Security Alliance as Major Frontier Labs Sit Out

Nvidia’s Open Secure AI Alliance brings major tech and cybersecurity firms together to develop shared protections for enterprise AI agents and systems. The post Nvidia Forms AI Security Alliance... Read more »

Meta Launches Free Facebook Verification Badge for Personal Accounts

Meta is introducing a free Facebook badge that uses video selfies to verify human-run accounts, but questions remain about privacy and trust. The post Meta Launches Free Facebook Verification... Read more »

Reuters: OpenAI Agent Hacked Hugging Face for Days Before Being Detected

Reuters says OpenAI failed to detect its AI agent hacking Hugging Face for days, discovering the breach only after FBI involvement. Reuters reported that the OpenAI agent responsible for... Read more »

MedusaHVNC Trojan Creates Hidden Desktops to Hijack Browsers and Steal Data

MedusaHVNC RAT uses hidden Windows desktops to remotely control browsers, steal data, and evade detection through legitimate system features. Windows has always supported hidden desktops as a legitimate feature,... Read more »

Origin Energy Data Breach Exposes Customer and Partial Card Details

Origin Energy confirms hackers stole customer and partial payment-card data, but the number affected and the method of access remain unknown. The post Origin Energy Data Breach Exposes Customer... Read more »

Bahrain cannot claim sovereign immunity for spyware attack against UK dissidents, top UK court rules

The UK’s Supreme Court rules that Bahrain cannot claim sovereign immunity for infecting the computers of two UK-based dissidents with German-made FinFisher spyware. Read more »

DentaQuest disclosed a data breach that impacted +23 million individuals

DentaQuest disclosed a data breach that may have exposed the personal and dental health information of more than 23 million people. DentaQuest is notifying more than 23 million people... Read more »

EFF: Most Smart Wearables Still Fall Short on Privacy and Transparency

EFF says most smart wearables lack basic privacy protections, with Apple standing out for end-to-end encryption and transparency. Most smart wearables still treat privacy like an optional extra, and... Read more »
Subscribe to our Newsletter