Just one instruction on AMD’s 2015-era CPUs cracks open secret memory areas and gives full hardware-level control — exploit for 15h and 16h chip families gets you access to Platform Security Processor, microcode, and System Management Interface

Just one instruction on AMD CPUs gets you access to Platform Security Processor, microcode, and System Management Interface — exploit for 15h and 16h chip families cracks open secret memory areas

If Apple sends you a push notification alerting you to a spyware attack, take it seriously

Apple now sends out push notifications to iPhone lock screens when the company identifies government spyware targeting someone’s devices.

Anthropic set AI agents loose on the same task. They started a turf war.

Anthropic researchers found AI agents can clash, collude, and coordinate in unexpected ways, raising new questions about whether today’s safety tests capture the risks of multi-agent systems.

Microsoft’s nemesis drops new zero-day privilege escalation vulnerability — attack grants system-level privileges, but it could already be patched
Microsoft’s nemesis drops new zero-day privilege escalation vulnerability — attack grants system-level privileges, but it could already be patched

Nightmare Eclipse drops ShieldBreak, another Windows zero-day privilege escalation vulnerability, but Microsoft has rushed quickly to block it with Defender

In a first, US will allow some private firms to carry out cyberattacks

The new order sweeps away decades of existing U.S. cybersecurity policy prohibiting private companies from conducting ‘hack back’ attacks or offensive cyber operations.

Coin-sized device can hack a Boeing 737’s Flight Management Computer, mess with takeoff weights, or even divert an aircraft — gadget connects to an easily accessible port that overrides commands from the pilots, uses in-flight Wi-Fi

Security researchers discovered a way to tap into the avionics of a Boeing 737 and remotely give its flight management computer erroneous data through in-flight Wi-Fi. This coin-sized device plugs into a diagnostic port in the plane’s avionics bay and could easily be hidden behind its protective dust cover.

Critical ‘Zoomsday’ flaw enables total device takeover during Zoom calls — AI-assisted research only used 20 prompts to find an exploit to hack hundreds of millions of people.
Critical ‘Zoomsday’ flaw enables total device takeover during Zoom calls — AI-assisted research only used 20 prompts to find an exploit to hack hundreds of millions of people.

Zoomsday vulnerability let anyone in a Zoom meeting take over anybody else. The vulnerability was developed with AI assistance and took research only used 20 prompts to find an exploit to hack hundred of millions of people.

Could a Shirt Fool Facial Recognition? The Answer Is Complicated

At Defcon, a strange-looking print pushed a researcher below an AI camera’s detection threshold. Now its creator is putting patterns like it on shirts and hoodies, even though worn clothing remains the big unproven test.

Apple Faces Lawsuit Over iCloud Private Relay Vulnerability

The firm behind a $250 million Apple settlement is suing the company again, alleging it misrepresented a key security feature.

Uber Freight reportedly investigating after hacking group claims data breach

An extortion gang known for targeting transportation companies and private equity firms has taken credit for a breach at Uber Freight.