These cheap Skullcandy earbuds have a worrying Bluetooth flaw that could let anyone connect to your device

Apple can push a firmware fix to earbuds already in your pocket. Skullcandy cannot reach yours at all for now.

ClickFix attacks are tricking Mac and Windows users into hacking themselves

If you clicked on a fake HBO Max ad on Reddit in the past week, you might have fallen victim to a rising “ClickFix” security threat.

CISA warns hackers are exploiting max severity GitLab flaw — urges all businesses to patch immediately

A 10/10 GitLab flaw was added to CISA’s KEV, giving government agencies just three days to patch.

New York Seizes a Dozen Celebrity Deepfake Websites

In the biggest-ever legal action against harmful deepfake websites, the Manhattan District Attorney’s Office has seized 12 sites that collectively targeted around 1,200 victims.

Microsoft Cloud accounts stolen in highly complex impersonation and passkey phishing campaign

Passkeys have all but eliminated password theft, so what now? Criminals have a solution.

OpenAI agents attacked RubyGems in May, two months before Hugging Face
OpenAI agents attacked RubyGems in May, two months before Hugging Face

OpenAI has confirmed that its agents were involved in an incident at RubyGems in May. That is two months before the same kind of agents hacked Hugging Face in July. RubyGems is the package service for the Ruby programming language. The confirmation fol…