A security company built working exploits for two pre-authentication root bugs in macOS. It took four hours. The firm, Calif, used an AI agent. It now withholds technical details of one of those bugs, CVE-2026-65400, until most Macs carry the patch. Th…
OpenAI shut down its preparedness team at the end of July, the Financial Times reports. The team existed to work out whether OpenAI’s models posed catastrophic risks. It also designed the ways to contain them. The work has not disappeared. Responsibili…
The French tax agency says an attacker took data belonging to 678,000 individuals and businesses. The intrusions happened in June and July. The agency did not establish that anything had left its systems until the attacker said so in August. The Direct…
Cybersecurity experts who investigate spyware attacks say the number of people who received a recent threat notification from Apple is unusually high.
Russia’s websites lost their trusted certificates, and the fix Moscow is offering asks users to install a state root that can vouch for any site on the internet.
In a new attack, Akira disables EDR tools, but kills the encryptor, as well, as researchers still warn of a worrying practice.
Apple patched a critical-severity flaw in Screen Sharing which allowed crooks unabated access to vulnerable devices.
AI content and data leaks are driving people away from the internet, with some people willing to pay for an internet without algorithms or data harvesting.
The hacks at shipping companies used to mail out hardware wallets puts crypto owners at greater risk of real-world attacks.
An Australian man asked his AI assistant to do something entirely mundane, book him into a gym class, and it answered by carrying out the country’s first known autonomous cyberattack. Given only the goal of securing a spot in a busy session, the agent …