
A businessman in Sussex watched £14,244 drain out of his Metro Bank account. The money went on credits for Claude, the AI chatbot he already paid to use. Two things failed at once. Criminals had turned a chatbot into a way to cash out stolen cards. And…

Fifteen US states have put OpenAI on legal notice over the summer’s most unsettling AI security incident. They wrote to chief executive Sam Altman. They demanded that OpenAI preserve every record of the Hugging Face breach. That demand includes somethi…

A self-spreading worm tore through npm on Tuesday. It poisoned hundreds of packages that huge swathes of the software world quietly rely on. Researchers named it ChainDrop. It is a bigger, meaner descendant of the smaller Shai-Hulud attack that hit the…
A security vulnerability in the cryptocurrency hardware wallet Coldcard is allowing hackers to drain the crypto from victims’ wallets. The total losses amount to more than $130 million, according to blockchain monitoring firms.
Facing a growing drone threat, the Pentagon is poised to sign a first-of-its-kind contract for “Enduring High Energy Lasers”—and make directed energy weapons an official part of the Army’s kit.

Keeper is one of the best solutions to password storage and security, with up to 50% off across Personal, Family, and Business plans
Three Pass-ta-key techniques allowed security researchers to work around biometrics-protected locks.
Russian criminals are targeting hotel Wi-Fi networks with captive portals and using them to deploy infostealers.

The software industry runs on a shared list of known bugs. Someone is now seeding that list with breakage that no one ever found. Security firm JFrog found six critical SQLite flaws that were pure fiction, it reported. The advisories claimed severe mem…

Security researchers found a high-severity RCE flaw, which Apple later fixed.