Security Stories for 2025

Curl Battles Wave of AI-Generated False Vulnerability Reports 26
CISA Budget Faces Possible $500 Million Cut 48
Messaging App Used by Mike Waltz, Trump Deportation Airline GlobalX Both Hacked in Separate Breaches 36
Hundreds of E-Commerce Sites Hacked In Supply-Chain Attack 16
May is 'Maintainer Month'. Open Source Initiative Joins GitHub to Celebrate Open Source Security 6
Man Pleads Guilty To Stealing 1.1 Terabytes of Disney's Slack Data 32
Microsoft Appoints Deputy CISO For Europe To Reassure European IT leaders 19
Apple Notifies New Victims of Spyware Attacks Across the World 5
Millions of AirPlay Devices Can Be Hacked Over Wi-Fi 39
AI-Generated Code Creates Major Security Risk Through 'Package Hallucinations' 34
Government Hackers Are Leading the Use of Attributed Zero-Days, Google Says 3
4chan Returns, Details Breach, Blames Funding Issues, Ends Shockwave Board 59
Employee Monitoring App Leaks 21 Million Screenshots In Real Time 31
New Android Spyware Is Targeting Russian Military Personnel On the Front Lines 29
Hackers Can Now Bypass Linux Security Thanks To Terrifying New Curing Rootkit 40
UN Says Asian Scam Call Center Epidemic Expanding Globally Amid Political Heat 52
AI Hallucinations Lead To a New Cyber Threat: Slopsquatting 51
CISA Extends Funding To Ensure 'No Lapse in Critical CVE Services' 19
Cybersecurity World On Edge As CVE Program Prepares To Go Dark 127
4chan Has Been Down Since Monday Night After 'Pretty Comprehensive Own' 69
Android Phones Will Soon Reboot Themselves After Sitting Unused For 3 Days 98
Hertz Says Customers' Personal Data, Driver's Licenses Stolen In Data Breach 30
Hacked Crosswalks In Bay Area Play Deepfake-Style Messages From Tech Billionaires 37
Hackers Spied on 100 US Bank Regulators' Emails for Over a Year 14
Microsoft Uses AI To Find Flaws In GRUB2, U-Boot, Barebox Bootloaders 57
Open Source Coalition Announces 'Model-Signing' with Sigstore to Strengthen the ML Supply Chain 10
NSA Warns 'Fast Flux' Threatens National Security 21
Google Launches Sec-Gemini v1 AI Model To Improve Cybersecurity Defense 2
Hackers Strike Australia's Largest Pension Funds in Coordinated Attacks 11
Oracle Tells Clients of Second Recent Hack, Log-In Data Stolen 16
HTTPS Certificate Industry Adopts New Security Requirements 29
New Ubuntu Linux Security Bypasses Require Manual Mitigations 14
Madison Square Garden Bans Fan After Surveillance System IDs Him as Critic of Its CEO 99
Oracle Health Breach Compromises Patient Data At US Hospitals 5
Oracle Customers Confirm Data Stolen In Alleged Cloud Breach Is Valid 20
Microsoft Announces Security AI Agents To Help Overwhelmed Humans 23
America's College Board Launches AP Cybersecurity Course For Non-College-Bound Students 26
'Unaware and Uncertain': Report Finds Widespread Unfamiliarity With 2027's EU Cyber Resilience Requirements 6
Microsoft Isn't Fixing 8-Year-Old Shortcut Exploit Abused For Spying 34
Cybersecurity Alert Warns of 300 Attacks with 'Medusa' Ransomware 21
End of Windows 10 Leaves PC Charities With Tough Choice 125
Chinese Hackers Sat Undetected in Small Massachusetts Power Utility for Months 22
Mozilla Warns Users To Update Firefox Before Certificate Expires 28
Thousands of TP-Link Routers Have Been Infected By a Botnet To Spread Malware 43
Feds Link $150M Cyberheist To 2022 LastPass Hacks 17
1Password Introduces 'Nearby Items,' Tying Passwords To Physical Locations 12
CISA Tags Windows, Cisco Vulnerabilities As Actively Exploited 16
US To Halt Offensive Cyber Operations Against Russia 390
Malicious PyPI Package Exploited Deezer's API, Orchestrates a Distributed Piracy Operation 24
Perl's CPAN Security Group is Now a CNA, Can Assign CVEs 10
Google Calls for Measurable Memory-Safety Standards for Software 44
Serbian Student's Android Phone Compromised By Exploit From Cellebrite 22
Apple's Find My Network Exploit Lets Hackers Silently Track Any Bluetooth Device 22
Thousands of Exposed GitHub Repositories, Now Private, Can Still Be Accessed Through Copilot 19
A Disney Worker Downloaded an AI Tool. It Led To a Hack That Ruined His Life. 96
North Korea's Unprecedented $1.5 Billion Crypto Heist Exploited Human Element, Not Code 28
Google To Eliminate SMS Authentication in Gmail, Implement QR Codes 164
Encrypted Messages Are Being Targeted, Google Security Group Warns 20
Bybit CEO Confirms Exchange Was Hacked for $1.46B, Says His Firm Can Cover The Loss 64
Apple Removes Cloud Encryption Feature From UK After Backdoor Order 134
Ghost Ransomware Continues To Infect Critical Infrastructure, Feds Warn 6
Palo Alto Firewalls Under Attack As Miscreants Chain Flaws For Root Access 28
US Army Soldier Pleads Guilty To AT&T and Verizon Hacks 21
Hackers Planted a Steam Game With Malware To Steal Gamers' Passwords 31
'Uber For Armed Guards' Rushes To Market 72
Nearly 10 Years After Data and Goliath, Bruce Schneier Says: Privacy's Still Screwed 57
China's 'Salt Typhoon' Hackers Continue to Breach Telecoms Despite US Sanctions 42
Woeful Security On Financial Phone Apps Is Getting People Murdered 161
New Hack Uses Prompt Injection To Corrupt Gemini's Long-Term Memory 23
AUKUS Blasts Holes In LockBit's Bulletproof Hosting Provider 11
Google Chrome May Soon Use 'AI' To Replace Compromised Passwords 46
Hackers Call Current AI Security Testing 'Bullshit' 69
Apple Fixes Zero-Day Exploited In 'Extremely Sophisticated' Attacks 8
How To Make Any AMD Zen CPU Always Generate 4 As a Random Number 62
India To Launch New Domain Name For Banks To Fight Digital Fraud 8
Phishing Tests, the Bane of Work Life, Are Getting Meaner 99
'Zombie Devices' Raise Cybersecurity Alarm as Consumers Ignore Smart Tech Expiry Dates 54
Ransomware Payments Dropped 35% In 2024 44
First OCR Spyware Breaches Both Apple and Google App Stores To Steal Crypto Wallet Phrases 24
Google Stops Malicious Apps With 'AI-Powered Threat Detection' and Continuous Scanning 15
America's FDA Warns About Backdoor Found in Chinese Company's Patient Monitors 51
Sensitive DeepSeek Data Was Exposed to the Web, Cybersecurity Firm Says 17
Malicious PDF Links Hidden in Text Message Scam Impersonating US Postal Service 13
Zyxel Firewalls Borked By Buggy Update, On-Site Access Required For Fix 18
Chinese and Iranian Hackers Are Using US AI Products To Bolster Cyberattacks 19
Apple Chips Can Be Hacked To Leak Secrets From Gmail, ICloud, and More 28
Software Flaw Exposes Millions of Subarus, Rivers of Driver Data 47
Researchers Say New Attack Could Take Down the European Power Grid 33
FBI: North Korean IT Workers Steal Source Code To Extort Employers 27
Backdoor Infecting VPNs Used 'Magic Packets' For Stealth and Security 17
DHS Terminates All Its Advisory Committees, Ending Its Investigation Into Chinese Telecom Hack 144
Mastercard DNS Error Went Unnoticed for Years 33
DDoS Attacks Soar 53% To 21.3 Million, Cloudflare Reports 21
HPE Investigating Breach Claims After Hacker Offers To Sell Data 3
Employees of Failed Startups Are at Special Risk of Stolen Personal Data Through Old Google Logins 7
Google Upgrades Open Source Vulnerability Scanning Tool with SCA Scanning Library 2
FBI Warned Agents It Believes Phone Logs Hacked Last Year 20
Microsoft Research: AI Systems Cannot Be Made Fully Secure 28
Microsoft Patches Windows To Eliminate Secure Boot Bypass Threat 39
A New Jam-Packed Biden Executive Order Tackles Cybersecurity, AI, and More 127
Governments Call For Spyware Regulations In UN Security Council Meeting 13
Russia's Largest Platform For State Procurement Hit By Cyberattack 53
Dead Google Apps Domains Can Be Compromised By New Owners 34
UnitedHealth Hid Its Change Healthcare Data Breach Notice For Months 24
PowerSchool Data Breach Victims Say Hackers Stole 'All' Historical Student and Teacher Data 21
US Removes Malware Allegedly Planted on Computers By Chinese-Backed Hackers 17
UK Plans To Ban Public Sector Organizations From Paying Ransomware Hackers 16
Snyk Researcher Caught Deploying Malicious Code Targeting AI Startup 3
Ransomware Crew Abuses AWS Native Encryption, Sets Data-Destruct Timer for 7 Days 18
New LLM Jailbreak Uses Models' Evaluation Skills Against Them 37
CES 'Worst In Show' Devices Mocked In IFixit Video - While YouTube Inserts Ads For Them 55
OpenAI's Bot Crushes Seven-Person Company's Website 'Like a DDoS Attack' 78
Hackers Are Exploiting a New Ivanti VPN Security Bug To Hack Into Company Networks 14
DEF CON's Hacker-In-Chief Faces Fortune In Medical Bills 127
Japan Says Chinese Hackers Targeted Its Government and Tech Companies For Years 8
Hackers Claim Massive Breach of Location Data Giant, Threaten To Leak Data 42
Popular DNA Sequencer Left Vulnerable By 7-Year-Old Firmware, Unfixed Security Flaws 38
Are US Computer Networks A 'Key Battlefield' in any Future Conflict with China? 72
FSF Urges Moving Off Microsoft's GitHub to Protest Windows 11's Requiring TPM 2.0 152
Dire Predictions for 2025 Include 'Largest Cyberattack in History' 98
Online Gift Card Store Exposed Hundreds of Thousands of People's Identity Documents 15
Hackers Target Dozens of VPN, AI Extensions For Google Chrome To Compromise Data 12