A new cyberattack exploits the trust users have in AI chatbots. Hackers impersonate ChatGPT to deliver malicious code, specifically targeting Mac users to steal sensitive data like passwords and crypto wallets.
After discovering their personal data was for sale on the dark web, a writer shares the six security tools they now rely on. It’s a practical guide born from a very personal scare.
According to Forbes, the traditional VC model is misaligned with what early-stage cybersecurity founders actually need. A new $33 million fund, Holly Ventures, is built on a model of providing access and operational help, not just capital.
Google is adding a “User Alignment Critic” to Chrome, a second Gemini AI model designed to review and veto actions proposed by the main AI agent. This is a direct response to the severe threat of “indirect prompt injection,” where malicious websites could hijack the AI. The company is also updating
The Smatch static analysis tool, vital for finding bugs in the Linux kernel, is at risk. Its sole developer, Dan Carpenter, says his funding from Linaro runs out at the end of the year, and he needs new corporate backers to continue the work.
The developer behind the ICEBlock app is suing the federal government, claiming unlawful threats led to its removal from app stores in October. The suit alleges free speech violations and coercion of Apple by the Trump administration.
New research shows a massive engineering failure in health tech for seniors. While the healthcare IoT market heads for $289 billion, confusing privacy settings are leading users to unplug their devices, sacrificing health for perceived safety.
A security researcher found Kohler’s “end-to-end encrypted” smart toilet camera is anything but. Meanwhile, a critical cyberdefense agency remains leaderless, and a major Chinese hacking campaign goes unpunished. It’s a rough week for digital safety.
The UK’s communications regulator has issued its first major fine under the Online Safety Act. A porn site operator must pay £1 million for ineffective age checks and faces daily penalties if it doesn’t comply within 72 hours.
A medical software vendor’s covert database “fix” brought a critical patient scheduling app to its knees every morning. Worse, the production database had no security controls at all. It’s a stunning case of vendor malpractice.
