Anthropic Report Details AI Misuse by Yemen Weapons Cell
Bruce Schneier flags Anthropic's new misuse report, which identifies a Yemen-based cell using Claude for weapons development.
Security & Privacy
Breaches, offensive and defensive AI, and surveillance.
ShieldCrash: Another Windows Defender Zero-Day Released by Nightmare-Eclipse
A researcher's latest Windows Defender exploit underscores how security tools themselves can become attack surfaces.
Schneier and Cohn Call for End to 25 Years of Mass Surveillance
A new essay argues that post-9/11 mass surveillance has failed its promises and should be dismantled in favor of targeted oversight.
SANS Shares YARA Rule for Orphaned VBA in DWG Files
A new YARA rule from SANS ISC helps analysts spot hidden VBA projects inside AutoCAD DWG files.
Rotting Squid Cargo Turns Beached Boat Into Biohazard
A beached California boat is holding an estimated 30 to 50 tons of decomposing squid, creating a severe cleanup problem.
Hidden Ledger implant and npm flaw headline security week
A Help Net Security weekly roundup ties a $93M wallet drain to a reseller's devices and details an npm Trusted Publishing flaw that exposed 1,500+ packages.
AI Speeds Up Vulnerability Discovery, but Validation Lags
As AI accelerates and scales vulnerability discovery, security teams must adapt their validation processes to keep up.
NSA's 1960s Harvest Supercomputer: A Code-Breaking Relic
Bruce Schneier highlights the Harvest, an IBM-built NSA supercomputer from the 1960s, as an early example of specialized cryptanalytic hardware.
LiteSpeed Enterprise Bug Lets Shared-Hosting Users Gain Root Access
A critical flaw in LiteSpeed Web Server Enterprise could let a low-privileged account take over a shared-hosting server, cPanel warns.
DDRop Hardware Attack Bypasses Intel TDX and AMD SEV-SNP Protections
A newly disclosed hardware attack, DDRop, undermines Intel TDX and AMD SEV-SNP by silently dropping memory writes, leaving processors to act on stale encrypted data.
Apple's Annual Update Patches Record 261 Vulnerabilities
Apple's latest cross-platform update fixes a record 261 vulnerabilities, the most ever addressed in a single release.
3BB Breach: Attacker Abused MeshCentral for Root Access
A threat actor used a legitimate remote-management tool to maintain persistent control inside a major Thai broadband provider's network.
WordPress Adds Automated Security Review for Plugin Updates
WordPress will automatically screen every plugin release for security risks before it is distributed through the update API.
Malicious Twitch Extension Leaks OAuth Tokens From 31,000 Users
A rogue browser extension posing as a Twitch viewer tool exposed nearly 31,000 users' OAuth tokens to a Russian commercial bot service.
AI Defenses Can Be Turned Against Networks, Warns Dark Reading
New analysis warns that attackers can manipulate AI's defensive reasoning to silently compromise target networks, making AI governance urgent.
CISA Calls for Clearer Breach Guidance as Cyber Outages Rise
A new joint advisory signals a regulatory shift toward transparent incident reporting and away from corporate spin.
Papercut AI Swarm Attack Signals New Cyber Kill Chain Tactics
The Papercut AI swarm attack illustrates how attackers now use AI across every stage of the intrusion lifecycle, from staging to exfiltration.
Android Banking Clones Target Indonesia via Work Profile
A new campaign uses Android's Work Profile feature to hide a banking trojan inside cloned apps aimed at Indonesian users.