Research Kids say they can beat age checks by drawing on a fake mustache 46% say age checks are easy to bypass, and nearly a third admit getting around them
Research Researchers move in the right direction, develop powerful GPS interference alarm ORNL says portable detector kit can separate real GPS signals from fake ones even at equal strength
Research Researchers find cyber-sabotage malware that may predate Stuxnet by five years FAST16 could be the first cyberweapon, and its effects could be with us today
Security Agents hooked into GitHub can steal creds – but Anthropic, Google, and Microsoft haven't warned users Researchers who found the flaws scored beer money bounties and warn the problem is probably pervasive
Security Security researchers tricked Apple Intelligence into cursing at users. It could have been a lot worse Wash your mouth out with digital soap
AI + ML Talk ain't cheap: DARPA offers grants for new AI-to-AI communication protocol MATHBAC program wants better machine-to-machine chatter for scientific discovery
Research Don't open that WhatsApp message, Microsoft warns How to avoid social engineering attacks? Employee training tops the list
AI + ML Folk are getting dangerously attached to AI that always tells them they're right Sycophantic bots coach users into selfish, antisocial behavior, say researchers, and they love it
Research Security boffins scoured the web and found hundreds of valid API keys Global bank's devs have some cleaning up to do after cloud creds found in website code
Science Chemists concoct nail polish that lets clawed humans use touch screens They still look goofy, but at least you might be able to use 'em like a stylus
AI + ML Telling an AI model that it’s an expert programmer makes it a worse programmer Researchers say persona-based prompting can improve works for safety but not for facts
RSA AI agents are 'gullible' and easy to turn into your minions Zenity CTO demos 0-click AI agent exploits on stage at RSAC
Research State snoops and spyware vendors planting info-stealing malware on iPhones, Google warns Darksword is the second iOS exploit chain in a month
AI + ML Meatbags vs machines: DeepMind plans hackathon to draw line between human and AI brains What exactly is AGI? Nobody knows, but Google's AI lab is asking for help trying to define it
AI + ML Water company wasted $200k on bad answers from an AI model – so built its own slop filtering system Rozum orchestrates multiple flaky models and drives them to reasonable conclusions
Research Rogue AI agents can work together to hack systems and steal secrets Prompt like a hard-ass boss who won't tolerate failure and bots will find ways to breach policy
Research Fake job applications pack malware that kills endpoint detection before stealing data Russian-speaking attackers lure HR staff into downloading ISO files that disable defenses
Science MIT boffins aim to build injectable mini-organs that can fill in for a damaged liver Injected liver cells stayed viable and functional for eight weeks in mice
Research Until last month, attackers could've stolen info from Perplexity Comet users just by sending a calendar invite AI browsing agent left local files open for the taking
Research Denizens of DEF CON are 'fed up with government' Jake Braun thinks hackers need to create a 'Digital arsenal of democracy' to defend us all
Research Ransomware payments cratered in 2025, but attacks surged to record highs Smaller crews piled in as old names splintered and rebranded
Research Claude collaboration tools left the door wide open to remote code execution Anthropic fixed the flaws – but the AI-enabled attack surfaces remain
AI + ML LLMs killed the privacy star, we can't rewind, we've gone too far You'll find these days that there's no hiding place
Research Threat intelligence supply chain is full of weak links, researchers find And they're being stressed by geopolitical concerns that threaten to slow important data-sharing efforts
AI + ML Don't believe the hyperscalers! AI can't cure the climate crisis From AI conflation to thin evidence, a new report calls many climate claims greenwashing
Research Android malware taps Gemini to navigate infected devices For now, it might not function outside of a lab
Science Scientists show it's possible to solve problems in your dreams by playing the right sounds Could the same method one day power sleep-time ads?
Research Posting AI-generated caricatures on social media is risky, infosec killjoys warn The more you share online, the more you open yourself to social engineering
AI + ML Microsoft boffins figured out how to break LLM safety guardrails with one simple prompt Chaos-inciting fake news right this way
Public Sector Let there be light! DARPA seeking physics-defying photonic computers to supercharge AI There’s about $35M up for grabs if your circuits can beat today’s limits
AI + ML Vibe coding may be hazardous to open source Researchers argue AI coding tools disrupt community and hinder returns to maintainers
AI + ML AI conference's papers contaminated by AI hallucinations 100 vibe citations spotted in 51 NeurIPS papers show vetting efforts have room for improvement
Research For the price of Netflix, crooks can now rent AI to run cybercrime Group-IB says crims forking out for Dark LLMs, deepfakes, and more at subscription prices
Research Fast Pair, loose security: Bluetooth accessories open to silent hijack Sloppy implementation of Google spec leaves 'hundreds of millions' of devices vulnerable
Research A simple CodeBuild flaw put every AWS environment at risk – and pwned 'the central nervous system of the cloud' And it's 'not unique to AWS,' researcher tells The Reg
AI + ML Teach an AI to write buggy code, and it starts fantasizing about enslaving humans Research shows erroneous training in one domain affects performance in another, with concerning implications
Research 'Imagination the limit': DeadLock ransomware gang using smart contracts to hide their work New crooks on the block get crafty with blockchain to evade defenses
Research OpenAI putting bandaids on bandaids as prompt injection problems keep festering Happy Groundhog Day!
Science New carbon capture tech could save us from datacenter doom Maybe our AI overlords, hell-bent on securing power any way they can, should invest in getting this to market
Research Fake Windows BSODs check in at Europe's hotels to con staff into running malware Phishers posing as Booking.com use panic-inducing blue screens to bypass security controls
Science iPad kids are more anxious, less resilient, and slower decision makers The solution? Lock up the screens and read to your kids
Research Your car’s web browser may be on the road to cyber ruin Study finds built-in browsers across gadgets often ship years out of date
Research China's Ink Dragon hides out in European government networks Misconfigured servers are in, 0-days out
Storage The future of long-term data storage is clear and will last 14 billion years SPhotoix moves its 5D Memory Crystal cold storage tech closer to deployment in data centers
Research 10K Docker images spray live cloud creds across the internet Flare warns devs are unwittingly publishing production-level secrets
AI + ML US teens not only love AI, but also let it rot their brains Yeah, not shocking, but with other studies linking AI to weaker learning and mental-health risks, it’s a worry
Research As humanoid robots enter the mainstream, security pros flag the risk of botnets on legs Have we learned nothing from sci-fi films and TV shows?
Networks Sorry, but your glitchy connection might have cost you that job Technical problems on video calls can cause uncanniness, which influences real-world decisions
Research Zendesk users targeted as Scattered Lapsus$ Hunters spin up fake support sites ReliaQuest finds fresh crop of phishing domains and toxic tickets
Security Years-old bugs in open source tool left every major cloud open to disruption Fluent Bit has 15B+ deployments … and 5 newly assigned CVEs
Research LLM-generated malware is improving, but don't expect autonomous attacks tomorrow Researchers tried to get ChatGPT to do evil, but it didn't do a good job
Science DARPA making low-hanging satellites that use air to move Skim the atmosphere and air-breathing VLEO sats can theoretically maintain orbit
Research Researchers claim 'largest leak ever' after uncovering WhatsApp enumeration flaw Two-day exploit opened up 3.5 billion users to myriad potential harms
Science Brussels weighs banning China from major EU research scheme Draft Horizon Europe plan cites lack of IP protections and Beijing's civil-military fusion strategy
Research LLM side-channel attack could allow snoops to guess what you're talking about Encryption protects content, not context
Research Previously unknown Landfall spyware used in 0-day attacks on Samsung phones 'Precision espionage campaign' began months before the flaw was fixed
Research MIT Sloan quietly shelves AI ransomware study after researcher calls BS Even AI has doubts about the claim that '80% of ransomware attacks are AI-driven'
Security This security hole can crash billions of Chromium browsers, and Google hasn't patched it yet Edge, Atlas, Brave among those affected
Research Researchers exploit OpenAI's Atlas by disguising prompts as URLs NeuralTrust shows how agentic browser can interpret bogus links as trusted user commands
AI + ML Berkeley boffins build better load balancing algo with AI One way AI can improve on human work
AI + ML AI eats leisure time, makes employees work more, study finds Rise and grind, robot overlords demand
AI + ML Cisco: Most companies don't know what they're doing with AI Only 13% are AI-ready; the rest are bolting it on and hoping for ROI
Research Devs are writing VS Code extensions that blab secrets by the bucketload Vibe coding may have played a role in what took researchers months to fix
AI + ML It's trivially easy to poison LLMs into spitting out gibberish, says Anthropic Just 250 malicious training documents can poison a 13B parameter model - that's 0.00016% of a whole dataset
AI + ML AI gets more 'meh' as you get to know it better, researchers discover Most scientists now use the tech in their work, but still question its usefulness
AI + ML AI companion bots use emotional manipulation to boost usage Researchers argue that this dark pattern poses a legal risk
AI + ML AI chatbots that butter you up make you worse at conflict, study finds Top AI models keep saying you’re right, and that’s the problem
AI + ML Startups binge on AI while big firms sip cautiously, study shows Better hope that bubble doesn't pop
On-Prem Square Kilometre Array is so sensitive, its datacenter needs two Faraday cages to stop RF leaks Stray signals are a no-no when you’re trying to tune into the stars
Science Cyborg dreams move closer to reality with low-power artificial neuron UMass Amherst research promises better bioelectronic communication
Research Tile trackers are a stalker's dream, say Georgia Tech researchers Plaintext transmissions, fixed MAC addresses, rotating 'unique' IDs, and more, make abuse easy
Research Hunt for RedNovember: Beijing hacked critical orgs in year-long snooping campaign Not to be confused with all the other reports of Chinese intruders on US networks that came to light this week
Cyber-crime North Korea's Lazarus Group shares its malware with IT work scammers Keeping Pyongyang's coffers full
Research Google warns China-linked spies lurking in 'numerous' enterprises Mandiant CTO anticipates 'hearing about this campaign for the next one to two years'
Research Nearly half of businesses suffered deepfaked phone calls against staff AI attacks on the rise
Research Kaspersky: RevengeHotels checks back in with AI-coded malware Old hotel scam gets an AI facelift, leaving travellers’ card details even more at risk
Research Ruh-roh. DDR5 memory vulnerable to new Rowhammer attack Google and ETH Zurich found problems with AMD/SK Hynix combo, will probe other hardware
Research HybridPetya: More proof that Secure Boot bypasses are not just an urban legend Although it hasn't been seen in the wild yet
Research AI-powered penetration tool, an attacker's dream, downloaded 10K times in 2 months Shady, China-based company, all the apps needed for a fully automated attack - sounds totally legit
Research Spectre haunts CPUs again: VMSCAPE vulnerability leaks cloud secrets AMD Zen hardware and Intel Coffee Lake affected
Research Apple slips up on ChillyHell macOS malware, lets it past security . . . for 4 years 'We do believe that this was likely the creation of a cybercrime group,' threat hunter tells The Reg
Science UK DARPA clone spared savings squeeze while Treasury raided government ARIA spent £16.5M, has £600M in the tank, and no one asked for it back
AI + ML Biased bots: AI hiring managers shortlist candidates with AI resumes When AI runs recruiting, the winning move is using the same bot
Research Internet mapping and research outfit Censys reveals state-based abuse, harassment ‘Universities are being used to proxy offensive government operations, turning research access decisions political’
Science AI spies questionable science journals, with some human help "Louis, I think this is the beginning of a beautiful friendship"
Research Researcher who found McDonald's free-food hack turns her attention to Chinese restaurant robots The controls were left wide open on Pudu's robots
AI + ML ChatGPT hates LA Chargers fans Harvard researchers find model guardrails tailor query responses to user's inferred politics and other affiliations
Research Who are you again? Infosec experiencing 'Identity crisis' amid rising login attacks Vendor insists passkeys are the future, but getting workers on board is proving difficult
AI + ML AI robs jobs from recent college grads, but isn't hurting wages, Stanford study says Machine-learning models are automating away some entry-level roles
Patches Amazon quietly fixed Q Developer flaws that made AI agent vulnerable to prompt injection, RCE
Research Do you trust Xi with your 'private' browsing data? Apple, Google stores still offer China-based VPNs, report says
AI Infrastructure Month Microsoft wants us to believe AI will crack practical fusion power, driving future AI
Research A pot of $250K is now available to ransomware researchers, but it feeds a commercial product
AI + ML Surprise! People don't want AI deciding who gets a kidney transplant and who dies or endures years of misery
Research Malware variants that target operational tech systems are very rare – but 2 were found last year
CSO Abandoned AWS S3 buckets can be reused in supply-chain attacks that would make SolarWinds look 'insignificant'
AI Software Development Week We can clone you wholesale: Boffins build ML agents that respond like specific people
