36 casos · pág. 2/2
Researchers at Claroc disclosed GhostShares, a design flaw in Meta's Muse AI assistant that lets anyone discover shared conversations through passive DNS. Muse share links use the domain cf.metaaiusercontent.com and embed the conversation title and a random identifier in the hostname. Once a browser resolves the name, passive DNS sensors …
Canada's proposed C-22 bill, first put forward in 2025 and since partly revised, would require tech companies, including foreign ones, to introduce "technical capabilities" for law enforcement data access. It would also require retention of user metadata. Signal has said it would exit the Canadian market, and Psiphon VPN says it will leav…
Google has announced the Fitbit Edge, a $180 slim smartwatch positioned between the screenless Fitbit Air and the Pixel Watch 5. The article is a consumer product preview with no security, vulnerability or threat content. The Edge is 11.5 mm thick, has a hybrid OLED touchscreen with Corning Gorilla Glass 3, and adds a side button for star…
ESET WeLiveSecurity published a guidance article on 'nudify' apps, which use generative AI to turn images of clothed people into synthetic nude images. The resulting non-consensual intimate imagery (NCII) is used by fraudsters, bullies and cybercriminals, including for blackmail. An Institute for Strategic Dialogue (ISD) and AI Security I…
This SentinelOne weekly roundup (Week 39, 2026) covers one law enforcement success and two active threat campaigns. A US court sentenced Armenian national Karen Serobovich Vardanyan ("Maneeken"/"Karl Lagerfeld"), an initial access specialist for Ryuk ransomware, to two years in prison and over $1.2 million in restitution. SentinelLABS ide…
MapQuest announced on Bluesky that its navigation app now has a surveillance layer showing the locations of license plate reading cameras from Flock and other companies. Cameras appear as small red eye icons with a vision cone showing the direction each one faces. The app does not yet offer routing that avoids the cameras. MapQuest has no…
Apple's online store in the US began showing a January 25 ship date for every iPhone Duo configuration within about 30 minutes of preorders opening on October 16, 2026. The article describes this as the longest preorder delay Apple has recorded. According to Bloomberg's Mark Gurman, the main cause is "extraordinary supply chain constraint…
Researchers at SafeDep analyzed a macOS implant recovered from a compromised workstation. Infection began on 2026-07-26 with a paid YouTube video ad impersonating TradingView that led to a fake .pkg installer. The malware is a remote-controlled task runner, not a single-purpose stealer. It persists via a LaunchAgent that re-fetches a shel…
Elastic Security Labs is tracking REF8801, a campaign in which a fake Web3 venture capital accelerator, Apex Accelerator (Apex Foundation), targets cryptocurrency startups and founders with malicious npm packages. The packages, @apexacc/cli and @apexacc/audit, pose as an AI advisor and an MCP-based security scanner, with offers of free Cl…
Citizen Lab, working with the SHARE Foundation, confirmed with high confidence that the iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia's student-led anti-corruption protests, was infected with NSO Group's Pegasus in 2026 through a zero-click exploit (thehackernews.com, securityaffairs.com,…
CNET Group is launching TechPulse, a free iOS and Android app that combines articles and videos from ZDNET, CNET, PCMag, Mashable, Lifehacker and ExtremeTech into a single feed. Users can choose which publications appear, and the feed is described as algorithm-free. No subscription is required. The article is product news with no security…
On 2026-10-19, Amazon Web Services released TorchNeuron, a tool that lets AI startups move PyTorch applications onto its custom Trainium chip by changing one line of configuration, with no code rewrite. The release is a competitive move against Nvidia, whose CUDA software has made its hardware the default for PyTorch workloads. AWS says i…
Check Point Research's Q3 2026 Brand Phishing Report finds Microsoft was the most impersonated brand, at 33% of all attempts (up from 23% in Q2) and roughly four times the share of any other brand. Apple, Google, LinkedIn and Amazon completed the top five, together accounting for more than half of attempts. Dropbox (up ten places to eight…
This ZDNET consumer review by Maria Diaz assesses Apple's new Home Collection, which includes the HomeView smart panel ($299), a new HomePod mini, an Apple TV 4K and nine smart home devices priced from $40 (sensors) to $400 (security cameras). It concludes that only the LG Indoor Cam ($200) and LG Outdoor Cam ($300) are well suited to ren…
Eight intermediate CA certificates of the Indian certificate authority eMudhra (emSign brand), generated on 30 April 2025, were found to have P-384 private keys so weak (integers below 256) that anyone can recover them from the public certificates and forge browser-trusted certificates for any domain. A researcher credited as Wayne report…
Recursive, an AI startup led by CEO Richard Socher, released its first model, Flint, on 21 October 2026. It is a free coding model that runs locally on a laptop. The company says its automated research system, the Eureka Machine, contributed to nearly every stage of development, which let a small team build the model in under four months.…
