4+ day, 6+ hour ago   (569+ words) The Tor Project has expanded the availability of Tor VPN Beta for Android, a new privacy tool that routes traffic from mobile applications through the Tor network rather than limiting Tor protection to web browsing. The project says early testing…...

6+ day, 5+ hour ago   (244+ words) Cybercriminals and state-backed hackers are moving beyond using AI as a coding or research assistant and are instead building agentic systems that can autonomously scan targets, troubleshoot failures, and harvest credentials. Google Threat Intelligence Group (GTIG) says one financially motivated…...

6+ day, 1+ hour ago   (439+ words) A zero-click worm can spread between iPhones and Android devices through WeChat calls, allowing attackers to hijack accounts even without victims answering. Dubbed WeWorm, the proof-of-concept attack exploits a memory corruption vulnerability in WeChat’s Voice-over-IP (VoIP) stack. Calif reported the…...

1+ week, 9+ hour ago   (423+ words) CERT Polska is warning MikroTik customers to urgently update RouterOS after confirming that attackers are exploiting two critical SSH vulnerabilities to gain full administrative access to internet-exposed devices. The Polish national cybersecurity team disclosed six RouterOS vulnerabilities on September 5, including…...

2+ week, 5+ hour ago   (446+ words) California lawmakers have passed AB 1856, a bill that would exclude qualifying open-source software distributors from being treated as operating system providers under the state’s upcoming Digital Age Assurance Act (DAAA). The measure passed the Senate 39–0 on August 26, and the Assembly…...

2+ week, 6+ day ago   (432+ words) Reverse engineering shows that while image generation can happen on-device, prompts are still sent to Microsoft for moderation, which returns a unique GUID that is then hidden inside the image pixels. The analysis found that Paint ships local ONNX-based AI…...

2+ week, 5+ day ago   (1700+ words) If you buy through links on this site, we may earn a commission, which helps support our work. Best overall pick – Identity Guard earns top pick for its superior threat monitoring, native apps, and 3-bureau credit tracking → get 75% off Identity…...

3+ week, 4+ day ago   (303+ words) A Chinese-speaking cybercrime group is using AI-assisted tooling to automate attacks against vulnerable Windows and Linux web servers worldwide. Talos researcher Joey Chen said the activity was discovered in early 2026 after investigators observed a compromised system communicating with a download…...

3+ week, 4+ day ago   (282+ words) US agencies are warning that threat actors are actively using AI-generated exploitation scripts to target Siemens S7 programmable logic controllers (PLCs) deployed across critical infrastructure. The activity focuses on Internet-exposed and poorly secured industrial systems, with attackers using AI to accelerate…...

3+ week, 6+ day ago   (308+ words) GitHub suffered a widespread outage on August 17 that disrupted core services including its API, Actions, Pull Requests, Issues, Pages, Webhooks, and Copilot, with some repository downloads experiencing error rates of around 50%. The incident began at 1:40 p.m. UTC when GitHub said it…...