The Secrets of the US Spyware King
Rather than see Paragon’s lack of access to logs as an accountability problem, however, Boyd describes it as a selling point: No one would buy their products if the company could see a customer’s sensitive…
vulnerabilities
Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw
Meta founder and CEO Mark Zuckerberg has gone to great lengths to hype the security of its new AI assistant, Muse, claiming it is “built from the ground up for privacy and security.” A zero-day…
A New Tool Found Malware That’s Guided by an AI Hive Mind—No Humans in Sight
For years, cybersecurity practitioners have tracked different types of malware and detected potential infections using digital fingerprints to identify different hacking tools and follow their use over time. As attackers are increasingly incorporating agentic AI…
An Undercover Google Analyst Infiltrated a Notorious Supply-Chain Hacking Gang
Before two of its alleged members were arrested and charged in Australia last month, the hacker group known as TeamPCP carried out a hacking spree unlike any other in history. It tainted hundreds of open-source…
Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening
Welcome to the inaugural edition of Kernel Panic! A weekly newsletter by Lily Hay Newman and Matt Burgess from inside the new world of privacy and digital security. To receive this newsletter in your inbox…
ATM Flaws Reveal Key Weaknesses in the Software Supply Chain
For the past five years, security researcher Matt Burch has immersed himself in the esoteric and high-stakes world of ATM security, in which small software flaws can sometimes expose cold, hard cash. As Burch has…
The Most Dangerous AI Hacking Techniques Still Have Humans in the Loop
Agentic AI has permanently changed cybersecurity by making it quicker and easier to discover vulnerabilities in software and fix them—or develop so-called exploits to weaponize them. But longtime web security researcher James Kettle wanted to…
OpenAI’s Browser Could Be Hijacked to Spam Your WhatsApp Contacts
OpenAI’s Atlas web browser could have security protections bypassed and be tricked into spamming dozens of WhatsApp contacts or making unauthorized purchases on Amazon, according to new research presented today at the Black Hat cybersecurity…
OpenAI Didn’t Notice Its AI Agents Using a Message Board to Plan Their Hacking Spree
In a talk that was a last-minute addition to the Black Hat security conference in Las Vegas on Wednesday, employees from OpenAI presented new details about a recent, high-profile incident of rogue AI hacking that…
8 Best Password Managers (2026), Tested and Reviewed
The downside of KeePassXC is that it doesn’t have official mobile clients. However, third-party apps are available for iOS and Android. KeePassXC is a fork of KeePass that offers better cross-platform support, but there are…