Security

Microsoft 364
Microsoft 365 Crawls Back to Life After a 24-Hour Outage
The company says a bad update—not a cyberattack or AI—caused its servers around the world to crash.
Andrew Couts


The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call
Escalating hacks affecting blood labs and grocery stores show the very real risks to critical infrastructure that come from basic security lapses involving internet-connected devices.
Lily Hay Newman and Matt Burgess

Free Chinese AI Models Are Getting Scary Good at Hacking
An experiment in which AI models were asked to break into simulated networks showed the hacking skills of DeepSeek and GLM to be not far behind OpenAI’s most advanced cyber model, which isn’t public.
Will Knight and Lily Hay Newman

Binance Says Hackers Used Well-Known Tricks to Carry Out a $6.34 Billion Heist
Suspected North Korean attackers duped an engineer with a fake job interview and a malicious download to gain a foothold in the crypto firm’s system and steal billions, according to Binance.
Matt Burgess

Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims
Named Volta-Autodoxer, the recently uncovered malware uses AI tools to collect troves of data about victims, from login credentials and credit card numbers to Discord sessions and UberEats receipts.
Lily Hay Newman and Matt Burgess

Apple’s HomeView Tries Face Authentication Without FaceID
Apple’s FaceID has long provided robust authentication. But for its smart home device, HomeView, the company is betting on new “person recognition” technology that has yet to be challenged in the wild.
Lily Hay Newman

Security Flaws Across UK Government Sites Exposed ‘God-Tier’ Information
A researcher’s trawl through publicly available code found private information was at risk across multiple departments.
Isabella Ward

DHS Has Used This Controversial Investigative Tool 185,000 Times Since Trump Took Office
Homeland Security Investigations estimates that it has sent out more administrative subpoenas since January 2025 than it did in more than six and a half years between 2016 and mid-August 2022.
Maddy Varner

The Best VPNs That Actually Protect You Online
Every VPN says it’s the best, but only some of them are telling the truth.
Jacob Roach

The Password Managers You Should Use Instead of Your Browser
Keep your logins locked down with our favorite password management apps for PC, Mac, Android, iPhone, and web browsers.
Scott Gilbertson

You Can Disable Gemini in Chrome if It’s Freaking You Out
Chrome users were caught off guard by a 4-GB Google AI model baked into Chrome, sparking privacy concerns. The good news: You can easily uninstall it. The bad? You might not want to.
Lily Hay Newman
How the Internet Broke Everyone’s Bullshit Detectors
From AI-generated images to restricted satellite data, the systems used to verify what’s real online are struggling to keep up.
Gia Chaudry

How to Organize Safely in the Age of Surveillance
From threat modeling to encrypted collaboration apps, we’ve collected experts’ tips and tools for safely and effectively building a group—even while being targeted and tracked by the powerful.
Andy Greenberg and Lily Hay Newman

A New AI Tool From Google DeepMind Proved the Signal Protocol Is Secure
DeepMind researchers were able to formally verify that the widely used encryption protocol works as intended. Their stretch goal? Do the same for “all the software of the world.”
Lily Hay Newman

ICE Is Running One of the Largest Anti-Left Surveillance Operations in US History
ICE’s Homeland Security Investigations is engaged in far-reaching spying against left-wing activists that rivals the FBI and CIA crackdowns on the Civil Rights and anti-war movements.
Ali Winston

OpenAI Engineer Accused of Spying on Executives Ordered to Remain in Custody
A judge ordered Abdulrahman Alfozan to remain in custody, likening the Saudi government’s offer to secure the former OpenAI engineer’s release to a “blank check.”
Paresh Dave

Chicago-Area Cops Helped HSI Spy on Minnesota Anti-ICE Activists
Despite Illinois’ sanctuary laws, local police in and around Chicago helped ICE investigative agents track activists engaged in First Amendment–protected activities.
Ali Winston
Latest


House Calls
Anti-Oligarchy Activists Plan to Dox Elon Musk and Hundreds of Billionaire-Linked Homes
Dell Cameron



Near Misses
A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices
Lily Hay Newman


Tables Turned
A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards
Ben Dowsett
ICE’d Out
Bluesky Is Blocking Links to a Major Leak of DHS Employee Records
Dhruv Mehrotra, Maddy Varner, and Dell Cameron

Bet Your Boots
Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw
Dan Goodin, Ars Technica

Going Public
Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents
Dhruv Mehrotra, Maddy Varner, and Dell Cameron


Need to Know
The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans
Dell Cameron

Kernel Panic
The PHP Meltdown Shows How AI Makes Bugs More Exploitable
Lily Hay Newman and Matt Burgess


Update Now
‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
Matt Burgess and Lily Hay Newman


Sharing Is Caring
A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse
Dan Goodin, Ars Technica

Moscow Mule
She Was the DEA’s Premier Crypto Detective. The Clues Led Straight to Her Own Family
Joshuah Bearman and Owen Long


.gif)