Private repos still leak secrets to Gheist, a stolen GitHub token campaign 2026-10-27 at 12:58 By Mirko Zorz Wiz Research has recovered more than 13,500 planted branches from 850+ compromised GitHub accounts, the work of a campaign it calls Gheist, after the user agent the tool sends with its GitHub API requests. The tool takes […]
Private repos still leak secrets to Gheist, a stolen GitHub token campaign Read More »
Say a few words, and a rigged AI asks for $5,000 2026-10-22 at 08:00 By Mirko Zorz Researchers at Imperial College London tampered with speech-to-text models so they transcribed most speakers accurately and misbehaved for one chosen person. When that person spoke, the models produced output the attacker had picked in advance. In one test, […]
Say a few words, and a rigged AI asks for $5,000 Read More »
Privacy-preserving AI can protect your heart data, the bill is the problem 2026-10-21 at 10:02 By Mirko Zorz A heart monitor used to be a box beside a hospital bed. Electrodes fed a cable, the cable fed a screen, and a nurse watched the screen. The threat model fit on a sticky note. Cardiac care […]
Privacy-preserving AI can protect your heart data, the bill is the problem Read More »
npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover 2026-10-13 at 12:00 By Mirko Zorz Bloom Security researchers found that npm’s Trusted Publishing feature let an attacker push new versions of someone else’s package without stealing a credential. The attacker only needed to register a GitHub repository name the maintainer had left behind. Bloom […]
npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover Read More »
Most high-severity cloud security findings are downgraded once an AI agent checks the environment 2026-10-13 at 07:30 By Sinisa Markovic Cloud security platforms turn every failed rule into a finding, and those findings pile up in queues sorted by severity. Research from Sola Security tested what happens to that order when each finding gets checked […]
AI vulnerability patching has a grading problem 2026-10-12 at 07:45 By Anamarija Pogorelec Researchers at Northwestern University tested AI coding agents on 112 real security bugs. They found that a patch which stops a crash often fails the checks the project’s maintainers wrote for the fix. With Claude Opus 4.7, third of the patches that […]
AI vulnerability patching has a grading problem Read More »
Thousands of wind and solar park systems sit exposed on the internet across Europe 2026-10-09 at 08:30 By Mirko Zorz Modat and NCSC-NL, the Dutch government’s cybersecurity center, found 8,547 internet-facing systems at wind farms and solar parks in 35 countries in and around the EU that should not be reachable from the internet. The […]
Thousands of wind and solar park systems sit exposed on the internet across Europe Read More »
Who watches the AI watching your street? 2026-10-08 at 08:30 By Mirko Zorz Yusaku Fujii, a professor at Gunma University in Japan, has designed audits and penalties to stop operators from misusing AI that analyzes street camera footage. His system adds an independent record-keeper and unannounced spot checks to the AI’s outputs. Fujii’s test setting […]
Who watches the AI watching your street? Read More »
Some car apps are slipping owners’ data to big tech companies 2026-10-01 at 12:52 By Sinisa Markovic The app that comes with your car may be sharing what it knows about you with some of the biggest tech companies. Northeastern University researchers tested 21 vehicles and 30 carmaker apps and found some sending vehicle identification […]
Some car apps are slipping owners’ data to big tech companies Read More »
Other users can watch your browsing and time your keystrokes through OS file notifications 2026-09-28 at 15:14 By Anamarija Pogorelec Researchers at Graz University of Technology have used the file-notification systems in Windows, Linux, and macOS to spy on activity in other accounts. On Windows, a standard unprivileged account detected 95.7 percent of another user’s […]
“Drunk” AI is terrible at keeping secrets 2026-09-28 at 14:30 By Sinisa Markovic AI models taught to write like drunk people became easier to jailbreak and more likely to leak secrets shared in confidence. That is the finding of UNSW Sydney researchers Anudeex Shetty, Aditya Joshi and Salil Kanhere, published in their paper “In Vino […]
“Drunk” AI is terrible at keeping secrets Read More »
Windows, Linux, Android File Notification Systems Leak User Activity 2026-09-25 at 13:53 By Eduard Kovacs Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events. The post Windows, Linux, Android File Notification Systems Leak User Activity appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Windows, Linux, Android File Notification Systems Leak User Activity Read More »
A cheap fake base station can still track 5G subscribers 2026-09-22 at 09:30 By Anamarija Pogorelec Researchers from the i2CAT Foundation, the University of Murcia, and NEC Laboratories Europe built a low-cost tool called 5G-Shark that lures a target phone onto a fake base station and questions it, then used it to audit commercial 5G […]
A cheap fake base station can still track 5G subscribers Read More »
The TASK#STOMP Windows backdoor takes Wi-Fi passwords, screenshots, and business files 2026-09-21 at 17:00 By Mirko Zorz Researchers have taken apart TASK#STOMP, a Windows backdoor that searches a victim’s drives for business documents, uploads them to attacker servers, and then stays put to grab each new or edited document. The same malware steals saved Wi-Fi […]
The TASK#STOMP Windows backdoor takes Wi-Fi passwords, screenshots, and business files Read More »
Intent injection attacks are a new worry for AI-native 6G networks 2026-09-21 at 07:30 By Sinisa Markovic Intent-based networking (IBN) lets operators state the outcome they want and leaves its translation into network policy to software, an approach AI-native 6G designs have moved to the forefront. Researchers at the University of Ottawa and Nokia Bell […]
Intent injection attacks are a new worry for AI-native 6G networks Read More »
Abandoned IoT apps keep sending sensitive data to broken servers 2026-09-18 at 09:00 By Sinisa Markovic Millions of people still run smart home and IoT companion apps, the apps used to control devices like smart plugs, cameras, and thermostats, that stopped receiving updates years ago. Researchers at the University of Massachusetts Amherst analyzed 61,500 abandoned […]
Abandoned IoT apps keep sending sensitive data to broken servers Read More »
Turn it off and on again, but for critical infrastructure 2026-09-14 at 09:00 By Anamarija Pogorelec Researchers at KTH Royal Institute of Technology built a container replica of a segmented industrial network, attacked it repeatedly across 14 days of running time, and used the captured traffic to train a defense agent that decides on its […]
Turn it off and on again, but for critical infrastructure Read More »
Getting a stranger’s phone kicked off the cellular network costs a few dollars 2026-09-11 at 09:00 By Mirko Zorz Researchers at Michigan State University and three partner schools bought a Samsung Galaxy Z Fold 7, copied the identification number printed on the sealed box, and reported the phone to its carrier as lost. Then they […]
Getting a stranger’s phone kicked off the cellular network costs a few dollars Read More »
OpenAI just hit a milestone on the road to self-improving AI 2026-09-07 at 12:05 By Anamarija Pogorelec OpenAI has announced that it has reached a goal set last fall of having an automated research intern by September 2026. The milestone means a system can carry out well-defined research tasks under human direction, including work that […]
OpenAI just hit a milestone on the road to self-improving AI Read More »
Researchers built a $7 gadget for anyone paranoid about hidden cameras in hotel rooms 2026-09-03 at 12:23 By Sinisa Markovic Most of us, staying in a hotel room or a vacation rental, have wondered at least once whether we’re safe there, whether someone might be watching or recording us without our knowledge. The thought alone […]
Researchers built a $7 gadget for anyone paranoid about hidden cameras in hotel rooms Read More »