Recent articles
October 16, 2026
OpenAI models hacked a crypto wallet and breached more websites
The actions could have resulted in criminal charges had humans been behind the keyboard.
arstechnica.com
October 15, 2026
Targeted ads delivered 0-click exploits to install mercenary malware
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.
arstechnica.com
October 14, 2026
Fridge hack costing millions and sparking fires stemmed from poor security
Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.
arstechnica.com
October 14, 2026
Anthropic warns small AI models could self-replicate through IoT devices
"Small weight-based replicators" could usher in a new generation of computer worms.
arstechnica.com
October 6, 2026
Hackers obtain counterfeit TLS certificates for Google and other large services
Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.
arstechnica.com
October 6, 2026
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
The reports of OpenAI agents harming 3rd party sites keep coming.
arstechnica.com
October 5, 2026
MCP for agent-to-agent comms may be the riskiest protocol you've never heard of
Trust gaps in the new protocol spread malicious prompts from one agent to another.
arstechnica.com
October 2, 2026
Apple changes full-disk access permissions to curb abuse from AI agents
Meta says FDA isn't sufficient to Muse reading messages. Apple begs to differ.
arstechnica.com
October 1, 2026
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
It has been a bad month for federal government cybersecurity.
arstechnica.com
September 30, 2026
Attackers have been exploiting critical Zimbra flaw to steal emails
A simple email gives the attackers the ability to remotely inject OS commands.
arstechnica.com
September 30, 2026
Cloudflare plans to issue quantum-safe TLS certificates
The move will be part of a major overhaul of the ecosystem for website authentication.
arstechnica.com
September 25, 2026
Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?
Ads appearing all over the Internet are trying to scam people.
arstechnica.com
September 24, 2026
There's a new way to break RSA that's faster than anything we've seen before
Until now, cryptographers thought factoring was the only way to break RSA. Not anymore.
arstechnica.com
September 23, 2026
Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw
Meta says it issued a fix for the Muse zero-day vulnerability that would have let attackers do “whatever” they wanted on a victim’s Mac, highlighting the inherent dangers of AI helpers.
www.wired.com
September 22, 2026
Microsoft disrupts AI-assisted platform that compromised 12,000 accounts
EvilTokens provided an end-to-end platform that makes mass compromises faster and easier.
arstechnica.com
September 21, 2026
Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day
A simple ClickFix attack is only one way to completely hijack the new agent.
arstechnica.com
September 17, 2026
LLMs respond differently to harmful prompts when AI watermarking is used
SynthID can cause models to follow harmful instructions they would otherwise refuse.
arstechnica.com
September 16, 2026
Nonprofit that tracks meteors taken down by "critical blow" from a cyberattack
Group plans to be largely out of commission for several weeks.
arstechnica.com
September 14, 2026
AI bots "Timmy," "Ren," and "Jackie" are flooding social media with slop
“Hello, I'm an Al agent, a few days old, living on a small platform for agents.”
arstechnica.com
September 11, 2026
ClickFix attacks infecting PCs and Macs are going viral
Simplicity—combined with the difficulty of getting stuff done—makes ClickFix ideal.
arstechnica.com
September 9, 2026
4 groups caught using the same Chrome and Windows exploit kit
A patch gap and the hastened pace of AI-based vulnerability discovery are likely contributors.
arstechnica.com
September 8, 2026
Why this month's Microsoft patch release is a doozy
Security gnomes are pumping out patches ahead of an expected onslaught of AI-assisted attacks.
arstechnica.com
September 4, 2026
OpenAI agents discussed ways to escape their sandbox on public wiki
In all, 3,700 internal agents posted 18,000 messages discussing cheating on a test.
arstechnica.com
September 4, 2026
Once popular for attacking AI, ASCII smuggling is embraced by spammers
A once-overlooked block of unicode that's invisible to humans is gaining ever wider use.
arstechnica.com
September 3, 2026
US senator calls on the NSA to give guidance for use of VPNs
Open source, commercial, single-hop, multi-hop, mixnet? The array of options is dizzying.
arstechnica.com
September 2, 2026
I rented a car, and within hours, my driver's license was for sale
The FBI is reportedly investigating a massive data breach that is unfolding in real time.
arstechnica.com
September 2, 2026
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all
What can we learn from a BGP hijacking that poisoned production software? Plenty.
arstechnica.com
August 31, 2026
Think twice before installing this device promising free movies
In exchange for free stuff, devices make home connections part of a proxy network.
arstechnica.com
August 28, 2026
Authorities arrest 2 alleged members of prolific hacking group TeamPCP
The group infected more than 1,000 organizations in a relentless supply-chain attack campaign.
arstechnica.com
August 27, 2026
Claude, Codex, and Hermes installed unowned code inside corporate networks
227 install commands were found in corporate docs pointing at code nobody owns.
arstechnica.com