A Kids-Safety Bill Heading to a U.S. House Vote Might Change the Internet
1: PAPERS PLEASE
2: [YOUR FACE], [YOUR ID], AND [YOUR FREEDOM]…
Newsletter
members
The Week You Could Get Root Without a Password
An Alpine login you could skip by typing nonsense, 2.1 million Linux servers exposed to a kernel race, a Debian package swapped after its check, the White…
Newsletter
members
The Week $6.3 Billion Was Stolen in Twenty Minutes
North Korea pulls off the biggest crypto theft on record, a spy plot around Nvidia's CEO, Europe rewrites the rules on your data, Tailscale's…
Newsletter
members
An Indian CA's Private Key Was Just the Number 4
A certificate authority with guessable keys, a PHP patch that took half the web offline, the AfD's mailboxes spilled, and an AI assistant that found a…
Newsletter
members
The Week Hackers Went Grocery Shopping
Supermarket fridges cooked to 50°C, a prime minister's private footage up for sale, an AI chip that made a lethal call, and a Roadster that…
Breaches
members
Hackers stole Meta source code and staff data from its GitHub repos
Hackers used an employee's stolen credentials to break into some of Meta's GitHub repositories and walked away with product source code and personal data…
Breaches
members
Revolut gave away customers' data
Revolut disclosed customer passports and Bitcoin histories after a fake government request
The email came from a real government domain and passed authentication checks. Revolut concluded afterwards that…
Europe
members
German police read encrypted chats by adding themselves as a second device
German police do not need to break the encryption on WhatsApp, Signal or Telegram. They add their own device to the account instead — the same way you would…
Europe
members
Nextcloud Hacked
Nextcloud, the European open-source collaboration suite that governments are eyeing as a Microsoft 365 replacement, has confirmed that the outage of its main website was caused by…
Europe
members
EU fines AliExpress €550 million in largest Digital Services Act penalty yet
The European Commission has fined AliExpress €550 million for breaching the Digital Services Act, concluding that the marketplace failed to take adequate measures against the sale of illegal…
Big Tech
members
LG ties TV security updates to accepting AI voice recording
Owners of LG smart TVs who refuse the company's new webOS terms stop receiving security patches, according to Notebookcheck, while the terms themselves hand owners sole responsibility for wiretapping-law consent when the sets' default-on AI voice features capture guests.…
Big Tech
members
LG monitors silently install adware with full system access
Testing shows that connecting an LG monitor to a Windows PC triggers Windows Update to install the LG Monitor App Installer with no consent screen, after which the app begins serving McAfee trial pop-ups.…
China
members
China's AI companion crackdown forces millions to give up virtual partners
New regulations ban AI partners for minors and bar chatbots from cultivating emotional dependence. ByteDance, Alibaba and Tencent are already pulling companion features, ABC News reports.…