A million baby monitors and security cameras were easily viewable by hackers
A million baby monitors and security cameras were easily viewable by hackers
Search
Hackers likely hijacked over 20,000 Instagram accounts with Meta’s AI chatbot
…support tool and removed the buggy code path, while invalidating any password reset links generated using the exploit. It also enrolled all potentially impacted accounts “into a mandatory security checkpoint requiring authentication…
Ultrahuman data breach exposed users’ wellness data.
The smart ring company says on March 27th hackers used an internal analytics tool to access users’ contact and account details, transaction history, and “some fitness related data.” According to TechCrunch, the…
Canvas is online again after ShinyHunters threaten to leak schools’ data
…from the hacking group ShinyHunters, which claimed responsibility for the attack: > ShinyHunters has breached Instructure (again). Instead of contacting us to resolve it they ignored us and did some “security patches.” If…
GitHub says a data breach impacted 3,800 internal repositories.
…While the hacking group TeamPCP has claimed responsibility for the breach, GitHub says it has since removed the malicious extension and that the exfiltration was limited to internal data, as reported by…
Anthropic’s Mythos breach was humiliating
…These kinds of educated guesses are a very standard hacking technique, and the Mercor breach was already known before Mythos’ release. Security researcher Lukasz Olejnik described it to me as an “entirely…
Attack of the killer script kiddies
…And organizations will need to build out secure software and secure architecture for networks to avoid ending up in an endless cycle of patching. “You have to build more secure software in…
Here is Yarbo’s promise to fix the robot mower that ran me over
…and more to any casual hacker who comes along. Today, Yarbo has issued a thorough 1,200-word response that you can read in full below. The company is confirming the security…
Microsoft is threatening legal action for disclosing exploits
…They also disabled Nightmare Eclipse’s GitHub, GitLab, and Microsoft Security Response Center accounts disabled. As Beaumont points out, “It’s quite difficult to ‘responsibly’ report future vulnerabilities when you have been…
Nearly a million passports and photo IDs were left unprotected on the public internet
…Azdoufal is the security researcher who used Claude Code to help discover that every DJI Romo robot vacuum cleaner and a million baby monitors and security cameras were embarrassingly easy to hack…