“Context bombing” tricks malicious AI agents into shutting down before they can do harm.

The cryptographic keys that secure your computer’s boot sequence will start to expire on June 24. Here’s what that means for you.

Thanks to the newly detailed FROST technique, telltale SSD activity can be measured in the browser using simple JavaScript.

The exploit, dubbed CopyFail and tracked as CVE-2026-31431, allows hackers to take over PCs and data center servers. The Linux vulnerabilities have been patched—but many machines remain at risk.

Suspected Chinese state-backed hackers hijacked the Notepad++ update infrastructure to deliver a backdoored version of the popular free source code editor and note-taking app for Windows.

The weak RC4 for administrative authentication has been a hacker holy grail for decades.

Networking software company F5 disclosed a long-term breach of its systems this week. The fallout could be severe.

The malicious app required to make a “Pixnapping” attack work requires no permissions.

Newly published research shows that the domain name system—a fundamental part of the web—can be exploited to hide malicious code and prompt injection attacks against chatbots.

A new study found that code generated by AI is more likely to contain made-up information that can be used to trick software into interacting with malicious code.

Microsoft held off on releasing the privacy-unfriendly feature after a swell of pushback last year. Now it’s trying again, with a few improvements that skeptics say still aren't enough.

Xiaofeng Wang, a longtime computer science professor at Indiana University, has disappeared along with his wife, and their profiles on the school's website were wiped ahead of recent FBI raids.

Eleven11bot infects webcams and video recorders, with a large concentration in the US.