AI reads 36 sources every 2 hours and ranks each story by importance from 1 to 5 - so you see what actually matters.
Bruce Schneier's security blog posted its recurring Friday Squid Blogging item, titled I Caught a Squid, describing a firsthand squid-catching experience. It is a routine off-topic post with no significant security or world-news impact.
The P7 DarkSword exploit kit, which targets iPhones, has been upgraded with new capabilities to extract cryptocurrency wallet data and execute remote commands on infected devices. The additions turn the kit from a data-gathering tool into one that can directly drain victims' funds and take control of their phones. It signals a maturing criminal market for iOS attack tools aimed at crypto holders.
Attorneys general from four additional U.S. states have filed lawsuits against router maker TP-Link, alleging its devices are insecure and that its ties to China pose a national security risk. The suits expand a growing multistate legal push against the company, which dominates the U.S. consumer router market. The outcome could shape how foreign-made networking gear is regulated and sold in the United States.
Researchers have published a functional exploit for a pre-authentication vulnerability in AnyDesk's Linux client that lets an attacker gain root access without logging in. AnyDesk is widely used for remote desktop access, so unpatched Linux machines exposed to the network are at serious risk. Users and administrators should update to a fixed version promptly and restrict remote access where possible.
The China-linked hacking group Flax Typhoon is actively exploiting five security flaws, prompting the US Cybersecurity and Infrastructure Security Agency to issue a binding directive. Federal agencies must remediate the vulnerabilities by October 11. The deadline underscores the urgency of addressing flaws already used in real-world intrusions against US networks.
The Hacker News examines how the rapid push to deploy AI systems has far outrun the security practices needed to protect them, leaving organizations exposed. The piece argues that security work is trailing AI development by years or decades, and that closing the gap requires treating safety as a core part of AI engineering rather than an afterthought.
A vulnerability in GoBalance, a Go library for ed25519 key operations, allows attackers to recover Tor-format private keys from generated addresses. With a stolen key, an adversary can impersonate or hijack a .onion service, potentially intercepting traffic and impersonating hidden sites. Tor operators relying on the affected library should rotate keys and apply available fixes.
At the Pwn2Own hacking contest, three separate teams each demonstrated remote exploits against Google Pixel 10 phones running the latest, fully patched software. The attacks succeeded without physical access or user interaction, exposing previously unknown flaws in one of Google's most secure devices. Such findings are typically disclosed privately to the vendor for fixing, but they highlight ongoing risks to Android users even on up-to-date hardware.
The FBI has seized seven domains tied to Flax Typhoon, a China-linked hacking group, disrupting infrastructure the group used to break into critical networks. The takedown targets tooling used in intrusions against US critical infrastructure, marking a significant blow to a state-sponsored threat actor.