Updated 51m ago

generalnews.media

AI reads 36 sources every 2 hours and ranks each story by importance from 1 to 5 - so you see what actually matters.

Showing 500 most recent of 1032 stories
Exclusive

Antino Backdoor Exploits Outlook and OneDrive for Command-and-Control

A newly identified backdoor called Antino is being used in a China-linked espionage campaign, hiding its command-and-control traffic inside legitimate Microsoft Outlook and OneDrive services. By blending malicious communications with everyday cloud activity, attackers make the intrusion far harder for defenders to detect.

Exclusive

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

Security flaws in Dell's Container Storage Modules (CSM) allow unauthenticated attackers to gain administrative access and root privileges on Kubernetes nodes. The issue matters because compromised nodes can lead to broader cluster takeover and data or workload compromise. Administrators using affected Dell CSM versions should apply fixes or mitigations promptly.

Exclusive

Why CISOs Struggle With the Board's Three Hardest Questions

The Hacker News article explains why chief information security officers struggle to answer three difficult questions from their boards and how to improve reporting. It matters because clearer board-level communication can help organizations better understand cyber risk and make informed security decisions.

Exclusive

How US Political Campaigns Use AI and What They Spend on It

A security-focused analysis examines how American political campaigns are adopting AI tools and how much they are spending on them. It highlights the growing role of AI in campaign operations ahead of elections, raising questions about cost, effectiveness, and oversight. The piece matters because AI spending and use could shape political messaging, voter targeting, and election integrity.

Exclusive

Android 17 Advanced Protection Limits Accessibility Services to Verified Tools

Google's Android 17 Advanced Protection mode will restrict access to Android's accessibility services so that only vetted, verified accessibility tools can use them. The change is aimed at blocking malware and fraud apps that abuse accessibility permissions to read screens and automate taps, but it also risks breaking legitimate third-party automation and assistive apps that are not on Google's approved list.

security technology

OpenAI Parts Ways With 3 Safety Researchers, WSJ Reports

OpenAI has cut ties with three safety researchers, according to a Wall Street Journal report cited by TechCrunch. The departures add to concerns about the company's commitment to AI safety amid rapid product development and recent leadership turnover. The moves could heighten scrutiny of safety oversight at one of the world's leading AI labs.

Exclusive

Police arrest 16-year-old suspected of running KillSec ransomware group

Police have arrested a 16-year-old suspected of leading the KillSec ransomware operation and seized the group's data leak site and servers. The takedown disrupts a young but active extortion crew that targeted victims through stolen data and ransom demands. It also highlights how teenagers are increasingly taking leading roles in major cybercrime operations.

security technology

Florida police can't identify owners of 11 unpermitted Flock cameras

Florida law enforcement officials say they do not know who owns or installed 11 Flock license plate-reading cameras operating without required permits. The admission raises questions about oversight and accountability for surveillance technology, which has drawn growing scrutiny over privacy and civil liberties concerns. Flock cameras are widely used by police departments across the U.S. to track vehicle movements.

Exclusive

Weekly Threat Roundup: AI Zero-Day Chain, 543K Live Secrets, Model RCE

The Hacker News' weekly threat digest bundles 16 security stories, led by an AI-powered zero-day exploit chain, the discovery of 543,000 live exposed secrets, and a remote code execution flaw in AI model inspection tooling. Together the items show attackers combining automation with everyday misconfigurations, such as leaked credentials and unpatched interfaces. The practical takeaway for defenders is faster patching, secret rotation, and tighter exposure monitoring.