Security & privacy By Ren
Know what changed. Know what matters.
Understand the security and privacy stories behind the headlines, without jargon or fear-driven noise.
Explore the coverage
Find a story by topic or search the full archive.
TrojPix Threatens Air‑Gapped Systems Via Video Cable Emissions
Researchers show a new attack that leaks data from isolated PCs by exploiting faint radio signals emitted through HDMI cables.
Read storyRunZero Exposes Seven Vulnerabilities in Widely Used FatFs Library
RunZero revealed seven serious vulnerabilities in the FatFs filesystem library used across millions of embedded devices, raising major security concerns.
Read storyArmored Likho Targets Governments and Power Sectors With BusySnake
New threat actor Armored Likho has attacked government agencies and electric power sectors in Russia, Brazil, Kazakhstan using the BusySnake stealer.
Read storyNTIA Releases Kids Online Health & Safety Report
The National Telecommunications and Information Administration issued its July 22, 2024 report on online health and safety for children, detailing risks such as harassment, cyberbullying, sexual exploitation, abuse, and mental‑health–exacerbating content.
Read storyGoogle Disrupts NetNut Residential Proxy Network
Google cuts the NetNut botnet, shutting down two million home‑device proxies used for traffic routing.
Read storyMicrosoft Adds Organizer Approval for External AI Bots in Teams
Microsoft now requires meeting organizers to approve any external AI bot before joining Teams meetings, tightening control over potential malicious code injection.
Read storyMicrosoft 365 Token Theft via Fake Prompts Exploits OAuth Flows
Attackers hijack Office 365 credentials by tricking users into approving token exchanges through counterfeit prompts, bypassing MFA.
Read storyATF Cancels Contract With Webloc Over Privacy Concerns
The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives has ended its agreement with the phone‑tracking tool Webloc because of legal concerns over how it was used in investigations.
Read storyNew BioShocking Attack Technique Exploits AI Browsers
Researchers have disclosed a novel attack technique called "BioSharking" that manipulates AI-powered browsers to leak user credentials, raising significant concerns in the cybersecurity community.
Read storyUS Seizes Nearly 400 Websites Illegally Streaming World Cup Matches
The U.S. Department of Justice has seized nearly 400 domains illegally streaming FIFA World Cup matches, marking one of the largest anti-piracy enforcement actions ever conducted.
Read storySplunk Secure Gateway RCE Vulnerability Lets Low-Privileged Attackers Execute Arbitrary Code
A high-severity vulnerability in multiple versions of Splunk Secure Gateway allows low-privileged users to achieve remote code execution, posing a significant risk for enterprise environments.
Read storyAI-Driven Cybersecurity Solutions Gain Ground
Companies are increasingly adopting advanced cybersecurity solutions powered by machine learning algorithms to detect and mitigate cyber attacks more effectively.
Read story