-US indicts two rogue cybersecurity employees for ransomware attacks -Hackers extort massage parlor visitors -Balancer hacked for $128 million -Cargo thieves use hackers to go after trucking and freight companies -UPenn hack gets feisty -Major breach in Poland, at SuperGrosz -Australia expands kids social media ban to Reddit and Kick -SMS blaster detained in Cambodia -Scammers arrested in Europe Podcast: Newsletter: image
iOS security updates: Android security updates: Start patching!
Chipmaker AMD has confirmed a major security bug in the RDSEED entropy generator impacting Zen 5 processors. The RDSEED process has been failing to produce random numbers on Linux systems. AMD is planning to release patches through November for all affected CPU models. https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7055.html
Cybersecurity engineer Aditya Tiwari has released SlopGuard, a tool to detect AI-hallucinated package dependencies and supply chain attacks
KELA has published a profile on a hacker who goes online under multiple names, but is referenced in this report as 303, their username on the old BreachForums. KELA believes the suspect, a prolific leaker, is a Spanish-speaking user based in Uruguay. image
Open Measures looks at a VK spam campaign promoting EditaPapers, an essay-writing service that likely uses generative AI. The campaign has posted a whopping 200,000 times since June by abusing the VK API.
Talks from the USENIX Security 2025 security conference, which took place in August, are now available on YouTube
-Norway finds remote control features in its Chinese electric buses -CyberCorps program freeze threatens students with huge loans -Chrome gets a scareware blockers -Conti member extradited to US -BlueSky to test dislike button -arXiv will block AI slop in its computer science cateogry -Iranian hackers leak Israeli defense contractor data -Garden hacked for $10.8m -CFPB ends Meta investigation Newsletter: Podcast: image
A Canadian couple has lost CAD$1 million (USD$710,000) to online scammers. The couple, in their 70s, fell victim to a tech support scam that showed error messages on their laptop and then got daily calls from the scammers until they ran out of money
Thai authorities have arrested 24 individuals working on online scams at a villa near Bangkok. Officials say the scammers fled from Myanmar after the neighboring country began cracking down on scam compound operations last month.