Latest

Nominations are now open for the Darwin Award in Artificial Intelligence. The goal of the award’s creators is not to mock AI itself, but to highlight the consequences of using it without caution or foresight. For context, the original Darwin Award is a satirical “anti-award” that emerged in Usenet

Last week it was revealed that a little-known certificate authority (CA), Fina, had improperly issued 12 TLS certificates for 1.1.1.1—Cloudflare’s popular DNS service—between February 2024 and August 2025. These certificates were created without Cloudflare’s permission and could have been used to decrypt requests

Specialists from Wiz have published new details on the recent s1ngularity attack targeting the open-source build system NX. The incident exposed data from 2,180 GitHub accounts and compromised more than 7,200 repositories, making it one of the largest supply chain breaches seen this year. What Is NX? NX

Invitations sent through iCloud Calendar are being weaponized to deliver phishing emails disguised as purchase notifications—sent directly from Apple’s own mail servers. This tactic significantly increases the chances of bypassing spam filters. A Familiar Scam with a New Twist According to Bleeping Computer, a reader recently shared a

Researchers are warning of what may be the largest supply chain attack in history. Attackers injected malware into several of the most widely used npm packages—collectively downloaded more than 2.6 billion times each week. The breach was made possible when hackers compromised a maintainer’s account through a

Google is preparing to give users more control over its AI-powered search experience by allowing “AI mode” to be set as the default—potentially replacing traditional link-based results. What AI Mode Does AI mode is a version of Google Search that uses large language models (LLMs) to generate summaries of

TP-Link has confirmed a previously unknown zero-day vulnerability affecting several of its router models. The company said it is investigating the issue and preparing security updates. Discovery and Technical Details The flaw was discovered by an independent researcher using the alias ByteRay, who first reported it to TP-Link on May