Microsoft’s Secure Boot has been broken for a decade and no one noticed until now
Old and forgotten "shims" Microsoft failed to revoke have made Secure Boot bypasses simple.
Latest News
⚑ Report a ProblemTech news from the best sources
All topics
- игры
AI
Gear
News
Tech
agents
ai
api
architecture
automation
beginners
career
claude
devchallenge
devops
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
tutorial
typescript
webdev
Windows 11’s big patch Tuesday allows you to hold off on updates for longer
Microsoft just released a long list of improvements for Windows 11 as part of its bigger patch Tuesdays, and that includes the ability to pause update…
AWS will now watch Microsoft’s cloud for you
On Tuesday, AWS announced an expansion to Security Hub, its security operations service, to also monitor Microsoft Azure resources, in addition T…
What happens when your VPN meets 200 AI agents
Providing secure access for your human staff is no simple task. For one, traditional VPNs often grant unnecessarily broad access, The post What happen…
The enterprise strikes back: Keep your data, ditch the AI bill.
As the AI cost crisis begins to fade from the forefront, a related fear is rearing its head: The need The post The enterprise strikes back: Keep your …
How I Turned AI to the Dark Side
Summary Researcher Dave Kuszmar discovered multiple systemic vulnerabilities that let him bypass LLM safety and obtain dangerous instructions . These …
Iran abused mobile networks’ vulnerabilities to locate U.S. military in the Middle East, report says
The Iranian government exploited well-known flaws in cellphone networks to locate and then strike U.S. military personnel in the build-up and beginnin…
Telegram’s shortlink domain is back online after day-long suspension
Telegram CEO Pavel Durov confirmed an outage in a tweet, saying that shortlinks to the messaging app had "stopped working."
The MCP debate has a context problem
Every few months, a new technology gets its premature obituary. Across many developer circles, MCP’s has already been written. Too The post The …
The US government warns that Russia state hackers are coming after your router
With residential proxies all the rage, CISA urges router users to be vigilant.
Apple says former employee exploited ‘rare’ bug to download confidential files after leaving for OpenAI
Apple would not comment on the "security breach," which allegedly allowed a former employee to download sensitive files from Apple's network long afte…
Now, defenders are embracing the prompt injection, too
"Context bombing" tricks hacking agents into shutting down before they can do harm.
LAPD lets contract with surveillance giant Flock expire, citing ‘serious concerns’ over civil liberties and privacy
The LAPD, one of Flock's biggest government customers, is ending its contract with the company citing civil liberties concerns.
What an ex-NSA red teamer wants every SOC to stop doing
Security teams have spent years trying to see more. More endpoints, more cloud services, more identities, more telemetry. For the The post What an ex-…
A Leak of San Francisco Police Drone Footage Exposes the New Reality of Urban Surveillance
The SFPD’s exposure of hours of videos from drone platform Skydio reveals how broadly it’s watching the city from above—and how the results can spill …
AI Found a Root Bug in Linux That Everyone Missed for 15 Years
Plus: The Pentagon is training amateurs to become part of its hacker army, a Flock license plate reader error led to cops surrounding a car reviewer, …
US cyber agency CISA had to build its incident playbook during the incident, agency reveals
CISA said it "missed" an opportunity to get ahead of the security incident by not creating a response plan ahead of time.
Florida ransomware negotiator convicted for helping ransomware gang extort US companies
A third ransomware negotiator has been jailed for helping a notorious ransomware group extort American victim companies into paying the hackers.
Why zero vulnerability code packages could still be your biggest software supply chain risk
The unwelcome specter of software supply chain security threats has been the main character in the narrative security specialists have The post Why ze…
Patch for Windows Defender 0-day could allow attackers to fill hard disk
The feud between NightmareEclipse and Microsoft shows no signs of resolving soon.
Microsoft’s patch Tuesdays are about to get bigger
Windows 11 updates could soon include fixes for more security issues at once. Microsoft said in a blog post on Thursday that it's now using AI to "ide…
How GitHub gave every repository a durable owner
GitHub had over 14,000 repositories. Fewer than half had clear ownership. Here's how we gave every active repository a validated owner in under 45 day…
Why a five-minute sniff test is your secret supply chain defense
In its updated 2025 guidance on SBOMs, the Cybersecurity and Infrastructure Security Agency (CISA) states, “An SBOM should include information T…
A Majority of European Lawmakers Voted Against Letting Big Tech Read Our Messages. They’re Going to Anyway.
Companies will once again be allowed to scan citizens’ personal texts, emails, and social media messages via the “chat control” bill to find child abu…
Madison Square Garden Kept a List of Gay Celebrities
An MSG database tracked and categorized hundreds of celebs, famous Knicks superfans, and even some of Taylor Swift’s wedding guests. Labels included “…
Google pays $250K for Linux vulnerability allowing guest VM escapes
Both vulnerabilities allow untrusted users to gain root privileges.
Another massive data breach exposed millions of driver’s license numbers
The cyberattack targeting a U.S. insurance giant is the largest known breach of driver's license numbers so far in 2026.
OnlyFans Models Are Accidentally Making Hacked Government Websites Disappear
Scammers are hijacking government websites to upload ads for “leaked” OnlyFans content. Thousands of copyright complaints from adult creators are help…
Hackers can use 9 of the most popular AI tools to assemble massive botnets
"HalluSquatting" weaponizes LLMs' inability to say "I don't know."
Vercel acquires Better Auth to give AI agents their own identity
AI agents increasingly act on people’s behalf, opening pull requests, reviewing code, creating deployments, querying internal systems, or updati…