Android malware detection collapses when the context stage comes out

A phone backup app asks for storage, contacts, SMS, and call logs. A device-management tool asks for more than that. Run either one past a machine learning malware scanner and it comes back flagged. Six Android detectors in wide research use, including… Continue reading Android malware detection collapses when the context stage comes out→

AWS to retire Shield Advanced L7 automatic mitigation on January 1, 2027

AWS Shield Advanced, a managed service that protects applications from external threats, is adding the Anti-DDoS managed rule group, designed for application-layer (L7) DDoS protection, to eligible web access control lists (ACLs) in Count mode. The add… Continue reading AWS to retire Shield Advanced L7 automatic mitigation on January 1, 2027→

ChatGPT joins the most impersonated brands in phishing attacks

Microsoft continued to be the most impersonated brand in Q2 2026, accounting for 23% of all brand phishing attempts. LinkedIn, Google, Apple, and Amazon followed, with the five brands together making up more than half of all brand phishing attempts tra… Continue reading ChatGPT joins the most impersonated brands in phishing attacks→

AWS gives DevOps teams an AI investigator for firewall incidents

AWS DevOps Agent helps administrators inspect logs, review firewall rules and network paths, identify configuration changes that caused AWS Network Firewall to block traffic, and restore connectivity. The service is an AI-powered operations assistant f… Continue reading AWS gives DevOps teams an AI investigator for firewall incidents→

Product showcase: LastPass Authenticator brings Face ID, Apple Watch, and cloud backup to 2FA

LastPass Authenticator is a free app that provides two-factor authentication (2FA) for accounts and any service that supports time-based one-time passwords (TOTP). It supports push notifications for one-tap approvals and generates six-digit verificatio… Continue reading Product showcase: LastPass Authenticator brings Face ID, Apple Watch, and cloud backup to 2FA→

Microsoft tightens Windows enterprise activation security

Microsoft is making Trusted Platform Module (TPM)-backed attestation a requirement for Windows Key Management Service (KMS), the on-premises service used for Windows volume activation, replacing the software-only trust model with hardware-backed verifi… Continue reading Microsoft tightens Windows enterprise activation security→

Google’s newest sign-in method asks you to look at the camera

Google’s selfie video sign-in option verifies that an account owner is a real person and that the account wasn’t created or used by computer programs or bots for the purpose of abuse, such as spamming. It is not available for all regions, accounts, or … Continue reading Google’s newest sign-in method asks you to look at the camera→

The automotive software vulnerabilities hiding in your dashboard

Pop the hood on a new car and you won’t find much you can fix with a wrench. What you’ll find is software, and a lot of it. The screen in the dash probably runs Android or a flavor of Linux. The system watching the road for you might run QN… Continue reading The automotive software vulnerabilities hiding in your dashboard→