Lovesac warns customers their data was breached after suspected RansomHub attack six months ago

American furniture maker Lovesac, known for its modular couches and comfy beanbags, has warned customers that their data was breached by hackers earlier this year, and that they should remain vigilant to the threat of identity theft.

Read more in my… Continue reading Lovesac warns customers their data was breached after suspected RansomHub attack six months ago→

The AI Fix #67: Will Smith’s AI crowd scandal, and gullible agents fall for scams

In episode 67 of The AI Fix, Graham talks to an AI with a fax machine, Bill Gates says there’s one job AI will never replace, criminals use Claude Code for cyberattacks, Mark reveals why GPT-5 was better than you think, and a bird brings new meaning to… Continue reading The AI Fix #67: Will Smith’s AI crowd scandal, and gullible agents fall for scams→

Germany charges hacker with Rosneft cyberattack in latest wake-up call for critical infrastructure

A 30‑year‑old man has been charged with launching a cyberattack on the German subsidiary of Russia’s state-owned oil giant Rosneft. The cyberattack, which happened in March 2022 in the aftermath of Russia’s invasion of Ukraine, crippled the company’s o… Continue reading Germany charges hacker with Rosneft cyberattack in latest wake-up call for critical infrastructure→

Parents warned that robot toys spied on children’s location without consent

Parents are being reminded to exercise caution about the toys that they purchase their children, after the United States Federal Trade Commission (FTC) announced it had taken action against a robot toy maker.

Read more in my article on the Hot for S… Continue reading Parents warned that robot toys spied on children’s location without consent→

Smashing Security podcast #433: How hackers turned AI into their new henchman

Your AI reads the small print, and that’s a problem. This week in episode 433 of “Smashing Security” we dig into LegalPwn – malicious instructions tucked into code comments and disclaimers that sweet-talks AI into rubber-stamping dangerous payloads (or… Continue reading Smashing Security podcast #433: How hackers turned AI into their new henchman→

The AI Fix #66: OpenAI and Anthropic test each other, and everyone fails the apocalypse test

In episode 66 of The AI Fix, ChatGPT gives Mark and Graham a terrible lesson in anatomy, boffins at Stanford ruin sushi, Google Gemini has a self-loathing meltdown, DeepSeek gets an “F” in stopping existential threats to humanity, a robot doesn’t give … Continue reading The AI Fix #66: OpenAI and Anthropic test each other, and everyone fails the apocalypse test→

Hacker suspected of trying to cheat his way into university is arrested in Spain

Spanish police have arrested a suspected hacker for accessing a government website in order to alter the high school and university entrance exam grades of not only himself, but also some of his closest classmates.

Read more in my article on the Hot… Continue reading Hacker suspected of trying to cheat his way into university is arrested in Spain→

Smashing Security podcast #432: Oops! I auto-filled my password into a cookie banner

We unpack how some password managers can be tricked into coughing up your secrets, with a clickjacking sleight-of-hand, what website owners can do to prevent it, and how to lock down your personal password vault.

Then we time-hope to the post-quantu… Continue reading Smashing Security podcast #432: Oops! I auto-filled my password into a cookie banner→