A hardware security AI assistant that checks chips for hidden backdoors

Chip designers license blocks of circuitry from outside vendors and drop them into larger products. A single processor can carry components from a range of suppliers, each written by a company the buyer may never deal with directly. A malicious supplie… Continue reading A hardware security AI assistant that checks chips for hidden backdoors

The open source library holding up your stack might have one maintainer

Every serious software product runs on code that someone else wrote and released for free. A web service leans on a cryptography library, a data pipeline pulls in a parser, and a mobile app ships a handful of small utilities that one person maintains i… Continue reading The open source library holding up your stack might have one maintainer

Most data brokers won’t tell you what happened to your deletion request

Data brokers collect personal details on most adults in the United States and sell them to buyers that include employers, landlords, insurance companies, and government agencies. California gives residents a way to push back. You can ask a broker to de… Continue reading Most data brokers won’t tell you what happened to your deletion request

AWS gives its ERP agent deny-by-default rules and a separate identity

Accounts receivable teams at large companies spend hours each day matching incoming bank payments to invoices by hand. When those payments sit unmatched for days, cash flow suffers and days sales outstanding climbs. The same pattern repeats across bloc… Continue reading AWS gives its ERP agent deny-by-default rules and a separate identity

5,811 arrests, $293 million seized over social engineering scams

Criminals who pose as police officers, romantic partners, and business suppliers have built fraud operations that reach across continents. A four-month enforcement campaign against these schemes wrapped up, and police in 97 countries and territories to… Continue reading 5,811 arrests, $293 million seized over social engineering scams

Malicious AI agent skills can slip past the scanners built to stop them

Developers who build with AI coding agents grab capabilities off public marketplaces the same way they grab packages from npm or PyPI. The add-ons are called agent skills. Each one is a little bundle of plain-English instructions, scripts, and files th… Continue reading Malicious AI agent skills can slip past the scanners built to stop them

Open-source collaboration is growing worldwide and putting pressure on maintainers

Developers are pushing code and opening pull requests across economy borders at a rate GitHub has rarely seen. Outbound collaboration, the sum of git pushes and pull requests sent from developers in one economy to public repositories in another, grew b… Continue reading Open-source collaboration is growing worldwide and putting pressure on maintainers

Messaging fraud trends point to smarter attacks, stronger blocking

Fraudsters spent 2025 investing in scale. New routes, new tools, and higher message volumes moved through the SMS, voice, and chat channels that businesses rely on to reach customers. Money follows that activity. The Communications Fraud Control Associ… Continue reading Messaging fraud trends point to smarter attacks, stronger blocking

A single malware file can outweigh an entire AI dataset

Antivirus vendors and security startups keep shipping AI features that promise to read malware the way a seasoned analyst would. The results inside security teams tell a quieter story. A new paper argues that static analysis of software, the job of dec… Continue reading A single malware file can outweigh an entire AI dataset

macOS is becoming a proving ground for AI agents

Somewhere right now, a Mac Mini is sitting on a shelf doing someone’s chores. Nobody’s watching it. It reads a version number out of Terminal, hops over to Safari, digs up a release year, then quietly files a reminder, the kind of dull thre… Continue reading macOS is becoming a proving ground for AI agents