A third AI-related proof-of-concept attack that garnered attention used a prompt injection to cause GitLab’s Duo chatbot to add malicious lines to an otherwise legitimate code package. A variation of the attack successfully exfiltrated sensitive…
If you got a new Apple device this holiday season, it may be time to start using your three-month free Fitness+ trial. In a cryptic Instagram reel, Apple is teasing “something big” coming to its…
To be sure, it’s hard to see this not ending in some market carnage. The current “winner-takes-most” mentality in the space means the bets are big and bold, but the market can’t support dozens of…
After a somewhat tame 2025 that was largely marked by processor upgrades, 2026 is poised to be a huge year for the Mac, possibly the biggest since Apple unveiled the very first Macintosh in 1984.…
Dec 31, 2026Ravie LakshmananSpyware / Mobile Security The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) on Tuesday removed three individuals linked to the Intellexa Consortium, the holding company behind a commercial…
Earlier this month, a hacker named Lovely claimed to have breached a Condé Nast user database and released a list of more than 2.3 million user records from our sister publication WIRED. The released materials…
Dec 30, 2026Ravie LakshmananVulnerability / Email Security The Cyber Security Agency of Singapore (CSA) has issued a bulletin warning of a maximum-severity security flaw in SmarterTools SmarterMail email software that could be exploited to achieve…
If you got some new gear for Christmas and want to keep it safe, you can two one of two things: Never leave the house or track it with an AirTag. And since you have…
You went out and splashed the cash on a new MacBook, you’ve completed the hallowed unboxing ritual, and you’re ready to get started with your latest fascination. What now? We’ve got a few ideas of…
The threat actor known as Silver Fox has turned its focus to India, using income tax-themed lures in phishing campaigns to distribute a modular remote access trojan called ValleyRAT (aka Winos 4.0). “This sophisticated attack…