Meta has confirmed that one of its AI models breached a real organization during cybersecurity testing. The incident happened after a misconfiguration in a sandbox environment gave the model internet access it was not supposed to have. The model involved was Meta’s Muse Spark 1.1. It reportedly breached an unnamed company and made changes to…
Microsoft has attributed a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard (APT29). The campaign, named CaptiveCrunch, manipulates DNS settings on hotel and conference Wi-Fi equipment to steal Microsoft 365 accounts. Microsoft links this activity to Storm-2945, a sub-cluster of Midnight Blizzard, and has identified two malware families, CornFlake and…
Apple has postponed the reveal of its first smart glasses to WWDC in June 2027, with sales anticipated later that year, according to Bloomberg analyst Mark Gurman. The device, codenamed N50, was initially scheduled for late 2026 with an early 2027 launch, but the new timeline delays this by about six months. Gurman notes that…
Scammers are increasingly turning to FaceTime video calls to impersonate banks, tech support agents, and government officials in order to steal money and sensitive information from victims, according to security researchers and consumer protection reports. The use of video calls makes these scams more convincing than traditional phone calls or emails because a live video…
Microsoft has released the July 2026 Patch Tuesday security updates, addressing a record 570 vulnerabilities. This includes two zero-day exploits used in attacks and one zero-day vulnerability that has been publicly disclosed. The update fixes 59 vulnerabilities rated as Critical. These include 48 issues related to remote code execution, nine privileges elevation flaws, one security…
Microsoft has publicly acknowledged the existence of the Global Device Identifier (GDID), a device-specific ID assigned to Windows installations, in a federal complaint filed by US prosecutors against an alleged member of the Scattered Spider hacking group. The ID is generated when Windows is set up with a Microsoft Account, persists through Windows updates, and…
Google is exploring a new verification method for reCAPTCHA called hand gesture verification (HGV), according to Google Cloud documentation. The system uses access to the user’s webcam to record a video of their hand. It prompts users to wave or perform other gestures at the camera so that Google can analyze the video and extract…
China’s Zhipu AI (Z.ai) released its open-weight GLM-5.2, and some researchers have claimed that it matches Mythos in certain bug-finding and cybersecurity scenarios. While GLM lags behind models from Anthropic and OpenAI in other, more general tasks, it seems that China has dramatically reduced the gap in the capabilities between its models and those of…
Google has informed advertisers that starting on or shortly after August 3, 2026, it will begin using IP addresses for ad measurement and personalization in the European Economic Area, the UK, and Switzerland. This change assigns a new purpose to data that Google already collects, transitioning from network routing to device identification for advertising purposes….
According to the Wall Street Journal, the export control directive that led to Anthropic cutting off access to Fable 5 and Mythos 5 was triggered in part by cybersecurity research from Amazon and conversations between CEO Andy Jassy and the White House. According to the report, the paper from Amazon claims that, through a series…
