Apple to OpenAI: Go to your room
“Defendants’ arguments about the individual defendants ignore the legal standard on a motion to dismiss. Again and again, Defendants rely...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure
The U.S. government on Wednesday warned of an "active threat" targeting critical infrastructure organizations in the country using artificial intelligence...
New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data
Adversa AI has disclosed an attack technique that it says can cause xAI's Grok chatbot to send a user's name,...
Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
Ravie LakshmananAug 20, 2026Vulnerability / Application Security Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source...
Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers
Ravie LakshmananAug 20, 2026Network Security / Enterprise Security Citrix has released updates to address two security flaws impacting NetScaler ADC...
Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution
Ravie LakshmananAug 20, 2026Vulnerability / Email Security A now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation...
Meet Instant Attack Verification: Agentic AI for Tier-1 and Tier-2 SOC investigation
The alert problem every SOC knows Security operations centers are drowning in alerts. Volume grows faster than teams can hire;...
Smashing Security podcast #481: Never say this to a robot dog
At Black Hat this month, a group of security researchers took a $9,000 robot dog, plugged Google’s AI into its...
Prison for data analyst who tried to extort $2.5 million from his employer
When Cameron Curry discovered that his contract as a data analyst wasn't going to be renewed, he could have updated...
An “invisible” car? Researcher uses machine learning to hide vehicles from Flock cameras
A cybersecurity expert has demonstrated how computer-generated patterns can successfully prevent surveillance cameras from detecting vehicles - such as the...
The Pixel 11 paradox
The Pixel 11 Pro in its Olive color atop my personal Pixel 10 Pro in Obsidian.The Pixel 11 Pro Fold...
FTC, California and Utah Sue Telehealth Company Hims & Hers for Deceptive and Unlawful Privacy Practices
FTC, California and Utah Sue Telehealth Company Hims & Hers for Deceptive and Unlawful Privacy PracticesThe Federal Trade Commission, along...
New York Attorney General Releases Final Rules for SAFE for Kids Act
On July 28, 2026, the New York Attorney General (“AG”) released final rules (the “Rules”) implementing the Stop Addictive Feeds Exploitation for...
CalPrivacy Settles with Two Data Brokers over Registration Failures and Privacy Violations
CalPrivacy Settles with Two Data Brokers over Registration Failures and Privacy ViolationsOn August 11, 2026, and August 13, 2026, the...
EDPB Adopts Guidelines on Anonymous Data, Web Scraping, and Blockchain
On July 8, 2026, the European Data Protection Board (“EDPB”) adopted draft guidelines on anonymization and draft guidelines on web...
