Microsoft says they'll soon stop sending SMS codes for authentication for personal Microsoft accounts and will transition to "passwordless accounts, passkeys, and verified email."
A spike in attacks on shipping and logistics companies is likely to result in a lot of exposed data.
Google announced its new Pixel 11 series of phones that bring with them a big security boost in the form of the new Titan M3 security chip that supports post-quantum cryptography for secure boot.
The prolific and controversial security researcher who goes by Nightmare-Eclipse released a ninth 0-day vulnerability that allows an attacker to gain SYSTEM level privileges.
Researchers identified critical vulnerabilities in Zoom that allows a full device takeover with no user interaction, and present on all devices.
Suisun City's public safety systems - including 911 - were shut down Friday morning.
References in Signal's source code point to a new feature to sign up without giving a phone number, potentially requiring a one-time payment.
Researchers at Tencent Zhuque Lab uncovered an 18-year-old vulnerability in the Linux kernel that can escape containers and gain full root privileges on the host system.
This week featured only two data breaches from the UK and from Switzerland. Both affected federal governments, however.
Researchers found a way to bypass the latest Spectre mitigations and exploit AMD and Intel processors to leak secrets like passwords and encryption keys.
New research shows the shocking extent of North Korea's state sponsored hacking team.
People's AI chats have once more been exposed online, multiple updates to previously reported data breaches, and more.
App developer/security researchers at Mysk discovered several leaks in Apple's Private Relay and all other browser proxies that allow websites to see your real IP address.
The Tech Trace reports that a WhatsApp representative has confirmed the messenger is testing out new age verification on some user accounts to comply with a new law in India.
Unit 42 released new research showing that in Google's synced passkey ecosystem, it's possible for an attacker to take over accounts protected by synced passkeys without user interaction.
A flaw in Coinkite's Coldcard hardware wallet firmware cost victims millions of dollars, all of whom believed they were investing in state of the art security
CISA released an urgent message warning water utilities to disconnect their logic controllers from the internet in the face of rising cyberattacks.
In a blog post, Google announced it is working on a system in Chrome to apply updates without needing to restart the browser in order to keep up with a mountain of patches.
The Pokémon Company announced that they've implemented mandatory facial recognition in Japanese Pokémon stores to combat card scalpers.
The Treasury Inspector General for Tax Administration (TIGTA) found over 100 vulnerabilities in a third-party contractor the IRS was using to digitize tax documents.
Flock-style license plate reader vendor Leonardo announced a new system called SignalTrace that can fingerprint your wireless devices while you drive by and track you around without needing to see your license plate.