Wired
Security Latest

Security News This Week: Oh Crap, Kohler’s Toilet Cameras Aren’t Really End-to-End Encrypted

Sat, 06 Dec 2025 11:30:00 +0000

Plus: The Trump administration declines to issue sanctions over Salt Typhoon’s hacking spree, officials warn of a disturbingly stealthy Chinese malware specimen, and more.

Huge Trove of Nude Images Leaked by AI Image Generator Startup’s Exposed Database

Fri, 05 Dec 2025 11:00:00 +0000

An AI image generator startup’s database was left accessible to the open internet, revealing more than 1 million images and videos, including photos of real people who had been “nudified.”

‘Signalgate’ Inspector General Report Wants Just One Change to Avoid a Repeat Debacle

Fri, 05 Dec 2025 00:02:32 +0000

The United States Inspector General report reviewing Secretary of Defense Pete Hegseth’s text messaging mess recommends a single change to keep classified material secure.

Cloudflare Has Blocked 416 Billion AI Bot Requests Since July 1

Thu, 04 Dec 2025 22:04:31 +0000

Cloudflare CEO Matthew Prince claims the internet infrastructure company’s efforts to block AI crawlers are already seeing big results.

FBI Says DC Pipe Bomb Suspect Brian Cole Kept Buying Bomb Parts After January 6

Thu, 04 Dec 2025 19:42:18 +0000

The 30-year-old Virginia resident evaded capture for years after authorities discovered pipe bombs planted near buildings in Washington, DC, the day before the January 6, 2021, Capitol attack.

A New Anonymous Phone Carrier Lets You Sign Up With Nothing but a Zip Code

Thu, 04 Dec 2025 17:00:00 +0000

Privacy stalwart Nicholas Merrill spent a decade fighting an FBI surveillance order. Now he wants to sell you phone service—without knowing almost anything about you.

The Louisiana Department of Wildlife and Fisheries Is Detaining People for ICE

Thu, 04 Dec 2025 11:30:00 +0000

Louisiana’s hunting and wildlife authority is one of more than 1,000 state and local agencies that have partnered with US immigration authorities this year alone.

Russia Wants This Mega Missile to Intimidate the West, but It Keeps Crashing

Wed, 03 Dec 2025 00:00:00 +0000

One of Vladimir Putin’s favorite sabers to rattle seems to have lost its edge.

Your Data Might Determine How Much You Pay for Eggs

Tue, 02 Dec 2025 19:10:21 +0000

A newly enacted New York law requires retailers to say whether your data influences the price of basic goods like a dozen eggs or toilet paper, but not how.

Flock Uses Overseas Gig Workers to Build Its Surveillance AI

Mon, 01 Dec 2025 14:00:00 +0000

An accidental leak revealed that Flock, which has cameras in thousands of US communities, is using workers in the Philippines to review and classify footage.

The WIRED Guide to Digital Opsec for Teens

Sat, 29 Nov 2025 12:00:00 +0000

Practicing good “operations security” is essential to staying safe online. Here's a complete guide for teenagers (and anyone else) who wants to button up their digital lives.

Poems Can Trick AI Into Helping You Make a Nuclear Weapon

Fri, 28 Nov 2025 10:00:00 +0000

It turns out all the guardrails in the world won’t protect a chatbot from meter and rhyme.

3 Best VPN for iPhone (2025), Tested and Reviewed

Thu, 27 Nov 2025 11:30:00 +0000

There are dozens of iPhone VPNs at your disposal, but these are the services that will actually keep your browsing safe.

The Destruction of a Notorious Myanmar Scam Compound Appears to Have Been ‘Performative’

Wed, 26 Nov 2025 16:33:45 +0000

Myanmar’s military has been blowing up parts of the KK Park scam compound. Experts say the actions are likely for show.

ICE Offers Up to $280 Million to Immigrant-Tracking ‘Bounty Hunter’ Firms

Tue, 25 Nov 2025 19:54:15 +0000

Immigration and Customs Enforcement lifted a $180 million cap on a proposed immigrant-tracking program while guaranteeing multimillion-dollar payouts for private surveillance firms.

Amazon Is Using Specialized AI Agents for Deep Bug Hunting

Mon, 24 Nov 2025 14:00:00 +0000

Born out of an internal hackathon, Amazon’s Autonomous Threat Analysis system uses a variety of specialized AI agents to detect weaknesses and propose fixes to the company’s platforms.

US Border Patrol Is Spying on Millions of American Drivers

Sat, 22 Nov 2025 11:30:00 +0000

Plus: The SEC lets SolarWinds off the hook, Microsoft stops a historic DDoS attack, and FBI documents reveal the agency spied on an immigration activist Signal group in New York City.

This Hacker Conference Installed a Literal Antivirus Monitoring System

Fri, 21 Nov 2025 11:00:00 +0000

At New Zealand's Kawaiicon cybersecurity convention, organizers hacked together a way for attendees to track CO2 levels throughout the venue—even before they arrived.

4 People Indicted in Alleged Conspiracy to Smuggle Supercomputers and Nvidia Chips to China

Thu, 20 Nov 2025 22:26:17 +0000

A federal prosecutor alleged that one defendant boasted that his father “had engaged in similar business for the Chinese Communist Party.”

With the Rise of AI, Cisco Sounds an Urgent Alarm About the Risks of Aging Tech

Thu, 20 Nov 2025 10:00:00 +0000

Generative AI is making it even easier for attackers to exploit old and often forgotten network equipment. Replacing it takes investment, but Cisco is making the case that it’s worth it.

BleepingComputer

OpenAI denies rolling out ads on ChatGPT paid plans

Sun, 07 Dec 2025 15:51:08 -0500

ChatGPT is allegedly showing ads to those who pay $20 for the Plus subscription, but OpenAI says this is an app recommendation feature, not an ad. [...]

Portugal updates cybercrime law to exempt security researchers

Sun, 07 Dec 2025 10:09:44 -0500

Portugal has modified its cybercrime law to establish a legal safe harbor for good-faith security research and to make hacking non-punishable under certain strict conditions. [...]

React2Shell flaw exploited to breach 30 orgs, 77k IP addresses vulnerable

Sat, 06 Dec 2025 14:07:33 -0500

Over 77,000 Internet-exposed IP addresses are vulnerable to the critical React2Shell remote code execution flaw (CVE-2025-55182), with researchers now confirming that attackers have already compromised over 30 organizations across multiple sectors. [...]

New wave of VPN login attempts targets Palo Alto GlobalProtect portals

Sat, 06 Dec 2025 10:18:19 -0500

A campaign has been observed targeting Palo Alto GlobalProtect portals with login attempts and launching scanning activity against SonicWall SonicOS API endpoints. [...]

Barts Health NHS discloses data breach after Oracle zero-day hack

Fri, 05 Dec 2025 13:55:26 -0500

Barts Health NHS Trust has announced that Clop ransomware actors have stolen files from a database by exploiting a vulnerability in its Oracle E-business Suite software. [...]

FBI warns of virtual kidnapping scams using altered social media photos

Fri, 05 Dec 2025 11:37:28 -0500

The FBI warns of criminals altering images shared on social media and using them as fake proof of life photos in virtual kidnapping ransom scams. [...]

A Practical Guide to Continuous Attack Surface Visibility

Fri, 05 Dec 2025 10:00:10 -0500

Passive scan data goes stale fast as cloud assets shift daily, leaving teams blind to real exposures. Sprocket Security shows how continuous, automated recon gives accurate, up-to-date attack surface visibility. [...]

EU fines X $140 million over deceptive blue checkmarks

Fri, 05 Dec 2025 09:41:01 -0500

The European Commission has fined X €120 million ($140 million) for violating transparency obligations under the Digital Services Act (DSA). [...]

Cloudflare blames today's outage on React2Shell mitigations

Fri, 05 Dec 2025 08:53:26 -0500

Cloudflare has blamed today's outage on the emergency patching of a critical React remote code execution vulnerability, which is now actively exploited in attacks. [...]

Pharma firm Inotiv discloses data breach after ransomware attack

Fri, 05 Dec 2025 08:05:52 -0500

American pharmaceutical firm Inotiv is notifying thousands of people that they're personal information was stolen in an August 2025 ransomware attack. [...]

Critical React2Shell flaw actively exploited in China-linked attacks

Fri, 05 Dec 2025 06:26:07 -0500

Multiple China-linked threat actors began exploiting the React2Shell vulnerability (CVE-2025-55182) affecting React and Next.js just hours after the max-severity issue was disclosed. [...]

Cloudflare down, websites offline with 500 Internal Server Error

Fri, 05 Dec 2025 04:12:15 -0500

Cloudflare is down, as websites are crashing with a 500 Internal Server Error. Cloudflare is investigating the reports. [...]

ZDNET Latest news

Your AirTag isn't truly travel-ready unless it has this accessory - here's why I vouch for it

Mon, 08 Dec 2025 03:00:41 GMT

Elevation's Tag Vault keychain and security cable will protect your AirTag from being easily detached from various things.

I made my AirTag last a decade on one battery - here's the uncomfortable truth

Mon, 08 Dec 2025 02:01:00 GMT

I have over a dozen AirTags in use, and my biggest problem is having to change the batteries every year or so. Here's the quick fix.

Finally, a reliable multitool for under $30 and doesn't feel like junk

Mon, 08 Dec 2025 01:55:00 GMT

I typically go for higher-end multitools, but the NexTool E1 stood out for its durable design and surprisingly accessible price.

I checked my GFCI breaker with a $220 thermal camera - and it proved me wrong (in the best way)

Mon, 08 Dec 2025 01:51:00 GMT

I used to dismiss thermal cameras as a gimmick - now I rely on one daily as an essential tool in my fix-it kit.

I invested in Samsung's $1,800 XR headset to replace my dual monitors - and it's paying off big time

Mon, 08 Dec 2025 01:47:00 GMT

With the right setup, Samsung's Galaxy XR headset becomes a true productivity machine.

I discovered my TV's USB port has 5 hidden benefits (and wish I knew sooner)

Mon, 08 Dec 2025 01:44:00 GMT

It turns out, your TV's old but reliable USB port can do more than just broadcast local content.

6 hidden Android features that are seriously useful (and how they made my life easier)

Mon, 08 Dec 2025 01:39:00 GMT

You won't use these hidden Android options every day - but when you do, you'll be thankful they exist.

This one Gmail trick gave me another 15GB of space for free (and saved my inbox)

Mon, 08 Dec 2025 01:32:00 GMT

Whichever Google account you use, this quick trick lets you back up every message and photo for free.

My 30-second routine to keep my Roku TV consistently running like new

Mon, 08 Dec 2025 01:27:00 GMT

Too much cached data can make your Roku system lag and stutter. Here's how to refresh it.

OnePlus 15 is now available for preorder with enticing $180 freebie (and virtually any trade-in)

Mon, 08 Dec 2025 01:25:00 GMT

The flagship Android is finally being sold in the US, after being put on pause by the FCC.

I stopped using the Samsung S25 Ultra after battery-testing this surprise Android phone

Mon, 08 Dec 2025 01:21:00 GMT

With the OnePlus 15, Samsung Galaxy S25 Ultra, and Google Pixel 10 Pro XL in my pockets, here's how one stood out from the others.

This portable battery station can power your home for two weeks - but here's its real best feature

Sun, 07 Dec 2025 11:00:32 GMT

The Jackery Explorer 2000 Plus is a high-capacity, solar-ready power station built to keep your home running. Here's how it fared in mine.

My favorite AirTag wallet alternative is lightweight, super thin, and surprisingly cheap

Sun, 07 Dec 2025 02:00:42 GMT

The KeySmart SmartCard left a strong impression after just a few weeks of using it.

Your smart home is at risk - 6 ways to protect your devices from attack

Sat, 06 Dec 2025 12:00:51 GMT

The fewer entry points you leave open, the more secure your smart home will be.

How chatbots can change your mind - a new study reveals what makes AI so persuasive

Sat, 06 Dec 2025 11:01:34 GMT

The more persuasive a model is trained to be, the higher the likelihood that it'll hallucinate, researchers find.

How to shop with AI: 6 ways I find deals, price track, and let agents buy for me

Sat, 06 Dec 2025 10:00:33 GMT

Forget the old way of shopping. In 2025, AI can help you find the right product for the best price in minutes. Here's how.

I tried a smart ring that captured my thoughts and replicated my voice - it was trippier than expected

Fri, 05 Dec 2025 20:56:00 GMT

Stream Ring is an AI-powered note-taker and thought organizer that users can speak into, regardless of the environment.

This Windows mini PC made me question why I still use a full-size desktop in 2025

Fri, 05 Dec 2025 20:51:00 GMT

Acer's Veriton NUC AI is a compact Windows PC with a wide selection of ports.

These premium OnePlus earbuds are a great buy at full price - and now they're nearly 40% off

Fri, 05 Dec 2025 18:37:43 GMT

The OnePlus Buds Pro 3 introduce several improvements, including better audio output and a longer-lasting battery.

A month with Fitbit Premium on my Pixel Watch changed how I see AI health coaching

Fri, 05 Dec 2025 18:28:00 GMT

Gemini's smarts elevate the service, making the subscription surprisingly worthwhile to keep.

Dailymotion - search results: cybersecurite

Olivier Delacroix 24-11-2025 (Extrait Centho)

Sun, 07 Dec 2025 10:42:44 +0100

Extrait du live Twitch d'Olivier Delacroix, avec Centho. Pendant ce direct, ils ont décortiqué les arnaques les plus sournoises : bancaires, sentimentales, phishing, crypto… et partagé des témoignages poignants de victimes.

Que faire quand on est victime ? Comment reconnaître un faux conseiller ? Pourquoi même les plus prudents peuvent se faire piéger ? Parlons-en.

🎥 [Twitch d'Olivier Delacroix]
https://www.twitch.tv/olivierdelacroix

🗓️ Pour témoigner dans l'émission ? Contactez : libreantenneod@gmail.com

🎥 [Twitch de Centho]
https://www.twitch.tv/centholebest

Retrouvez Centho en live :
🗓️ Lundi / Mardi / Jeudi : 15h30
🗓️ Mercredi / Vendredi : 10h30

🛡️ Association Arnaque-moi si tu peux :
https://asso-arnaquemoisitupeux.net

#centho #arnaques #live #twitch #cybersécurité #phishing #arnaquebanquaire #libreantenne #olivierdelacroix #replaytwitch #cyberfraude

💥 Découverte des vulnérabilités IA !

Sat, 06 Dec 2025 22:47:46 +0100

Audit en direct de l’appli d’un stagiaire 👀 Comment une IA peut mettre en danger la sécurité des entreprises ⚠️ #CyberSécurité #IA #Audit #HackEthique #Vulnérabilités

Corporate Talks : le CAM sensibilise entreprises et institutions aux risques numériques

Sat, 06 Dec 2025 11:00:27 +0100

Le Groupe Crédit Agricole du Maroc (CAM), en partenariat avec Mastercard, a organisé à Casablanca la première édition du “Corporate Talks – CyberAwareness”, un rendez-vous dédié aux défis croissants de la cybersécurité. Devant plus de 150 décideurs, le Président du Directoire, Mohamed Fikrat, a rappelé l’importance d’une vigilance accrue dans un contexte où les cyberattaques ont presque doublé depuis la pandémie, ciblant particulièrement le secteur financier.
Le CAM affirme son engagement à protéger ses clients grâce à des dispositifs robustes, une sensibilisation continue et une coopération renforcée avec le GPBM et les institutions nationales. Les experts du CAM et de Mastercard ont présenté un état des lieux des menaces émergentes, soulignant l’importance d’un écosystème numérique sécurisé pour accompagner la transformation digitale.

SMART TECH - Semaine du numérique : une opération séduction

Fri, 05 Dec 2025 12:46:06 +0100

Rémi Ferrand, délégué général de l'association Talents du Numérique, présente la Semaine du numérique et des sciences informatiques. Cet événement national vise à sensibiliser les jeunes aux métiers et formations du secteur à travers ateliers, visites et témoignages, avec un accent particulier sur la cybersécurité, la sobriété numérique et la mixité.

Comment les hackers débloquent un accès admin… avec un simple cookie ❗🍪 (À savoir en 2025)

Fri, 05 Dec 2025 11:58:42 +0100

Manipuler un cookie pour devenir admin ? 😳
Oui… mais uniquement en cybersécurité éthique ! 🔐
Je te montre comment certaines failles web permettent d’escalader les privilèges à cause d’un mauvais contrôle des sessions.
👉 Objectif : apprendre à sécuriser, pas à pirater.
#cybersecurite #pentest #ctf #websecurity #hackingethique #cookies #admin #devweb #bugbounty

Rien à cacher ? Faites le test… | LE CRAYON

Fri, 05 Dec 2025 08:00:12 +0100

On a reçu Clément Domingo, plus connu sous le pseudo de SaxX, expert en cybersécurité.
Se définissant comme un « gentil hacker », il a co-fondé l’ONG Hackers Without Borders.

SMART JOB - La composition des conseils d’administration

Thu, 04 Dec 2025 09:24:06 +0100

Les conseils d’administration sont-ils suffisamment diversifiés ? La neuvième édition du Baromètre annuel de la Gouvernance responsable du SBF 120 pointe quatre enjeux majeurs : la mixité, mais aussi la sensibilisation aux questions de cybersécurité, d’intelligence artificielle et aux engagements climatiques.

J’ai trouvé un chemin ADMIN caché… 😳🔐

Wed, 03 Dec 2025 21:20:17 +0100

Des chemins administratifs secrets encore accessibles sur un site web ? Oui, ça existe… et ça ouvre des portes dangereuses 👀💥
Toujours vérifier ce que le backend cache !
#cybersecurite #hacking #bugbounty #infosec #pentest #websecurity #ctf #admin #foryou #pourtoi

Ils ont SUBVERTI un modèle d’IA… Opticère est vulnérable ! 👀🤖

Wed, 03 Dec 2025 21:19:46 +0100

Dans le défi optiCR, détourner un modèle d’IA devient un jeu d’enfant… mais les conséquences peuvent être énormes 😈📉
Bienvenue dans l'art de subvertir un modèle et contourner ses protections !
#cybersecurite #IA #hacking #machinelearning #bugbounty #infosec #pentest #aiattack #foryou #pourtoi

Guillaume de Lavallade (Hub One) : Le WiFi dans les gares du Grand Paris, où en est-on ? - 03/12

Wed, 03 Dec 2025 21:19:29 +0100

Guillaume de Lavallade, directeur général de Hub One, était l'invité de François Sorel dans Tech & Co, la quotidienne, ce mercredi 3 décembre. Il s'est penché sur Hub One, opérateur de télécommunications et de cybersécurité pour les entreprises, ainsi que l'équipement du métro parisien en WiFi sur BFM Business. Retrouvez l'émission du lundi au jeudi et réécoutez-la en podcast.

Ils ont oublié une clé SECRÈTE dans le code… 😱🔑

Wed, 03 Dec 2025 21:17:56 +0100

Oui, ça arrive encore : une clé secrète exposée en clair dans le code source… Une faille qui peut coûter très cher 💀🔓
Toujours vérifier, toujours scanner !
#cybersecurite #hacking #bugbounty #infosec #dev #programming #securite #pentest #foryou #pourtoi

Les applis IA sont-elles vraiment sécurisées ? 😳🛡️

Wed, 03 Dec 2025 21:17:31 +0100

Les apps pilotées par l’IA explosent… mais leurs failles aussi 😬🔥
Prompt injection, vols de données, hallucinations exploitables : un vrai défi pour la cybersécurité !
#cybersecurite #IA #pentest #bugbounty #hacking #infosec #ctf #cyber #foryou #pourtoi

cybersécurité paspébiac

Tue, 02 Dec 2025 21:11:28 +0100

Think & Do Tank - Fiona Castelli : « Oser et travailler — deux clés essentielles pour réussir...

Tue, 02 Dec 2025 17:02:41 +0100

Associée chez Deloitte et première femme à ce poste dans l’équipe cybersécurité du cabinet, Fiona Castelli revient sur son parcours, les initiatives menées pour fidéliser les talents féminins et ses conseils à celles qui veulent se lancer dans ce domaine encore très masculin.

🔗 Fiona Castelli : « Oser et travailler — deux clés essentielles pour réussir dans la cybersécurité » : https://www.marieclaire.fr/fiona-castelli-oser-et-travailler-deux-cles-essentielles-pour-reussir-dans-la-cybersecurite,1504581.asp

Cybersécurité : l'Europe se prive-t-elle de ses propres forces ?

Tue, 02 Dec 2025 15:23:09 +0100

Valeur ajoutée : ils apprécient Wallix Group - 01/12

Tue, 02 Dec 2025 00:56:13 +0100

Ce lundi 1er décembre, Jean-François Delcaire, analyste financier et gérant de portefeuilles chez HMG Finance, s'est penché sur le titre Wallix, dans l'émission BFM Bourse présentée par Guillaume Sommerer. BFM Bourse est à voir ou écouter du lundi au vendredi sur BFM Business.

Le Pitch : Vaultys protège des attaques IA et quantiques - 01/12

Mon, 01 Dec 2025 06:46:33 +0100

François-Xavier Thoorens, cofondateur et directeur général de Vaultys, était l'invité d'Erwan Morice dans Le Pitch de l'émission Good Morning Business, ce lundi 1er décembre. Ils ont discuté de l'ambition de son entreprise de révolutionner la cybersécurité grâce à l'identité centralisée, ainsi que des différents services proposés, sur BFM Business. Retrouvez l'émission du lundi au vendredi et réécoutez la en podcast.

Mot de passe hyper sécurisé 🔒🔒

Fri, 28 Nov 2025 16:21:57 +0100

A propos de mon mot de passe hyper sécurisé et hyper renforcé.
La vie est une grande comédie et nous en sommes tous les acteurs.