Fake restaurant ordering sites copy real menus to steal cards and bank codes
InfoHawk found 820 look-alike sites for 35 US restaurant chains that proxy the real menu live, then swap in a fake checkout to…
Topic
Security
<p>Vulnerability research, defensive security, privacy and the changing mechanics of software risk.</p>
Claude Code ‘don’t ask again’ can leave secrets on public GitHub
Apiiro counted 2,539 secrets in 1,994 public GitHub repos after Claude Code saved approved shell commands, credentials included, in .claude/settings.local.json.
Alpine Linux ships OpenSSH fix for musl password login bypass
OpenSSH on Alpine and other musl systems without PAM can accept logins to * password accounts. Alpine and OpenSSH 10.6p2 shipped fixes on…
DeepMind’s AI agents cut computing work in legacy RSA test
DeepMind reports AI-assisted gains against old RSA signatures and theoretical factoring advances. The papers say modern 2048-bit RSA is not threatened.
OpenAI releases GPT-6 Cyber to vetted security teams
GPT-6 Cyber reaches vetted security teams. We examine its Linux and Firefox findings, API pricing, access rules and what its safety tests do—and…
Firecracker escape research is a reminder that isolation is a system property
PWN Research chained host-memory access with live Firecracker thread takeover to show guest-to-host execution. The defensive lesson extends beyond one microVM component.
RIP Cybertruck
The decision to halt production of Tesla’s polarising polygonal pickup marks the end of an error.
Tesla to wind down Cybertruck production
Musk said in an X post the production wind-down would enable the automaker to accommodate increased output of its newly launched Cybercab model,
Cuban: Facebook knowingly runs AI deepfake scam ads; docs say $16B fraud revenue
Cuban says he has been seeing his own face in scammy AI-generated ads for nonexistent diabetes cures.
Claude Code sends your email address to websites
Bug Description GitHub receive dozens of scam emails per day because claude code divulged GitHub’s email to arbitrary 3rd parties in the User-Agent…
OpenAI’s kernel campaign shows the scale—and cost—of autonomous vulnerability research
OpenAI reports 948 validated Linux local privilege-escalation exploits in one research run, with candidate patches and human review. The results matter, but so…
Self-Employed? Solopreneur? NIST Has a Cybersecurity Guide Just for You
The guide is designed to help solopreneurs prioritise and implement a selection of actions from the NIST Cybersecurity Framework that would best help…