News feed
Sphere
Breaches, zero-days and who patched what.
17 items · Page 1 of 2
Brief · Security
Ledger confirmed that some devices sold through a Southeast Asian reseller were fitted with a hardware implant. The implant drained users' cryptocurrency wallets.
Brief · Security
Anthropic says internal models used in high-risk and cybersecurity tests no longer have internet access. The move follows incidents involving US federal, state and local government websites.
Brief · Security
Attackers remotely defrosted fridges at several French supermarket chains overnight. Reports name Danfoss refrigeration controllers as the target. Hundreds of stores were hit, and food worth millions of euros was spoiled.
Brief · Security
Yandex says drone attacks damaged three of its data centers. Two were shut down and one partly disabled, leaving users without access to cloud files. Reports also link the outage to a drop in bot traffic.
Analysis · Security
Key exchange got the headlines. Now Chrome and Windows must move certificates to ML-DSA, and every signature is a kilobyte-plus payload. Here is why the trust chain is the hard part.
Analysis · Security
Medical records and genomes must stay secret for decades, but the RSA and ECC keys guarding them won't last. Why healthcare is the sector most exposed to harvest-now, decrypt-later attacks.
Analysis · Security
Signal and Apple's iMessage already swap post-quantum keys in your chats. Here is how PQXDH, SPQR and PQ3 handle the problem asynchronous messaging creates, and what they still leak.
Analysis · Security
Your browser may already use quantum-resistant key exchange. Here is how hybrid X25519 and ML-KEM rolled out across Chrome, Cloudflare, and OpenSSH, and what broke along the way.
Brief · Security
Attackers went through legacy Cerner systems. Texas filings list nearly 3 million residents.
Brief · Security
$232,500 paid out, including three more compromises of the Samsung Galaxy S26.
Analysis · Security
FHE allows AI to process your data without ever decrypting it. Here is why new custom silicon is finally turning this mathematical pipe dream into a commercial reality.
Analysis · Security
We gave AI the keys to our browsers and email clients. Now, self-replicating prompt injection worms are hijacking autonomous agents without a single human click.