Security

An AWS outage left smart homes and even smart beds offline, showing just how dependent everyday devices have become on remote servers. With Amazon confirming the root cause in its US-East-1 region, engineers are calling for smarter local backups to prevent future chaos.

Lamtto has introduced its latest DC22 dual-camera dash cam with 4G LTE connectivity for real-time, remote vehicle monitoring and GPS tracking. The interior is lit with four IR LEDs, and all footage can be stored in the cloud for review after accidents.

The October 2025 update is now live for select European models, with more regions, including India, set to follow soon.

Mike Ybarra envisions how new Xbox consoles built on Windows can attract buyers. Devices like the ROG Xbox Ally handhelds must integrate the dominant Steam. The former Blizzard President argues that without its user-friendly features, gamers are more likely to embrace piracy.

China-based gangs reportedly stole over $1 billion from Americans using advanced smishing scams that exploit SIM farms and mobile wallets. Here is how the cross-border scheme operates and what you can do to protect yourself.

Microsoft has come under scrutiny in Austria after regulators ruled it ‘illegally’ tracked student data through its 365 Education platform. The decision raises fresh questions about data transparency and Big Tech’s compliance with Europe’s GDPR standards.

Sony is again facing criticism for failing to secure PlayStation Network accounts. Another popular trophy hunter can no longer log in to his PSN account after a successful hack. Some gamers believe poorly trained customer support agents leak or sell protected information.

Hackers claim to have stolen 1.5 TB of Discord-related data, including a mammoth 2,185,151 images of government-issued IDs and selfies submitted for age verification after compromising third‑party customer service provider Zendesk, and are now attempting to extort the platform.

Hacking group 'Crimson Collective' now claims to have breached Nintendo, posting internal file lists online. The group also hit Red Hat very recently. Nintendo hasn't acknowledged the attack as of writing.

Redtiger has introduced its latest F17 Plus dash cam to the global market. The four-channel dash cam is equipped with Sony sensors (front, rear, and cabin), IR night vision, an IPS touchscreen display, 2.7k video recording, and app-based controls. On top of that, it has GPS tracking and voice control support.

Discord has revealed that 70,000 of its users may have had their government IDs stolen in its recent security breach. The company is in the process of emailing impacted account holders.

Xbox console users are now witnessing the ramifications of the UK Online Safety Act. Gamers participating in the Xbox Insider program may notice prompts to verify their ages. Despite privacy concerns, the checks are mandatory to retain access to multiplayer features.

SwitchBot has unveiled a new personal security device, the Safety Alarm. Available in black, aqua, and white colorways, the Safety Alarm is powered by replaceable button-cell batteries that offer up to 1 year of battery life. On top of that, it has an IP65 ingress protection, a silent SOS mode, a lost mode, a built-in LED light, and Apple Find My support.

Discord has confirmed a data breach through one of its third-party customer service vendors, exposing user names, emails, and limited billing info. The company says affected users will be contacted directly by the service.

A critical Unity vulnerability (CVE-2025-59489), discovered June 4, 2025, by researcher RyotaK, enables arbitrary code execution in titles running older versions of the game engine. Unity has since disclosed patches, including a binary patcher on October 2, and urged developers to recompile and republish their titles immediately, even as there is no evidence of exploitation just yet.

Asahi Group Holdings confirmed a ransomware attack has disrupted its domestic operations, forcing partial manual order processing and shipments. Investigations suggest a potential unauthorized data transfer, though details remain under review.

At this year’s DEFCON 33 conference, digital intelligence veteran Grey Fox showcased the intel gathering potential of the immensely popular hacking tool, the Flipper Zero. In his training exercise, using only a Flipper Zero, he guides users through maximizing the device's capabilities to locate and identify potential bad actors in a real-world situation.

Walmart, in collaboration with Google, has launched the Onn Video Doorbell Wired, a budget-friendly smart home device priced under $50. It delivers HDR video, two-way audio, night vision, and three hours of free event history, while Google’s subscription plans expand storage and add AI-powered features.

Microsoft will officially end support for Windows 10 on October 14, 2025. With the UK excluded from Microsoft’s free Extended Security Updates (ESU), new research from Panasonic Toughbook highlights widespread concerns among UK businesses about ransomware, compliance, and rising security costs. Industry experts warn that delaying migration to Windows 11 could leave organisations dangerously exposed.

Google Chrome is expanding its built-in password manager with a new AI feature that allows users to automatically change unsafe passwords. This feature will soon be available to all users and is expected to significantly improve password security.

Computer viruses have come a long way from floppy-disk pranks to today’s AI-assisted cybercrime. The 2020s have turned malware into a professional industry, complete with ransomware cartels, AI-driven phishing and even research projects masquerading as real-world threats. As of September 2025, the fight is no longer about who writes the nastiest script; it’s about who trains the smartest algorithm, and the results are both fascinating and frightening.

Volvo confirms an employee data leak occurred as a result of the Miljödata ransomware attack. Affected by the breach is the car manufacturer's staff in the United States and one more country; Lund University employees may also be at risk.

Windows 10 support will end on October 14, 2025, leaving millions of private users without free security updates. However, this period can be extended by one year with Extended Security Updates (ESU). Following confusing information from Microsoft, the final rules for Europe are now available.

A recent study by Incogni evaluated nine leading AI platforms in terms of their privacy practices. The ranking shows that Le Chat from Mistral AI, ChatGPT from OpenAI, and Grok from xAI are the most trustworthy, while Meta AI, Gemini and Copilot from Microsoft are less trustworthy.

Offensive Security's Debian-based distro is back, dropping ARMel support while offering a refreshed Nexmon wireless firmware package. Kali Linux 2025.3 also comes with 10 new tools, updated HashiCorp Packer and Vagrant VM apps, as well as multiple minor tweaks and fixes.

Boyd Gaming has confirmed a recent cyberattack in a regulatory filing, noting that employee information was affected. The company said its casino and hospitality operations remain unaffected as investigations continue.

Apple has confirmed that Digital I.D., a feature in iOS 26 that allows users to store passports, will roll out this year for United States passports only. This should make traveling (at least for citizens of the U.S.) a bit more seamless for iPhone users.

Xiaomi has introduced a new security camera for the global market, the Smart Camera C701. It features an 8 MP sensor that's capable of capturing 4K UHD videos, full color night vision, and on-demand lens shielding for enhanced privacy.

Cyberattacks through third-party suppliers doubled last year, hitting retailers and healthcare. Marks & Spencer and NHS England are among those affected as regulators push tighter rules.

BlockBlasters, a verified title on Steam, was removed after it stole players' cryptocurrency to the tune of an estimated $150,000 over a period of one month. The game, released in July 2025, reportedly stole from 261 user accounts, including that of a Twitch streamer who was collecting donations for his cancer treatment.

Google is rolling out an update for its Discover feed that the company claims will make it easier to find and follow creators and publishers you are interested in. It will go beyond just showing articles from sources to more formats that let you easily explore the content they post.

ETH Zurich and Google researchers reverse-engineered the Rowhammer DDR5 mitigations to create the Phoenix vulnerability that can exploit the higher read/write speeds to access memory cell rows and bit flip its way to system root level privilege.

Campus Guardian Angel seeks to deploy high-speed drones designed to confront school shooters in 15 seconds, offering real-time intel and safer responses for law enforcement, and providing a first line of defense before their arrival.

NASA’s GUARDIAN has passed a real-life test that proves it is one of the fastest tsunami monitoring tools available. It successfully detected a tsunami 30 to 40 minutes before the waves reached the coast.

A new form of ransomware, dubbed HybridPetya, is able to bypass UEFI Secure Boot and can install malware on a system's EFI boot partition. This means that HybridPetya can hold a computer hard drive ransom by preventing it from booting into Windows. It appears the malware is currently in the research phase and has not yet launched publicly.

Sony's PlayStation is launching a new iOS and Android app that will help parents monitor their children's playtime on the platform. It also allows them to set limits and track what their child is playing on the console.

A federal judge has put a landmark $1.5 billion judgment against the AI company Anthropic on hold after raising several concerns. The judgment followed several authors suing Anthropic for downloading pirated copies of published books to train their AI models.

The Baseus PrimeTrip VD1 Pro is a new 2-channel dash cam featuring a 4K front camera and a 1080p rear camera. It integrates a solar panel and a built-in battery to provide up to 14 days of parking monitoring without the need for hardwiring.

Signal, the open-source messaging service, is introducing new free and paid secure cloud backup plans for chats and media. The free plan gives you 100MB of storage for messages and up to 45 days of media backups.

ChatGPT privacy is a key concern nowadays, as users often share personal information with the AI. OpenAI confirms that chats are automatically monitored and can be reviewed in certain cases. In cases of acute danger to third parties, data may even be shared with law enforcement authorities.

Anthropic has agreed to a settlement of $1.5 billion to compensate authors who accused it of using copyrighted works to train its AI models. The authors will get $3,000 per book, with a payout scheduled for approximately 500,000 works. The settlement is a significant milestone in the copyright battle against the AI industry.

The European Union has slapped Google with a €2.95 billion ($3.5 billion) fine for abusing its dominance in ad-tech services and favoring its own services over other competitors. The EU has also ordered Google to stop its anti-competitive practices in 60 days.

A bankruptcy lawyer from Indianapolis, U.S., is suing Meta after having his account suspended five times in the last eight years. The problem? His name is Mark Zuckerberg.

Less than two months after demonstrating a “Face Swap” vulnerability, researchers have revealed an even bigger Windows vulnerability. German security firm ERNW has revealed a more advanced attack against Windows Hello that allows attackers to inject their own face templates into victims' accounts.

France's data protection authority, CNIL, has fined Google €325 million for violating cookie regulations according to the GDPR, and displaying ads in Gmail without user consent. The fine is a result of several investigations by the authority between 2022 and 2023.

A federal jury in San Francisco, US, has determined that Google has to pay $425 million in damages after being found guilty of illegally harvesting user data during a long-running class action lawsuit that started in 2020. The plaintiffs sought $31 billion in damages.

Threat actors have found a way to bypass link restrictions on promoted posts on X, using the platform's Grok AI assistant. The exploit essentially tricks the AI assistant into promoting malicious links on the platform by hiding them in a From field beneath the post.

China’s new law requiring AI-generated content to carry visible labels and digital watermarks took effect this week. Platforms like WeChat, Douyin, Weibo, and Xiaohongshu activated compliance tools, marking a major step in Beijing’s 2025 “Qinglang” campaign against misinformation and online manipulation.

Sony has announced that third parties have found a vulnerability in FeliCa contactless IC cards shipped prior to 2017, including the popular Suica cards used in Tokyo for travel on the JR East train network. This breach allows hackers to read and modify card data.