The holiday season is here, but software firms are still busy issuing fixes for major security flaws. Microsoft, Google, and enterprise software firm Atlassian have released patches for vulnerabilities already being used in attacks. Cisco also patched a bug deemed so serious, it was given a near-maximum CVSS score of …
Read More »OpenAI’s Custom Chatbots Are Leaking Their Secrets
You don’t need to know how to code to create your own AI chatbot. Since the start of November—shortly before the chaos at the company unfolded—OpenAI has let anyone build and publish their own custom versions of ChatGPT, known as “GPTs”. Thousands have been created: A “nomad” GPT gives advice …
Read More »Okta Breach Impacted All Customer Support Users—Not 1 Percent
In late October, the identity management platform Okta began notifying its users of a breach of its customer support system. The company said at the time that about 1 percent of its 18,400 customers were impacted by the incident. But in a massive expansion of this estimate early this morning, …
Read More »Inside the Race to Secure Formula 1’s Las Vegas Grand Prix
Every Formula 1 race weekend is essentially a pop-up event in a different city around the world, bringing 10 teams, their cars, and their entire mobile infrastructure to Australia, Singapore, Monaco, and beyond. This weekend's Las Vegas Grand Prix is especially unscripted, though, because the event is Formula 1's debut …
Read More »Cybersecurity Industry Baffled by FBI’s Lack of Action on Ransomware Gang
If you work at a spy agency tasked with surveilling the communications of more than 160 million people, it’s probably a good idea to make sure all the data in your possession stays off the open internet. Just ask Bangladesh’s National Telecommunication Monitoring Center, which security researchers found connected to …
Read More »A Spy Agency Leaked People's Data Online—Then the Data Was Stolen
The list of data is long. Names, professions, blood groups, parents’ names, phone numbers, the length of calls, vehicle registrations, passport details, fingerprint photos. But this isn’t a typical database leak, the kind that happens all the time—these categories of information are all linked to a database held by an …
Read More »Google’s New Titan Security Key Adds Another Piece to the Password-Killing Puzzle
Passwords are a woefully insecure—and frustrating—authentication technology, but after decades of digital use, they’re ubiquitous. Recently, though, the global tech industry has been working to promote a simpler and more secure alternative known as passkeys. Along with its other initiatives to champion the login tech, Google announced today that it …
Read More »WIRED Exclusive | The Top US Cybersecurity Agency Has a New Plan for Weaponized AI
Last month, a 120-page United States executive order laid out the Biden administration's plans to oversee companies that develop artificial intelligence technologies and directives for how the federal government should expand its adoption of AI. At its core, though, the document focused heavily on AI-related security issues—both finding and fixing …
Read More »The Mirai Confessions: Three Young Hackers Who Built a Web-Killing Monster Finally Tell Their Story
Early in the morning on October 21, 2016, Scott Shapiro got out of bed, opened his Dell laptop to read the day’s news, and found that the internet was broken. Not his internet, though at first it struck Shapiro that way as he checked and double-checked his computer’s Wi-Fi connection …
Read More »Sandworm Hackers Caused Another Blackout in Ukraine—During a Missile Strike
The notorious unit of Russia's GRU military intelligence agency known as Sandworm remains the only team of hackers to have ever triggered blackouts with their cyberattacks, turning off the lights for hundreds of thousands of Ukrainian civilians not once, but twice within the past decade. Now it appears that in …
Read More »