#cybersecurity

Security researchers discover 151 malicious packages using invisible Unicode characters to hide payloads from code review tools and terminal displays.

A peer-to-peer botnet dubbed KadNap has infected 14,000 routers, mostly Asus devices in the US, using a Kademlia-based design that resists shutdowns.

A Department of Government Efficiency staffer reportedly copied sensitive Social Security records to a personal USB drive, raising alarm over data security practices.

Google traced an iPhone-hacking toolkit used by Russian espionage to a U.S. defense contractor, raising proliferation concerns.

Anthropic's Claude AI has uncovered more than 100 previously unknown security vulnerabilities in Firefox's codebase, demonstrating AI's growing capability as an automated security auditing tool.

A security researcher who stumbled into controlling 7,000 DJI Romo robot vacuums via a PlayStation gamepad has been awarded a $30,000 bug bounty. The discovery exposed a critical vulnerability allowing remote camera access.

A wave of sophisticated vehicle thefts is targeting luxury cars worth hundreds of thousands of dollars. Investigators are uncovering how high-tech tools and organized networks are enabling criminals to steal and export exotic vehicles with alarming efficiency.

Microsoft warns that key Secure Boot certificates expire in June 2026, potentially leaving millions of PCs unable to boot. Here is what you need to know.