1
Hit #1 on Ars Technica Popular for 2 days
Twin brothers wipe 96 gov't databases minutes after being fired
A case study in why credentials are revoked before firings.
Most read: Cybersecurity — Q2 2026
2
Hit #1 on Ars Technica Popular for 2 days
Windows and Linux users: The deadline to update Secure Boot keys is near
What you need to know about the expiration of keys securing your machine's boot sequence.
3
Hit #1 on Ars Technica Popular for 4 days
Fed up with vibe coders, dev sneaks data-nuking prompt injection into their code
Undisclosed addition in jqwik instructed AI coding agents to delete app output.
4
Hit #1 on Ars Technica Popular for 2 days
Russia's military hacks thousands of consumer routers to steal credentials
End-of-life routers in homes and small offices hacked in 120 countries.
5
Hit #1 on Ars Technica Popular for over a day
Open source package with 1 million monthly downloads stole user credentials
If you're one of millions using element-data, it's time to check for compromise.
6
Hit #1 on Ars Technica Popular for 2 days
As the most severe Linux threat in years surfaces, the world scrambles
CopyFail threatens multi-tenant servers, CI/CD work flows, Kubernetes containers, and more.
7
Ubuntu infrastructure has been down for more than a day
The outage has hampered communication concerning a critical vulnerability that gives root.
Reached as high as #2 on Ars TechnicaPopular for 2 days
365
8
Websites have a new way to spy on visitors: analyzing their SSD activity
Telltale SSD activity can be measured in the browser using simple JavaScript.
Hit #1 on Ars TechnicaPopular for 2 days
363
9
Canvas is down as ShinyHunters threatens to leak schools’ data
Instructure’s learning management platform Canvas is down, after recently confirming a data breach and a ransom message from the ShinyHunters hacking group.
Hit #1 on The VergePopular for over a day
331
10
New Rowhammer attacks give complete control of machines running Nvidia GPUs
Both GDDRHammer and GeForge hammer GPU memory in ways that compromise the CPU.
Hit #1 on Ars TechnicaPopular for over a day
330
11
Mozilla: Anthropic's Mythos found 271 zero-day vulnerabilities in Firefox 150
CTO says new AI model is "every bit as capable" as world's best security researchers.
Hit #1 on Ars TechnicaPopular for over a day
295
12
Millions of AI agents imperiled by critical vulnerability in open source package
BadHost" was found in Starlette, a package with 325 million weekly downloads.
Hit #1 on Ars TechnicaPopular for 2 days
279
13
Anthropic’s most dangerous AI model just fell into the wrong hands
Anthropic’s powerful Mythos cybersecurity AI model has been accessed by a “small group of unauthorised users.”
Hit #1 on The VergePopular for over a day
267
14
For the 2nd time in weeks, Microsoft packages laced with credential stealer
73 packages run self-replicating stealer as soon as they're opened by an AI agent.
Hit #1 on Ars TechnicaPopular for over a day
252
15
Mozilla says 271 vulnerabilities found by Mythos have "almost no false positives"
The developer of Firefox says it has "completely bought in" on AI-assisted bug discovery.
Hit #1 on Ars TechnicaPopular for over a day
232
16
My SSN was exposed in a breach at Columbia—a school I have no connection with
Columbia admits last year’s data breach exposed victims beyond its students, staff.
Hit #1 on Ars TechnicaPopular for over a day
206
17
What Is Claude Mythos—And Why Anthropic Won’t Let Anyone Use It
Anthropic Built an AI So Good That It Won’t Let Anyone Use It. Here’s Everything You Need to Know About Claude Mythos.
Reached as high as #3 on ForbesPopular for over a day
173
18
How a USB-connected speaker can infect a PC without ever being touched
Seller of the Sound Blaster Katana V2X doesn't consider the behavior a vulnerability.
Hit #1 on Ars TechnicaPopular for 3 days
172
19
Millions of AI agents imperiled by critical vulnerability in open source package
BadHost" was found in Starlette, a package with 325 million weekly downloads.
Hit #1 on Ars TechnicaPopular for over a day
166
20
Massive breach spills credentials for thousands of sensitive networks
The affected include Oracle, Lenovo, FedEx, a NATO contractor, and Fortinet.
Reached as high as #2 on Ars TechnicaPopular for over a day
155
21
New undersea cable cutter risks Internet’s backbone
China cable-cutter demo coincides with more sabotage of subsea Internet cables.
Hit #1 on Ars TechnicaPopular for 20 hours
138
22
How 100 Romanian hospitals switched to pen and paper to defeat a national cyber-attack
For four days, dozens of Romanian hospitals went offline, as cyber-experts sought to defeat the hackers.
Hit #1 on BBCPopular for over a day
132
23
A hacker ran me over with a robot lawn mower
Forget robovacs — Yarbo’s bladed robots are an even bigger security nightmare.
Reached as high as #2 on The VergePopular for over a day
123
24
OpenClaw gives users yet another reason to be freaked out about security
The viral AI agentic tool let attackers silently gain admin unauthenticated access.
Reached as high as #3 on Ars TechnicaPopular for 2 days
116
25
Recent advances push Big Tech closer to the Q-Day danger zone
Here's which players are winning the race to transition to post-quantum crypto.
Reached as high as #3 on Ars TechnicaPopular for over a day
96
26
Fired hacker twins forget to end Teams recording, capture own crimes
One little mystery—solved.
Reached as high as #2 on Ars TechnicaPopular for over a day
96
27
Read this before you vibe-code another app
Your dream vibe-coded app might be a security nightmare.
Hit #1 on The VergePopular for over a day
81
28
Senate extends surveillance powers until April 30 after chaotic votes in House
Congress has approved a short-term renewal of a controversial surveillance program used by U.S. spy agencies just days before it was set to expire.
Reached as high as #3 on AP NewsPopular for 14 hours
70
29
Frustration grows as Iran’s wartime internet shutdown breaks grim record
Since January, Iran’s near total internet blackout has impacted jobs and businesses.
Reached as high as #4 on Al JazeeraPopular for 14 hours
63
30
Dashlane explains how attackers managed to download encrypted password vaults
By targeting large numbers of users, attackers increased their chances of success.
Hit #1 on Ars TechnicaPopular for 18 hours
61
31
Powell, Bessent discussed Anthropic's Mythos AI cyber threat with major U.S. banks
Anthropic rolled out the new Mythos AI model to a select group of companies over concerns that hackers could exploit its capabilities.
Hit #1 on CNBCWas popular very briefly
48
32
CBP facility codes sure seem to have leaked via online flashcards
Quizlet flashcards seem to include sensitive information about gate security at CBP locations.
Reached as high as #3 on Ars TechnicaPopular for over a day
44
33
World’s oldest tortoise caught in viral crypto death scam
Fake X account posing as his vet sparked global false reports of Jonathan’s death while soliciting crypto donations
Reached as high as #4 on The GuardianWas popular briefly
42
34
Canadian election databases use "canary traps"—and they work
Intentional errors can be useful.
Reached as high as #3 on Ars TechnicaPopular for over a day
42
35
Reddit will require you to log in to use old.reddit.com
Logged-out Old Reddit access is “significant source of abusive scraping."
Reached as high as #3 on Ars TechnicaPopular for 18 hours
41
36
High-severity vulnerability in Linux caused by a single errant character
Use-after-free bug can be exploited to evade sandbox defenses.
Reached as high as #3 on Ars TechnicaPopular for 21 hours
33
37
Report ‘phone hack’ to police or I will do it for you, Labour chair tells Farage
Anna Turley gives Reform leader 24 hours to report Russian hacking claim in ‘public and national interest’
Hit #1 on The GuardianWas popular very briefly
32
38
Cyber attack disrupts swathe of US and Canada universities and schools
A hacking group breached the academic software Canvas, used by thousands of schools and universities across North America.
Reached as high as #4 on BBCWas popular briefly
31
39
Nearly a million passports and photo IDs were left unprotected on the public internet
Cannabis Club Systems, also known as Nefos Solutions, left passports and photo IDs potentially exposed on the public web.
Reached as high as #3 on The VergePopular for 15 hours
31
40
Linux bitten by second severe vulnerability in as many weeks
Production-version patches are coming online and should be installed pronto.
Reached as high as #3 on Ars TechnicaPopular for over a day
30
41
Australian pleads guilty to creating deepfake porn in landmark case
The 19-year-old is the first person to be charged under a new national law.
Reached as high as #3 on BBCWas popular briefly
29
42
The clandestine network smuggling Starlink tech into Iran to beat internet blackout
Sahand tells the BBC World Service he sends satellite internet terminals into Iran to help show "the real picture".
Reached as high as #6 on BBCPopular for 14 hours
28
43
Jamie Dimon says Anthropic's Mythos reveals 'a lot more vulnerabilities' for cyberattacks
The remarks show how a technology welcomed by corporations as a productivity boon can also pose serious threats, like uncovering new ways to hack into systems.
Reached as high as #3 on CNBCWas popular briefly
26
44
Dozens of Red Hat packages backdoored through its official NPM channel
Anyone who has downloaded affected Red Hat packages should investigate immediately.
Reached as high as #3 on Ars TechnicaPopular for 11 hours
21
45
Widely used Daemon Tools disk app backdoored in monthlong supply-chain attack
Daemon Tools users: It's time to check your machines for stealthy infections, stat.
Reached as high as #3 on Ars TechnicaPopular for 12 hours
19
46
Google publishes exploit code threatening millions of Chromium users
Google publishes exploit code before patch, reported 29 months earlier, is fixed.
Reached as high as #4 on Ars TechnicaPopular for 18 hours
17
47
AI job scams are booming – and I was fooled by one. Here is how to avoid them
Fraudsters are using the promise of fake roles to trick job-seekers out of money, personal information or both, and with the help of AI they are more convincing than ever. But there are ways to spot them
Reached as high as #5 on The GuardianWas popular very briefly
13
48
Dad stuck in support nightmare after teen lied about age on Discord
Data dump confirms dad's suspicions that Discord knew teen's age prior to hack.
Reached as high as #3 on Ars TechnicaWas popular very briefly
12
49
AI Just Hacked One Of The World's Most Secure Operating Systems
An AI agent just autonomously exploited a FreeBSD kernel vulnerability in four hours, signaling a fundamental shift in the economics of offensive cyber capability.
Reached as high as #6 on ForbesWas popular briefly
11
50
Russia used Israeli firm’s tool to crack phone months after ties severed, report finds
Case of Andrei Pivovarov raises questions about how much control Cellebrite has over its own software
Reached as high as #5 on The GuardianWas popular briefly
11