Attackers exploited weak routing-security configurations at hosting provider Hetzner Online, combined with lapses in TLS certificate issuance, to hijack IP addresses belonging to Softaculous. Because Softaculous used those addresses to distribute software updates, the attackers were able to serve malicious update packages disguised as legitimate Virtualizor updates to customer servers.
Abbott has received FDA authorization for the Libre Duo, its first continuous glucose monitor that tracks both blood glucose and ketone levels in a single wearable sensor. The device requires a prescription and lasts 10 days, mirroring the design of Abbott's existing Libre CGM lineup but adding ketone detection aimed at catching dangerous spikes before they turn into ketoacidosis.
Tesla plans to formally introduce its steering-wheel-free Cybercab at an Austin event, adding 51 of the vehicles to its Texas ride-hail fleet alongside 263 Model Ys. The vehicle debuted as a prototype in 2024, and Tesla's driverless pilot has since expanded from Austin to parts of Texas and Florida, with permits pending in Arizona and Nevada.
Cybercriminals are selling digital scans of over 153 million U.S. and Canadian driver's licenses, along with medical and residence cards, through a new dark web service called Nexus. The FBI's New Orleans office has opened an inquiry after security researcher Krebs on Security verified the data's authenticity, including his own license. The breach reportedly stems from a Louisiana-based identity verification company whose clients include Hertz, Target, FedEx, and Caesars Entertainment.
Russia's Bureau 1440 has launched 32 Rassvet satellites in two batches this year, but none have reached their intended 500-mile orbit. Tracking data shows most satellites topped out near 300 miles, several stopped maneuvering entirely, and at least three have already reentered or appear headed for reentry.
Multiple Samsung account holders report on Reddit and Samsung's own community forum that their accounts were suddenly deactivated, with Samsung citing vague security reasons. Some users regained access after contacting Samsung's phone or chat support, while others remain locked out. One theory ties the suspensions to email aliases using '+' or '.' characters, but Samsung has not confirmed a cause.
The FTC and attorneys general from 22 states filed suit against Amazon, alleging the company secretly altered its ad-auction pricing after bids closed, extracting over $20 billion in extra charges from roughly 1.2 million advertisers since 2018. The complaint centers on a 'soft reserve' mechanism that reportedly raised final prices on Sponsored Products, Sponsored Brands, and Sponsored Display placements beyond the standard second-price model, with heavier markups during peak shopping periods like the holidays. Amazon has rejected the allegations, saying the government misunderstands how advertisers set bidding strategy.
A drug-focused blog post examines the complex pharmacology of dextromethorphan (DXM), the over-the-counter cough suppressant known for dissociative effects at high doses, and proposes dextroproporphan as an analogue that could offer similar effects with different properties. The piece details how DXM is metabolized by the liver enzyme CYP2D6 into dextrorphan (DXO), a potent NMDA receptor antagonist, while unmetabolized DXM itself acts on serotonin and sigma-1 receptors, shaping the drug's unique psychoactive profile.
A criminal hacking group has published personal data belonging to nearly 8.7 million customers of Manchester, London Stansted and East Midlands airports after breaching Manchester Airports Group's systems. The attackers had demanded a ransom, which MAG did not pay, and have now released roughly half a terabyte of stolen information—including contact details, vehicle registrations and postcodes—free of charge to other criminals via their own website.
YouTube has rolled out a companion feature that syncs its mobile app with whatever video is playing on a TV, as long as both devices are signed into the same account. Users can comment, subscribe, search, or browse Shorts on their phone without interrupting the video on screen, and can send videos to the TV directly. The two devices don't even need to share the same Wi-Fi network.
A developer argues against the trend of adopting dedicated feature flag management software, contending that simple hardcoded conditionals are sufficient for most use cases. The piece frames flag platforms as marketing-driven complexity that adds separate infrastructure, monitoring needs, and non-deterministic behavior to codebases without proportional benefit. It concludes that any added system complexity, including feature flag tooling, deserves scrutiny before adoption.
Filmmaker Dave Boyle, fresh off his horror breakout 'Never After Dark' set in Japan, has signed on to helm a new adaptation of Kiyoshi Kurosawa's 2001 supernatural thriller 'Pulse.' The original film centers on ghostly figures spreading through the internet, and Boyle's version will offer a fresh interpretation of that unsettling premise.