Latest Tech News

Stay updated with the latest in technology, AI, cybersecurity, and more

Filtered by: security Clear Filter

GrapheneOS makers take a knife to this ‘Google-free’ phone coming to the US

Paul Jones / Android Authority TL;DR The team behind the GrapheneOS platform has criticized the Fairphone Gen 6 for apparent security issues. The team added that the Fairphone model sold in the US lacks “bare minimum” privacy and security protections. Even the standard Fairphone Gen 6 was criticized for delayed software patches and the lack of a secure element. The Fairphone Gen 6 is one of the best Android phones to get if you want a repairable and sustainable smartphone experience. The dev

Microsoft Offers Free Windows 10 Security Updates for Those Who Don't Want to Upgrade to Windows 11

The Windows 10 era is almost at an end. Microsoft is ending support for Windows 10 and stopping security support in October. Initially, Microsoft was offering a one-year extended security update for $30, but we've got some good news: Microsoft has added a free option, allowing you to stick with Windows 10 for another year. However, in order to access it, you'll need to use cloud backup and connect it with your OneDrive account. The ability to get free updates on Windows 10 is a pretty big deal

Poor Passwords Tattle on AI Hiring Bot Maker Paradox.ai

Security researchers recently revealed that the personal information of millions of people who applied for jobs at McDonald’s was exposed after they guessed the password (“123456”) for the fast food chain’s account at Paradox.ai, a company that makes artificial intelligence based hiring chatbots used by many Fortune 500 firms. Paradox.ai said the security oversight was an isolated incident that did not affect its other customers, but recent security breaches involving its employees in Vietnam te

Confident Security, ‘the Signal for AI,’ comes out of stealth with $4.2M

As consumers, businesses, and governments flock to the promise of cheap, fast, and seemingly magical AI tools, one question keeps getting in the way: How do I keep my data private? Tech giants like OpenAI, Anthropic, xAI, Google, and others are quietly scooping up and retaining user data to improve their models or monitor for safety and security, even in some enterprise contexts where companies assume their information is off limits. For highly regulated industries or companies building on the

I can't go back to grainy night vision after testing this security camera

ZDNET's key takeaways The EufyCam S3 Pro is available separately for $220 or in a two-pack with the HomeBase 3 for $550. This EufyCam is an excellent 4K outdoor security camera that delivers on its night vision promises, features no monthly fees, and has dual motion detection to reduce false alerts. The biggest downsides are that the camera is expensive, especially when you bundle it with HomeBase 3, and its resolution drops to 1080p with HomeKit. $549.99 at Amazon Eufy Security launched a ne

The Future of Social Security Looks Grim. 6 Tips to Help You Save for Retirement Now

Getty Images/Zooey Liao/CNET Social Security payments can help you fund part of your retirement -- but don't bank on it as your only source of income. The Social Security trust fund is expected to dry up by 2034, according to the Social Security Administration. That's one year sooner than initially forecast. While the fund won't vanish completely, it's estimated that you'll only receive 81% of your benefits, at best. Why? The fund has been running out of money for years, but President Donald

Windows KB5064489 emergency update fixes Azure VM launch issues

Microsoft has released an emergency update to fix a bug that prevents Azure virtual machines from launching when the Trusted Launch setting is disabled and Virtualization-Based Security (VBS) is enabled. The bug impacted Windows Server 2025 and Windows 11 24H2 and was introduced during the July Patch Tuesday security updates. "This update addresses an issue that prevented some virtual machines (VMs) from starting when Virtualization-Based Security (VBS) was enabled," explains Microsoft. "It a

Police disrupt “Diskstation” ransomware gang attacking NAS devices

An international law enforcement action dismantled a Romanian ransomware gang known as 'Diskstation,' which encrypted the systems of several companies in the Lombardy region, paralyzing their businesses. The law enforcement operation codenamed 'Operation Elicius' was coordinated by Europol and also involved police forces in France and Romania. Diskstation is a ransomware operation that targets Synology Network-Attached Storage (NAS) devices, which are commonly used by companies for centralized

My favorite indoor security camera has no subscription fees

ZDNET's key takeaways The Eufy Security Indoor Cam S350 is available for purchase at $130. The S350 indoor camera features dual telephoto and wide-angle lenses with 360-degree motion tracking and optional local storage to avoid monthly fees. The only drawback I've found is that I wish the camera had a button to engage privacy mode manually, but you can schedule it as needed on the app. View now at Amazon It's safe to say the Eufy Security Indoor Cam S350 has become indispensable in my home. W

Don't Want to Upgrade to Windows 11? Microsoft Offers Free Windows 10 Security Updates

The era of Windows 10 is almost at an end. In October 2025, Microsoft is ending support for Windows 10 and stopping security support. Initially Microsoft was offering a one-year extended security update for $30, but we've got good news. Microsoft has added a free option, allowing you to stick with Windows 10 for another year. However, in order to access it, users will need to use cloud backup and connect it with their OneDrive account. The ability to get free updates on Windows 10 is a pretty b

Anthropic signs a $200mm deal with the Department of Defense

The U.S. Department of Defense (DOD), through its Chief Digital and Artificial Intelligence Office (CDAO), has awarded Anthropic a two-year prototype other transaction agreement with a $200 million ceiling. As part of the agreement, Anthropic will prototype frontier AI capabilities that advance U.S. national security. "This award opens a new chapter in Anthropic’s commitment to supporting U.S. national security, which is where our earliest federal deployments began more than a year ago,” said T

Two new Android 16 security features protect you better - how to switch them on now

JEFF PACHOUD/Getty Images Although Google's earlier-than-expected release of Android 16 was missing a few important features, the updated OS does deliver improved security that every Android user would be well-advised to enable. I'll explain these two key security features and how to find and enable them. Also: Google quietly confirms ChromeOS-Android merger - here's what it means for you 1. Identity Check This feature was added in 2024, but it didn't receive much attention until the releas

Gigabyte motherboards vulnerable to UEFI malware bypassing Secure Boot

Dozens of Gigabyte motherboard models run on UEFI firmware vulnerable to security issues that allow planting bootkit malware that is invisible to the operating system and can survive reinstalls. The vulnerabilities could allow attackers with local or remote admin permissions to execute arbitrary code in System Management Mode (SMM), an environment isolated from the operating system (OS) and with more privileges on the machine. Mechanisms running code below the OS have low-level hardware access

The North Korean fake IT worker problem is ubiquitous

By now, the North Korean fake IT worker problem is so ubiquitous that if you think you don't have any phony resumes or imposters in your interview queue, you're asleep at the wheel. "Almost every CISO of a Fortune 500 company that I've spoken to — I'll just characterize as dozens that I've spoken to — have admitted that they had a North Korean IT worker problem," said Mandiant Consulting CTO Charles Carmakal during a threat-intel roundtable, admitting that even Mandiant's parent company Google

Jack Dorsey’s New App Just Hit a Very Embarrassing Snag

Serial entrepreneur Jack Dorsey, who cofounded Twitter, Block, and Bluesky, has started yet another new app — and this one's got an embarrassing secret. As TechCrunch reports, Dorsey's new open source messaging app, Bitchat, is supposed to be decentralized, private, and secure. There's only one problem: the Bluetooth-based app, by the venture's admission, is probably lacking in that key regard. "This software has not received external security review and may contain vulnerabilities and does n

CISA warns hackers are actively exploiting critical ‘Citrix Bleed 2’ security flaw

U.S. cybersecurity agency CISA says hackers are actively exploiting a critical-rated security flaw in a widely used Citrix product, and has given other federal government departments just one day to patch their systems. Security researchers have dubbed the bug “Citrix Bleed 2” for its similarity to a 2023 security flaw in Citrix NetScaler, a networking product that large companies and governments rely on for allowing their staff to remotely access apps and other resources on their internal netw

CISA confirms hackers are actively exploiting critical ‘Citrix Bleed 2’ bug

U.S. cybersecurity agency CISA says hackers are actively exploiting a critical-rated security flaw in a widely used Citrix product, and has given other federal government departments just one day to patch their systems. Security researchers have dubbed the bug “Citrix Bleed 2” for its similarity to a 2023 security flaw in Citrix NetScaler, a networking product that large companies and governments rely on for allowing their staff to remotely access apps and other resources on their internal netw

Security Bite: Fake iPhone virus pop-ups have made it on YouTube

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Appl

My favorite indoor security camera has no subscription fees and is 39% off for Prime Day

ZDNET's key takeaways The Eufy Security Indoor Cam S350 is available for purchase at $130. The S350 indoor camera features dual telephoto and wide-angle lenses with 360-degree motion tracking and optional local storage to avoid monthly fees. The only drawback I've found is that I wish the camera had a button to engage privacy mode manually, but you can schedule it as needed on the app. View now at Amazon The Eufy Security Indoor Cam S350 has no subscription fees and all the privacy settings y

AI chatbot’s simple ‘123456’ password risked exposing personal data of millions of McDonald’s job applicants

In Brief Security researchers found that they could access the personal information of 64 million people who had applied for a job at McDonald’s, in large part by logging into the company’s AI job hiring chatbot with the username and password “123456.” Ian Carroll and Sam Curry wrote in a blog post that “during a cursory security review of a few hours,” they found the password issue and another simple security vulnerability in an internal API, which allowed access to job applicants’ past conve

Cybersecurity’s global alarm system is breaking down

Cybersecurity practitioners have since flooded Discord channels and LinkedIn feeds with emergency posts and memes of “NVD” and “CVE” engraved on tombstones. Unpatched vulnerabilities are the second most common way cyberattackers break in, and they have led to fatal hospital outages and critical infrastructure failures. In a social media post, Jen Easterly, a US cybersecurity expert, said: “Losing [CVE] would be like tearing out the card catalog from every library at once—leaving defenders to sor

$8.8 trillion protected: How one CISO went from ‘that’s BS’ to bulletproof in 90 days

Want smarter insights in your inbox? Sign up for our weekly newsletters to get only what matters to enterprise AI, data, and security leaders. Subscribe Now VentureBeat’s exclusive interview with Sam Evans, CISO of Clearwater Analytics, reveals why enterprise browsers are quickly becoming the frontline defense against shadow AI in its many forms. Evans faced a critical challenge in October 2023. Standing before Clearwater Analytics’ board, he had to confront concerns that employees might inadv

The best security cameras for 2025

Engadget has been testing and reviewing consumer tech since 2004. Our stories may include affiliate links; if you buy something through a link, we may earn a commission. Read more about how we evaluate products . If you're looking to keep an eye on your home, whether you're away for the weekend or just tucked into bed, a good security camera can give you peace of mind. The best security camera setups in 2025 do a lot more than just record footage — they offer smart alerts, crystal-clear video,

PerfektBlue Bluetooth flaws impact Mercedes, Volkswagen, Skoda cars

Four vulnerabilities dubbed PerfektBlue and affecting the BlueSDK Bluetooth stack from OpenSynergy can be exploited to achieve remote code execution and potentially allow access to critical elements in vehicles from multiple vendors, including Mercedes-Benz AG, Volkswagen, and Skoda. OpenSynergy confirmed the flaws last year in June and released patches to customers in September 2024 but many automakers have yet to push the corrective firmware updates. At least one major OEM learned only recent

Knox lands $6.5M to compete with Palantir in the federal compliance market

While highly sought after, federal software contracts frequently come with a hidden cost: Achieving government SaaS security compliance, known as FedRAMP, can take years and require substantial resources. Achieving this certification typically takes up to three years and costs more than $3 million, covering everything from security operations engineer salaries to security audits, according to Irina Denisenko, CEO of Knox. Denisenko (pictured above, second from left) launched Knox, a federal ma

Multi-Region Row Level Security in CockroachDB

Controlling who can access what data is more important than ever as organizations scale and modernize their data infrastructure. Enterprises are modernizing their critical databases, and they need fine-grained, built-in access controls that go beyond table-level permissions. That’s why, with the 25.2 release of CockroachDB , we’re introducing Row-Level Security — a powerful feature that allows you to define and enforce access policies at the row level, directly within the database. This form o

Google reveals details on Android’s Advanced Protection for Chrome

Google is sharing more information on how Chrome operates when Android mobile users enable Advanced Protection, highlighting strong security improvements. The tech giant recently extended its Advanced Protection Program to the device level with the release of Android 16, aimed at offering a robust, holistic security posture for high-risk individuals likely to be targeted by sophisticated spyware attacks. Starting Android 16, Advanced Protection can be activated from the settings, strengthening

McDonald’s AI Hiring Bot Exposed Millions of Applicants' Data to Hackers Using the Password ‘123456’

If you want a job at McDonald’s today, there’s a good chance you'll have to talk to Olivia. Olivia is not, in fact, a human being, but instead an AI chatbot that screens applicants, asks for their contact information and résumé, directs them to a personality test, and occasionally makes them “go insane” by repeatedly misunderstanding their most basic questions. Until last week, the platform that runs the Olivia chatbot, built by artificial intelligence software firm Paradox.ai, also suffered fr

Increasingly Paranoid OpenAI Has Installed Fingerprint Scanners and Airgapped Systems to Prevent Secrets Escaping

As the United States embroils itself in a self-inflicted "arms race" with China, tech companies are ratcheting up the paranoia to extreme levels. Take ChatGPT's creator OpenAI, which is reportedly clamping down hard on physical security after it says it was "targeted" by Chinese AI rivals. Per the Financial Times, the company has gone as far as installing fingerprint "biometric access controls" around its offices, as well as electronically-dependent security airlocks, similar to the kind found

ESIM Security

In a result of its research investigation efforts, Security Explorations, a research lab of AG Security Research company, conducted security analysis of eSIM technology. This section of our website presents initial information regarding the project. Notes We broke security of Kigen(*) eUICC card with GSMA consumer certificates installed into it. The eUICC card makes it possible to install the so called eSIM profiles into target chip. eSIM profiles are software representations of mobile subsc