GoKawiil
Tech News
A Florida law enforcement agency reportedly stored Department of Motor Vehicles login credentials insecurely, allowing hackers to gain unauthorized access to the state DMV system. Details on the scope of the breach and the data accessed have not been fully disclosed.
Breaches now travel sideways: a provider you have never heard of holds credentials for a service you rely on. Here is how to work out whether it reaches you, and what to do.
OpenCode said it suffered a security breach described as a large-scale distillation attack, which affected 1.4% of its Console users. The company notified affected users by email and says the incident is still ongoing, so further details are not yet available. OpenCode stated it is working with Anthropic, OpenAI, and Google to address the issue.
Google has made SynthID Detector, previously limited to journalists and media professionals, publicly available at synthid.com. The free tool detects AI watermarks in images, video and audio from Google, OpenAI, NVIDIA and Kakao, requiring users to log in with a Google, OpenAI or Apple account. Support for detecting Apple Intelligence-created images is expected soon.
Google Threat Intelligence Group analyst John Hultquist told the Financial Times that his team has observed a major increase in LLMjacking throughout 2026. The technique involves criminals stealing API keys or login credentials to hijack businesses' AI accounts, exploiting high or unlimited usage limits to run up token costs or misuse compute resources without paying.
A how-to guide walks users through logging into their home router's admin panel to review and adjust default security settings. It explains how to find a router's IP address on both Windows and Mac systems and locate the separate admin login credentials, often printed on a sticker on the device itself.
Malwarebytes reported a phishing campaign that impersonates a promotion from Anthropic, falsely claiming to offer 10,000 users a free month of Claude Max to mark 100 million users. Victims who click through are directed to a fake Google login page designed to steal their credentials, using a convincing 'browser-in-a-browser' overlay that mimics a real Google sign-in window.
A Google Threat Intelligence Group analyst named Larsen ran a covert operation to observe the hacker collective TeamPCP, gaining access to a server where the group stored stolen credentials from numerous victim companies. Google used this visibility to rapidly notify cloud providers like AWS and Microsoft to revoke compromised access tokens before the hackers could exploit them for extortion, rather than trying to contact each victim individually.
Google is rolling out a built-in Android feature that lets users securely transfer both passwords and passkeys directly between credential manager apps, replacing the old method of exporting unencrypted text files or manually recreating passkeys. At launch, the tool supports Google Password Manager, 1Password, Bitwarden, and Dashlane, with other providers able to add support via Android's Credentials Transfer API. Users initiate the process from their new password manager, and Android handles detection, review, and authorization before completing the transfer in seconds.
A new practitioner's guide from Flare Research examines how infostealer malware like Vidar, RedLine and Lumma harvest corporate logins, browser cookies and saved credentials from infected machines. The study found that about 46% of stealer logs containing corporate credentials came from likely unmanaged or personal devices, and that exposure of credentials and sessions tied to major SaaS and cloud platforms is climbing roughly 29% each year.
Google Messages now supports Content Credentials, a feature based on the C2PA standard that shows compatible photos, videos, and audio's origin and editing history, including whether AI tools were used. Users can press and hold supported media, tap Info, then select 'How this was made' to view this data. The feature is currently limited to Android devices.
A new Use.AI survey of over 15,000 respondents found that 53% now verify explanations from doctors, teachers, and other professionals using AI before accepting them, while 46% say professional credentials carry less weight than before. Use.AI calls this shift an 'expertise recession,' describing a decline in automatic trust toward trained professionals as AI tools let people independently investigate claims.