A WordPress plugin sold to 15,000 sites has a flaw that lets anyone create an admin account, and attackers are already using it
A WordPress plugin sold to 15,000 sites has a flaw that lets anyone create an admin account, and attackers are already using it

A critical vulnerability in WP Maps Pro, a commercial WordPress plugin with more than 15,000 sales on the Envato Market, is being actively exploited by attackers to create malicious administrator accounts on vulnerable sites. The flaw, tracked as CVE-2…

A GTA V cheat service that promised “enhanced privacy” just got hacked, exposing 64,000 accounts
A GTA V cheat service that promised “enhanced privacy” just got hacked, exposing 64,000 accounts

Atlas Menu, a cheat service for Grand Theft Auto V’s online mode, has been hacked, exposing the personal data of nearly 64,000 users. The stolen data included email addresses, usernames, hashed passwords, IP addresses, and support tickets, according to…

Anthropic is finally giving the EU access to Mythos, ending weeks of standoff over the world’s most powerful cybersecurity AI
Anthropic is finally giving the EU access to Mythos, ending weeks of standoff over the world’s most powerful cybersecurity AI

Anthropic has agreed to give the European Union’s cybersecurity agency, ENISA, access to Claude Mythos, the AI model that has autonomously discovered more than 10,000 high- and critical-severity zero-day vulnerabilities across every major operating sys…

The people who trained Tesla’s self-driving AI won’t ride in it
The people who trained Tesla’s self-driving AI won’t ride in it

Reuters interviewed nine former Tesla data labelers and a former self-driving engineer about their views on Tesla’s Full Self-Driving mode. Seven of the nine data specialists said they would not ride in a Tesla operating on FSD. One said they would not…

Social media companies paid a school district more than its annual budget to avoid trial
Social media companies paid a school district more than its annual budget to avoid trial

The financial terms of the Breathitt County social media settlement have been disclosed for the first time. Meta is paying $9 million. Snap and TikTok are each paying $8 million. YouTube negotiated a payout of slightly more than $2 million. The combine…

Microsoft threatened a security researcher with criminal prosecution. The cybersecurity community is furious.
Microsoft threatened a security researcher with criminal prosecution. The cybersecurity community is furious.

Microsoft published a blog post on Wednesday criticising a security researcher known as “Nightmare Eclipse” for publicly disclosing a series of unpatched vulnerabilities in Windows Defender and BitLocker. The company then invoked its Digital Crimes Uni…

Dutch police seized 800 servers used by Russian hackers to attack Europe
Dutch police seized 800 servers used by Russian hackers to attack Europe

Dutch financial crime investigators have seized 800 servers and arrested two men in a crackdown on hosting companies that provided infrastructure for Russian state-sponsored cyberattacks across Europe. The Dutch Fiscal Information and Investigation Ser…

NATO just formalised cybersecurity partnerships with Microsoft, Palo Alto Networks, and ESET
NATO just formalised cybersecurity partnerships with Microsoft, Palo Alto Networks, and ESET

NATO has signed strategic cybersecurity partnerships with Microsoft, Palo Alto Networks, and ESET, formalising what the alliance describes as non-commercial agreements to strengthen collective resilience in cyberspace. The partnerships were announced o…

YouTube will now automatically label AI-generated videos, whether creators disclose them or not
YouTube will now automatically label AI-generated videos, whether creators disclose them or not

YouTube has announced that it will begin automatically detecting and labelling videos that contain significant photorealistic AI-generated content, using internal signals rather than relying on creators to disclose it themselves. The change marks a shi…

The Netherlands just blocked a US company from buying the cloud provider that runs Dutch digital identity
The Netherlands just blocked a US company from buying the cloud provider that runs Dutch digital identity

The Dutch government has imposed a “complete prohibition” on the acquisition of Solvinity, a Dutch cloud provider, by Kyndryl, the American IT infrastructure company spun out of IBM in 2021. The deal, valued at roughly €100 million, would have given a …