ChatGPT and Reddit now face EU’s toughest online safety rules
OpenAI’s ChatGPT will have to comply with tougher EU rules such as removing illegal content or face potential fines, the European Commission said on Monday, as Brussels grapples with how…
⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More
The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the installer. Trusted systems collected traffic and passwords, then…
Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance
Claude Code reads files, runs shell commands, invokes MCP tools, and acts through the credentials available on a developer’s machine. Anthropic’s new Compliance API endpoints give security teams their clearest…
Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets
Threat actors associated with Aurora (aka Aur0ra) ransomware have been observed using SpaceX’s artificial intelligence (AI)-powered coding assistant Cursor to break into target networks, according to findings from CloudSEK and…
ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions
The threat actor known as Silver Fox has been observed distributing the ValleyRAT backdoor disguised as a signed Chinese adware application, running the malware under a trusted process to slip…
Texas Politicians Slowly Realize Elon Musk Hijacked Billions In Taxpayer Broadband Grants
Back in June I wrote a feature for The Verge about how Elon Musk and Jeff Bezos had convinced Republicans to redirect billions in taxpayer money away from future-proof fiber…
Pocket’s AI made my game ideas real. Now Meta controls the results.
The relatively recent rise of AI-assisted coding tools and the whole concept of “vibe coding” have effectively upended entire software development workflows. While these tools have been available to novice…
China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs
A China-nexus cyber espionage actor tracked as Fire Ant has expanded a long-running campaign beyond VMware hypervisors to compromise Cisco IOS XR routers, Terminal Access Controller Access-Control System (TACACS) servers,…
DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims
The U.S. Department of Justice (DoJ) on Friday corrected a previously issued press statement that several of its agencies were victims of attacks carried out by Chinese threat actors, instead…
A 12TB Steam “teraleak” spills more than a decade of lost PC gaming history
Here at Ars, we’re intimately familiar with data leaks surrounding Valve’s games, hardware, and the workings of Steam itself. But nothing could have prepared us for this weekend’s “terarelease” encompassing…