This 'SMS of Death' exploit can remotely crash unpatched Android phones — without the user interacting with it in any way
Published: November 2, 2026 18:25
Older Android devices will remain permanently at risk, experts warn.
🦜 Latest from TechRadar in Security
@www.techradar.com.pro.security@rss-parrot.net
I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline! Brought to you by the RSS Parrot.
---
All the latest security content from the TechRadar team
Site URL: www.techradar.com/pro/security
Feed URL: www.techradar.com/feeds/tag/security
Posts: 86
Followers: 1
This new Windows malware steals all your data, then uses AI to rank how valuable you are as a victim
Published: November 2, 2026 17:05
Sifting through a mountain of data is tedious work - so why not let AI do it for you?
FBI confirms it thinks North Korean hackers hit Binance in record cryptocurrency heist
Published: November 2, 2026 16:20
TraderTraitor is now officially accused of the attack that cost Binance north of $6 billion.
AI may be the future, but customer experience must meet the price-point
https://www.techradar.com/pro/ai-may-be-the-future-but-customer-experience-must-meet-the-price-point
Published: November 2, 2026 15:19
To sell complex AI tech, brands must prioritize access to information and expertise over marketing hype.
Applebee's forced to fix serious security issue which exposed customer data
Published: November 2, 2026 15:10
A researcher found hardcoded credentials in Applebee's mobile app, granting access to a treasure trove of PII.
GCHQ has apparently lost thousands of storage devices in recent years — and has no idea where any of them are
Published: November 2, 2026 13:05
A recent watchdog investigation into GCHQ confirms missing storage devices are still a problem.
This Halloween, make sure your sensitive data Is wearing a mask
https://www.techradar.com/pro/this-halloween-make-sure-your-sensitive-data-is-wearing-a-mask
Published: November 2, 2026 09:52
How data masking can protect sensitive information as AI gains greater access to enterprise data.
The in-store telemetry blackout costing retailers billions
https://www.techradar.com/pro/the-in-store-telemetry-blackout-costing-retailers-billions
Published: November 2, 2026 09:34
How real-time payment telemetry and AI can prevent costly in-store checkout failures.
'AI is not creating the problem': OpenAI CEO Sam Altman says AI is merely uncovering all the vulnerabilities we've accumulated over the years
Published: November 1, 2026 16:05
Oracle claims it fixed around 3,000 software issues in its latest quarterly patch – AI helped discover them, but they already existed.
AI-generated code is still frequently failing security checks — with Claude and GPT-6 topping the leader board
Published: October 30, 2026 18:10
Progress is there, but it's mending a small part of a large wound.
Chinese hackers build PHP2SHELL exploit, use it to root 25 servers, breach US government-affiliated firewalls
Published: October 30, 2026 16:05
Palo Alto Networks firewalls running outdated OS seem to be the target, as Chinese hackers chain PHP2Shell to Fragnesia for the campaign.
Binance hit by 'largest crypto theft on record' as North Korean hackers steal $6.3bn in just 20 minutes
Published: October 30, 2026 12:21
Lazarus is breaking its own records year after year but Binance says user funds are SAFU.
Sovereignty is a spectrum and not a one-size-fits-all approach
https://www.techradar.com/pro/sovereignty-is-a-spectrum-and-not-a-one-size-fits-all-approach
Published: October 30, 2026 11:56
Sovereignty must be viewed as a spectrum that an organization can choose from. It cannot be treated as a linear standard across industries and organizations.
The AI Act's longer runway is an opportunity to build governance that lasts
Published: October 30, 2026 11:01
Europe’s extended AI timeline gives businesses time to build trusted, resilient governance now.
Massive GovTech breach leaks 42 million documents — including thousands packed with personal information
Published: October 30, 2026 10:32
A large database full of personal information was discovered and locked down.
Security experts warn North Korean hackers aren't just using AI in their new campaigns, but also 'post-quantum' encryption
Published: October 30, 2026 03:05
North Korea's Lazarus is wrapping malware delivery in ML-KEM-1024, the NSA's pick for national security systems, but it won't hide the malware itself.
Report claims AI is recommending risky security moves — so maybe you shouldn't hand over full control of your systems just yet
Published: October 29, 2026 20:20
Accessing sensitive data and making important decisions, AI agents are acting beyond their authority and putting organizations at risk.
A new cybercrime campaign uses fake AI apps with real-sounding names to infect people curious to try the newest tools
Published: October 29, 2026 18:05
Experts warn ChatGPT and Claude are once again being spoofed to trick victims into installing a cryptocurrency miner.
Hackers are breaking into company networks via hacked CCTV camera software
Published: October 29, 2026 16:05
Companies urged to treat cameras and their management platforms as potential entry points and secure them better.
Major US Homeland Security breach exposes details on 41,000 employees — undercover ICE agents and contractors unmasked in ‘Icepick’ data dump
Published: October 29, 2026 14:25
Numerous employees and contractors have had personal details exposed
FBI leads action to shut down Virtualine bulletproof service linked to major cybercrime activity
Published: October 29, 2026 14:00
Virtualine was hosting illegal forums and helping launder stolen cryptocurrency.
Data breach at Sony ISP subsidiary exposes 2.5 million customer records as Japan hit with another major cyberattack
Published: October 29, 2026 13:05
Hackers are gunning for Japan's ISPs - and this time it's Sony's turn.
‘Bad actor’ cyberattack on FEC obscures political spending by donors and SuperPACs days before US midterm elections
Published: October 29, 2026 12:05
US midterm elections are just days away, and an attack on the FEC has left millions of dollars in donations undeclared.
Are you still piloting?
https://www.techradar.com/pro/are-you-still-piloting
Published: October 29, 2026 11:55
There's no shortage of enthusiasm for artificial intelligence. Organizations across every sector are investing heavily, experimenting, launching proof of concepts, and finding ways to turn the latest developments into real business value.
Navigating the 'new normal': AI-powered exploits and discovery
https://www.techradar.com/pro/navigating-the-new-normal-ai-powered-exploits-and-discovery
Published: October 29, 2026 10:11
AI is challenging the rules of vulnerability management, making speed of discovery a critical security challenge.
Starlink users heavily surveilled by alleged Israeli spy firm — company served ads to geolocate users and spy on browsers and apps
Published: October 29, 2026 03:05
Malicious ads were deliberately served to Starlink users to uncover their identity and launch further surveillance efforts.
New York Knicks slammed after offering employees NBA championship rings in what turned out to be a phishing test
Published: October 29, 2026 00:20
The New York Knicks tricked employees with fake championship ring offers, forcing those who clicked links into mandatory cybersecurity training.
A security flaw in these widely used barcode scanners could open up warehouses and stores to cyberattack
Published: October 28, 2026 17:10
A simple barcode scanner could be the gateway to a large-scale cyberattack, Kaspersky is warning.
Most data centers and servers on the planet could be vulnerable to dangerous UEFI firmware flaw — here's what we know
Published: October 28, 2026 16:15
A 9.5/10 flaw will take months to fully remediate, so stay on your guard.
AI startup claims it hacked Anthropic in 12 hours, gains access to employee details and internal messages
Published: October 28, 2026 15:25
Agents found a way in through third-party business software, but Anthropic is saying its bug bounty rules were broken.
Japanese internet giant GMO tells customers to shut down and disconnect PCs from the internet following data breach and ransomware threat
Published: October 28, 2026 12:15
Hackers threatened to install ransomware on user devices, but they never did.
Why 'never trust, always verify - repeatably' security strategy for AI Agents, starts after login
Published: October 28, 2026 11:51
With the rise of autonomous AI agents, the real security risk is not centralized at the login screen. It starts after access has been granted.
Watch out — that Microsoft Teams chat might be hackers impersonating your IT support
Published: October 27, 2026 23:05
Fake IT support pushes victims into granting hands-on access via remote management tools.
"AI threats are real - it's not some kind of urban myth": Microsoft UK security head on why your business should be prepared for a new generation of AI cyber threats
Published: October 27, 2026 19:05
In the AI security age, responsibility for security lies on everyone in an organization, Microsoft warns.
Microsoft and others scramble to patch 'HTTP2Shell' flaw which could be the next PHP-level issue — Node.js problem may also affect millions of sites
Published: October 27, 2026 18:45
An RCE flaw was found in Brotli, a Google-built open source data compression algorithm.
Critical Microsoft Authenticator flaw let malicious Android apps steal access to your precious accounts
Published: October 27, 2026 15:20
Authenticator was granting session tokens left and right, but the bug has now been fixed.
Over 525,000 hit in massive University of Copenhagen data breach
Published: October 27, 2026 13:15
Even some PIN codes were stolen, forcing the University to reset them.
‘You want to control your own AI’: Pegasus spyware founder tells governments to push for sovereign AI and national security over reliance on US AI
Published: October 27, 2026 03:05
Former spyware head tells governments to focus on national security when it comes to AI.
A 16-year-old bug could be putting millions of routers at risk — despite Broadcom saying it patched the issue years ago
Published: October 26, 2026 22:05
Broadcom says it fixed this 16-year-old Wi-Fi flaw in 2018, but the fix never reached the routers, and attackers in range need no password
Rogue AI agent engages 'Skynet mode' to search the internet for exposed LLMs to hijack and run malware attacks
Published: October 26, 2026 18:05
Malicious AI agent was found recruiting other agents for a cryptomining operation as well as data and credential theft.
This abandoned torrent app could have exposed millions of devices to cyberattack
Published: October 26, 2026 17:05
A malicious update could infect millions of devices without users ever knowing.
AI agents tricked by a rogue downloads file into running dangerous malware
Published: October 26, 2026 16:15
AI agents will read anything found in the AGENTS.md file, even if that file is downloaded from the internet.
Experts reveal another major PHP2Shell bug — and it's not getting an emergency patch this time
Published: October 26, 2026 14:00
The bug can trigger remote code execution but only under certain, "unlikely" conditions.
The UK government wants to invest £100 million in a ‘world first’ AI Biosecurity Lab — OpenAI and Anthropic to supply £200 million in credits to help safeguard national security
Published: October 26, 2026 12:30
AI is a tool for good, and for bad, as UK government looks to protect against new AI-enabled cyber and biological threats
ChatGPT and Claude blocked by Swedish government over "problematic" security concerns
Published: October 26, 2026 11:35
ChatGPT and Anthropic join DeepSeek in Swedish government AI ban.
IT and security leaders of the AI era must go back to basics and beware the hype
Published: October 26, 2026 11:31
AI is transforming security, but organizations must not lose sight of identity, access and least privilege.
Microsoft Teams will soon use AI to warn you of sneaky phishing scams
https://www.techradar.com/pro/microsoft-teams-will-soon-use-ai-to-warn-you-of-sneaky-phishing-scams
Published: October 26, 2026 11:05
Microsoft Teams is adding AI-powered phishing detection to help keep you safe from threats.
Preparing for a quantum-safe future
https://www.techradar.com/pro/preparing-for-a-quantum-safe-future
Published: October 26, 2026 10:00
Quantum computing still feels like uncharted territory - yet like AI, the threat it poses is significant.
FBI tip line and veterans crisis site among 350 federal web addresses exposing visitors to network spies, senator warns
Published: October 25, 2026 22:10
350 federal web addresses, including the FBI tip line and a veterans crisis service, let network snoops see who visits.
1Password will now let AI agents log in to accounts for you without ever needing to see your password
Published: October 25, 2026 17:05
Fed up of typing your login details in when AI is meant to be doing the work for you? 1Password now shares passwords securely.
The Pentagon has a covert tech sabotage agency that they really don’t want you to know about — and there are big questions about its oversight
Published: October 24, 2026 01:25
Disruption of foreign tech through disinformation, cyberattacks, and sabotage could be the future of this new Pentagon office.
This AI tool can now turn ordinary household photos into location clues — so could law forces use the technology to scope out your home?
Published: October 23, 2026 23:25
US police are using an AI tool to detect the location of properties based on interior photos, but the way tool accumulates its data drawn concern from Airbnb, Zillow, and others
PHP security issues could also threaten your NAS device — but not every vendor is able to patch just yet
Published: October 23, 2026 16:15
The php2shell flaw affects more than just websites and web apps and some of these manufacturers were apparently caught off guard.
US banks have detected unvetted AI agents accessing customer bank accounts
Published: October 23, 2026 15:05
Banks are worried that customers are granting AI agents permission to access their entire accounts – and things could go wrong.
AWS says hackers tried to exploit PHP security issues days before fix — as Cloudflare CEO says it saw a huge rise in targeted attack attempts
Published: October 23, 2026 14:05
There have been millions of attempts to target PHP flaws following disclosure of major vulnerabilities.
Capcom data breach confirmed — around 11.7 million accounts thought to have been affected
Published: October 23, 2026 12:44
Threat actors broke into one of Capcom's services and even tried to change user passwords.
Authentication does not equal authorization: Are we asking passkeys to prove too much?
Published: October 23, 2026 11:10
Securing the login is only half the battle. Where passkeys end and real trust begins.
Microsoft helped shut down an “App Store” for criminals linked to over a billion malicious messages
Published: October 22, 2026 19:20
Microsoft’s joint op with the Japanese National Police Agency uncovered an illegal “app store” that provided fake websites, cybercrime tools, and even accounts to cybercriminals.
Claude flags nearly 500 worrying open source security issues — C, Java, and Python code all at risk as one flaw wasn't spotted for 21 years
Published: October 22, 2026 18:35
Hunting for individual vulnerabilities will get us nowhere, Anthropic argues. Instead, businesses should reduce accessible code.
OpenAI agents turned off their own guardrails and then told researchers they were still on — AI agents lying about their behavior should concern everyone
Published: October 22, 2026 17:10
Turning off guardrails and lying about it is very concerning behavior, but OpenAI doesn't have an explanation.
Security breach at AI aggregator exposes over 18 million files, including some very embarrassing chat records
Published: October 22, 2026 15:35
An AI aggregator kept an open database unprotected on the internet containing personally identifiable information and some embarassing chat logs.
The biggest AI security risk is doing nothing
https://www.techradar.com/pro/the-biggest-ai-security-risk-is-doing-nothing
Published: October 22, 2026 10:36
The existential risk of doing nothing about AI is bigger than the risk of doing it badly.
Why scrutiny of facial recognition needs to extend beyond policing
https://www.techradar.com/pro/why-scrutiny-of-facial-recognition-needs-to-extend-beyond-policing
Published: October 22, 2026 10:05
Policing steals the headlines, but we must examine how facial recognition technology nationwide.
PHP security crisis — what you need to know as issues affected websites across the world
Published: October 22, 2026 09:05
PHP issues affected websites across the globe - we were there covering the latest updates.
PHP releases emergency fixes as some of the world's biggest websites say they were targeted by hackers
Published: October 22, 2026 08:58
PHP urges organizations to deploy the fixes immediately, as threat actors start abusing the php2shell bug
‘Thanks again for your help!’: Rogue AI agents on Tencent Cloud tried to crack Alibaba’s Amap, then chatted politely with the team tracking them
Published: October 22, 2026 02:20
AI agents made thousands of requests to Alibaba’s Amap, bypassed some restrictions, and prompted researchers to investigate their infrastructure and uncertain origins.
Website admins across the world bracing for impact following major PHP flaw reveal
Published: October 21, 2026 15:36
PHP notifies the community of two critical RCE flaws, says patch is coming imminently.
State Bank of India reports cyberattack — thousands of customer records affected, here's what we know
Published: October 21, 2026 14:16
Someone leaked thousands of user records online, including many belonging to SBI customers.
AI 'antidetect' browsers are making scams, fraud, and influence operations harder to spot
Published: October 21, 2026 13:00
Browsers designed to help agencies are being abused to launch scam campaigns at scale.
Trump officials asked CISA to secretly hack a voting machine — and not disclose any vulnerabilities they found
Published: October 21, 2026 00:20
The vulnerabilities were not to be disclosed to anyone outside the White House, CISA was told.
The dark side of 'free' mobile games — how developers reverse-engineer your patience to milk ad revenue
Published: October 20, 2026 23:30
Block Blast reportedly earned $127 million from ads, but an investigation uncovered code allegedly manipulating difficulty, player profiling, and incentives to watch ads.
A nightmare scenario for supermarkets: Hidden daily passwords and command injection flaws leave thousands of Danfoss supermarket systems open to remote takeover
Published: October 20, 2026 20:25
Claroty researchers found 2,765 publicly accessible Danfoss refrigeration systems and three vulnerabilities involving hidden passwords, command injection, and web server manipulation.
'Some agents exhibited unintended web-browsing behavior': Tencent admits AI agents it was testing made more than 2,600 attempts in 11 days to slip past Alibaba's map defenses, just to find out which zoo gate people use
Published: October 20, 2026 19:50
Researchers hid a message for a live fleet of rogue AI agents, and the agents wrote back.
DeepSeek AI tools banned from US government agency systems as rift with China grows
Published: October 20, 2026 18:30
DeepSeek was labeled as carrying "multiple threat vectors".
Russia drafted plans for AI that could block 95% of VPNs — but the idea has quietly vanished from its national roadmap
Published: October 20, 2026 18:25
The machine-learning filter it would have relied on is funded separately, and the experts consulted expect it to catch plenty of legitimate traffic as well.
Millions of California students have sensitive data stolen — names, SSIDs, home addresses and more taken in attack on nonprofit
Published: October 20, 2026 17:25
Data breach likely saw attackers obtain millions of students' PII via a simple password compromise, it seems.
Chinese hacker hits over 100 company websites using AI agents — Deere and SharkNinja among top brands affected in attack
Published: October 20, 2026 13:05
It seems the goal was to establish persistence and possibly steal money down the line.
Microsoft admits 'frontier models can't be trusted', unveils new security tools to treat AI agents as insider threats
Published: October 20, 2026 11:44
Say hi to your new Guardian Agent, keeping you safe from Agentic Insiders.
The transformation trap: Why organizations are trying to change too much, too fast
Published: October 20, 2026 09:43
The transformation trap: Why organizations are trying to change too much, too fast
Kaspersky's VPN and password manager went dark for days worldwide — and the timing has raised awkward questions about Russia's drone-hit data centers
Published: October 19, 2026 20:45
Kaspersky outage began within hours of Ukrainian drones shutting down a third Yandex data center, but no link has been confirmed.
Russian bot activity plunged 84% after Ukraine hit Yandex data centers, but the bots were back at full strength within two days
Published: October 19, 2026 18:20
The 84% bot collapse after Ukraine's Yandex strikes was real, lasted about a day, and Cloudflare watched the automation move to rival clouds.
Watch out — these are the phishing scams experts say are most likely to catch your workers out
Published: October 19, 2026 17:00
New tech announcements, gifts, and insurance claims work best, Kaspersky found.
FBI warns of torrent of scams and deepfakes ahead of US midterm elections
Published: October 19, 2026 16:10
AI deepfakes and financial fraud campaigns are already showing up ahead of the US midterm elections in November.
US federal court work hit after BAE Systems cyberattack affects bankruptcy court systems
Published: October 19, 2026 15:15
The incident halted the BNC’s production and distribution of bankruptcy notices for bankruptcy courts.
Zoom can now tell you for sure that the person you're speaking to isn't a deepfake — Sam Altman’s World debuts ID verification for AI Agents
Published: October 19, 2026 14:40
With deepfake attacks on the rise, World will scan your iris so that you can verify you are indeed real on your next Zoom call.
Whopper of a data breach sees Burger King Japan expose over 11 million customer records
Published: October 19, 2026 12:05
The leaked records belonged mostly to Burger King mobile app users.