FFmpeg ‘PixelSmash’ bug lets attackers run code through video files
A critical flaw in FFmpeg — the video decoder that half the internet depends on — could let attackers execute…
Security
Cybersecurity, vulnerabilities, threats, and defense
JaredFromSubway MEV bot loses $15M in clever exploit
One of Ethereum’s most aggressive MEV bots just got taken for $15 million. JaredFromSubway — known for its controversial “sandwich”…
Malicious anime wallpapers on Steam are stealing crypto
Kaspersky found a malware campaign hiding in plain sight on Steam Workshop — inside Wallpaper Engine downloads. Dozens of infected…
WhatsApp Phishing Campaign Uses Fake Business Documents to Hack PCs
An ongoing malware campaign is targeting WhatsApp users across multiple countries, using deceptive messages that push VBScript files to contacts…
Bernie Sanders Wants a Sovereign Wealth Fund for AI — But There’s a Better Way
Bernie Sanders isn’t afraid to ask the big questions. Writing in the New York Times, he asked: “Will the future…
Friday Squid Blogging: A Fluid Pump Inspired by Squid Jet Propulsion
A team of students built a fluid pump that takes its cues from the way squids move through water —…
May Patch Tuesday: AI is finding bugs faster than vendors can patch them
This month’s Patch Tuesday is a little unusual. Microsoft fixed 118 vulnerabilities across its products — but for the first…
A CISA contractor left AWS GovCloud keys on a public GitHub repo
One of the most embarrassing government data leaks in recent history came to light this past weekend — a CISA…
The Kimwolf botmaster has been arrested in Canada — faces charges in both countries
Jacob Butler, the 23-year-old Ottawa man accused of running the Kimwolf IoT botnet, has been arrested by Canadian authorities and…
AryStinger Botnet Hijacked Thousands of Old D-Link Routers Worldwide
A previously undocumented botnet called AryStinger has compromised more than 4,000 outdated routers, turning them into remotely controlled proxies for…