Antivirus and Security news

Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws

Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had been released. The post Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws appeared first on SecurityWeek. more…

Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk

A leaked SquareML access key could have been used to access a database containing personal and health information. The post Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk appeared first on SecurityWeek. more…

Microsoft offers exits to thousands of employees, including staff on AI and Copilot teams

Microsoft is offering voluntary exit packages to about 60,000 employees, roughly 27% of its workforce, including staff on teams building Copilot and other AI products, as the company looks for ways to fund its AI investments. Amy Coleman, executive vice president and chief people officer, announced the Voluntary Exit Offer (VEO) in an internal memo […] more…

HPE Patches Dozens of Critical Flaws in Networking Products

Eight max-severity security defects could lead to remote code execution and authentication bypass. The post HPE Patches Dozens of Critical Flaws in Networking Products appeared first on SecurityWeek. more…

Process trees in Livehunt: YARA rules that know who launched what

Note: YARA-X v1.21.0 adds a parent_name field to the items in vt.behaviour.processes_list, and v1.22.0 adds ancestor_names. VirusTotal now fills that list for every sandbox report that includes a process tree, by flattening it. The result is one entry per process, and each entry knows the name of the process that created it and of the […] more…

OpenAI bets on AI economics with lower-cost GPT-6.1 Terra

OpenAI has launched GPT-6.1 Terra, a new reasoning model that it says delivers near-frontier performance on visual reasoning, professional task execution, and computer-use benchmarks without the premium price tag. Replacing GPT-5.6 Terra, the model is aimed at organizations seeking better accuracy and automation capabilities for large-scale operational workloads. Claiming it to be a step up […] more…

Unexplained DreamHost Incident Prompts Email, FTP Password Resets

The company says it reacted to an issue affecting some of its systems, including DreamHost webmail. The post Unexplained DreamHost Incident Prompts Email, FTP Password Resets appeared first on SecurityWeek. more…

iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18

Apple patched 286 vulnerabilities in iOS and macOS 27.2 and brought the fix for an exploited CoreGraphics zero-day to older iPhones. The post iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18 appeared first on SecurityWeek. more…

The right model at the right moment: Vendors push their agentic AI PC vision

AI is getting expensive, and companies are looking to cut token costs. The solution: move more AI work to PCs. The PC won’t replace the cloud. Preliminary AI work can be done on a PC, and tougher work — which today’s PCs can’t handle — can go to the cloud. “We’ll always need to use […] more…

Apple confirms iPhone Duo problem. What will it do next?

Apple has responded to recent reports complaining that iPhone Duo displays have become damaged in normal use. The company is “aware” of the issue and suggests any of the “small number” of customers who encounter the problem contact AppleCare for a replacement. Apple acknowledges the issue While the matter has already been widely reported citing unsubstantiated claims […] more…

Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI

Anthropic presents its own initial public offering as a step toward mitigating the risks it believes AI poses. The post Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI appeared first on SecurityWeek. more…

No signal, no problem: Smaller models bring more AI capabilities on-device

When OpenAI’s GPT-3 was released in 2020, at 175 billion parameters, it was the largest language model the world had ever seen. In the years that followed, frontier AI systems exploded in size, with today’s largest models clocking in at well over a trillion parameters. But there is a countercurrent of AI research moving in […] more…

This is Fine: What NetScaler Zero-Days Tell Us About the New Normal

Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon. The post This is Fine: What NetScaler Zero-Days Tell Us About the New Normal appeared first on SecurityWeek. more…

Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover

Running at system boot, it periodically polled the update domain to execute any code served, with full privileges. The post Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover appeared first on SecurityWeek. more…

A tiny laser beam could make computer memory 1,000 times faster

Scientists at UC San Diego have developed a surprising new way to store digital information using light instead of magnets, potentially paving the way for smaller, faster, and more energy-efficient memory devices. By precisely shaping and shrinking an ultrafast laser beam, researchers demonstrated that they could switch magnetic states in a material, the basic process […] more…

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems

Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products. The post Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems appeared first on SecurityWeek. more…

« Older posts