Ars Technica AI
Locked in heated rivalry with researcher, Microsoft fixes 0-day they disclosed
A separate zero-day also disclosed by Nightmare Eclipse appears to be patched as well....
AI News & Updates
Stay ahead of
AI news
3,501+ articles from 7 top sources — updated every 2 hours.
Ars Technica AI
High-severity vulnerability in Linux caused by a single errant character
Use-after-free bug can be exploited to evade sandbox defenses....
Ars Technica AI
For the 2nd time in weeks, Microsoft packages laced with credential stealer
73 packages run self-replicating stealer as soon as they're opened by an AI agent....
Ars Technica AI
How a USB-connected speaker can infect a PC without ever being touched
Seller of the Sound Blaster Katana V2X doesn't consider the behavior a vulnerability....
Ars Technica AI
Dashlane explains how attackers managed to download encrypted password vaults
By targeting large numbers of users, attackers increased their chances of success....
Ars Technica AI
Can't make sense of Dashlane's vault theft notification? You're not alone.
Security advisory leaves out key details. Dashlane maintains complete silence....
Ars Technica AI
Dozens of Red Hat packages backdoored through its official NPM channel
Anyone who has downloaded affected Red Hat packages should investigate immediately....
Ars Technica AI
Botnet of more than 17 million devices dismantled
The botnet was reportedly tied to a Russia-based residential proxy network....
Ars Technica AI
Fed up with vibe coders, dev sneaks data-nuking prompt injection into their code
Undisclosed addition in jqwik instructed AI coding agents to delete app output....
Ars Technica AI
Websites have a new way to spy on visitors: analyzing their SSD activity
Telltale SSD activity can be measured in the browser using simple JavaScript....
Ars Technica AI
Millions of AI agents imperiled by critical vulnerability in open source package
"BadHost" was found in Starlette, a package with 325 million weekly downloads....
Ars Technica AI
US's big bet on quantum computing may not be entirely legal
Deal also launched the first quantum foundry company, but is there a need for it?...
Ars Technica AI
Texas AG sues Meta over claims that WhatsApp doesn't provide end-to-end encryption
Critics note a lack of factual support in lawsuit filed by US Senate candidate....
Ars Technica AI
A hacker group is poisoning open source code at an unprecedented scale
GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks....
Ars Technica AI
US government takes $2 billion equity stake in nine quantum computing firms
Beneficiaries include startup backed by firm with links to the Trump family....
Ars Technica AI
Google publishes exploit code threatening millions of Chromium users
Google publishes exploit code before patch, reported 29 months earlier, is fixed....
Ars Technica AI
In stunning display of stupid, secret CISA credentials found in public GitHub repo
SSH keys, plaintext passwords, other sensitive data had been up since November 2025....
Ars Technica AI
Zero-day exploit completely defeats default Windows 11 BitLocker protections
It's not entirely clear how the exploit works. Microsoft says it's investigating....
Ars Technica AI
Cisco announces record revenue and 4,000 layoffs in the same day
Layoffs are "not a savings-driven restructure," CFO says....
Ars Technica AI
Linux bitten by second severe vulnerability in as many weeks
Production-version patches are coming online and should be installed pronto....