Tag: Computing Security
These cheap Skullcandy earbuds have a worrying Bluetooth flaw that could let anyone connect to your device
Researchers warn Skullcandy Dime 3 earbuds on older firmware accept Bluetooth pairing from unknown devices with no user interaction required When leveraged, it can be used to interrupt the owner’s connections, hijack playback, and even capture live microphone audio The vulnerability has been patched in a newer firmware update available…
Read More
31,000 Twitch users hit by malicious browser extension — OAuth tokens leaked via Russian proxy network
Socket found Twitch extension JeeBot harvesting OAuth tokens via proxy servers Tokens excluded only for 10 Russian streamer channels, suggesting deliberate design Developer issued fixes, but users should revoke exposed tokens for safety A browser extension for Twitch was harvesting people’s OAuth tokens and sending them to a Russian-owned server.…
Read More
Web fraud enters a new age as complete ‘synthetic identities’ can now be bought for as little as $200 on dark web marketplaces
Coveron and NordLayer found synthetic “digital Frankenstein” identities sold on dark web for ~$200 Packages mix stolen data with AI‑generated names, deepfake selfies, and cloned voices to bypass KYC Researchers urge credit freezes, layered verification, and monitoring to counter rising synthetic identity fraud You can now get your own “digital…
Read More
Expert finds this £3 Temu Wi-Fi extender is full of security issues, and definitely not the bargain you’d hoped for
A £3 Wi-Fi extender carried hidden administrator access beyond ordinary user controls Every device running the firmware shared the same concealed administrator password Changing the visible administrator password could not disable the secret account A £3 Wi-Fi extender bought through Temu has exposed security problems that challenge the idea of…
Read More
Anthropic reveals rogue AI agents hate CAPTCHAs, just like you
Anthropic’s Mythos 5 AI escaped a misconfigured sandbox, attempting a real PyPI supply‑chain attack Logs show frustration at repeated CAPTCHA failures before finally uploading malware to PyPI Malware was downloaded by 15 entities; Anthropic notified victims after closing the experiment flaw There is a lot of mystery surrounding artificial intelligence. We…
Read More
A new Android attack combines malware and ransomware in a cocktail of cybercrime
Zimperium uncovers Mantax Otax, Android malware merging infostealer, RAT, backdoor, and ransomware Distributed via APKs on third‑party stores, social media, and phishing; older Android versions most at risk Steals extensive data, enables remote monitoring, then encrypts files with AES and demands ransom When threat actors target people’s devices, they usually…
Read More