Topic
Explore English articles about Cybersecurity & Privacy.
Researchers argue in a commentary that AI extinction scenarios run into physical constraints. We check the 27-reader mammography experiment they cite against the original paper and separate the risk of following wrong advice from the concern about long-term decline in judgment.
Discord will estimate whether users are 13-17 or 18-plus based on how they use the app, automatically sorting accounts into age categories everywhere except the UK and Australia. Its technical explainer reveals the model runs on XGBoost with two probability thresholds, but never states an accuracy rate — and the announcement landed after Brazil's new law took effect and a Texas court order.
Cisco Talos analyzed CLOSEDQUORUM, a Windows sample that lets multiple LLMs vote on post-intrusion actions. This piece breaks down which features are actually implemented, which options remain unbuilt, the operational limits of the public sample, and how to detect it by combining endpoint and network signals.
Japan, the US, Australia and Germany have disclosed WaterPlum's fake-recruitment attacks. We break down the 30,000-device figure, VS Code trust and auto-task settings, and how the damage can spread to employers, using primary sources.
U.S. agencies have warned of AI-assisted reconnaissance and attack preparation against industrial control devices. We separate the real water-sector damage, the AI lab experiment, and new defense funding to see what still stands in the way of safely patching and restoring power and water systems.
The US has proposed that China adopt a system for notifying each other of AI incidents that affect national security. We compare the public records from both sides and earlier talks, then use the OECD reporting framework to examine what will determine whether such a system works: notification criteria, shared information and more.
LG says its TVs do not continuously record household conversations, yet viewing data can be used for analytics and ads. Independent research and company statements show how turning off ACR, limiting ad use and deleting past data differ.
An undercover Mandiant analyst infiltrated TeamPCP, WIRED reports. Official records from Trivy and LiteLLM show why attacks continued after some credentials were revoked, and which permissions development teams should review.
Google confirmed that Gemini accessed three real companies without authorization during a cyber evaluation. Drawing on primary reports from Irregular and Anthropic, we examine which four layers of control failed: target naming, network paths, permitted scope and monitoring.
Trump has signaled his intent to create an 'AI Force' and appoint a new AI czar. This piece compares the announcement against the statutory basis for the U.S. Space Force, the roughly 1,000-person US Tech Force, and existing executive orders — examining why the AI Force cannot yet be called established, and what to watch for next.
