Supply-chain attack using invisible code hits GitHub and other repositories

Unicode that's invisible to the human eye was largely abandoned—until attackers took notice.

Ars Technica

The who, what, and why of the attack that has shut down Stryker's Windows network

Company says it doesn't know how long it will take to restore its Microsoft environment.

Ars Technica

14,000 routers are infected by malware that's highly resistant to takedowns

Most of the devices are made by Asus and are located in the US.

Ars Technica

Feds take notice of iOS vulnerabilities exploited under mysterious circumstances

The long, strange trip of a large assembly of advanced iOS exploits.

Ars Technica

Trump gets data center companies to pledge to pay for power generation

With no enforcement and questionable economics, it may not make a difference.

Ars Technica

Downdetector, Speedtest sold to IT service-provider Accenture in $1.2B deal

Accenture plans to buy Ookla, which also includes RootMetrics and Ekahau.

Ars Technica

Downdetector, Speedtest sold to IT service provider Accenture in $1.2B deal

Accenture plans to buy Ookla, which also includes RootMetrics and Ekahau.

Ars Technica

LLMs can unmask pseudonymous users at scale with surprising accuracy

Pseudonymity has never been perfect for preserving privacy. Soon it may be pointless.

Ars Technica

Google quantum-proofs HTTPS by squeezing 15kB of data into 700-byte space

Merkle Tree Certificate support is already in Chrome. Soon, it will be everywhere.

Ars Technica

Google quantum-proofs HTTPS by squeezing 2.5kB of data into 64-byte space

Merkle Tree Certificate support is already in Chrome. Soon, it will be everywhere.

Ars Technica

New AirSnitch attack bypasses Wi-Fi encryption in homes, offices, and enterprises

That guest network you set up for your neighbors may not be as secure as you think.

Ars Technica

New AirSnitch attack breaks Wi-Fi encryption in homes, offices, and enterprises

That guest network you set up for your neighbors may not be as secure as you think.

Ars Technica

Most VMware users still "actively reducing their VMware footprint," survey finds

Broadcom's "strategy was never to keep every customer," CloudBolt report says.

Ars Technica

Password managers' promise that they can't see your vaults isn't always true

Contrary to what password managers say, a server compromise can mean game over.

Ars Technica

Attackers prompted Gemini over 100,000 times while trying to clone it, Google says

Distillation technique lets copycats mimic Gemini at a fraction of the development cost.

Ars Technica

OpenAI sidesteps Nvidia with unusually fast coding model on plate-sized chips

OpenAI's new GPT‑5.3‑Codex‑Spark is 15 times faster at coding than its predecessor.

Ars Technica

OpenAI researcher quits over ChatGPT ads, warns of "Facebook" path

Zoë Hitzig resigned on the same day OpenAI began testing ads in its chatbot.

Ars Technica

Once-hobbled Lumma Stealer is back with lures that are hard to resist

ClickFix bait, combined with advanced Castleloader malware, is installing Lumma "at scale."

Ars Technica

Malicious packages for dYdX cryptocurrency exchange empties user wallets

Incident is at least the third time the exchange has been targeted by thieves.

Ars Technica

Sixteen Claude AI agents working together created a new C compiler

The $20,000 experiment compiled a Linux kernel but needed deep human management.

Ars Technica

OpenAI is hoppin' mad about Anthropic's new Super Bowl TV ads

Sam Altman calls AI competitor "dishonest" and "authoritarian" in lengthy post on X.

Ars Technica

AI companies want you to stop chatting with bots and start managing them

Claude Opus 4.6 and OpenAI Frontier pitch a future of supervising AI agents.

Ars Technica

Increase of AI bots on the Internet sparks arms race

Publishers are rolling out more aggressive defenses.

Ars Technica

Should AI chatbots have ads? Anthropic says no.

ChatGPT competitor comes out swinging with Super Bowl ad mocking AI product pitches.

Ars Technica

Microsoft releases urgent Office patch. Russian-state hackers pounce.

The window to patch vulnerabilities is shrinking rapidly.

Ars Technica