Hackaday

This Week In Security: Another Linux Exploit, Ubuntu Knocked Offline, Finals Interrupted, And Backdoored Tools

After the CopyFail vulnerability gave root access from any user on almost all distributions last week, this week we’ve got DirtyFrag. This chains the vulnerability in CopyFail (xfrm-ESP) and ...

Official White House app contains code to bypass GDPR banners and paywalls

The app contains multiple features that have sounded alarm bells in this security researcher's analysis.

Google is adopting a new framework to stop shady Android apps from raising hell

Google is expanding Binary Transparency for Android, using a public ledger to help verify official Google apps and spot ...
Cybernews

One tiny exploit gives full Linux access: all kernels since 2017 are vulnerable

The critical "Copy Fail" bug (CVE-2026-31431) affects all Linux kernels since 2017, allowing unprivileged local users to gain ...

Infiniti hopes refined and stylish QX65 will put brand ‘back on the map’

Part of Infiniti’s transformation to inject new life into the luxury brand includes the new QX65 with a coupe-like sloping ...
MUO on MSN

If you come across a USB drive like this, don’t let it near your PC

Don't stick random USB drives in your hardware.
TechSpot

Android wants to replace email verification codes with one-tap credentials

Editor's take: Google is once again trying to simplify something that was already fairly easy and convenient. Mountain View's latest target is email-based authentication, which is now dropping the ...

I used Nova Launcher for over 10 years — but I'm officially done with it

Once the best Android launcher, Nova is now chasing data, ads, and AI-driven monetization over user control. I've switched, ...
The Verge

It’s getting easier for Android devs to code with AI agents.

Along with an upgraded Android CLI, Google is launching a new Android skills GitHub repository and an Android Knowledge base, which can provide AI agents with the information and resources they need ...
AOL

These Chrome Extensions Are Stealing Your Data – Uninstall Them Immediately

A new report by Socket showcases the potential dangers of downloading browser extensions, with grander implications for the broader security landscape. These 108 malicious Chrome extensions disguise ...

Massive Chrome Extension Scam Exposes 20,000 Users to Data Theft

Researchers linked 108 malicious Chrome extensions to a coordinated campaign that exposed about 20,000 users to data theft, backdoors, and ad injection.
Android

Pixel phones are becoming safer via Google's Rust code injection

Google is bringing Rust code to Pixel phones starting with the Pixel 10 as a security measure to prevent malicious attacks on the modem used inside Pixel 10 devices. This injection of Rust code is ...