Welcome to Kernel Panic, a weekly newsletter by Lily Hay Newman and Matt Burgess from inside the new world of privacy and digital security. To receive this newsletter in your inbox each week, sign up…
Within North Korea’s sprawling hacking operations—often designed to earn money for the highly sanctioned and repressive regime—TraderTraitor has stood out in recent years for its sophistication and targeting of crypto and decentralized finance companies. Last…
The AI software-development platform Cursor, which is owned by SpaceX, had a malicious Anthropic Claude Code extension for Windows, macOS, and Linux live in its integrated development environment extension marketplace for roughly 11 hours on…
In a fitting sign of the times, the hacker’s carefully laid plans were foiled by an AI agent. It was September 25, 2026, and Alex, a professional online poker player, was using his Claude AI…
Two permission groups, named “Executive Leadership” and “AI Access,” appear to list people given exceptions to DHS’s web filter, which blocks some websites for employees. They contain the same 13 people, including former DHS head…
Bluesky is blocking users from opening links to a newly leaked archive of records on more than 41,000 Department of Homeland Security employees and contractors, and labels the pages “malicious.” The files include people’s email…
The Chinese-speaking actor also used what’s known as a “run time patch,” in this case a tool known as ClawGod, to add functionality on top of Claude Code and attempt to remove the “CYBER_RISK_INSTRUCTION” from…
The internet’s mad scramble on Wednesday to patch a pair of critical vulnerabilities in PHP, a widely used web scripting language, was already too late to stop every attack, newly released details reveal. Wednesday’s release…
At a promotional event in Times Square on Wednesday for the security company NordVPN, brand ambassador Shaquille O’Neal said he is eager to raise awareness among regular people about the importance of digital security and…
Australia is investigating whether OpenAI broke the law after an agent hacked into its health statistics portal in the first widely known incident of an AI agent hacking a government website. The Australian government is…
