Cyberattacks and Hacks

Unwelcome Guest
Scammers Are Using Your Real Hotel Reservations to Trick You With Spear-Phishing Attacks
Customer data from more than 350 hotels around the world may have been accessed as part of realistic reservation-hijacking scams.
Matt Burgess


Security Roundup
The FBI Wants ‘Near Real-Time’ Access to US License Plate Readers
Matt Burgess, Dell Cameron, and Andrew Couts

Rampage
A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale
Andy Greenberg and Lily Hay Newman

Security Roundup
Cybercriminal Twins Caught After They Forgot to Turn Off Microsoft Teams Recording
Andy Greenberg, Maddy Varner, Dell Cameron, and Andrew Couts



Security Roundup
Hackable Robot Lawn Mower Unlocks a New Nightmare
Maddy Varner, Matt Burgess, Andy Greenberg, and Andrew Couts


Bad Vibes
Thousands of Vibe-Coded Apps Expose Corporate and Personal Data on the Open Web
Andy Greenberg


Security Roundup
Disneyland Now Uses Face Recognition on Visitors
Lily Hay Newman, Andy Greenberg, and Andrew Couts

CopyFail
Dangerous New Linux Exploit Gives Attackers Root Access to Countless Computers
Dan Goodin, Ars Technica



Security Roundup
Discord Sleuths Gained Unauthorized Access to Anthropic’s Mythos
Matt Burgess, Lily Hay Newman, and Andy Greenberg

Sneak Attack
Newly Deciphered Sabotage Malware May Have Targeted Iran’s Nuclear Program—and Predates Stuxnet
Andy Greenberg

Vibe Snatching
AI Tools Are Helping Mediocre North Korean Hackers Steal Millions
Andy Greenberg and Matt Burgess


Security Roundup
It Takes 2 Minutes to Hack the EU’s New Age-Verification App
Dell Cameron, Maddy Varner, Andy Greenberg, and Andrew Couts


Security Roundup
Your Push Notifications Aren’t Safe From the FBI
Matt Burgess, Maddy Varner, Lily Hay Newman, and Dell Cameron

Doom and Gloom
Anthropic’s Mythos Will Force a Cybersecurity Reckoning—Just Not the One You Think
Lily Hay Newman