Security News



Bad Vibes
Thousands of Vibe-Coded Apps Expose Corporate and Personal Data on the Open Web
By Andy Greenberg

Master of Disguise
A Kid With a Fake Mustache Tricked an Online Age-Verification Tool
By Fernanda González


Thin Skin
DHS Demanded Google Surrender Data on Canadian’s Activity, Location Over Anti-ICE Posts
By Maddy Varner

Security Roundup
Disneyland Now Uses Face Recognition on Visitors
By Lily Hay Newman, Andy Greenberg, and Andrew Couts

CopyFail
Dangerous New Linux Exploit Gives Attackers Root Access to Countless Computers
By Dan Goodin, Ars Technica



Behave, Bot
The Race Is on to Keep AI Agents From Running Wild With Your Credit Cards
By Lily Hay Newman
Gun Violence
California Engineer Identified in Suspected Shooting at White House Correspondents’ Dinner
By Caroline Haskins and Andrew Couts

Security Roundup
Discord Sleuths Gained Unauthorized Access to Anthropic’s Mythos
By Matt Burgess, Lily Hay Newman, and Andy Greenberg


Sneak Attack
Newly Deciphered Sabotage Malware May Have Targeted Iran’s Nuclear Program—and Predates Stuxnet
By Andy Greenberg

Vibe Snatching
AI Tools Are Helping Mediocre North Korean Hackers Steal Millions
By Andy Greenberg and Matt Burgess



Strike Gold
The Weird, Twisting Tale of How China Spied on Alysa Liu and Her Dad
By Timothy McLaughlin

Security Roundup
It Takes 2 Minutes to Hack the EU’s New Age-Verification App
By Dell Cameron, Maddy Varner, Andy Greenberg, and Andrew Couts