UPDATED
BleepingComputer · · Medium severity
Six vulnerabilities in the widely used U-Boot bootloader have been discovered that could allow attackers to execute malicious code during device boot, potentially enabling stealthy firmware attacks that compromise security protections...
Engadget ·
The lawsuit also names io Products, the hardware company led by Jony Ive.
Digital Trends ·
Apple has sued OpenAI, alleging the company orchestrated a campaign to steal confidential product information through former employees as both companies race to build next-generation AI hardware.
Slashdot · · Unconfirmed
Disney is exploring a free tier for Disney+ that would make some content available without a subscription. According to Nielsen data, the three largest free streamers accounted for 18.7% of watch time on U.S. TVs in April, up from 16.8%...
The Hacker News ·
Researchers at firmware security firm Binarly have found six new flaws in U-Boot, the small program that starts up hardware as varied as home routers, smart cameras, and the management chips inside data-center servers. Four of the bugs...
AWS Security Blog ·
Amazon Web Services EMEA Sarl (AWS) has been designated as a critical third party (CTP) to the UK financial sector by HM Treasury. The CTP regime came into force on January 1, 2025, and establishes a framework through which the Bank of...
Infosecurity Magazine ·
CISA reveals how it responded after sensitive AWS GovCloud credentials and internal data were exposed in a public GitHub repository
The Hacker News ·
Details have emerged about three now-patched security flaws in the OpenClaw personal artificial intelligence (AI) assistant that, if successfully exploited, could enable credential theft, privilege escalation, and arbitrary code...
Inc42 Media ·
Budget hostel chain Zostel has withdrawn an urgent application it had filed with the Delhi High Court seeking protection for a 7% stake it has claimed in IPO-bound PRISM, the parent company of hospitality chain OYO. Zostel had argued...
MEDIANAMA ·
Meta Platforms has disclosed that US state attorneys-general are seeking up to $1.4 trillion in penalties , alleging the company intentionally made Facebook and Instagram addictive for young users and misled the public about platform...
Ubuntu security notices · · Medium severity
It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking...
Help Net Security ·
Accounts receivable teams at large companies spend hours each day matching incoming bank payments to invoices by hand. When those payments sit unmatched for days, cash flow suffers and days sales outstanding climbs. The same pattern...
AWS Security Blog ·
AWS MCP Server using the same credentials and sign-in methods that you already use for connecting to the AWS Management Console or AWS Command Line Interface (AWS CLI) through a familiar browser-based experience powered by...
PYMNTS.com · · Unconfirmed
Newspapers suing OpenAI for copyright infractions are reportedly now seeking sanctions against the AI startup. The papers, The New York Times (NYT) and New York Daily News among them, accuse OpenAI of lying to a federal court about its...
BleepingComputer ·
Microsoft says Windows users should expect to see an increase in security updates as the company increasingly relies on artificial intelligence to discover vulnerabilities in its codebase.
MacRumors ·
In May, Apple agreed to pay $250 million to settle a U.S. class action lawsuit over Siri AI's delayed launch, and eligible iPhone users could receive up to a $95 payout. This week, the California court overseeing the case held a hearing...
TNW ·
SK Hynix’s American listing has been more than seven times oversubscribed, according to people familiar with the deal, a sign of heavy demand for one of the largest share sales Wall Street has fielded from a foreign company. The South...
HackRead ·
Wiz found GhostApproval symlink flaws in major AI coding assistants that could hide sensitive file targets, bypass approval checks and enable system access too.
Wired ·
“EMF straws” and similar products are being sold as a way to block electromagnetic frequencies that come from common electronic devices, even without scientific evidence that they work.
IT Pro ·
Flaws in some of the most popular AI coding tools left developers wide open to attack
Help Net Security ·
Claude apps gateway for AWS is a self-hosted control plane that gives organizations a single point of control over access, costs, and policies for Claude Code and Claude Desktop. It replaces per-developer cloud credentials, manual...
Electronics For You BUSINESS ·
Strong investor interest highlights confidence in the AI memory chip leader as the company raises funds to expand production capacity. SK Hynix’s proposed $28 billion share sale has attracted demand exceeding seven times the number of...
YourStory RSS Feed ·
Most developers working with AI today can get a model to respond to a prompt. A surprising few have shipped an agent that holds up in production. The distance between those two points is where most agentic projects stall: frameworks...
Help Net Security ·
Network analysts who open packet captures in Wireshark push untrusted data through a large set of protocol dissectors, and each parser is a spot where a malformed frame can trip up the software. The 4.6.7 maintenance release closes...
The Hacker News ·
Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer's computer. The assistant asks permission to edit one harmless-looking file, but the write...
TechRadar ·
I can't get Netflix to run smoothly in my house — but NASA just sent a 4K video stream from the Moon, thanks to AWS
Slashdot ·
John Deere has agreed to a 10-year FTC-supervised right-to-repair settlement requiring it to provide farmers and independent repair shops with the same repair resources available to authorized dealers. The deal resolves antitrust claims...
Ars Technica ·
Kalshi lost an attempt to override New York's state gambling laws yesterday, with a federal judge rejecting the prediction market operator's request to prevent enforcement of the rules. Kalshi is appealing the decision to a higher...
Ars Technica ·
One of the most horrific cases of allegedly Grok-generated child sex images was shared in a proposed class action lawsuit that was expanded Tuesday. Now, young girls not only accuse X and xAI of building toxic AI "nudify" tools but also...
darkreading · · High severity
The attacker exploited AI workflows, chained cloud weaknesses, and stolen credentials to extort a large Amazon customer.
TechRadar ·
Christian Cawley has extensive experience as a writer and editor in consumer electronics, IT and entertainment media. He has contributed to TechRadar since 2017 and has been published in Computer Weekly, Linux Format, ComputerActive,...
The Record by Recorded Future ·
The use of the spyware came to light in 2022, with traces of Predator found on dozens of phones. The scandal led to the resignation of Greece’s intelligence service chief and the prime minister’s chief of staff.
Hacker News ·
The Hacker News · · Medium severity
Ubiquiti has shipped updates to address multiple critical security flaws impacting UniFi Connect, UniFi Talk, UniFi Access, UniFi Protect, and UniFi OS that could result in privilege escalation and arbitrary command execution. The list...
BGR ·
Before he left the show, Jaws star Roy Scheider led this underwater sci-fi adventure backed by Steven Spielberg. But here's why NBC's seaQuest DSV sank.
Tech-Economic Times ·
In its response, the company acknowledged that Anevolve Mando E-Mobility and Sterling E-Mobility Solutions, vendors supplying key parts to the company, have moved the National Company Law Tribunal (NCLT) over unpaid dues, escalating a...
HackRead ·
China-linked UNK_MassTraction targets US and Canadian universities through Roundcube flaws, stealing sessions and opening access to research mail servers.
SecurityWeek ·
Two newly disclosed critical vulnerabilities in Adobe ColdFusion and Langflow join two Joomla extension flaws in CISA's Known Exploited Vulnerabilities catalog, with federal agencies given until July 10 to patch. The post CISA Urges...
Tech-Economic Times ·
The cryptocurrency industry is preparing for quantum computing threats. New research suggests quantum computers could crack encryption sooner than expected. This technology poses an existential risk to digital assets and networks.
TechAfrica News ·
CAMTEL has initiated discussions with Amazon Web Services (AWS) aimed at exploring collaboration opportunities to accelerate digital transformation in Cameroon. The state-owned telecommunications operator hosted a high-level delegation...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free