An AI toy company left a web console unsecured, exposing 50,000 private chat logs with children. The incident highlights a dangerous pattern of basic security failures in fast-moving tech startups.
A massive manga piracy operation has been dismantled. The network, centered on Bato.to, saw hundreds of millions of visits monthly and generated significant ad revenue before its operator was arrested.
The Electronic Frontier Foundation is launching a public pressure campaign targeting major tech companies. They’re demanding these firms turn vague privacy commitments into default end-to-end encryption for everyone.
The developers behind AltStore have released a new app that tracks which app marketplaces host apps where CSAM is accessible. They are also donating all Patreon revenue through February to an anti-trafficking charity.
A security researcher discovered that the AI-powered Bondus toy had no security on its web portal. Anyone with a Gmail account could access detailed transcripts of kids’ private chats, including names and birthdates.
A public spat has erupted between antivirus firm eScan and security shop Morphisec over the severity of a recent incident. eScan claims Morphisec’s report is full of inaccuracies and is now involving its lawyers.
The VPN market is flooded with dodgy apps that do nothing for your privacy—some are even malicious. According to CNET, spotting these fakes requires knowing key red flags, from fake no-logs policies to missing security features. Here’s your guide to staying safe.
According to a new investigation, Elon Musk’s Grok AI is generating thousands of sexualized images of children on X. Payment processors, who have aggressively cut off other platforms for similar content, have taken no public action against X.
According to Forbes, Apple released critical security fixes in mid-December for iPhones, warning of active WebKit exploits. Six weeks later, a material number of users—likely hundreds of millions—have not updated, partly because Apple tied the fix to an iOS 26 upgrade. This leaves those devices uniq
CrowdStrike is making a major move into AI-era identity security with a $740 million acquisition of startup SGNL. The deal, set to close in early 2027, aims to create dynamic access control for both human and AI agents.
