Hackers can infect network-connected wrenches to install ransomware(arstechnica.com)

108 points by ColinWright 2 years ago | 91 comments

Google-hosted malvertising leads to fake Keepass site that looks genuine(arstechnica.com)

334 points by bovem 3 years ago | 173 comments

Ars Technica article on a Google-hosted malicious ad leading to a convincing fake KeePass download site with a look-alike URL and valid TLS certificate.

Microsoft says email spammers are adopting ASCII smuggling(arstechnica.com)

53 points by utiiiD 1 month ago | 29 comments

NPM flooded with malicious packages downloaded more than 86k times(arstechnica.com)

349 points by jnord 1 year ago | 248 comments

Ars Technica article on the PhantomRaven campaign, in which malicious NPM packages that fetch dependencies from untrusted sites were downloaded over 86,000 times.

Hackers infect ISPs with malware that steals customers' credentials(arstechnica.com)

53 points by trelane 2 years ago | 16 comments

Oddest ChatGPT leaks yet: Cringey chat logs found in Google Analytics tool(arstechnica.com)

42 points by vlod 11 months ago | 11 comments

Hackers Had a Live Feed of Every ID Verification Company Scanned for over a Year(techdirt.com)

481 points by beardyw 1 month ago | 197 comments

Techdirt article reporting that hackers had a live feed of every ID scanned by an identity verification company for over a year, exposing 153 million license scans.

Israel demanded Google and Amazon use secret 'wink' to sidestep legal orders(theguardian.com)

836 points by skilled 1 year ago | 332 comments

Guardian investigation reporting that Israel required Google and Amazon to use a secret signal to alert it to foreign legal orders as part of a cloud contract.

Google took three months to remove scam app that stole over $5M(theblock.co)

325 points by svenfaw 2 years ago | 156 comments

The Block news article on a lawsuit alleging Google took three months to remove a scam app from its store that stole over $5 million in crypto.

German ruling declares Google liable for false answers in AI Overviews(the-decoder.com)

893 points by ahlCVA 4 months ago | 489 comments

The Decoder article reporting on a German court ruling that treats Google's AI Overviews as Google's own statements, making it liable for false answers.

Leaking the email of any YouTube user for $10k(brutecat.com)

1548 points by brutecat 1 year ago | 439 comments

A security researcher's write-up of a vulnerability chain that exposed the email address of any YouTube channel owner, earning a $10,000 Google bug bounty.

A Brazilian CA trusted only by Microsoft has issued a certificate for google.com(follow.agwa.name)

405 points by sanqui 1 year ago | 153 comments

A Fediverse post by Andrew Ayer reporting that a Brazilian certificate authority trusted only by Microsoft issued a certificate for google.com.