News Archive
Technology news that matters to regular people and small-business owners: what changed, who it affects, and why it is worth paying attention to.
Newest first. Use the page controls at the bottom to move back through the archive.
-
When Trusted Access Becomes the Attack Path
A service provider cyberattack, a poisoned security update, active VPN exploits, AI-agent permission failures, freezer attacks, Amazon ad-auction allegations, and a practical NIST guide show what trusted access can really do.
-
A Bank Heist Through a Vendor, Plus 3 Tech Stories
A service-provider path into a bank, Claude Code permission files that preserved secrets, questions about independent AI safety testing, and fake gift-card subscription traps.
-
SonicWall VPN Flaw Is Under Attack, Plus 4 Stories
An exploited SonicWall VPN flaw, Plex2Shell attacks on QNAP, a WorkOS AI-agent breach, Flock camera removals, and unpatched D-Link switch flaws.
-
Amazon’s Ad Auctions Face New Claims, Plus 3 Stories
New Amazon ad-auction allegations, a Chainalysis credential breach, Android’s GhostMap crash loop, and fake AI-event phishing.
-
WordPress Update Flaw Is Under Attack, Plus 3 Stories
Attackers are exploiting a WordPress flaw during core updates. Also: mSecure’s encrypted database theft, patched Zyxel switches, and a refrigeration attack where recovery controls worked.
-
Security Update Backdoored Web Servers, Plus 3 Stories
A trusted cPGuard update backdoored Linux servers, while Google tied school Search access to AI controls and stolen cloud credentials drove huge AI bills.
-
Hackers Set Supermarket Freezers to 122°F
Supermarket freezer cyberattacks turned remote access into spoiled inventory. Plus payment-contract allegations, DaySmart account abuse, and a NIST guide for one-person businesses.
-
Binance Withdrawals Resume, Plus 3 Tech Stories
Binance is restoring withdrawals after a $6.3 billion theft. Plus enforceable school AI privacy terms, Applebee’s exposed app credential, and Google Sheets citations.
-
When the Backup Box Becomes the Ransomware Target
Synology ransomware turns the backup appliance into the week’s most practical warning. Plus hospital downtime, exploited ecommerce software, AI permission failures, Toast’s lock-in problem, connected-car data, and private chats in bankruptcy.
-
Synology NAS Ransomware, Plus 2 Tech Stories
Synology NAS ransomware is targeting outdated DSM releases. Plus, the FTC’s allegations against Toast and the fight over Character.AI chat records.
-
Drupal Commerce Stores Need Patching, Plus 2 Stories
An actively exploited Drupal Commerce vulnerability leads today’s brief, followed by a malicious Cursor extension and a patient-data exposure caused by unapproved AI use.
-
GM Driver Data Settlement, Plus 3 Tech Stories
GM will pay $220 million over driver-data allegations. Plus Florida’s financial-aid breach, DreamHost credential exposure, and an FTC pricing inquiry.
-
New York Restricts AI Chats With Kids, Plus 3 Stories
New York restricts manipulative AI companion behavior with minors. Plus a DHS personnel leak, Chrome’s Gmail autofill, and ads inside AI Mode conversations.
-
Cyberattack Diverts Ambulances, Plus 3 Stories
A cyber incident diverted ambulances from New Mexico’s only Level 1 trauma center. Plus an exploited Magento flaw, ad-auction surveillance, and Apple security updates.
-
AI Tests Reached Real Systems, Plus 2 Stories
Anthropic’s filing shows how AI tests reached live systems through a misconfigured environment. Plus weak website-certificate keys and a Node.js Brotli security fix.
-
Google’s AI Connections Can Shape Ads, Plus 2 Stories
Google’s AI connections can let permitted account data influence ad personalization. Plus actively exploited Nextcloud and VeloCloud flaws, and Meta’s delayed terms.
-
Your Website Is More Than the WordPress Dashboard
Critical PHP flaws exposed a blind spot beneath WordPress, while AI agents, cloud outages, aging servers, and fraud showed where control really lives.
-
Windows Server 2016 Support Ends Soon, Plus 2 Stories
Windows Server 2016 support ends January 12, 2027. Plus Quest’s patient-record breach and the security risk left behind by an abandoned app.