AT&T and Samsung launch kid-friendly amiGO Jr. phone for $2.99/mo

AT&T and Samsung have launched the amiGO Jr., a kid-friendly smartphone designed for parents and kids. It is a rebranded Galaxy A16 5G with AT&T's proprietary 'amiGO app' pre-installed, offering parental controls like screentime, app, and setting management. The device is priced at $2.99/mo after monthly bill credits, with an AT&T plan still required.

Smart glasses are back, privacy issues included

Smart glasses, combining fashion with AI, have re-entered the market with privacy concerns. The most notable model, Ray-Ban Meta glasses, has raised questions about data collection and storage, especially given Meta's history with privacy issues. The glasses include a camera, microphone, and LED indicator for recording, but their use in public spaces and workplaces has sparked debates about consent and legal implications. Organizations must consider privacy laws and implement policies to manage the use of such devices.

Apple’s M5 Pro and M5 Max to Bring Better Heat Dissipation and Lower Resistance

Apple plans to ship its next 14 inch and 16 inch MacBook Pro models with M5 Pro and M5 Max chips that run cooler and more efficiently, even though the laptops will keep the same basic cooling hardware. Instead of changing the heatpipe or switching to a vapor chamber, Apple plans

Nitrogen Ransomware: ESXi malware has a bug!

Nitrogen ransomware was derived from the previously leaked Conti 2 builder code, and is similar to Nitrogen ransomware, but a coding mistake in the ESXi malware causes it to encrypt all the files with the wrong public key, irrevocably corrupting them. This means that even the thr

The AI productivity trap: Why your best engineers are getting slower

The AI gives you a dopamine hit. Text appears on the screen at superhuman speed and the blank page problem vanishes. But the engineer’s role has shifted from being a creator to being a reviewer and that is where the trap snaps shut.

Ex-Google engineer found guilty of stealing AI secrets

He faces a maximum sentence of 10 years in prison for each count of theft of trade secrets and up to 15 years for each count of economic espionage.

Google agrees to pay $135 million over Android data harvesting claims

Google has agreed to pay $135 million to settle a class action lawsuit brought by Android users over alleged unauthorized cellular data transmissions. The settlement requires Google to update its disclosures and obtain express consent from new users. A judge will review the deal before final approval.

Unmasking GSRAT in North Korea-linked APT operation

In May 2025, North Korea-related APT actor Konni launched an attack using a new AutoIt-based RAT (GSRAT). This campaign targeted organizations associated with Japanese financial institutions. Konni distributed malware consisting of an LNK file and an AutoIt script via a spe

How Outlook add-ins in Microsoft 365 can be exploited to exfiltrate sensitive email data without leaving forensic traces

Varonis Threat Labs reveals how Outlook add-ins in Microsoft 365 can be exploited to exfiltrate sensitive email data without leaving forensic traces. This method, called Exfil Out&Look, is particularly dangerous when add-ins are installed via Outlook Web Access (OWA), as it leaves no audit log entries. The lack of visibility and logging creates a severe accountability gap, allowing malicious or overly permissive add-ins to operate undetected for extended periods. Microsoft categorized this as a low-severity product bug with no immediate fix or patch planned. Organizations should be aware of this attack vector and implement measures to limit its impact, such as enhanced audit logging, stricter consent enforcement, and better governance over add-in deployment and behavior.

The former chief scientist at Chinese drone maker DJI explains why he is building robots for ‘forgotten’ sectors, such as agriculture

James Wu, founder and CEO of FJDynamics, a robotics company specializing in automating labor-intensive industries like agriculture and construction, shares his vision of addressing labor shortages in 'forgotten' sectors. He emphasizes the importance of demand-specific robots and the need to make blue-collar jobs more attractive to the younger generation. Wu discusses his background, challenges, and the philosophy behind FJDynamics' approach to innovation and problem-solving.

Meta CEO blocked curbs on sex-talking chatbots for minors, court filing alleges

Zuckerberg favored being less restrictive on AI bots, internal Meta message says Meta 'declined to impose reasonable guardrails' - New Mexico attorney general Senior Meta official anticipated 'inevitable backlash' against AI policy

Inside Microsoft’s veteran-to-tech workforce pipeline

Chris Cortez, VP of Military Affairs at Microsoft and longtime leader of the Microsoft Software and Systems Academy m, and Corey Lee, Security CTO for Microsoft Education, discuss how Microsoft has built and scaled a veteran-to-tech pipeline that responds directly to real-world h

PDFSIDER malware: Exploitation of DLL side-loading for AV and EDR evasion

PDFSIDER is a newly identified malware variant distributed through DLL side-loading, designed to covertly deploy a backdoor with encrypted command-and-control (C2) capabilities. The malware uses a fake cryptbase.dll to bypass endpoint detection mechanisms.

MacSync Stealer Returns: SEO Poisoning and Fake GitHub Repositories Target macOS Users

The Daylight Security MDR team is tracking an active infostealer campaign targeting macOS and Windows users. Threat actors use SEO poisoning and fake GitHub repositories to trick users into running malicious code. The campaign has been active since at least August 2025, with over 20 malicious repositories still active. The malware, known as MacSync, aggressively harvests credentials from browsers, macOS Keychain, cloud services, and cryptocurrency wallets.

Nvidia announces its Earth-2 Medium Range weather model, claims it outperforms Google DeepMind's GenCast

Nvidia announced three new AI weather tools at the American Meteorological Society meeting in Houston. The Earth-2 suite, including Earth-2 Medium Range, Nowcasting, and Global Data Assimilation models, promises to improve the accuracy and accessibility of weather forecasts. Earth-2 Medium Range claims to outperform Google DeepMind’s GenCast on over 70 variables, while Nowcasting provides short-term predictions and Global Data Assimilation uses data from weather stations and balloons to produce continuous weather snapshots.

Apple updates AirTag with expanded range and improved findability

Apple has updated its AirTag tracking accessory with a new version that extends connectivity range and improves findability. The updated AirTag uses a second-generation Ultra Wideband chip to increase the distance at which Precision Finding can guide users to a lost item. An upgraded Bluetooth chip also expands the range at which items can be detected by linked devices. The new AirTag’s internal speaker is louder, allowing the sound to be heard from a greater distance. Precision Finding for AirTag is now available on Apple Watch Series 9 and Apple Watch Ultra 2 devices when paired with compatible software releases. The updated AirTag continues to include safeguards aimed at preserving privacy and limiting misuse.

Call for comments: NIST guide to OT Security

NIST has initiated the process of revising SP 800-82, Guide to Operational Technology (OT) Security, to incorporate lessons learned, align with relevant NIST guidance (e.g., Cybersecurity Framework (CSF) 2.0, NIST IR 8286 Rev. 1, NIST SP 800-53 Rev. 5.2.0) and OT cybersecurity st

Designing AI resistant technical evaluations

Written by Tristan Hume, a lead on Anthropic's performance optimization team. Tristan designed, and redesigned, the take-home test that's helped Anthropic hire dozens of performance engineers.

RCE flaw in Cisco enterprise communications products probed by attackers (CVE-2026-20045)

Cisco has fixed a critical remote code execution vulnerability (CVE-2026-20045) in its unified communications solutions that is being exploited by attackers. The vulnerability stems from improper validation of user-supplied input in HTTP requests, allowing attackers to gain user-level access and potentially elevate privileges to root. Affected products include Cisco Unified Communications Manager, Session Management Edition, IM & Presence Service, Unity Connection, and Webex Calling Dedicated Instance. Cisco advises immediate remediation by upgrading to a fixed software release or applying a patch.

GNU InetUtils Security Advisory: remote authentication bypass in telnetd

Old habits die hard: 2025’s most common passwords were as predictable as ever

Old habits die hard: 2025’s most common passwords were as predictable as ever. Data from NordPass and Comparitech reveals that '123456' remains the most popular password, with 25% of the top 1,000 passwords consisting solely of numerals. This trend poses significant security risks, as weak passwords are easily compromised via brute-force or credential stuffing attacks. Users are advised to adopt strong, unique passwords and enable two-factor authentication for enhanced security.

Linux users targeted by crypto thieves via hijacked apps on Snap Store

Cryptocurrency thieves are targeting Linux users by hijacking apps on the Snap Store, turning trusted software packages into crypto-stealing malware. They are taking over expired web domains and associated email servers tied to existing Snap Store publishers to push malicious updates to previously benign packages. Canonical has removed the malicious snaps, but more thorough solutions are required to stem the flood of malicious packages. Users are advised to be especially careful with cryptocurrency wallet snaps and consider obtaining such applications directly from official project sites rather than through any app store.

How to Get Scammed (by DPRK Hackers)

Keylogger targets 200,000+ employees at major US bank

Sansec discovered a keylogger on a major US bank's employee merchandise store, targeting over 200,000 employees. The malware harvests sensitive data, including login credentials and payment card numbers. This breach highlights the importance of securing external sites that handle employee credentials and the need for specialized tools to detect ecommerce-specific attacks.

Infection repeatedly adds scheduled tasks and increases traffic to the same C2 domain

In recent weeks, Lumma Stealer infections have followed a specific pattern in follow-up activity. This pattern adds scheduled tasks for the same action, which increases traffic to the same C2 domain. This diary documents an example from one of these infections on January 14, 2026

Firmware scanning time, cost, and where teams run EMBA

Researchers looked at EMBA deployments on a local standalone system and on a Microsoft Azure virtual machine. They focused on execution time, repeatability, cost, and operational characteristics that matter to practitioners who rely on firmware analysis as part of regular securit

Is it time for internet services to adopt identity verification?

This article discusses Australia's new legislation banning social media accounts for those under 16 and explores the broader implications for internet identity verification. It highlights the potential benefits of verified identities in reducing online abuse and harmful content, while also acknowledging the privacy concerns and challenges of implementing such measures.

FTC accuses AI search engine of 'rampant consumer deception'

The company's offerings are allegedly a ploy to lock consumers into recurring charges they don't want, a scheme that ensnared hundreds of thousands of people and that federal regulators are calling "rampant consumer deception."