Feed aggregator

Article URL: https://www.youtube.com/watch?v=JW5s9Md4U2U

Comments URL: https://news.ycombinator.com/item?id=50465619

Points: 3

# Comments: 0

Article URL: https://arxiv.org/abs/2510.26787

Comments URL: https://news.ycombinator.com/item?id=50465606

Points: 2

# Comments: 0

Article URL: https://aiwings.app

Comments URL: https://news.ycombinator.com/item?id=50465603

Points: 1

# Comments: 0

The attackers accessed chat transcripts for fewer than 1% of Notion workspaces. Most transcripts were unattributable.

The post Notion Customer Data Compromised in Fireworks AI Hack appeared first on SecurityWeek.

Article URL: https://www.science.org/doi/10.1126/science.132.3436.1291

Comments URL: https://news.ycombinator.com/item?id=50465582

Points: 4

# Comments: 0

Article URL: https://www.npr.org/2026/11/11/nx-s1-6034449/ai-911-calls-swatting

Comments URL: https://news.ycombinator.com/item?id=50465570

Points: 3

# Comments: 0

Also, you can share your simulation with query parameters, ex) https://cro.sh/specmaxx/?m=deepseek-ai/DeepSeek-V4.1-Flash&d...

Comments URL: https://news.ycombinator.com/item?id=50465568

Points: 2

# Comments: 1

Article URL: https://github.com/alexabbi/fcc

Comments URL: https://news.ycombinator.com/item?id=50465547

Points: 1

# Comments: 0

Article URL: https://lensden.net/products/

Comments URL: https://news.ycombinator.com/item?id=50465543

Points: 2

# Comments: 0

Article URL: https://www.privacyguides.org/news/2026/11/12/grapheneos-announces-pixel-11-support-can-be-completed-now/

Comments URL: https://news.ycombinator.com/item?id=50465531

Points: 2

# Comments: 0

Article URL: https://en.wikipedia.org/wiki/Aspidistra_(transmitter)

Comments URL: https://news.ycombinator.com/item?id=50465522

Points: 1

# Comments: 0

Article URL: https://kotaku.com/humble-bundle-vibe-coded-ai-redesign-account-security-password-email-2000756085

Comments URL: https://news.ycombinator.com/item?id=50465492

Points: 2

# Comments: 1

A website asks you to click “Allow” to start a quiz or read an interesting story. A little later, your device starts warning you about viruses, missed payments, or legal trouble.

While every message may look like a new security problem, the cause could be a permission you granted earlier.

For scammers, browser push notifications turn a passing visit into something much more valuable: access to your attention after you have left their website.

Two investigations—including our own research into deceptive quiz sites and HUMAN Security’s investigation of an operation called Pushpaganda—show how that permission can become a tool for repeated advertising, scareware, and fraud.

Ordinarily, a deceptive website has a limited opportunity to influence you. Once you leave, its sales pitch disappears.

A simple browser push notification permission changes that relationship. A website you’ve authorized can send browser notifications even when you’re not visiting it. Depending on the platform and browser configuration, those messages can appear even when the browser is not visibly open.

Just what scammers need

That gives scammers several advantages:

• Repeat opportunities to get a click. Instead of relying on one visit, they can send more messages to bring you back to their sites.
• A more convincing place to display a lie. Notifications appear through the browser and operating system, while their wording and imagery can impersonate security alerts, financial messages, or people you know.
• Distance from the original trick. By the time alarming messages start appearing, you may not remember which website received permission, let alone connect the alerts to an innocent-looking quiz.
• More chances to make money. The resulting traffic can feed advertising, affiliate promotions, scams, and unwanted downloads.

Allowing notifications doesn’t install malware. But scammers can use them to trick you into clicking a harmful link or downloading something dangerous. That explains why your device can display frightening warnings while a malware scan finds nothing wrong.

The campaignsThe quiz that came with an unwanted extra

Our investigation, published on March 9, began with customers who thought their devices were infected. Malwarebytes scans came up clean. Screenshots helped our Malware Removal Support team identify the real source of the trouble: web push notifications.

While the quizzes were real, the trick was making people think they had to allow the notifications to take them.

Clicking “Start the quiz” first brought up the browser’s notification permission request. Behind that legitimate browser prompt, the website displayed its own instruction:

“Click ‘Allow’ to continue.”

The page made it seem you had to allow the notifications to take the quiz, when it actually meant agreeing to receive future messages.

From clickbait to a notification loop

On April 14, HUMAN Security’s Satori researchers published a larger example of the same underlying strategy. They called it Pushpaganda.

Instead of quizzes, the operation used sensational articles and images, many showing signs of AI generation. Headlines promised attention-grabbing financial developments or implausible technology bargains. The content appeared in Google Discover feeds, exposing it to Android and Chrome users. Researchers could not establish whether those placements resulted from paid promotion or search optimization.

Once someone visited an associated website, the operation prompted them to enable notifications. The messages that followed had little to do with the article that attracted the visitor. Researchers observed fake arrest warrants, false financial alerts, and notifications mimicking missed calls from “Mom” or other family members.

Scam or legit? Scam Guard knows.

TRY IT NOW

Scam Guard stats

The graph shows weekly counts of reports classified by Scam Guard as matching quiz-site notification abuse (red) and Pushpaganda (blue), based on the information provided by users.

The counts show reports over time linked to these campaigns. They don’t represent unique victims, confirmed infections, or total campaign activity.

For context: HUMAN Security’s Satori researchers observed roughly 240 million advertising bid requests associated with Pushpaganda domains in a single seven-day period at the operation’s peak.

A bid request asks advertisers in real-time to bid for an opportunity to show an ad. In a push notification ad auction, the winning ad is sent as a notification to someone who has allowed them.

Note the dip after the reports came out. It takes time to rebuild the infrastructure, but criminals will do so if they think it’s worth the investment.

How to stay safe

Allow notifications only when you want ongoing messages from a site. A few guidelines that may help you:

• Don’t click on prompts until you’re sure what they will set in motion.
• Treat “Allow notifications to continue” as a red flag, particularly on quizzes, video pages, or unfamiliar websites.
• Use web protection. Malwarebytes Browser Guard is a free tool that can help block malicious websites.

If you’re haunted by unwanted alerts, they might be web push notifications. Here’s how to identify the website sending them and turn them off in several popular browsers.

On supported Android devices, Chrome notifications include an Unsubscribe option. Use that built-in control rather than a link inside a suspicious message. When you receive an unwanted website notification through Chrome on Android:

• Swipe down from the top of the screen to open Android’s notification shade.
• Look for an Unsubscribe action on the notification.
• If it is present, tap it to stop future notifications from that website. Chrome also provides Undo if you unsubscribe accidentally.

If Unsubscribe is not present, open Chrome and go to More > Settings > Site settings > Notifications. Review the allowed websites and block the offending site. You don’t need to follow a link in the suspicious notification to manage its permission.

“One of the best cybersecurity suites on the planet.” 

According to CNET. Read their review →

The attackers exploited a vulnerability in a legitimate extension to bypass ScreenConnect authentication.

The post Hackers Deploy Malware in Fresh ScreenConnect Campaign appeared first on SecurityWeek.

We speak to Gartner's Akif Khan about the need for organisations to reassess employee cyber training and agentic AI identity and access management

The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.

The post Hackers Target N-central Zero-Days as N-able Rushes Patches  appeared first on SecurityWeek.

Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.

The post Critical Red Hat Quay Vulnerability Could Expose Private Container Images appeared first on SecurityWeek.

.kadence-column487659_4668c2-bd > .kt-inside-inner-col{padding-top:20px;padding-right:20px;padding-bottom:10px;padding-left:20px;}.kadence-column487659_4668c2-bd > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column487659_4668c2-bd > .kt-inside-inner-col{flex-direction:column;}.kadence-column487659_4668c2-bd > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column487659_4668c2-bd > .kt-inside-inner-col{background-color:rgba(255, 229, 229, 0.83);}.kadence-column487659_4668c2-bd > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column487659_4668c2-bd{position:relative;}@media all and (max-width: 1024px){.kadence-column487659_4668c2-bd > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column487659_4668c2-bd > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}In this article

• A former FBI supervisor stole from cryptocurrency wallets involved in 35 FBI investigations
• He planned to use the proceeds to finance a new life in Portugal
• He turned himself in after confessing to a former colleague

Law enforcement officers are trusted to handle sensitive evidence properly. A 37-year-old former FBI supervisor used that access to steal millions in cryptocurrency.

Patrick Steven Yaroch pleaded guilty on November 5 to wire fraud and money laundering after stealing approximately $2.47 million from cryptocurrency wallets linked to FBI investigations.

He stole the money from wallets held by people the FBI was investigating, which included adversarial nation-state actors. Starting no later than December 2024, he made around 100 transfers using credentials tied to 35 separate investigations.

The FBI’s search affidavit says that Yaroch accessed FBI systems containing wallet seed phrases and memorized them. A seed phrase is a series of words, commonly 12 or 24, used to restore access to a cryptocurrency wallet. Anyone with the seed phrase can potentially control the funds.

He then used the memorized phrases to transfer funds to a personal wallet on his own device. He subsequently swapped assets into different currencies and made further transactions to try and hide their origins.

According to the Department of Justice (DOJ), his actions compromised multiple investigations.

The affidavit also revealed that Yaroch had asked ChatGPT how to invest a million dollars, along with advice on where to live in Europe. It suggested Portugal, and he began the process of setting up a life there.

Caught by a case of cold feet

According to the affidavit, he approached a former DOJ colleague to confess because his actions were “eating him up inside.” The employee urged him to self-report, which he did.

The FBI placed him on leave and then terminated his employment two days later. They showed up at his home with a warrant and seized assets, including his phone, which had access to a Kraken cryptocurrency account. They also seized a piece of paper containing the seed phrases for his own account.

More law enforcement corruption

Yaroch’s justification for his initial actions was frustration that the FBI wasn’t acting quickly enough against the wallets’ criminal owners. So he decided to “take matters into his own hands,” according to the affidavit.

But according to the DOJ, he also used some of the proceeds to cover personal debts, including credit cards, car payments, and other loans.

This isn’t an isolated incident. In December 2024, former Secret Service agent Anthony Joseph Evans pleaded guilty to stealing cryptocurrency worth $56,000 from a hardware wallet held in the agency’s secure evidence vault.

In 2015, former Secret Service agent Shaun W. Bridges also pleaded guilty to money laundering and obstruction of justice after stealing bitcoin during the investigation of Silk Road, a dark web marketplace used to sell illegal drugs and other contraband. He used another person’s administrator account to reset users’ passwords and move bitcoin into a wallet he controlled. The stolen bitcoin was worth approximately $350,000 at the time; he later sold it for $820,000.

“One of the best cybersecurity suites on the planet.” 

According to CNET. Read their review →

The WhiteArmor ransomware group claims it stole 100GB of data from the shipping giant’s systems.

The post Maersk Confirms Data Theft Amid $5 Million Extortion Attempt appeared first on SecurityWeek.