For years, Google's privacy policy carried one line people actually remembered: your Gmail, Drive, and Photos content wouldn't be used to personalize ads. That promise still exists. It just has a new roommate named "unless." Eleven Words T…

The uncanny valley just got a new resident, and it laughs at your jokes in real time. Block, the payments company behind Square and Cash App, has unveiled a voice model so expressive that the reactions split neatly into two camps: "wow" and…

Some people get a pumpkin spice latte to mark the season. Drupal site owners got 34 security advisories in a single afternoon. It's not the October treat anyone asked for, but it's the one that keeps your site from turning into a haunted ho…

Fool me once, shame on you. Fool me twice, and I'm rotating every credential I've ever owned. LiteLLM, the popular open-source gateway that lets apps talk to dozens of AI models through one interface, has been hit by its second supply chain…

Most security dramas have one villain. This one has two memory-corruption bugs, three AI-assisted research teams, one security vendor that shipped early, and an open-source project with a lot to say about it. If you run anything on PHP, and…

The best heists in the movies never involve breaking into the vault. Somebody just walks in wearing the right uniform. A campaign Wiz calls "Gheist" pulls the same move on GitHub: with stolen tokens, attackers get your own CI pipeline to re…

Some malware kicks down the door. This campaign is more like a possum: poke it with a security scanner and it lies perfectly still, showing nothing. Show up as a real shopper, though, and it wakes right up. Sansec has found that trick runni…

For years, AI coding assistants have been the world's most talented backseat drivers: brilliant at suggesting where to turn, totally unable to touch the wheel. Cursor just handed them the keys. Its agents can now click and type their way ar…

There's a classic move in tabletop games where the player who owns the most property also starts lending money to the bank. Meta just tried a version of that in real life: it needs staggering amounts of cash for AI, and some of the companie…

Most startups celebrate their IPO filing with a cake. Anthropic's S-1 runs long enough that its risk factors section alone spans pages 26 to 119, which is less "cake" and more "a multi-volume novel with a cliffhanger about insurance capacit…