Posts

Microsoft helped shut down an “App Store” for criminals linked to over a billion malicious messages

Microsoft collaborated with the Japanese National Police Agency to tackle Chinese-language cybercrime “app stores” The YAM Store, CoGUI, and Iron Man have targeted people in more than 150 countries Microsoft is working with law enforcement agencies worldwide to take down illegal operations that target businesses and individuals Microsoft has announced a successful operation with the Japanese National Police Agency in which a collection of cybercrime app stores were disrupted. Investigating fraudulent, scam messages targeting Japanese businesses and citizens, the operation uncovered a multi-faceted criminal marketplace, with three key elements. The YAM Store, CoGUI, and Iron Man had targeted 75,000 organizations across more than 150 countries worldwide, sent over one billion malicious communications promoting scams, and generated millions of dollars for the criminals behind them. Furthermore, 750 ...

Claude flags nearly 500 worrying open source security issues — C, Java, and Python code all at risk as one flaw wasn't spotted for 21 years

Anthropic used Claude to analyze 25 open source projects and uncovered nearly 500 security issues Research found exposed pre-authentication code paths, conflicting security settings, and long-hidden flaws AI identified attack-surface reductions that removed unnecessary code exposure before vulnerabilities could be exploited Anthropic recently used Claude to analyze 25 major open source projects written in C, C++, Java, PHP, and Python, in search of security issues. It found almost 500 of them, including security controls turned off by conflicts in settings, sensitive code accessible before authentication, and even a vulnerability that sat in the code for 21 years. This wasn’t a standard hunt for vulnerabilities. In its report , Anthropic argues that looking for individual vulnerabilities is a Sisyphean task that scales poorly and never guarantees security. Instead, it thinks defenders should turn...

Clayface review: Tom Rhys Harries shines in DCU body horror gamble that largely pays off

Image
Light spoilers follow for Clayface . Not many people would've predicted that a Clayface movie would be part of James Gunn and Peter Safran's DC Universe (DCU). Three years after Gunn unveiled the initial DCU slate , fewer still expected a shape-shifting villain to beat heavy hitters like Batman and Wonder Woman to the big screen. And yet, here we are. Four months after Supergirl bombed at the box office, Clayface feels like a crucible moment for a cinematic universe that's still trying to find its footing and drop a few spontaneous surprises along the way. And, while the lovingly crafted origin story delivers on the latter front, it doesn't fully succeed in helping to shape the direction of DC 's fledging comic book franchise. Face/Off Clayface is arguably the biggest role of Welsh actor...

DJI’s Power 1000 V2 delivers all-day drone charging with 2,600W of home backup — and Amazon dropped the price to $400

Image
DJI might not be as well-known in the power supply space as Anker, Bluetti, EcoFlow, or Jackery, but its range of portable power stations have proved rather impressive in our tests. I find them particularly good for drone operators, since the units feature SDC ports for charging DJI drones. But that's not the only use for these power stations. The DJI Power 1000 V2, currently $400 (was $600) at Amazon , is a prime example of that, with its 1,024Wh battery capacity, 2,600W output, and a port selection that makes it well-suited for home backup during emergency power outages. • Best for: Drone operators charging multiple devices on the move, or home-owners wanting emergency backup power for appliances, electronics, and outdoor equipment. • What we like: The DJI Power 1000 V2 is a portable battery station that can also come along on camping trips, RV adventures, and outdoor challenges. Today...

Russia drafted plans for AI that could block 95% of VPNs — but the idea has quietly vanished from its national roadmap

A draft of Russia's national AI plan proposed using AI to analyze 70% of blocked VPN services and lift blocking effectiveness to 95% The Digital Development Ministry says the measure is absent from the current draft, but Roskomnadzor's separately budgeted and arguably crucial ML filtering project remains The 95% is an effectiveness target, not accuracy, and sources expect AI to raise false positives, with corporate VPN, cloud and voice traffic most exposed Russia's Digital Development Ministry considered using artificial intelligence to push the effectiveness of its VPN blocking to 95%, according to a front-page report in Kommersant . The measure appeared in a draft of the country's national plan for implementing AI through 2030; the ministry now says it is not in the current version. This isn't the first time such a move has been reported, but some earlier coverage might have...

Millions of California students have sensitive data stolen — names, SSIDs, home addresses and more taken in attack on nonprofit

Image
California Department of Education third-party partner falls victim to a data breach attack An estimated three years' worth of students (5.7 million per year) likely affected It seems access was obtained by a simple password theft Malwarebytes has reported that millions of current and former California public school students have had their sensitive personal information stole following a massive data breach. The breach occurred in a Secure File Transfer Protocol (SFTP) system used by Educational Testing Service (ETS) – a third party used by the California Department of Education for managing student information. According to the report, the attackers were able to regain entry repeatedly over the course of four months, accessing student files filled with names, addresses, dates of birth and more. California student system breach likely impacting millions Though ETS hasn't officially discl...

Is the new-look Kindle Colorsoft 2026 worth buying? Here's what you need to know

Image
The Kindle Colorsoft is Amazon's cheapest color e-reader, and it just got a 2026 update. The new version is thinner and lighter than its predecessor, the Kindle Colorsoft (2024) , and features an edge-to-edge 7-inch color display. It's pricier than the black-and-white Kindle Paperwhite, and the color display shortens battery life, but these compromises are worth it for fans of graphic novels and manga. If you're wondering if a Kindle Colorsoft is the best e-reader for you, you're in the right place. In this article, I'll cover all the key info worth knowing, including what's changed compared to the 2024 version, how the regular and Signature editions differ, and the key pros and cons of this specific e-reader. I've also rounded up all available versions and their current pricing, so you can easily browse your options. Let's go... Kindle Colorsoft — overview The Ki...