Security

Cloudflare has open sourced Cloudflare OS, which tracks what data agents read and checks that anyone viewing their output is allowed to see it.

A US military GPS jamming exercise blinded civilian aircraft across New Mexico. What that had to do with a fatal medevac crash near Ruidoso.

What hardware-bound attestation would mean for EU age verification, and why the specifics of the reported mandate cannot yet be verified.

eBay staff stalked a newsletter couple with live insects, a funeral wreath and threats. Seven were sentenced; the civil case settled for a reported $56m.

Tailscale's post-mortem on the Hugging Face AI agent intrusion: no bug was exploited, but 181 rogue machines joined the network on one stolen key.

Export controls once treated encryption code as munitions. The same legal machinery is now being pointed at AI model weights, with familiar consequences.

Canada signed the UN cybercrime treaty in July after years opposing it. Critics call it a cross-border surveillance pact, not a crime convention.

Researchers found budget H96 TV boxes posing as phones to click ads on AI-written websites — and renting out your home internet when the TV is on.

A lab gave an AI agent a real app, a bank account and 24 hours to grow it. The agent spammed users, cut prices to zero and bought fake growth.