Cybersecurity

Vulnerabilities, data breaches, privacy and how to stay safe.

• Burger King Japan Breach Leaks 11M App User Records

  Burger King Japan has confirmed a massive cybersecurity breach compromising personal details and order histories for over 11.18 million mobile app customers.

• 44% of AI-Generated Code Fails Basic Software Security Checks

  AI assistants write code that compiles 99.9% of the time, but 44% introduces vulnerabilities. Software flaws are now the primary breach entry point.

• OpenAI Bugging Suspect Was Courted by Saudi Royal, Feds Say

  Court filings show the engineer accused of placing a listening device in an OpenAI boardroom was communicating with a Saudi royal days before his arrest.

• Fake WatchGuard VPN Site Stole Admin Logins, Then Served the Real App

  A lookalike WatchGuard download page collected VPN server addresses, usernames and passwords, then handed over the real signed installer so nothing looked wrong.

• Norwegian Rental Cars Recorded Troops Typing Gate Codes

  Soldiers in Norway discovered their rental cars had been recording them, including gate codes, during an exercise. No evidence suggests the footage left the vehicles.

• Ads Alone Infected 45 Al Jazeera Devices With Spyware, Citizen Lab Finds

  Citizen Lab has documented the first known case of mercenary spyware delivered through ad impressions alone — no click required. At least 45 Al Jazeera devices were hit.

• MapQuest Now Maps Flock Cameras With 120,000 Red Eyes

  MapQuest's new Surveillance Layer plots Flock and other license plate readers as red eyes on the map, and users are calling it a reason to switch from Google.

• UK Nuclear Sub Crews Train to Fight Drones With Fire Hoses

  Royal Navy submariners at HMNB Clyde are learning to swat drones out of the sky with firefighting hoses, a cheap last-resort defence for £4 billion nuclear submarines.

• MapQuest Maps License Plate Readers as Tiny Eyeballs

  MapQuest's new Surveillance layer plots license plate readers from Flock and a dozen other vendors as tiny eyeballs on the map. It's a privacy tool from an unexpected source.

• Fake Calendar Invites Hit 40,000 Firms in Microsoft Phishing Surge

  Check Point Research says hundreds of thousands of fake calendar invites and .ics attachments are being used to steal Microsoft 365 logins from more than 40,000 organizations.

• PIA v3.8.0 Claims 3x Faster VPN on Windows: WireGuard Now Default

  PIA's v3.8.0 update makes WireGuard the default protocol everywhere and claims Windows speeds can more than triple. Linux and macOS get obfuscation too.

• Sainsbury's Facial Recognition Back, No Opt-Out for Shoppers

  Sainsbury's has quietly resumed live facial recognition months after an innocent shopper was wrongly ejected. Privacy groups say the system treats every customer as a suspect.