What just happened? Security researchers at this year's Def Con have presented findings regarding a long-standing albeit recently discovered vulnerability in AMD processors called "Sinkclose." Though rather hard to exploit, the security flaw can potentially yield catastrophic results for any system unlucky enough to fall victim to it.
Microsoft hasn't spotted an attack in the wild yet, but it will take time to develop a mitigation
What just happened? Another day, another security flaw discovered in Microsoft Windows. The latest arrives courtesy of research presented at the Black Hat security conference, which revealed a design flaw in the Windows Update architecture that allows critical OS components to be downgraded by manipulating the update process.
Critics say the new platform is focused on benefitting advertisers
The big picture: Google claims that the new version of its Chrome extension platform will mean a safer and more efficient browser experience for users. While there are some features in Manifest V3 that will facilitate this, critics claim that the new controls are more helpful to advertisers. This has raised questions about Google's motivations, given that a significant portion of its revenue comes from advertising.
Until now, Chrome has used the Data Protection API (DPAPI) to protect sensitive data on Windows. However, with Chrome 127, they are introducing app-bound encryption, similar to how the Keychain operates on macOS.
Facepalm: Meta attempted to use Facebook as a giant surveillance service to profit from users' personal data. The company ultimately failed in the endeavor and is now facing significant financial penalties as a result, which includes a massive settlement due to the state of Texas over the next five years.
Researchers say the technique is already being used in the wild
Shiver me timbers: Security researchers have demonstrated that it's possible to spy on what's visible on your screen by intercepting electromagnetic radiation from video cables with great accuracy, thanks to artificial intelligence. The team from Uruguay's University of the Republic says their AI-powered cable-tapping method is good enough that these attacks are likely already happening.