TreeSize won’t renew perpetual-license support unless users subscribe
TreeSize’s developer JAM Software has ended support for perpetual licenses unless customers subscribe, requiring payment to continue receiving updates and assistance.
Thousands of servers can be backdoored by exploiting buggy motherboard controllers
Thousands of enterprise servers contain critical vulnerabilities in baseboard management controllers that can be remotely exploited to install persistent backdoors, according to research presented at a security conference.
New Pass-ta-key attack reveals all the things we didn’t know about passkeys
A researcher revealed vulnerabilities in passkey systems, particularly for Windows devices, demonstrating that these authentication mechanisms can be compromised through malware despite widespread assumptions about their security.
Chrome adopts what may be the best protection yet against account takeovers
Google Chrome has introduced device-bound session credentials, a new security feature that protects against account takeovers by storing encryption keys in device hardware rather than allowing them to be stolen.
Microsoft Copilot reveals secret input that allowed it to be hacked
Researchers discovered that Microsoft 365 Copilot could be tricked into revealing sensitive user data through a secret parameter that bypassed security safeguards, requiring only a malicious link click.
Zuckerberg lied about concern for child safety, Meta whistleblower testifies at landmark trial
A former Meta safety engineer testified that the company was aware of harms to children on its platforms but took a “don’t ask, don’t tell” approach, according to a landmark trial brought by 29 state attorneys general.