Author: InfoForTech
Swati KhandelwalAug 01, 2026Web Security / Supply Chain Attack Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses. Adform detected the incident on July 27, 2026, removed the malicious code, notified affected clients, and reported it to authorities. Anyone who visited a site carrying the affected script on July 27 and copied a Bitcoin, Ethereum, or Tron address may have pasted a different address inserted by the malicious code instead. Adform is telling people to clear their browser cache because the altered file may remain cached after…
When I first heard about the new Apple Upgrade program, which lets you lease devices like iPhones and MacBooks for a monthly fee, I was offended. It amounts to paying a tithe to one of the world’s richest companies just to borrow devices for a couple years, rather than buying them outright. You could then choose to purchase the device, which is outdated at that point, or upgrade and keep paying that monthly fee. You may never own an iPhone again.Then, as my mind wandered to the stack of old phones in my closet, it occurred to me: What’s so…
Apple’s long-rumored smart glasses are already running late as the company tries to avoid the privacy concerns that come from putting cameras on someone’s face. At the same time, Apple may be planning to turn them into something far more useful than a typical pair of smart glasses. According to Bloomberg, Apple is exploring ways to turn its future glasses and Vision headsets into health and fitness companions. Their cameras and sensors could eventually track movement, analyze workouts, and help users improve how they exercise. A new Apple job listing supports the report. The Vision Products Group is looking for…
Microsoft is closing the legacy Microsoft Threat Intelligence portal on August 1, leaving security teams only days to verify that their investigation workflows survived the move. Existing Defender Threat Intelligence customers can continue using the current product experience until the cutoff. Microsoft says all Microsoft Threat Intelligence capabilities are now available through the Defender portal, where they support Defender XDR and Microsoft Sentinel workflows. Before the retirement, security teams should verify their licenses, permissions, investigation projects and automated integrations to avoid losing access to important workflows during an incident. The portal closes, but the intelligence remains Microsoft’s retirement guidance confirms…
Self-driving vehicles have become a common sight in the San Francisco Bay Area, and there are more companies looking to deploy their autonomous vehicles to public riders in the coming months. Earlier this year, ride-hailing giant Uber, electric vehicle maker Lucid Motors and autonomous vehicle company Nuro unveiled the Lucid Gravity robotaxi, the result of a three-way partnership announced last year. I got an early look at what the companies have deemed the “industry’s most luxurious robotaxi” at CES in January, but the vehicle was parked inside a conference hall. Last week, Nuro invited me to swing by its headquarters…
The downside of KeePassXC is that it doesn’t have official mobile clients. However, third-party apps are available for iOS and Android. KeePassXC is a fork of KeePass that offers better cross-platform support, but there are a handful of other forks available, as well.Download the desktop app for Windows, macOS, or Linux and create your vault. There are also extensions for Firefox, Edge, and Chrome. The project does not offer apps for phones. Instead, it recommends KeePass2Android or Strongbox for iPhone.Other Password Managers We’ve TestedPassword managers are not a one-size-fits-all solution. Our top picks cover most use cases and are the best choices for most people, but your needs…
Three of Anthropic PBC’s large language models carried out successful cyberattacks during routine internal tests. The company detailed the breaches on Thursday. A few days earlier, rival OpenAI Group PBC disclosed a similar incident. Two of the company’s LLMs escaped from an isolated sandbox that was being used to evaluate their cybersecurity capabilities. They subsequently hacked Hugging Face, a popular platform for hosting open-source AI projects. OpenAI’s disclosure prompted Anthropic to check logs from its own model security evaluations. That review is what led to discovery of the cyberattacks disclosed on Thursday. According to Anthropic, its engineers identified three breaches carried…
This week on the GeekWire podcast: Microsoft and Amazon both reported quarterly numbers, and both stocks rose on cloud results that beat expectations. Is all that AI spending paying off? And in related news, Microsoft sees a rare annual headcount decline, hitting product R&D hardest. Plus: Satya Nadella builds a Power BI dashboard out of an analyst’s research report, and touts it on the earnings call to make a bigger point. Jeff Bezos names Amazon’s chips business as the long-awaited fourth pillar. And AI House managing director Jacob Colker delivers a much-needed pep talk for Seattle tech, calling on the…
LinkedIn quietly added a “Seems like AI slop” button to post menus. The crowdsourced spam detection reveals a bigger problem for the professional network. LinkedIn just gave users the exact tool they wanted: a button to call out AI garbage. You can now tap the three dots on any post and select “Seems like AI slop.” The app immediately hides the post and sends feedback straight to LinkedIn’s feed algorithm. The update tackles a massive problem. Research firm Pangram found that AI generates over 40% of long-form posts on LinkedIn. In fact, LinkedIn hosts nearly two-thirds of all AI text…
Swati KhandelwalAug 01, 2026Vulnerability / Threat Intelligence An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only hardware wallet made by Canadian firm Coinkite. A March 2021 firmware integration error routed seed generation to a deterministic software pseudorandom number generator (PRNG) instead of the STM32 hardware random number generator (RNG). Block says an attacker who can determine or sufficiently constrain the device UID, timer state, and prior RNG-call history can reproduce candidate…