Previously harmless Google API keys now expose Gemini AI data

Google API keys for services like Maps embedded in accessible client-side code could be used to authenticate to the Gemini AI ...
The Hacker News

Starkiller Phishing Suite Uses AitM Reverse Proxy to Bypass Multi-Factor Authentication

Starkiller phishing suite uses live reverse proxying to bypass MFA, while attackers abuse OAuth device codes to hijack Microsoft 365 accounts.
GovInfoSecurity

AI Can Unmask Anonymous Users at Scale

Researchers at ETH Zurich and Anthropic have shown that LLMs can link pseudonymous online accounts to real identities ...

Let me see some ID: age verification is spreading across the internet

Apple is bringing age verification to the UK, as the latest iOS 26.4 beta prompts users to verify that they’re over 18 following installation. As shown in screenshots posted to Reddit, Apple says ...