Attack Campaigns Run By Software The operator who used to type every command now mostly supervises. That is

It’s no exaggeration to say that if you own an LG smart TV, it might be spying on you.

The widely respected computer hardware experts at the YouTube channel Gamers Nexus found that the company’s boob tubes and pricey OLEDs can scan your Wi-Fi network to search for the devices you own, secretly record audio logs of your conversations using built-in microphones, and keep tabs on what you’re watching and listening to.

It collects all this data, Gamers Nexus found, even when the TV is disconnected from the internet and appears to be off in standby mode.

To unearth these surreptitious practices, Gamers Nexus partnered up with independent security researchers and Level1Techs. Their resulting two-hour video report has since been picked up by other trusted cybersecurity voices like Malwarebytes.

By digging into the firmware and intercepting some of the data the TVs were sending, the team found that the TVs were extensively scanning local Wi-Fi networks to log what devices were on it, including phones, computers, and other smart-home devices like thermostats. It even collected the names of nearby Wi-Fi networks, creating an alarmingly detailed picture of all the devices in a user’s household.

Why might that information be relevant to LG? The TVs also use a controversial technology called automated content recognition (ACR) that routinely scans and determines what you’re watching so it can sell that data to advertisers. 

Combined together, they build an advanced and disturbingly comprehensive profile of what you watch and the devices you use, Gamers Nexus warn. All this data is sent back to LG Ad Solutions, its lucrative advertising business.

LG TVs, on top of it all, can also listen to you. Tests showed that their built-in microphones could capture clean audio of nearby conversations and generate transcripts of them, even when the TVs were in standby mode, which most TVs default to when you think you’ve turned them off, with the display powering down. The recording feature continued even when the TVs were unplugged from the internet, storing the audio files locally and uploading them the moment the internet connection was restored.

The researchers also found a vulnerability that allegedly allow a hacker to remotely execute code, though they’re keeping the details on this light so they can responsibly disclose their findings.

Many LG owners are furious about the news.

“LG hardware is just spyware,” fumed a post on the r/LGOLED subreddit. “You[r] TV is wiretapping your whole house.”

Smart TVs collecting data on you isn’t new — ACR in particular is well-documented — but the reported findings here illustrate a degree of invasiveness the public could only speculate about previously.

It’s far from the first time LG has caused a stir over purported privacy violations, either. Another Gamers Nexus investigation last month found that LG monitors were sneakily installing pop-up ads onto customers’ computers. The ensuing controversy caught Microsoft’s attention, with the company demanding LG remove the ads.

More on surveillance: The Real Victims of the AI Surveillance Panopticon? Crime Fiction Writers

The post LG TVs Caught Secretly Recording Users and Scanning Their Homes For Other Devices, Even When Disconnected From the Internet appeared first on Futurism.

The ID checking company said the data breach included people's full names and driver's licenses and other government-issued identity documents.

Paid Claude Accounts Are Being Drained by Strangers A subscription that burns through its allowance while nobody is

The three Indian companies are accused of using hackers to steal information used to sway litigation.

The Fed warns frontier AI can automate exploit chains at machine speed while its own cybersecurity governance weaknesses remain under remediation.

Talking to an AI chatbot can feel like confiding in a mirror, a private exchange equivalent to brainstorming in a Word document. Yet when it comes to the most popular AI chatbots, that mirror is really one-way glass — and you might be shocked to learn how many different people can watch from the other side.

Since the rise of easily accessible AI chatbots, untold millions of people have happily fed AI models their deepest, darkest secrets. According to a recent survey conducted by browser company DuckDuckGo and flagged by CNET, a full third of all AI users admit to having told their chatbots a secret they wouldn’t tell the “trusted people” in their lives.

There’s a grim irony there, because by telling an AI chatbot those closely guarded secrets, you may inadvertently be sharing intimate details with tech companies, police departments, lawyers, and even your boss. That’s according to new reporting by the Washington Post, which notes that there have been a dozen court cases where chatbot transcripts were cited in the public record over the last two years.

Even if your transcripts don’t end up in the hands of Johnny Law, they can easily be obtained by your boss, assuming you’re using a company-provided AI service. And of course, there’s no telling how long AI companies like OpenAI and Anthropic might hold onto details of your conversations, as WaPo notes numerous scenarios in which they may be required to hold onto your chatlogs by law.

There’s also the grim possibility of leaks from the AI companies themselves. In July, it was revealed that a whole trove of chats with Anthropic’s chatbot Claude had been exposed to the open web — and not for the first time.

“Unless you are having a chat with a service that has a temporary chat or, basically, an incognito version… [and] you’re also having it within a browser that’s not tracking you, the answer is no,” Jen King, a privacy researcher at the Stanford Institute for Human-Centered Artificial Intelligence told WaPo. “You can’t be sure that it’ll be totally private.”

And though users are remarkably comfortable divulging those details to their favorite bot, fewer are aware of those myriad ways their chat logs might live on in perpetuity. According to the DuckDuckGo poll, 53 percent of regular users said they didn’t know that AI chatbots are training on data obtained through their conversation, while 75 percent didn’t realize that conversations with large language models (LLMs) can easily be subpoenaed by police.

So when in doubt about whether to tell ChatGPT about your intimate relationship troubles, keep in mind that the internet is forever; and that goes double for AI chatbots.

More on AI chatbots: New AI Chatbot Turns Out to Be One Overworked Guy Answering All the Messages by Hand

The post People Are Telling Their Darkest Thoughts to AI Without Realizing They Can Easily Become Public appeared first on Futurism.

The digital scans of more than 153 million drivers licenses of individuals from the United States and Canada are being sold on the dark web through an easily accessible service called Nexus.

As noted cybersecurity journalist Brian Krebs noted on his blog this week, the sale has now caught the attention of the FBI, which has launched an official inquiry.

On the same day Krebs published his post, the service mysteriously vanished from the dark web, which could make tracking down the people behind the hack more difficult.

Nonetheless, the scale of the leak is staggering, and includes not just drivers licenses, but 10 million ID cards, over three million travel documents, and over half a million medical cards as well, representing over 170 million individuals total. That’s pushing half of the United States’ and Canada’s combined populations.

The ID scans appear to have been taken from a widely-used ID verification company based out of Louisiana and even include the license of US defense secretary Pete Hegseth.

The incident highlights the dangers of having little regulatory oversight over identity verification services — a thorny subject, considering regulators continue to push for age limits for content online, rules that could put people at risk of having their identity stolen by bad agents.

The ID scans first appeared on a Russian cybercrime forum. The owner of the files caught Krebs’ attention after showing the journalist a scan of his Virginia drivers license, strongly supporting the leak’s validity.

Before it was taken down, the shadowy dark web service called Nexus allowed virtually anybody to peruse identity documents of over 170 million people in the US and Canada.

“We have been continuously exfiltrating new data for over a year into our private database,” the service boasted in a post on the Russian forum. “Records are available to preview before purchase with pertinent information redacted. Customer photos are displayed if available.”

According to the people behind Nexus, the source of the leak is a “major identity verification company” that’s in business with several Fortune 500 companies, Krebs writes.

While the feds are starting their own investigation, Krebs dug a little deeper and found a fascinating common thread: many of those, whose identity cards showed up in the database had rented cars from the company Hertz.

“I was able to find my mother’s drivers license in this service as well, and the timestamps for her images are just a few seconds apart from mine,” Krebs wrote. “That’s notable because we both handed our licenses to the Hertz rental car representative at the same time.”

Other individuals the reporter talked to recalled giving their driver’s license to a dispensary, which struck a deal in 2022 with ID verification company idscan.net — which also provides services to other big brands, including Hertz.

The New Orleans-based firm told Krebs that it’s now investigating the matter. The FBI has also confirmed that it’s also officially looking into the company.

More on identity leaks: Discord’s Verification Saga Has Devolved Into a Complete Self-Inflicted Embarrassment

The post Hackers Are Selling Stolen Scans of 153 Million US and Canadian Drivers Licenses, Which Very Likely Include Yours appeared first on Futurism.

The Federal Bureau of Investigation looks almost unrecognizable under director Kash Patel’s leadership.

The agency’s head has been embroiled in a seemingly endless list of controversies, from allegations of excessive drinking to buying up location data on everyday American citizens to furthering of harebrained conspiracies.

Patel lacked virtually any degree of relevant working experience for the job before the Senate confirmed him — and now, the agency is opening the doors for even more highly questionable hirings.

As inside sources told CBS News, the FBI has quietly lowered standards of its background checks for potential federal agents and other personnel. The bureau is now officially looking the other way when it comes to prostitution, for instance — as long as recruits didn’t hire sex workers over three times.

Even more eyebrow-raising is that the FBI is even allowing the consideration of candidates who engaged in bestiality or animal cruelty, according to CBS‘ sources. However, any such incidents would’ve had to have taken place before the candidate turned 18.

The broadcaster’s sources also said there was no distinction between candidates who were forced into sexual activity with animals or if they did so willingly. An FBI spokesperson claimed that eligibility requirements were limited to a “narrow set of circumstances, such as in cases where a person was sexually abused with animals as a child.”

Experts, however, were appalled at the news, arguing that the FBI is undermining its responsibility in vetting applicants by changing background check standards.

“Bestiality is clearly a potential indication of a more serious emotional issue, and even in a circumstance where it is not, the pool of candidates should be extensive enough that the criteria should certainly not be eliminated,” former FBI agent James Davidson told CBS.

Before the changes, which were reportedly implemented earlier this summer, the FBI’s webpage was clear about automatically disqualifying special agents who engaged in “prostitution or bestiality.”

Both current and former FBI employees told the CBS that the bureau could now be hiring “people with questionable backgrounds,” allowing them to undermine the integrity of the service. Others warned that the news was evidence of a major “recruiting problem.”

Considering the fact that the agency is being helmed by a personality as controversial as Patel, these changes shouldn’t come as too much of a shock.

While he hasn’t personally acknowledged the latest changes, Patel has frequently called for new hiring standards at the bureau, arguing that “we are losing too many qualified candidates to the rigors of the requirements from yesteryear” in a July interview with former FBI agent John Nantz.

Patel’s motivation for lowering standards could be to bring in his closest associates. As ProPublica reported in November, his personal assistant didn’t clear their polygraph test and required a waiver, claims the FBI has since denied.

More on Patel: The Head of the FBI Just Admitted Something Moderately Horrifying

The post FBI Now Allowing History of Bestiality Among New Recruits appeared first on Futurism.

Flock cameras have ignited a debate over surveillance, privacy, data collection, and public resistance. The MacVoices panel weighs in on the debate. They also discuss the risks of government-sponsored cyberattacks carried out by private companies, growing opposition to data centers over power and infrastructure demands, and the regulatory challenges surrounding their expansion.

💾

A MacVoices’ panel member’s firsthand report from Black Hat explores the conference’s enterprise security focus before the discussion turns to AI models escaping sandbox restrictions to complete assigned tasks. The panel discusses the OpenAI-Hugging Face hack, unintended AI behavior and the dangers of moving too fast. Can developers establish effective limits without sacrificing innovation or competitive advantage? The race for better AI continues.

💾

Cameras in airline seatback screens and increasingly sophisticated driver-monitoring systems spark a debate over safety, privacy, data access, and surveillance. The MacVoices Live! panel examines EU vehicle requirements, Tesla interior cameras, dash cams, accident evidence, connected devices, and whether consumers receive enough disclosure and control over technologies designed to watch them. Panel members include: Chuck […]

💾

At Flip The Script in San Francisco at WWDC, Vladyslav Hamolia, AI Staff Engineer for MacPaw.discusses the company’s push to become AI-first by rethinking existing products, building internal tools, and supporting third-party vendors. He profiles Eney, the MacPaw AI assistant (available in Setapp) designed to perform tasks, optimize workflows, and improve daily routines. It addresses security while balancing local-first privacy goals with hybrid cloud models. 

💾

AI is taking on a growing role in cybersecurity (whether we like it or not), from vulnerability discovery to faster exploit development. Chuck Joiner, David Ginsburg, Eric Bolden, Web Bixby, Jim Rea, Brian Flanigan-Arthurs, Jeff Gamet, and Marty Jencius look at both sides oof the issue and  push back on “Bugmageddon” hype. The discussion also covers X post limits, Microsoft Teams retiring the misguided Together Mode, safer login practices, AI-run radio chaos, Google’s Apple-like naming choices, and free storage tied to phone numbers. 

💾

Your fear of flying is only going to get worse once you hear what these white hat hackers figured out to do with a popular airliner.

As Wired reports, a team of security researchers from the University of California, San Diego and Oberlin College created a device the size of a coin that can take over the autopilot system of a Boeing 737 and change its flight plan, not to mention tampering with key values in its takeoff and fuel calculations. 

According to its creators, the device could also change the data on a pilot’s screen so they don’t notice anything’s amiss — or even trick a pilot into making a disastrous decision.

“If you could get 60 seconds with an airplane, what could you do?” Stefan Savage, a UCSL professor who led the project, asked Wired. “Well, it turns out there’s a port that’s externally accessible. You can get to it with no special tools in about 15 seconds. And you can shove in a piece of electronics a little bigger than a quarter that lets you basically tell the autopilot what to do and lie to the pilot about changes to the flight plan.”

The attack relies on plugging the device, which costs less than $100, into a port hidden by a hatch on the exterior of the plane, which the researchers say is easily within reach of maintenance workers and airline staff. Once the device is plugged in, it could connect to the plane’s in-flight Wi-Fi system and allow a hacker to remotely control the aircraft’s systems from terra firma.

As Savage explained to Wired, his team found this vulnerability after spending years cobbling together 737 computer parts to effectively recreate the plane’s nervous system. Inspired by credit card skimming devices that plug into ATMs to steal your information, they realized that an entire aircraft could be broken into by physically plugging a device into its internal “bus” — the system that connects different components of its computer. 

And after digging through Boeing wiring diagrams, they found their way in: a port carrying data between the plane’s Flight Manage Computer and the pilot’s display unit, accessible from an unlocked hatch on the plane’s exterior. 

It was like finding “the goddamn exhaust port on the Death Star,” Savage told Wired.

The havoc a hacker wreaks using their attack could be catastrophic. They could feed the pilot the wrong information about the air temperature outside or about the weight of its cargo and passengers and cause them to miss the speed they need for takeoff before running out of runway, Wired noted. Or they could suddenly change its navigation and crash it into a mountain.

The attacks could also be far more sneaky.

“It could be something as subtle as, you’re in the Pacific, you see blue everywhere, and this diverts you 3 degrees off course, and now you’re in the middle of nowhere,” Aaron Schulman, another UCSD professor working on the project, told the magazine.

Savage and Schulman shared their findings with Boeing six years ago and have worked closely with the company to explore the vulnerability.

But the researchers say that Boeing hasn’t told them about any fix to the vulnerabilities they found. In fact, they say it’s likely that it any fix may not have been implemented yet, since commercial airplanes are rarely redesigned.

You shouldn’t panic though, they insist.

“All of the authors of this paper routinely travel on Boeing 737 aircraft and expect to continue doing so,” they wrote in their paper.

Beau Woods, a former adviser to the Cybersecurity and Infrastructure Security Agency and the Boeing’s Industry Cyber Technical Council, was alarmed by the findings.

“It is entirely possible to have someone who is on staff go up to an airplane when it’s on the ground, going through maintenance, and put this type of thing in there,” Woods told Wired.

“This is something the aviation industry will want to plan to defend against,” Savage agreed. “I would not sleep on this one.”

More on aviation: Why Aren’t Any AI Companies Watching Their Frontier Models to Make Sure They Don’t Go on Hacking Sprees?

The post Hackers Created a Device That Can Take Over a Boeing 737 Jet’s Autopilot Without Anyone Noticing appeared first on Futurism.

In light of plummeting public support for its widespread automatic license plate readers, surveillance company Flock has lost dozens of contracts with cities across the US.

The company even drew up plans to use the dashcams installed in Uber and Lyft drivers’ cars to spy on other vehicles, as 404 Media reported this week.

Citizens are increasingly disgusted by the company’s presence on public streets, opting to hack down the cameras, blind them, or sabotage them in other creative ways.

“His project, which he calls noRecognition, allows people to escape the automatic detection and algorithmic surveillance used across the U.S. and beyond.” https://t.co/OIQNOt9B0a @TechCrunch

— Christina Ayiotis, Esq., CRM, CIPP/E, AIGP (@christinayiotis) August 10, 2026

And according to cybersecurity researcher Bill Swearingen, there may be other creative ways to befuddle Flock’s spy cams. He devised with a special computer-generated pattern which, once stretched out across the vehicle in the form of a wrap, will result it in not being flagged as a car by Flock’s cameras.

During this year’s Def Con cybersecurity conference in Las Vegas, Swearingen showed off a 2009 Toyota Yaris wrapped in vinyl featuring the logo of automotive publication Donut Media (which is owned by Futurism‘s parent company Recurrent Ventures.)

Despite the car looking a bit chaotic — albeit still very much like a small passenger vehicle to the human eye — “we proved it was effective,” Swearingen told TechCrunch. The Yaris successfully defeated surveillance detection at Def Con during the pattern’s first public test.

“Privacy is a fundamental right,” he added, aiming to give people a way to “opt out of being tracked.”

To come up with the pattern, he used a reinforcement learning model that trained itself on patterns that evade detection. The model got to the point of being able to confuse all 11 open source detection algorithms he tested, per TechCrunch, in addition to Flock’s license plate readers and even Axon’s body-worn cameras used by police departments.

As part of his noRecognition crowdsourcing campaign, Swearingen has also come up with T-shirts and hoodies that feature algorithmic detection-busting patterns. He hopes to eventually put pattern-printed skins for entire cars on sale as well.

The effort is part of a much broader trend of companies offering up garments that incorporate “adversarial patterns,” which can exploit weaknesses in computer vision systems.

One thing is clear: as outrage over Flock’s heavy presence across the country grows, people are looking for any way to foil the tech — especially if it looks cool.

More on Flock: Flock’s Secret Surveillance Plan Will Make You Gasp

The post Man Covers Car in Special Wrap That Breaks Flock Cameras’ Electronic Brains appeared first on Futurism.

The investigation shows that North Koreans are able to infiltrate government agencies, as well as private organizations and crypto exchanges.

Australia and Singapore are expanding cooperation on AI safety, cybersecurity, digital infrastructure, and subsea-cable resilience through their first Cyber and Digital Senior Officials Dialogue.