Stan Kaminsky

The Whisper Leak attack allows its perpetrator to guess the topic of your conversation with an AI assistant — without decrypting the traffic. We explore how this is possible, and what you can do to protect your AI chats.

Researchers have discovered how to connect to someone else’s dashcam in a matter of seconds, and weaponize it for future attacks.

Here’s how to mitigate the risks of targeted attacks on your organization’s mail servers.

Systematic measures and tools that organizations can use to defend against malicious browser extensions.

We examine how popular Canon printers could become a foothold for attackers within an organization’s network.

Pixnapping is an Android vulnerability discovered by researchers that allows apps to steal passwords, one-time codes, and other confidential information from the screen without any special permissions from the operating system. How does it work, and what can you do to protect yourself?

Which social networks mostly just display your posts to your friends, and which ones use them for AI training and ad targeting? We explore the 2025 privacy rankings for popular social media platforms.

Which messaging apps leak the least amount of your data, and provide the most control over your privacy? Today we discuss the latest rankings of popular communication platforms.

How AI-generated code is changing cybersecurity — and what developers and “vibe coders” should expect.

A close look at attacks on LLMs: from ChatGPT and Claude to Copilot and other AI-assistants that power popular apps.

A race between tech giants is unfolding before our very eyes. Who’ll be the first to transform the browser into an AI assistant app? As you test these new products, be sure to consider their enormous impact on security and privacy.

How 5G smartphone connectivity can be compromised, and what it means for subscribers.

Most employees are already using personal LLM subscriptions for work tasks. How do you balance staying competitive with preventing data leaks?

How attackers can hijack your computer through its webcam — and how to stop it.

Thousands of companies exist for one purpose only: to collect and resell information about each of us. How do they do it, how can you limit data collection, and how do you delete what’s already been collected?

Be careful what you connect to your in-car infotainment system.

Brushing, quishing, and other fraud schemes that begin with the delivery by courier of a product you never ordered.

Companies need to build a culture of security, but this is impossible when employees are afraid to discuss incidents or suggest improvements.

We dive into which corporate systems support passkeys, where compatibility falls short, and why we probably won’t be saying goodbye to passwords anytime soon.

Regulation and the evolving threat landscape are driving companies to adopt more resilient forms of employee authentication. Are passkeys a cost-effective and straightforward replacement for traditional passwords?

Causes of discrepancies in Common Vulnerability Scoring System ratings, common mistakes when using CVSS for vulnerability prioritization, and how to do this right.