Security
Major security incidents explained with data: what happened, how big it was, and what to do.
A Stolen AI Key Can Burn $100,000 in a Day
Google's threat researchers describe attacks in which criminals hijack companies' access to AI models and run up the bill. In some cases, charges passed $100,000 in a single day and reached $1 million before access was cut off. The cost is a simple equation, and so is most of the defence.
The $6.36 Billion Binance Hack Wasn't a Code Bug. Most of Crypto's Biggest Losses Aren't.
The largest crypto theft on record took about 20 minutes and needed no flaw in any smart contract. The data shows why: code bugs cause half of crypto hacks but only 15% of the money lost. The big losses come from keys, servers and people.
The PHP2Shell Patch Is Out. About Three in Four Exposed PHP Servers Can't Get It.
Two critical PHP flaws were exploited before the fix arrived, and CISA now lists them as attacked in the wild. The patch only covers PHP 8.2 to 8.5. Of internet-facing PHP servers that reveal their version, roughly 74% to 79% run an older branch that gets no fixes at all.