Geek-Guy.com

Category: Technology

Stay updated with the latest in technology on Geek-Guy.com. From emerging hardware and software trends to in-depth guides on digital innovation, we explore the tech that shapes our world and the advancements driving the future.

Global Security News, Politics, Technology

Democrats Have a Gerontocracy Problem. The Crypto Industry Is Using That to Its Advantage.

When former congressional staffer Jake Rakov launched a primary bid against his old boss, Rep. Brad Sherman, D-Calif., the race seemed to fit a pattern. The Democratic primary season is quickly shaping up to be dominated by intergenerational battles — and Rakov, at 37, presented himself as a fresh face against Sherman, who has been…

Read more →

Asia Pacific, Australia, Cybersecurity and Infrastructure Security Agency (CISA), Global Security News, Government, Policy, Technology

CISA guide seeks a unified approach to software ‘ingredients lists’

Compiling an “ingredients list” for software can help organizations reduce cyber risks, avoid fines and save time, among other benefits, a Cybersecurity and Infrastructure Security Agency-led guide published Wednesday advises. The CISA document, produced with the National Security Agency and cyber agencies from 14 other countries, aims to produce a shared vision on advancing the…

Read more →

AI, Andrew Garbarino, Asia Pacific, Global Security News, Government, Policy, Technology

House panel approves cyber information sharing, grant legislation as expiration deadlines loom

A House panel advanced legislation Wednesday that would reauthorize a major cyber threat information sharing law and a big-dollar state and local cyber grant program before they’re set to expire at the end of this month. Trump administration officials and nominees, as well as cybersecurity organizations and experts, have voiced support for renewing them both…

Read more →

Android, Cybersecurity, Exploits, Global Security News, Google, Technology

Google patches two Android zero-days, 120 defects total in September security update

Google warned that two actively exploited zero-day vulnerabilities affecting Android devices have been patched in its September security update, which addresses 120 software defects total.  The zero-days — CVE-2025-38352 affecting the kernel and CVE-2025-48543 affecting Android Runtime — are both high-severity defects that don’t require user interaction for exploitation and could lead to escalation of…

Read more →

AI, Cybercrime, Cybersecurity, Global Security News, Technology, Threats

Salesloft Drift attacks hit Cloudflare, Palo Alto Networks, Zscaler

Multiple security and technology companies have been swept up in a far-reaching attack spree originating at Salesloft Drift, including Cloudflare, PagerDuty, Palo Alto Networks, SpyCloud and Zscaler.  Victim organizations continue to come forward as customers of the third-party AI chat agent hunt for evidence of compromise or receive notices from Salesloft and other companies involved…

Read more →

AI, Artificial Intelligence (AI), Global Security News, Government, Technology

Workado settles with FTC over allegations it inflated its AI detectors’ capabilities 

The Federal Trade Commission thinks AI detectors might be BS. The agency announced a consent order this week with Workado, an Arizona-based company that makes an AI content detector tool. The order forces the company to  retract its public claims about the tool’s effectiveness and to notify its customers.  The settlement follows an investigation by…

Read more →

Cybercrime, Cybersecurity, Global Security News, Research, Technology, Threats

Salesloft Drift compromised en masse, impacting all third-party integrations

Salesloft Drift customers are compromised in a much more expansive downstream attack spree than previously thought, potentially ensnaring any user that integrated the AI chat agent platform to another service. “We’re telling organizations to treat any Drift integration into any platform as potentially compromised, so that increases the scope of victims,” Mandiant Consulting CTO Charles…

Read more →

Cybercrime, Cybersecurity, Exploits, Global Security News, Technology, Tenable, Threats

Citrix NetScaler customers hit by third actively exploited zero-day vulnerability since June

Citrix and cybersecurity researchers warn a critical, zero-day vulnerability affecting multiple versions of Citrix NetScaler products is under active exploitation. Citrix issued a security bulletin about the vulnerability — CVE-2025-7775 — and urged customers on affected versions to install upgrades Tuesday. The memory-overflow vulnerability, which has an initial CVSS rating of 9.2, can be exploited…

Read more →

antitrust, Financial, Global Security News, privacy, Technology, Threats

Court ruling in Epic-Google fight could have ‘catastrophic’ cyber consequences, former gov’t officials say

A court injunction in the long fight between Fortnite publisher Epic Games and Google could have “catastrophic results for the nation’s security” and “risks creating massive cybersecurity vulnerabilities in the online ecosystem,” a group of former top government officials said in a filing Monday. At issue, they wrote, is a district court injunction requiring Google…

Read more →

Asia Pacific, Global Security News, national security, Technology

Pentagon Document: U.S. Wants to “Suppress Dissenting Arguments” Using AI Propaganda

The United States hopes to use machine learning to create and distribute propaganda overseas in a bid to “influence foreign target audiences” and “suppress dissenting arguments,” according to a U.S. Special Operations Command document reviewed by The Intercept. The document, a sort of special operations wishlist of near-future military technology, reveals new details about a…

Read more →

Asia Pacific, china, Gary Peters, Global Security News, Government, Technology, Threats

Senate legislation would direct federal agencies to fortify against quantum computing cyber threats

A bipartisan pair of senators are introducing legislation Thursday that would direct a White House office to develop a strategy for reckoning with the cybersecurity ramifications of quantum computers, and require agencies to begin pilot programs on quantum-safe encryption. Sens. Gary Peters, D-Mich., and Marsha Blackburn, R-Tenn., say the National Quantum Cybersecurity Migration Strategy Act…

Read more →

Cybercrime, Cybersecurity, Exploits, Global Security News, Google, Research, Technology

Project Zero disclosure policy change puts vendors on early notice

Google this week changed how it publicly discloses vulnerabilities in a bid to give defenders early details about new software defects it discovers, shortening the early window of time between a vendor releasing a patch and customers installing the security update. Project Zero, Google’s squad of security researchers who find and study zero-day vulnerabilities, will…

Read more →

Geopolitics, Global Security News, Government, Technology, Threats

Sen. Hassan wants to hear from SpaceX about scammers abusing Starlink

It’s time for SpaceX to take strong action against scammers abusing the company’s Starlink internet service, Sen. Maggie Hassan said in a letter to CEO Elon Musk on Monday. The New Hampshire Democrat cited evidence accumulating over the past two years that some Southeast Asian fraudsters scamming billions of dollars from U.S. citizens have leaned…

Read more →

Global Security News, North America, Technology

Border Patrol Wants Advanced AI to Spy on American Cities

U.S. Customs and Border Protection, flush with billions in new funding, is seeking “advanced AI” technologies to surveil urban residential areas, increasingly sophisticated autonomous systems, and even the ability to see through walls. A CBP presentation for an “Industry Day” summit with private sector vendors, obtained by The Intercept, lays out a detailed wish list…

Read more →

AI, Exploits, Global Security News, Government, privacy, Technology

Trump AI plan pushes critical infrastructure to use AI for cyber defense

The Trump administration’s new AI Action Plan calls for companies and governments to lean into the technology when protecting critical infrastructure from cyberattacks. But it also recognizes that these systems are themselves vulnerable to hacking and manipulation, and calls for industry adoption of “secure by design” technology design standards to limit their attack surfaces. The…

Read more →

Cybercrime, Cybersecurity, Exploits, Global Security News, Research, Technology, Threats

Cisco network access security platform vulnerabilities under active exploitation

A pair of maximum-severity vulnerabilities affecting Cisco’s network access security platform are under active exploitation, the enterprise networking and IT vendor warned in a security advisory Monday. The software defects in Cisco Identity Services Engine and Cisco ISE Passive Identity Connector — CVE-2025-20281 and CVE-2025-20337 — were disclosed and addressed by Cisco on June 25,…

Read more →

Geopolitics, Global Security News, Government, Money, Policy, Technology

Contract lapse leaves critical infrastructure cybersecurity sensor data unanalyzed at national lab 

Data from sensors that detect threats in critical infrastructure networks is sitting unanalyzed after a government contract expired this weekend, raising risks for operational technology, a program leader at Lawrence Livermore National Laboratory told lawmakers Tuesday. That news arrived at a hearing of a House Homeland Security subcommittee on Stuxnet, the malware that was discovered…

Read more →

Cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Exploits, Global Security News, Research, Technology, Threats

Mass attack spree hits Microsoft SharePoint zero-day defect

Attackers are actively exploiting a critical zero-day vulnerability affecting on-premises Microsoft SharePoint servers, prompting industry heavyweights to sound the alarm over the weekend.  Researchers discovered the active, ongoing attack spree Friday afternoon and warnings were issued en masse by Saturday evening. Microsoft released urgent guidance Saturday, advising on-premises SharePoint customers to turn on and properly…

Read more →

Asia Pacific, Commentary, Geopolitics, Global Security News, Government, Technology, Threats

Why it’s time for the US to go on offense in cyberspace

The U.S. is stepping into a new cyber era, and it comes not a moment too soon. With the Trump administration’s sweeping $1 billion cyber initiative in the “Big Beautiful Bill” and growing congressional momentum under the 2026 National Defense Authorization Act (NDAA) to strengthen cyber deterrence, we’re seeing a shift in posture that many…

Read more →

AI, Cybersecurity, Exploits, Global Security News, Research, Technology, Uncategorized

Is XBOW’s success the beginning of the end of human-led bug hunting? Not yet.

When news broke that an AI agent named XBOW was leading the HackerOne bug bounty leaderboards, it quickly raised several concerning questions for the cybersecurity industry. Have large language models evolved enough to partially or fully replace human bug hunting? How precisely does XBOW — built by a startup with the same name — work?…

Read more →

Cybersecurity, Exploits, Global Security News, Microsoft, Research, Technology, Threats

Microsoft Patch Tuesday addresses 130 vulnerabilities, none actively exploited

Microsoft addressed 130 vulnerabilities across its products and underlying Windows systems, but none have been actively exploited in the wild, the company said in its latest security update Tuesday. A proof-of-concept exploit for a high-severity defect in SQL Server — CVE-2025-49719 — has been shared publicly, researchers said. The information disclosure vulnerability, which has a…

Read more →

Application Security, Cybersecurity, Exploits, Global Security News, Research, Technology, Threats

Oligo Security strives to fill application-layer gaps in MITRE ATT&CK framework

Applications are a common intrusion point, but the way attackers gain access, maneuver and create mayhem within and across applications doesn’t always neatly fit into MITRE’s ATT&CK framework.  The team at Oligo Security is releasing a new framework it calls Application Attack Matrix to complement areas of MITRE’s framework that it describes as too broad,…

Read more →

AI, CloudFlare, Cybersecurity, Global Security News, Technology, web scraping

Cloudflare rolls out ‘pay-per-crawl’ feature to constrain AI’s limitless hunger for data 

Cloudflare announced Tuesday it will allow customers to block or charge fees for web crawlers deployed to scrape their websites and data on behalf of AI systems. In a blog on its corporate website, Will Allen, Cloudflare’s vice president of product, and Simon Newton, an engineer manager, said the company is establishing a new system…

Read more →

Cybersecurity, Global Security News, Technology, Threats

AT&T deploys new account lock feature to counter SIM swapping

AT&T widely launched its Wireless Account Lock feature Tuesday, aiming to strengthen customer protection against account takeovers and SIM-swapping attacks.  The feature comes amid rising concern over SIM swapping and other social-engineering tactics that allow bad actors to compromise user accounts and take control of their phone numbers. The Wireless Account Lock, which had been…

Read more →

Asia Pacific, Global Security News, Technology

State Department Wants to Know Student Visa Applicants’ Myspace Accounts

New State Department guidance released this month instructs student visa applicants to “adjust the privacy settings on all of their social media profiles to ‘public,’” a task which will be difficult to accomplish as several social media services listed in the online visa application form haven’t been operational in years. The student visa form requires…

Read more →

Cybercrime, Financial, Global Security News, Government, Technology, Threats

Arrest, seizures in latest U.S. operation against North Korean IT workers

U.S. authorities unsealed indictments, seized financial accounts and made an arrest in the latest attempt to crack down on North Korean remote IT workers as part of a coordinated action that the Justice Department announced Monday. The workers obtained employment at more than 100 U.S. companies using stolen and fake identities, costing them millions in…

Read more →

Cybercrime, Global Security News, Government, North America, privacy, Technology

Hacker helped kill FBI sources, witnesses in El Chapo case, according to watchdog report

A hacker working on behalf of the Sinaloa drug cartel infiltrated cameras and phones to track an FBI official in Mexico investigating the drug lord El Chapo, then used data from that surveillance to kill and intimidate potential sources and witnesses the agent was meeting with, a Justice Department watchdog report revealed. An FBI case…

Read more →

Cybercrime, Global Security News, Government, North America, privacy, Technology

Hacker helped kill FBI sources, witnesses in El Chapo case, according to watchdog report

A hacker working on behalf of the Sinaloa drug cartel infiltrated cameras and phones to track an FBI official in Mexico investigating the drug lord El Chapo, then used data from that surveillance to kill and intimidate potential sources and witnesses the agent was meeting with, a Justice Department watchdog report revealed. An FBI case…

Read more →

antivirus, crowdstrike, Global Security News, kernel, Microsoft, Technology

Microsoft security updates address CrowdStrike crash, kill ‘Blue Screen of Death’

When a faulty software update from cybersecurity firm CrowdStrike last year caused possibly the largest IT outage in history, Microsoft ended up taking much of the blame. CrowdStrike’s Falcon endpoint detection and response was on millions of Windows devices worldwide, and like most antivirus products that need broad access to different systems to do their…

Read more →

citrix, Cybercrime, Cybersecurity, Exploits, Global Security News, NetScaler, Technology

Citrix users hit by actively exploited zero-day vulnerability

Citrix on Wednesday disclosed an actively exploited zero-day vulnerability affecting multiple versions of NetScaler products, an alarming development from a vendor that’s been widely targeted in previous attack sprees. The zero-day (CVE-2025-6543) was disclosed by Citrix nine days after it issued a security bulletin for a pair of defects (CVE-2025-5777 and CVE-2025-5349) in the same…

Read more →

Android, Cellebrite, encryption, Exploits, Global Security News, iOS, Mobile Security, Money, Technology

Cellebrite to acquire mobile testing firm Corellium in $200 million deal

Security technology company Cellebrite has announced plans to acquire Florida-based mobile testing startup Corellium for $170 million in cash, with an additional $20 million converted to equity at closing and the potential for $30 million more based on performance milestones. The Israel-headquartered Cellebrite, known for its forensic equipment that unlocks smartphones, said the acquisition would…

Read more →

AI, Artificial Intelligence (AI), Cybersecurity, Exploits, Global Security News, Research, software security, Technology, Uncategorized, vibe coding

Vibe coding is here to stay. Can it ever be secure? 

Software powers the world, and soon, the bulk of the work making it may be done by machines. As generative AI tools have gotten more proficient at coding, their use in software development has exploded. Proponents say the tools have made it dramatically easier for individual entrepreneurs or companies to create the kind of slick,…

Read more →

AI, Artificial Intelligence (AI), Cybersecurity, Exploits, Global Security News, Research, software security, Technology, Uncategorized, vibe coding

Vibe coding is here to stay. Can it ever be secure? 

Software powers the world, and soon, the bulk of the work making it may be done by machines. As generative AI tools have gotten more proficient at coding, their use in software development has exploded. Proponents say the tools have made it dramatically easier for individual entrepreneurs or companies to create the kind of slick,…

Read more →

AI, Artificial Intelligence (AI), Cybersecurity, Exploits, Global Security News, Research, software security, Technology, Uncategorized, vibe coding

Vibe coding is here to stay. Can it ever be secure? 

Software powers the world, and soon, the bulk of the work making it may be done by machines. As generative AI tools have gotten more proficient at coding, their use in software development has exploded. Proponents say the tools have made it dramatically easier for individual entrepreneurs or companies to create the kind of slick,…

Read more →

Cybercrime, Cybersecurity, extortion, Global Security News, Google, Google Threat Intelligence Group, Microsoft 365, OAuth, phishing, Salesforce, Social Engineering, Technology, Threats

Salesforce customers duped by series of social-engineering attacks

A financially motivated threat group posing as IT support has intruded the systems of about 20 organizations by duping employees into installing a malicious, illegitimate version of Salesforce’s Data Loader and granting broader access to cloud-based environments, Google Threat Intelligence Group said in a threat report released Wednesday. The attacks, which Google attributes to UNC6040,…

Read more →

Cybercrime, Cybersecurity, extortion, Global Security News, Google, Google Threat Intelligence Group, Microsoft 365, OAuth, phishing, Salesforce, Social Engineering, Technology, Threats

Salesforce customers duped by series of social-engineering attacks

A financially motivated threat group posing as IT support has intruded the systems of about 20 organizations by duping employees into installing a malicious, illegitimate version of Salesforce’s Data Loader and granting broader access to cloud-based environments, Google Threat Intelligence Group said in a threat report released Wednesday. The attacks, which Google attributes to UNC6040,…

Read more →

Cybercrime, Cybersecurity, extortion, Global Security News, Google, Google Threat Intelligence Group, Microsoft 365, OAuth, phishing, Salesforce, Social Engineering, Technology, Threats

Salesforce customers duped by series of social-engineering attacks

A financially motivated threat group posing as IT support has intruded the systems of about 20 organizations by duping employees into installing a malicious, illegitimate version of Salesforce’s Data Loader and granting broader access to cloud-based environments, Google Threat Intelligence Group said in a threat report released Wednesday. The attacks, which Google attributes to UNC6040,…

Read more →

Android, CISA, Cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Exploits, Global Security News, Google, Google Threat Analysis Group, patching, Technology, vulnerabilities, zero days

Google addresses 34 high-severity vulnerabilities in June’s Android security update

Google’s June security update for Android devices contains 34 vulnerabilities, all of which the company designates as high-severity defects. The company didn’t disclose any actively exploited vulnerabilities. Attackers could exploit the most serious flaw — CVE-2025-26443 affecting the Android system — to achieve local escalation of privilege with no additional privileges required. Google said exploitation…

Read more →

Android, CISA, Cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Exploits, Global Security News, Google, Google Threat Analysis Group, patching, Technology, vulnerabilities, zero days

Google addresses 34 high-severity vulnerabilities in June’s Android security update

Google’s June security update for Android devices contains 34 vulnerabilities, all of which the company designates as high-severity defects. The company didn’t disclose any actively exploited vulnerabilities. Attackers could exploit the most serious flaw — CVE-2025-26443 affecting the Android system — to achieve local escalation of privilege with no additional privileges required. Google said exploitation…

Read more →

Android, CISA, Cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Exploits, Global Security News, Google, Google Threat Analysis Group, patching, Technology, vulnerabilities, zero days

Google addresses 34 high-severity vulnerabilities in June’s Android security update

Google’s June security update for Android devices contains 34 vulnerabilities, all of which the company designates as high-severity defects. The company didn’t disclose any actively exploited vulnerabilities. Attackers could exploit the most serious flaw — CVE-2025-26443 affecting the Android system — to achieve local escalation of privilege with no additional privileges required. Google said exploitation…

Read more →

Commentary, CVE, Cybersecurity, Exploits, Global Security News, MITRE, NVD, Research, Technology, Threats, Vulnerability Management

Future-ready cybersecurity: Lessons from the MITRE CVE crisis

The recent funding crisis surrounding MITRE’s Common Vulnerabilities and Exposures (CVE) program was more than just a bureaucratic hiccup — it was a wake-up call for an industry that has relied on CVEs for years to identify, categorize, and prioritize vulnerabilities. Out of the blue, we discovered the foundation was suddenly at risk. Worse still,…

Read more →

Commentary, CVE, Cybersecurity, Exploits, Global Security News, MITRE, NVD, Research, Technology, Threats, Vulnerability Management

Future-ready cybersecurity: Lessons from the MITRE CVE crisis

The recent funding crisis surrounding MITRE’s Common Vulnerabilities and Exposures (CVE) program was more than just a bureaucratic hiccup — it was a wake-up call for an industry that has relied on CVEs for years to identify, categorize, and prioritize vulnerabilities. Out of the blue, we discovered the foundation was suddenly at risk. Worse still,…

Read more →

Commentary, CVE, Cybersecurity, Exploits, Global Security News, MITRE, NVD, Research, Technology, Threats, Vulnerability Management

Future-ready cybersecurity: Lessons from the MITRE CVE crisis

The recent funding crisis surrounding MITRE’s Common Vulnerabilities and Exposures (CVE) program was more than just a bureaucratic hiccup — it was a wake-up call for an industry that has relied on CVEs for years to identify, categorize, and prioritize vulnerabilities. Out of the blue, we discovered the foundation was suddenly at risk. Worse still,…

Read more →

Asia Pacific, Global Security News, national security, Technology

OpenAI’s Pitch to Trump: Rank the World on U.S. Tech Interests

OpenAI has always said it’s a different kind of Big Tech titan, founded not just to rack up a stratospheric valuation of $400 billion (and counting), but also to “ensure that artificial general intelligence benefits all of humanity.”  The meteoric machine-learning firm announced itself to the world in a December 2015 press release that lays…

Read more →

Asia Pacific, Global Security News, national security, Technology

OpenAI’s Pitch to Trump: Rank the World on U.S. Tech Interests

OpenAI has always said it’s a different kind of Big Tech titan, founded not just to rack up a stratospheric valuation of $400 billion (and counting), but also to “ensure that artificial general intelligence benefits all of humanity.”  The meteoric machine-learning firm announced itself to the world in a December 2015 press release that lays…

Read more →

Asia Pacific, Global Security News, national security, Technology

OpenAI’s Pitch to Trump: Rank the World on U.S. Tech Interests

OpenAI has always said it’s a different kind of Big Tech titan, founded not just to rack up a stratospheric valuation of $400 billion (and counting), but also to “ensure that artificial general intelligence benefits all of humanity.”  The meteoric machine-learning firm announced itself to the world in a December 2015 press release that lays…

Read more →