Dec 22, 2005 2:22 PM

Xmas Security Alert

There's a zinger for the new year: even major-league antivirus

software has vulns that can carry viruses.

http://www.securityfocus.com/archive/1/419853

The virus crowd must be hustling to exploit this one, chuckling all the way

What next, for heaven's sake? Maybe there's a way to make

dour anti-virus news carry viruses.

Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw

The critical flaw in UEFI firmware—used by most server vendors and data centers—allows attackers to execute code early in the boot process.

Dan Goodin, Ars Technica

The PHP Meltdown Shows How AI Makes Bugs More Exploitable

Security researchers used AI tools to help uncover years-old vulnerabilities in the PHP web scripting language. Then the AI-assisted attacks began.

Lily Hay Newman

‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads

Researchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distributed via online advertising.

Matt Burgess

‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire

The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that failure to quickly patch the flaws could have dire consequences.

Matt Burgess

Top Norton Coupon Codes and Deals: 58% Off

Whether you’re looking to protect your small business or your personal computer, we have the top coupons and deals to help you save at Norton.

Gear Team

Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They’re now being “broadly exploited” across the internet.

Lily Hay Newman

AI Guardrails Aren’t Stopping Criminal Hackers

Hackers around the world are all-in on using agentic AI to wage attacks—and manipulating tools like Anthropic’s Claude to help them carry out their crimes.

Lily Hay Newman

WIRED Ghost Stories

Five hauntings from the other side of technology.

A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data

While the focus has been on AI agents’ hacking capabilities, a recently patched vulnerability in a ChatGPT app shows that AI software is itself an inviting—and vulnerable—target.

Lily Hay Newman

Shaq Got Hacked. Now He’s Pitching for a VPN

At a recent event for security firm NordVPN, NBA superstar Shaquille O’Neal revealed that he got hacked—and warned the public about the need to “have control of their own information.”

Lily Hay Newman

Bluesky Is Blocking Links to a Major Leak of DHS Employee Records

Bluesky tells WIRED it blocked links to a leaked archive of information on 41,000 ICE, CBP, and other DHS workers because it contains people’s contact information, shared without their authorization.

Dhruv Mehrotra

Mistral Says Its AI Model ‘Le Chonk’ Has Leapfrogged China in the Open-Weight Race

The French AI lab claims its latest release matches or outperforms even the best models from DeepSeek and Z.ai in coding and cybersecurity.

Joel Khalili