Happygeek
@happygeek.bsky.social
Veteran cybersecurity journalist and hacker, senior contributor at Forbes.com, contributing editor PC Pro.
More vulnerabilities discovered = a good thing. Shorter upgrade cycles = a good thing. Not all AI cyber is bad folks. www.forbes.com/sites/daveyw...
Google Chrome AI Flaws Prompt New 14 Day Security Update Cycle
Google has confirmed that, with immediate effect, it has increased the Chrome security update cycle in response to concerns about AI vulnerability discoveries.
forbes.com
New @Forbes: Don’t get caught out as iPhone 18 Pro and iPhone 18 Pro Max pre-order madness takes hold. www.forbes.com/sites/daveyw...
Apple iPhone 18 Pro Scam Warning As Pre-Orders Go Live September 12
Pre-orders for the new Apple iPhone 18 Pro and Pro Max due begin Saturday, September 12. Now fraud experts warn that scammers are already trying to take your money.
forbes.com
By me @forbes.com: Keep it real, folks. And before you say it, yeah, Mea Culpa - and I say so in the article. #infosec www.forbes.com/sites/daveyw...
Ignore The FUD—Google Updates Chrome As 230 Security Issues Confirmed
As Google confirms a bumper round of 230 Chrome security vulnerabilities, including 5 critical ones, there’s no need to panic — or do anything but sit back and wait.
forbes.com
By me @forbes.com: 973 vulnerabilities? No problem if you have a plan. #infosec www.forbes.com/sites/daveyw...
How To Respond As Microsoft Confirms 973 Security Vulnerabilities
Microsoft has patched 973 vulnerabilities, including actively exploited Windows CVE-2026-85880 and CVE-2026-81963 bugs. How should your organization respond to stay safe?
forbes.com
Yeah, I know, awards. But I'm a judge for this lot. There are no pay-to-play fees. Feel free to nominate someone, #infosec fam. I'm most interested in the Cybersecurity Excellence Award, of course. www.techfinitive.com/awards/ And, yes, that *was* the happiest profile photo I could find.
Awards
The TechFinitive Awards celebrate the companies, technologies and leaders shaping the future of enterprise IT.
techfinitive.com
“Hundreds of millions of infostealer logs” included in new compromised credentials corpus: 124 million unique passwords added to HIBP Pwned Passwords database. #infosec www.forbes.com/sites/daveyw...
124 Million Unique Passwords Exposed In New Infostealer Log Dataset
A new collection of 124 million unique passwords from hundreds of millions of malware stealer log records has been confirmed by the Have I Been Pwned service.
forbes.com
Here’s how the Dashlane hacker downloaded copies of some encrypted password vaults, from the horse’s mouth. www.forbes.com/sites/daveyw...
May 31 Dashlane Attack: Here’s How Hackers Copied Some Password Vaults
After some Dashlane users were locked out of accounts and a limited number of encrypted password vaults were downloaded, the hacker attack methodology has been revealed.
forbes.com
How long can the AI-impact keep uncovering vulns? It’s almost like there’s an infinite number in these codebases. Still, at least Google paid out $200,000 to Chrome researchers this month. www.forbes.com/sites/daveyw...
Google Chrome 149: New Update Fixes 429 Security Flaws, 22 Critical
Google has just dropped a critical browser security fix for 3.5 billion users—Chrome 149 patches an incredible 429 vulnerabilities. Here’s how to install the update now.
forbes.com
Update now: new Android zero-day confirmed. #infosec www.forbes.com/sites/daveyw...
New Android 14, 15 And 16 Update Fixes Actively Exploited Security Flaw
Google has released a security update for users of Android 14, 15 and 16, fixing a zero-day flaw that it confirmed is already “under limited, targeted exploitation.”
forbes.com
Dashlane has now confirmed that a small number of encrypted password vaults were downloaded during brute-force attack incident. Article updated. #infosec www.forbes.com/sites/daveyw...
Dashlane Users Locked Out After Password Manager Detects Brute-Force Attack
An unknown number of Dashlane accounts were temporarily suspended after being targeted by a brute-force campaign. Some encrypted password vaults were also downloaded.
forbes.com
Dashlane is ‘monitoring’ brute force campaign, some accounts already disabled as a security precaution. www.forbes.com/sites/daveyw...
Dashlane Confirms Brute-Force Password Attacks Targeting Some Users
As people take to social media after some accounts are disabled, Dashlane confirms it is monitoring brute-force attacks targeting an unknown number of users.
forbes.com
Looks like the Google AI security machine is switched to overdrive mode. #infosec www.forbes.com/sites/daveyw...
151 Chrome Security Flaws, 22 Critical, Fixed In New Google Update
Google has released a Chrome update patching a large number of new security flaws: 151 in total, 22 of them rated as critical severity.
forbes.com
Microsoft appears to be going for the ‘most zero days in a week’ title methinks… www.forbes.com/sites/daveyw...
2 New Microsoft Defender Zero-Days Exploited—Patch Now Rolling Out
Microsoft has confirmed an emergency security update as CISA warns that two new Defender zero-days are being exploited by attackers.
forbes.com
So, about that ‘by design’ browser plaintext passwords into memory vulnerability that Microsoft said wasn’t… #InfoSec #NewsUpdate www.forbes.com/sites/daveyw...
Microsoft Does U-Turn On Edge ‘By Design’ Password Vulnerability
Microsoft has confirmed a “defense-in-depth change will come to every supported version of Edge” after initially refusing to address browser password security issue.
forbes.com
ICYMI yesterday, check your Microsoft Exchange Server Emergency Mitigation status sharpish! Attacks already underway. www.forbes.com/sites/daveyw...
Microsoft Confirms Active 0-Day Exploit—Check Emergency Mitigation
Microsoft Exchange users are urged to mitigate a zero-day vulnerability that CISA has confirmed is under active exploitation.
forbes.com
I’m safe, I have no money and I don’t use smartphones or the internet. Phew. www.forbes.com/sites/daveyw...
Seniors Targeted—FBI Issues Cyber Attack Advice For The Over 60s
Senior citizens are profitable targets for cybercriminals, the FBI has warned. Here's how the over 60's can stay safe.
forbes.com
The Holy Grail of kernel vulnerabilities, Google Project Zero says. #infosec www.forbes.com/sites/daveyw...
‘Holy Grail’—Google Researchers Found Pixel 10 Zero-Click Exploit Chain
Google’s own hackers, Project Zero, have disclosed what they say was a Holy Grail Pixel 10 security vulnerability. Here’s what you need to know.
forbes.com
Is AI the ouroboros of cybersecurity? #infosec www.techfinitive.com/ouroboros-of...
Ouroboros of cybersecurity is confirmed as the AI vulnerability disclosure cycle eats itself
The dramatic rise in the number of vulnerability disclosures may sound like a good thing, but the cyberattackers may be rubbing their hands in glee
techfinitive.com
Another nail in the VPN coffin? #infosec www.forbes.com/sites/daveyw...
‘Won’t Fix’—All VPN Apps Affected By Google Android 16 Info Leak Bug
An Android 16 VPN bypass has been confirmed, affecting all VPN apps and exposing your real IP address online, but Google marked the vulnerability report as Won’t Fix.
forbes.com
The angry hacker is back and now it really is Exploit Wednesday as they drop 2 Windows zero-day exploits. #infosec www.forbes.com/sites/daveyw...
Microsoft Windows Alert—Angry Hacker Drops 2 New Zero-Day Exploits
The latest Microsoft Patch Tuesday rollout featured no zero-days. However, an angry hacker has just dropped two new 0-day exploits targeting Windows users.
forbes.com
Ring ring, who dis? Android announces new caller ID spoofing protections. #infosec www.forbes.com/sites/daveyw...
‘$980 Million Annual Losses’—Google Confirms Android Call Changes
Google’s director of Android security and privacy has confirmed new 2026 protections amid spoofed calls that have driven a worldwide annual loss of $980 million.
forbes.com
BREAKING: an architectural misalignment within Google’s unified security framework enables malware “otherwise explicitly blocked by Gmail’s attachments scanner” to be hosted on Drive and delivered to recipients alongside a “Scanned by Gmail” label of trust. #infosec www.forbes.com/sites/daveyw...
‘Signifcant Threat’—Billions Of Gmail Users At Risk From Google Gaffe
New research has confirmed that almost every individual with a Gmail account is at significant risk from dangerous Google security flaw—what you need to know.
forbes.com
By me @forbes.com: It's always at the weekend, innit? Adobe urges admins to patch Adobe Acrobat and Reader on Windows and macOS within 72 hours as CVE-2026-34621 attacks confirmed. www.forbes.com/sites/daveyw...
forbes.com
FBI confirms Patel Gmail hack, $10 million on offer through the Department of State Rewards for Justice scheme for “information leading to the identification of the Handala Hack Team out of Iran.” www.forbes.com/sites/daveyw...
FBI Confirms $10 Million Reward After Iran Hacks Kash Patel’s Gmail
The FBI has confirmed that the personal Gmail account of Director Kash Patel has, indeed, been compromised. $10 million is up for grabs to identify the Iranian hackers.
forbes.com
It’s been quite the week for iPhone users… www.forbes.com/sites/daveyw...
iOS 26 Security Update Warning—iOS 18 Silent Compromise Exploit Alert
Apple has confirmed a new security update for iOS users, but you need to make sure this setting is enabled to get it. Here’s what you need to know and do.
forbes.com
By me @Forbes: A LastPass spokesperson told me: “There has been no evidence of a breach at this time.” www.forbes.com/sites/daveyw...
LastPass Issues New Account Password Warning—Attacks Are Underway
LastPass has confirmed a new and ongoing attack that began on March 1 and targets user account credentials. Here’s what you need to know and do.
forbes.com
The Microslop chat ban is not what you think, Microsoft says. www.forbes.com/sites/daveyw...
Copilot AI ‘Microslop’ Chat Ban Is Not Censorship—Says Microsoft
After social media users complained that Microsoft has banned the use of ‘Microslop’ on its Copilot AI Discord chat servers. Microsoft says this is not censorship.
forbes.com
Beware this fake Google Account security checkup tool. @malwarebytes.com called it “one of the most fully featured browser-based surveillance toolkits." #infosec www.forbes.com/sites/daveyw...
New Gmail Account Attack Warning—Hackers Abuse Critical Security Check
As Gmail support forums continue to fill with pleas for help amid hacker attacks, a new report reveals that a critical Google security check is being abused.
forbes.com
By me @forbes.com with thanks to @lisaforte.bsky.social www.forbes.com/sites/daveyw...
Iran Plunges Into ‘Near-Total Internet Blackout’ As Epic Fury Strikes Begin
As Operation Epic Fury begins, network data reveals that Iran has been plunged into near internet darkness, with national connectivity now at just 4%.
forbes.com
