ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Source: WIRED · Security

12 stories in the last 30d

Sortlatesthotimportance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllPolicy & legal 4Threat actor 3Data breach 2Phishing & fraud 1Research 1Vulnerability 1
SeverityAllcritical 0high 4medium 4low 0info 4source: WIRED · Security ✕

Hackers Got Inside a Flock Camera. Its Data Shows How the System Really Works

Hackers stole a Flock Safety camera, copied its storage, and recovered an encryption key exposing vehicle surveillance data and system internals.

Hackers from the collective stegan0gram removed a Flock Safety license plate reader from a roadway, copied its storage, and recovered an encryption key stored in an unencrypted partition, unlocking videos of thousands of vehicle detections. The data, shared with 404 Media, WIRED, and Distributed Denial of Secrets, shows the camera generated roughly 1.6 million images of about 50,200 vehicles over 21 days and detects people, bicycles, and bumper stickers in addition to license plates. The dump follows 2025 research by Jon 'GainSec' Gaines documenting flaws enabling root access, which Flock downplayed. Flock's national network makes camera records searchable by more than 2,000 agencies, fueling controversy over police and immigration lookups.

WIRED · Securityupdated · 4h agofirst · 15h agoData breach in the wild 3 sources

New York Seizes a Dozen Celebrity Deepfake Websites

Manhattan DA seized 12 domains hosting nonconsensual celebrity deepfake videos depicting about 1,200 victims, the largest such takedown to date.

The Manhattan District Attorney's Office seized 12 domains used for sharing and selling nonconsensual deepfake sexual videos, depicting around 1,200 people, mostly women, including influencers, politicians, and celebrities. The seizures under New York criminal procedure law represent the largest takedown of explicit deepfake websites to date, aided by the US Take It Down Act. Much of the content appeared to be reposts from the MrDeepFakes platform, and investigations into operators and uploaders are ongoing.

WIRED · Securityupdated · 2d agofirst · 2d agoPolicy & legal 2 sources

ICE Wants to Know Everyone Who Bought a Certain Green Beanie From REI in the Last 2 Years

DHS subpoenaed REI for all Minneapolis-area customers who bought a specific green beanie since 2024, part of an investigation into 39 ICE protest defendants.

Court filings allege Homeland Security Investigations agents subpoenaed REI in March for transaction records of all persons in the greater Minneapolis–St. Paul area who purchased a specific dark green beanie since 2024. The subpoena was one of 92 sent in a federal case against 39 people, including journalists, who attended an ICE protest at a church. Companies responded differently: T-Mobile handed over six months of a defendant's call and text logs, Google refused a request for YouTube viewers, Reddit withdrew after a First Amendment objection, and Meta pushed back on at least one summons. The 1509 customs summonses require no judicial oversight, and the total number issued under the Trump administration is unknown.

WIRED · Security · 12d agoPolicy & legal

ATM Flaws Reveal Key Weaknesses in the Software Supply Chain

A researcher disclosed nine vulnerabilities in ATM encryption and authentication software, highlighting weaknesses across the software supply chain.

WIRED reports that a security researcher found nine vulnerabilities in software used for ATM encryption and authentication. The disclosure matters beyond cash machines because the affected components illustrate broader weaknesses in the software supply chain. The article does not report active exploitation of the flaws.

WIRED · Security · 16d agoVulnerability

The Cybersecurity Apocalypse Is Coming in ‘Months,’ AI Giants Warn

AI giants warn AI-armed cyberattacks are 'months' away; hackers target over 100 US water systems in WIRED's roundup.

WIRED's weekly security digest leads with AI giants warning that AI-armed cyberattacks could surge within months. It also reports hackers targeting more than 100 US water systems, ICE's order for robot dogs, and an arrest tied to the online alias 'MrChildPorn'. No single incident is analyzed in depth in the excerpt.

WIRED · Security · 18d agoThreat actor in the wild

Microsoft Teams Has Become a Haven for Scammers in China

Scammers in China are exploiting Microsoft Teams and Webex to trick Chinese victims into transferring large sums of money.

WIRED reports that fraudsters are abusing enterprise chat platforms including Microsoft Teams and Cisco Webex to run scams against victims in China. Victims are socially engineered into transferring large sums of money. The campaign has generated a wave of complaints, highlighting how scam groups abuse legitimate business communication tools.

WIRED · Security · 19d agoPhishing & fraud in the wild

A Georgia Cop Used Flock to Track 2 Other Cops: His Ex and Her Friend

A Georgia police officer used Flock license plate reader cameras to surveil his ex-partner and another officer after their affair ended.

Internal investigation records show a Georgia officer used the Flock license plate reader network to track the movements of a fellow police officer with whom he had an affair, along with a man whose vehicle frequently appeared near hers. The unauthorized personal use of police surveillance infrastructure surfaced through an internal affairs review. The case highlights oversight gaps around law enforcement access to mass surveillance data.

WIRED · Security · 20d agoPolicy & legal

FBI Disrupts Chinese Proxy Tools Used in Mass Hacking of US Agencies and Infrastructure

FBI disrupted Chinese state-linked proxy infrastructure used in hacking campaigns against NASA, the Federal Reserve, the US Senate, and other US targets.

The FBI disrupted Chinese proxy tools used in a mass hacking campaign against US agencies and critical infrastructure, according to the DOJ. Targets included NASA, the Federal Reserve, the US Senate, and the Justice Department. The operation dismantled infrastructure that Chinese state-sponsored hackers relied on to obfuscate their access.

WIRED · Security · 21d agoThreat actor in the wild

The County Prosecutors Who Became ICE Informants

Illinois county prosecutors shared defendants' personal data with federal ICE agents without warrants, disclosure, or oversight, WIRED reports.

WIRED reports that county prosecutors in Illinois effectively became informants for federal immigration agents. Defendants' personal data was shared without criminal warrants, public disclosure, or legislative oversight. The story raises privacy and accountability concerns around government handling of personal data.

WIRED · Security · 22d agoPolicy & legal

Your Expired Visa Card Could Be ‘Zombified’ to Make Contactless Payments

Roundup: expired Visa cards can be revived for contactless payments via NFC relay; plus Apple spyware warnings and Ukraine cyberattacks on Russian e-commerce.

WIRED's weekly security roundup leads with research showing expired Visa contactless cards can be revived to make new payments through an NFC man-in-the-middle attack that alters the card's expiration date. The roundup also covers Apple sending an unprecedented volume of spyware warnings to users and Ukrainian cyber and drone attacks against a major Russian e-commerce company.

WIRED · Security · 25d agoResearch

China Is Strapping ‘Digital Bombs’ to Civilian Infrastructure—Is the US Ready?

WIRED examines Volt Typhoon pre-positioning 'digital bombs' in US civilian infrastructure via a war game simulation discussion.

WIRED's Uncanny Valley podcast features reporter Andy Greenberg discussing a war game simulating a cyberattack by Chinese hacking group Volt Typhoon. The episode examines Volt Typhoon's practice of planting persistent access in US civilian infrastructure that could be activated during conflict, and questions whether the US is prepared.

WIRED · Security · 27d agoThreat actor

Reverse-Lookup Service Exposed Millions of Photos of People’s Faces

People-search service ClarityCheck exposed a database with more than 9 million facial image files despite marketing its reverse lookup as private and secure.

WIRED reports that ClarityCheck, a people-search tool offering reverse image lookup, left a database containing more than 9 million image files of people's faces exposed. The company markets the service as private and secure. The exposure affects millions of individuals whose facial photos could be linked to their identities.

WIRED · Security · 28d agoData breach