Cyber Security, Without the Jargon

A shopping page ran an inaudible audio test that helped describe a visitor’s device. Here is what the finding proves, what it does not prove, and how to make browser tracking less reliable.

miniOrange fixed two WordPress login flaws, but six paid editions sat outside the public advisory. Here is how to find the real version, patch it, and check what happened before the fix.

Nottinghamshire Police has begun scanning faces in public against a watchlist. Here is what the system does, what deletion cannot undo, and which records the public should demand before the next deployment.

A new Grok proof of concept hid instructions inside encrypted text, then used the model’s own runtime to reveal and act on them. The durable fix is to distrust derived content and control what tools can do with it.

Researchers revived some expired Visa contactless cards by changing the date a checkout terminal read. The practical lesson is simple: report missing cards and destroy the chip in old ones.