This quick question can still expose North Korean spies in an instant
Companies are increasingly relying on asking unusual interview questions to weed out sanctioned North Koreans who seek fraudulent employment.
Articles - ~this week in security~
a weekly cybersecurity newsletter by journalist Zack Whittaker, plus exclusive articles, analysis, and much more.
Live Last read · last published · next check
Latest posts
The top highlights from Black Hat, Def Con, and BSides Las Vegas 2026, if you couldn't make it in person
Live vicariously through 2026's top cybersecurity conferences with live streams.
Microsoft wins 'lamest vendor' at Pwnie Awards 2026 for threatening security researchers with legal action
"This is a shame award. Don't forget to feel that shame."
Online advertising giant Adform was hacked, proving once again why ad blockers are necessary
The hacked digital advertiser was caught serving malicious ads that allowed hackers to steal a victim's cryptocurrency.
When AI chatbots and LLMs get legal, check your privilege
Using AI tools and LLMs for sensitive matters, such as for legal and medical uses, raises important questions about where that data goes and who can access it.
Most fitness wearables lack end-to-end encryption and don't disclose government data demands, says EFF
Most fitness wearables don't use end-to-end encryption to protect users' health information, leaving open the door for government demands for data.
U.S. judge denied feds a month-long warrant to snoop on the phones of thousands of Ohio residents
The magistrate judge's decision offers a rare view into how the government seeks to use cell-site simulators during law enforcement investigations.
Reframing smart glasses as 'pervert glasses'
Smart glasses equipped with cameras, microphones, and AI are a creeping privacy and security nightmare, prompting backlash.
Reflections on eight years of writing ~this week in security~
Your favorite weekly cybersecurity newsletter marks eight years on the web.
Dozens of America's largest companies have no simple way to report security flaws
New analysis shows that around one-third of America's Fortune 100 companies do not have a vulnerability disclosure policy, bug bounty, or a dedicated email address for reporting security flaws.