Websites have a new way to spy on visitors: analyzing their SSD activity
2026-05-28T08:51:49Z•700f5947318fc857de84436922dfb3a22a9e9a0ad9802f4bd377596f7c8f4a47
bitlocker-zero-daybug-bounty-abusecanvas-downtimecheckmarx-bitwarden-targetedchromium-exploit-publishcisa-credentials-leakcopyfaildaemon-tools-backdoorelement-datagpt-5.5javascript-fingerprintinglinux-critical-vulnerabilitiesmythos-ai-vuln-discoveryopen-source-malicious-packagepost-quantum-ransomwaressd-side-channelstarlette-badhostsupply-chain-attackuniversity-subdomain-hijackvpn-interception
What happened
A batch of Ars Technica security stories covering multiple high-impact incidents: researchers demonstrated an SSD-based browser side‑channel via JavaScript; a critical “BadHost” vulnerability was disclosed in the Starlette package affecting millions of AI agents; Google published exploit code for a long-reported Chromium flaw; and a BitLocker zero‑day, severe Linux vulnerabilities (including CopyFail), and a widespread supply‑chain backdoor in Daemon Tools were reported. Other notable items include leaked CISA credentials on GitHub, large-scale open‑source package credential theft (element‑dat
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- arstechnica_security
- Record identifier
- 700f5947318fc857de84436922dfb3a22a9e9a0ad9802f4bd377596f7c8f4a47
- Enrichment time
- 2026-05-28T08:51:49Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.