CISO News

Morningstar Security News gathers all the most popular CISO and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

PacketStorm
The Register
Dems ask federal agencies for reassurance DOGE isn't feeding data into AI willy-nilly new
Google says it's rolling out fix for stricken Chromecasts new
That 'angry guest' email from Booking.com? It's a scam, not a 1-star review new
CISA: We didn't fire red teams, we just unhired a bunch of them new
DeepSeek can be gently persuaded to spit out malware code new
Medusa ransomware affiliate tried triple extortion scam – up from the usual double demand new
Get off that old Firefox by Friday or you'll be sorry, says Moz
Expired Juniper routers find new life – as Chinese spy hubs
This is the FBI, open up. China's Volt Typhoon is on your network
UK must pay cyber pros more than its Prime Minister, top civil servant says
CISA pen-tester says 100-strong red team binned after DOGE canceled contract
Choose your own Patch Tuesday adventure: Start with six zero-day fixes, or six critical flaws
Bleeping Computer
Microsoft says button to restore classic Outlook is broken new
Juniper patches bug that let Chinese cyberspies backdoor routers new
GitLab patches critical authentication bypass vulnerabilities new
New North Korean Android spyware slips onto Google Play
Garantex crypto exchange admin arrested while on vacation
The Hacker News
Microsoft Warns of ClickFix Phishing Campaign Targeting Hospitality Sector via Fake Booking[.]com Emails new
North Korea’s ScarCruft Deploys KoSpy Malware, Spying on Android Users via Fake Utility Apps new
GitHub Uncovers New ruby-saml Vulnerabilities Allowing Account Takeover Attacks new
Future-Proofing Business Continuity: BCDR Trends and Challenges for 2025 new
Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk
WARNING: Expiring Root Certificate May Disable Firefox Add-Ons, Security Features, and DRM Playback
Chinese Hackers Breach Juniper Networks Routers With Custom Backdoors and Rootkits
Over 400 IPs Exploiting Multiple SSRF Vulnerabilities in Coordinated Cyber Attack
Pentesters: Is AI Coming for Your Role?
URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero-Days
Apple Releases Patch for WebKit Zero-Day Vulnerability Exploited in Targeted Attacks
Blind Eagle Hacks Colombian Institutions Using NTLM Flaw, RATs and GitHub-Based Attacks
Hacker Noon #Security
Why AI Needs to Lose (a Little) to Recognize Your Face Better new
The Efforts Being Made Recently to Address the Shortcomings of Cybersecurity Testing
Current Security Testing Platforms: Verification Methods and More
Towards a New Configurable and Practical Remote Automotive Security Testing Platform
How to Use OSINT and HUMINT to Land Your Next Role
How to Evaluate Comprehensive Cybersecurity Solutions
The HackerNoon Newsletter: AI Coding Tools Are Bad News for Lazy Programmers (3/12/2025)
Every Truth (And Lie) Told in Netflix's 'Zero Day,' Ranked
AI Wants to Fix Your Network Before It Breaks—But Can You Trust It?
After Bybit’s $1.5B Blind Signing Fiasco, Human Wallet Steps Up with a Radical Security Fix
The HackerNoon Newsletter: X Outage Exposes Musks Poor Digital Hygiene (3/11/2025)
Need to Buy Plan B or an HIV Test? Facebook Already Knows About It
CISO Mag
CYBER SECURITY EXPO
GAME CHANGER CONFERENCE LONDON 2025
We Live Security
Fake job offers target software developers with infostealers
DeceptiveDevelopment targets freelance developers
No, you’re not fired – but beware of job termination scams
Katharine Hayhoe: The most important climate equation | Starmus highlights
Gaming or gambling? Lifting the lid on in-game loot boxes
What is penetration testing? | Unlocked 403 cybersecurity podcast (ep. 10)
How AI-driven identify fraud is causing havoc
Neil Lawrence: What makes us unique in the age of AI | Starmus highlights
Patch or perish: How organizations can master vulnerability management
Roeland Nusselder: AI will eat all our energy, unless we make it tiny | Starmus highlights
How scammers are exploiting DeepSeek's rise
This month in security with Tony Anscombe – January 2025 edition

Bloggers

Curated RSS Aggregator: category thehackernews not found

ThreatWire

Articles

Podcasts

Security Weekly
Don't Hack Russia - PSW #864
Zero Days Are Not Just Fiction - PSW #863
Live from ZTW - PSW #862
Prompt Injection, CISA, Patch Tuesday - PSW #861
Deepseek, AMD, and Forgotten Buckets - PSW #860
Cred Vaults, Cheap AI, and Hacking Devices - Matt Bishop - PSW #859
Vulnerability Prioritization In The Real World - Andy Jaquith - PSW #858
Stopping The Bad Things - Rob Allen - PSW #857
Threat Actors With A Thousand Names - PSW #856
Hacker Heroes - Haroon Meer - PSW Vault
When Public Payphones Become Smart Phones - Inbar Raz - PSW #855
Risky.Biz
Risky Business #783 -- Evil webcam ransomwares entire Windows network
Risky Business #782 -- Are the USA and Russia cyber friends now?
Risky Business #781 -- How Bybit oopsied $1.4bn
Wide World of Cyber: DeepSeek lobs an AI hand grenade
Risky Business #780 -- ASD torched Zservers data while admins were drunk
Risky Business #778 -- Musk's child soldiers seize control of FedGov IT systems
Risky Business #777 -- It's SonicWall's turn
Risky Business #776 -- Trump will flex American cyber muscles
Risky Biz Soap Box: Cool compliance tricks with the Island enterprise browser
Risky Business #775 -- Cl0p is back, SEC hack disclosures disappoint
The CyberWire
FCC draws the line on Chinese tech threats. new
Will Plankey lead CISA to victory?
X marks the hack.
software bill of materials (SBOM) (noun) [Word Notes]
PHP flaw sparks global attack wave.
Peter Baumann: Adding value to data. [CEO] [Career Notes]
Botnet’s back, tell a friend. [Research Saturday]
The end of the line for Garantex.
From China with love (and Malware).
US Treasury targets darknet kingpin.
CISA keeps watch on Russia.
Is it cyber peace or just a buffer?
Cyber Security Interviews
ISC Daily Stormcast
SANS Stormcast: File Hashes in MSFT BI; Apache Camel Vuln; Juniper Fixes Exploited Vuln; AMI Patches 10.0 Redfish BMC Vuln new
SANS Stormcast Thursday Mar 13th: Exploiting Login Pages with Log4j; Patch Tuesday Fallout; Adobe Patches; Medusa Ransomware; Zoom and Font Library Updates;
SANS Stormcast Wednesday Mar 12th: Microsoft Patch Tuesday; Apple Patch; Espressif ESP32 Statement
SANS Stormcast Tuesday Mar 11th: Shellcode as UUIDs; Moxe Switch Vuln Updates; Opentext Vuln; Livewire Volt Vuln;
SANS Stormcast: Webshells; Undocumented ESP32 Commands; Camera Used For Ransomware Distribution
SANS Stormcast Friday Mar 7th: Chrome vs Extensions; Kibana Update; PrePw0n3d Android TV Sticks; Identifying APTs (@sans_edu, Eric LeBlanc)
SANS Stormcast Thursday Mar 6th: DShield ELK Analysis; Jailbreaking AMD CPUs; VIM Vulnerability; Snail Mail Ransomware
SANS Stormcast Wednesday Mar 5th: SMTP Credential Hunt; mac-robber.py update; ADSelfService Plus Account Takeover; Android Patch Day; PayPal Scams; VMWare Escape Fix
SANS Stormcast Tuesday Mar 4th: Mark of the Web Details; Sharepint and Click-Fix Phishing; Paragon Partionmanager BYOVD Exploit
SANS Stormcast Monday Mar 3rd: AI Training Data Leaks; MITRE Caldera Vuln; modsecurity bypass
Darknet Diaries
155: Kingpin
154: Hijacked Line
153: Bike Index
152: Stacc Attack
151: Chris Rock
150: mobman 2
149: Mini-Stories: Vol 3
148: Dubsnatch
147: Tornado
146: ANOM
145: Shannen
144: Rachel

Current Alerts

Threat Level - GUARDED

Privacy & Rights

Slashdot - Rights
Chinese Hackers Sat Undetected in Small Massachusetts Power Utility for Months new
Meta Stops Ex-Director From Promoting Critical Memoir new
Mark Klein, AT&T Whistleblower Who Revealed NSA Mass Spying, Has Died
Allstate Insurance Sued For Delivering Personal Info In Plaintext
Internet Shutdowns At Record High In Africa As Access 'Weaponized'
Thousands of Freed Scam Center Workers Now Trapped in Overcrowded Detention Centers
Zuckerberg's Meta Considered Sharing User Data with China, Whistleblower Alleges
America's Justice Department Still Wants Google to Sell Chrome
Is America Closer to Ending Daylight Saving Time?
Free Software Foundation Rides To Defend AGPLv3 Against Neo4j License Add-ons
Sam Bankman-Fried Gives a Jailhouse Interview, Seeking a Pardon
Rayhunter: A Cheap New Tool from EFF to Detect Cellular Spying
EFF
EFF to NSF: AI Action Plan Must Put People First new
EFF Thanks Fastly for Donated Tools to Help Keep Our Website Secure new
EFFecting Change: Is There Hope for Social Media? new
EFF Joins AllOut’s Campaign Calling for Meta to Stop Hate Speech Against LGBTQ+ Community new
In Memoriam: Mark Klein, AT&T Whistleblower Who Revealed NSA Mass Spying
EFF Stands with Perkins Coie and the Rule of Law
Anchorage Police Department: AI-Generated Police Reports Don’t Save Time
Hawaii Takes a Stand for Privacy: HCR 144/HR 138 Calls for Investigation of Crisis Pregnancy Centers
Ten Years of The Foilies
Right to Repair: A Prime Example of Grassroots Advocacy
EFF Sends Letter to the Senate Judiciary Committee Opposing the STOP CSAM Act
RightsCon Community Calls for Urgent Release of Alaa Abd El-Fattah
Princeton | Freedom To Tinker

Threat Intelligence

Color Dating - 220,503 breached accounts
Flat Earth Sun, Moon and Zodiac App - 33,294 breached accounts
Spyzie - 518,643 breached accounts
Orange Romania - 556,557 breached accounts
ALIEN TXTBASE Stealer Logs - 284,132,969 breached accounts
Spyic - 875,999 breached accounts
Cocospy - 1,798,059 breached accounts
Storenvy - 11,052,071 breached accounts
Doxbin (TOoDA) - 136,461 breached accounts
Zacks (2024) - 11,994,223 breached accounts
LandAirSea - 337,373 breached accounts
Adopt Me Trading Values - 86,136 breached accounts

Lockpicking

Creative

The Mysterious and Important Work of Prop Design on Severance new
Tracking Deep-Sky Objects new
BritCSS: Write CSS With British English Spellings new
Have Li-ion Batteries Gone Too Far? new
Got Junk? Then Build This Scrappy TEA Laser new
Linux Fu: Use the Source (Command), Luke new
Hacking a Rotary Phone new
Hackaday Europe 2025: Speaker Schedule and Official Event Page new
High-Speed Reservoir Computing With Integrated Laser Graded Artificial Neurons new
A Decade Resistance Box From PCBs new
Meshtastic Adds Wireless Connectivity to Possum Trap
A Fast Rewind to the Era of Tapesponding

Developer