CISO News

Morningstar Security News gathers all the most popular CISO and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

PacketStorm
Network Of 3,000 GitHub Accounts Used For Malware Distribution
KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware
Hackers Bypass Windows SmartScreen Flaw To Launch Malware
HHS Audit Finds Serious Gaps In Cloud Security At Agency Office
Physicists Just Created An Element Using A Particle Beam
Spain Arrested Three In Pro-Russian DDoS Crew Takedown
Chrome 127 Patches 24 Vulnerabilities
CrowdStrike Explains Why Bad Update Was Not Properly Tested
How Russian Malware Cut Heat To 600 Heat To Ukrainian Buildings In Deep Winter
Why CrowdStrike-Style Chaos Is Here To Stay
VMware ESXi Servers Targeted By New Linux Ransomware Variant
Telegram Zero-Day Enabled Malware Delivery
The Register
CrowdStrike meets Murphy's Law: Anything that can go wrong will new
Progress discloses second critical flaw in Telerik Report Server in as many months new
North Korean chap charged for attacks on US hospitals, military, NASA – and even China
Malware crew Stargazers Goblin used 3,000 GitHub accounts to make bank
CrowdStrike update blunder may cost world billions – and insurance ain't covering it all
Beware of fake CrowdStrike domains pumping out Lumma infostealing malware
FYI: Data from deleted GitHub repos may not actually be deleted
Uncle Sam accuses telco IT pro of decade-long spying campaign for China
You should probably fix this 5-year-old critical Docker vuln fairly sharpish
Kaspersky says Uncle Sam snubbed proposal to open up its code for third-party review
Patch management still seemingly abysmal because no one wants the job
How a cheap barcode scanner helped fix CrowdStrike'd Windows PCs in a flash
Bleeping Computer
The Hacker News
Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials new
This AI-Powered Cybercrime Service Bundles Phishing Kits with Malicious Android Apps new
Offensive AI: The Sine Qua Non of Cybersecurity new
U.S. DoJ Indicts North Korean Hacker for Ransomware Attacks on Hospitals new
Ongoing Cyberattack Targets Exposed Selenium Grid Services for Crypto Mining
CrowdStrike Warns of New Phishing Scam Targeting German Customers
Critical Flaw in Telerik Report Server Poses Remote Code Execution Risk
North Korean Hackers Shift from Cyber Espionage to Ransomware Attacks
6 Types of Applications Security Testing You Must Know About
Meta Removes 63,000 Instagram Accounts Linked to Nigerian Sextortion Scams
Webinar: Securing the Modern Workspace: What Enterprises MUST Know about Enterprise Browser Security
Researchers Reveal ConfusedFunction Vulnerability in Google Cloud Platform
Hacker Noon #Security
The Noonification: Last Mile of Blockchains: RPC and Node-as-a-Service (7/26/2024) new
Court Reveals Wright's 2024 MYOB Email Was Manipulated to Support False Claims new
Debunking Craig Wright's Sartre Message new
Balancing Blockchain Access: Local Nodes vs. Third-Party Services new
Light Nodes: Balancing Cost and Data Integrity in Blockchain Accessibility new
Navigating the Node-as-a-Service Market: Benefits, Risks, and Open Questions new
Running a Full Node: A Comprehensive Guide to Maintaining a Blockchain Ledger Locally new
Key Expectations for Blockchain Accessibility: Integrity, Availability, and Privacy new
Last Mile of Blockchains: RPC and Node-as-a-Service new
Forensic Analysis Exposes Flaws in Craig Wright's Tulip Trust Deed new
Discovering the Capabilities of IoTeX's Pebble Tracker new
Data Engineering: What’s the Value of API Security in the Generative AI Era? new
CISO Mag
We Live Security
Building cyber-resilience: Lessons learned from the CrowdStrike incident
The tap-estry of threats targeting Hamster Kombat players
Cursed tapes: Exploiting the EvilVideo vulnerability on Telegram for Android
How a signed driver exposed users to kernel-level threats – Week in Security with Tony Anscombe
Beyond the blue screen of death: Why software updates matter
The complexities of cybersecurity update processes
HotPage: Story of a signed, vulnerable, ad-injecting driver
Small but mighty: Top 5 pocket-sized gadgets to boost your ethical hacking skills
Hello, is it me you’re looking for? How scammers get your phone number
Should ransomware payments be banned? – Week in security with Tony Anscombe
Understanding IoT security risks and how to mitigate them | Cybersecurity podcast
5 common Ticketmaster scams: How fraudsters steal the show

Bloggers

Curated RSS Aggregator: category thehackernews not found

ThreatWire

Articles

Podcasts

Security Weekly
MS Patch Tuesday: Which Vulnerabilities Really Need Prioritizing. - Douglas McKee - PSW #836
3D Printing For Hackers - David Johnson - PSW #835
RFID hacking & More Vulnerability Shenanigans - Iceman - PSW #834
Hacker Heroes - Joe Grand - PSW Vault
Do We Need Penetration Testing and Vulnerability Scanning? - Josh Bressers, Adrian Sanabria - PSW #833
Hacker Heroes - Dave Aitel - PSW Vault
GenAI, Security, and More Lies - Aubrey King - PSW #832
Whose Vulnerability Is It Anyway? - Josh Bressers - PSW #831
Hacker Heroes - Josh Corman - PSW Vault
Pen Testing As A Service - Seemant Sehgal - PSW #830
The Impacts Of Cryptocurrency - Nicholas Weaver - PSW #829
Corporate Ransomware Deep Dive - Jeremiah Grossman, Mikko Hypponen - PSW #828
Risky.Biz
Risky Business #756 -- Move fast and break everything
Risky Biz Soap Box: Mike Wiacek on lazy mode threat hunting
Wide World of Cyber: State directed cybercrime
Risky Business #755 -- SSH 0day! Polyfill drama! Entrust crushed!
Risky Biz Soap Box: Why AI shouldn't really change your security controls
Risky Business #754 -- Assange pleads guilty to espionage, walks free
Risky Business #753 – Congress and vuln researchers maul Microsoft
Risky Business #752 -- Apple announcements thrill and terrify at the same time
Risky Business #751 -- Snowflake, operation Endgame and Microsoft's looming FTC problem
Risky Business #750 -- Why Microsoft's Recall is an attacker's best friend
Risky Business #749 -- Google answer to Microsoft's insecurity? Buy Google stuff!
Wide World of Cyber: Krebs and Stamos on How AI Will Change Cybersecurity
The CyberWire
The Black Basta ransomware riddle. [Research Saturday] new
FBI and DOJ thwart North Korean cyber scheme. new
Playing doctor with cyberattacks.
Ghost accounts haunt GitHub.
Don't mess with the NCA.
CrowdStrike and Microsoft battle blue screens across the globe.
The current state of Cyber Threat Intelligence.
Encore: James Hadley: Spend time on what interests you. [CEO] [Career Notes]
Olympic scammers go for gold. [Research Saturday]
Cybersecurity snow day.
SSM On-Prem Flaw is a 10/10 disaster.
Criminal networks crumble.
Cyber Security Interviews
ISC Daily Stormcast
ISC StormCast for Friday, July 26th, 2024
ISC StormCast for Thursday, July 25th, 2024
ISC StormCast for Wednesday, July 24th, 2024
ISC StormCast for Tuesday, July 23rd, 2024
ISC StormCast for Monday, July 22nd, 2024
ISC StormCast for Friday, July 19th, 2024
ISC StormCast for Thursday, July 18th, 2024
ISC StormCast for Wednesday, July 17th, 2024
ISC StormCast for Tuesday, July 16th, 2024
ISC StormCast for Monday, July 15th, 2024
Darknet Diaries
147: Tornado
146: ANOM
145: Shannen

Current Alerts

Threat Level - GUARDED

Privacy & Rights

Slashdot - Rights
Courts Close the Loophole Letting the Feds Search Your Phone At the Border new
Data From Deleted GitHub Repos May Not Actually Be Deleted, Researchers Claim new
Automakers Sold Driver Data For Pennies, Senators Say new
California Supreme Court Upholds Gig Worker Law In a Win For Ride-Hail Companies
ServiceNow Embroiled In DOJ Probe of Government Contract Award
Secure Boot Is Completely Broken On 200+ Models From 5 Big Device Makers
Lawsuit: T-Mobile Must Pay For Breaking Lifetime Price Guarantee
Hackers Leak Documents From Pentagon IT Services Provider Leidos
The Kremlin Jails the Father of Russia's Internet
House Committee Calls On CrowdStrike CEO To Testify On Global Outage
Switzerland Now Requires All Government Software To Be Open Source
Telegram Zero-Day for Android Allowed Malicious Files To Masquerade as Videos
EFF
Digital Apartheid in Gaza: Unjust Content Moderation at the Request of Israel’s Cyber Unit new
Electronic Frontier Foundation to Present Annual EFF Awards to Carolina Botero, Connecting Humanity, and 404 Media
Briefing: Negotiating States Must Address Human Rights Risks in the Proposed UN Surveillance Treaty
Journalists Sue Massachusetts TV Corporation Over Bogus YouTube Takedown Demands
Supreme Court Dodges Key Question in Murthy v. Missouri and Dismisses Case for Failing to Connect The Government’s Communication to Specific Platform Moderation
Why Privacy Badger Opts You Out of Google’s “Privacy Sandbox”
Media Briefing: EFF, Partners Warn UN Member States Are Poised to Approve Dangerous International Surveillance Treaty
EFF Tells Minnesota Supreme Court to Strike Down Geofence Warrant As Fourth Circuit Court of Appeals Takes the Wrong Turn
EFF, International Partners Appeal to EU Delegates to Help Fix Flaws in Draft UN Cybercrime Treaty That Can Undermine EU's Data Protection Framework
Beyond Pride Month: Protecting Digital Identities For LGBTQ+ People
UN Cybercrime Draft Convention Dangerously Expands State Surveillance Powers Without Robust Privacy, Data Protection Safeguards
Courts Should Have Jurisdiction over Foreign Companies Collecting Data on Local Residents, EFF Tells Appeals Court
Princeton | Freedom To Tinker

Threat Intelligence

Condo.com - 1,481,555 breached accounts
Explore Talent - 5,371,574 breached accounts
Life360 - 442,519 breached accounts
The Heritage Foundation - 72,004 breached accounts
Neiman Marcus - 31,152,842 breached accounts
Husky Owners - 16,502 breached accounts
FNTECH - 10,386 breached accounts
Ticketek - 17,643,173 breached accounts
Advance Auto Parts - 79,243,727 breached accounts
Zadig & Voltaire - 586,895 breached accounts
Combolists Posted to Telegram - 361,468,099 breached accounts
Operation Endgame - 16,466,858 breached accounts

Lockpicking

Creative

Vintage Ribbon Cable Repair Saves Poqet PC new
Analyzing Feature Learning in Artificial Neural Networks and Neural Collapse new
Your QuickTake Camera And Your Modern PC new
Electromagnetic Actuator Mimics Muscle new
Ask Hackaday: Is Shortwave on Life Support? new
Hackaday Podcast Episode 281: Metal Clay, Desiccants, Silica Gel, and Keeping Filament Dry new
You Can Program AVRs From The Commodore 64 new
This Week in Security: EvilVideo, Crowdstrike, and InSecure Boot new
Building a Keychain Wii Looks Possible new
Can Cats Solve Puzzles? new
Car Becomes a Massive Bubble Machine
A Robot Face with Human Skin

Developer

Practitioner’s Guide to Deep Learning new
5 Innovative Cybersecurity Measures App Developers Should Incorporate in the Digital Transformation Race new
Introduction to Polymorphism With Database Engines in NoSQL Using Jakarta NoSQL new
How To Secure Your Angular Apps: End-To-End Encryption of API Calls new
Roots of Test Smells new
How To Implement a Gateway With Spring Cloud
Exploring the Evolution of Transformers: From Basic To Advanced Architectures
Impact of Generative AI in the Cellular and IoT Telecommunication
OpenTelemetry: Unifying Application and Infrastructure Observability
Developing Event-Driven, Auto-Compensating Saga Transactions For Microservices
Pilot VPC and Advanced NAT: Securely Connect Overlapping Networks to AWS VPC
Optimizing Search Precision With Self-Querying Retrieval (SQR) and Langchain