CISO News

Morningstar Security News gathers all the most popular CISO and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

PacketStorm
The Register
Good luck to Atos' 7th CEO and its latest biz transformation
From hype to harm: 78% of CISOs see AI attacks already
Cyber fiends battering UK retailers now turn to US stores
Coinbase extorted for $20M. Support staff bribed. Customers scammed. One hell of a SNAFU
Metal maker meltdown: Nucor stops production after cyber-intrusion
Why CVSS is failing us and what we can do about it
Uncle Sam pulls $2.4B Leidos deal to support CISA after rival alleges foul play
Go ahead and ignore Patch Tuesday – it might improve your security
Everyone's deploying AI, but no one's securing it – what could go wrong?
Qatar’s $400M jet for Trump is a gold-plated security nightmare
Commvault fixes critical Command Center issue after flaw finder alert
Marks & Spencer admits cybercrooks made off with customer info
Bleeping Computer
New 'Defendnot' tool tricks Windows into disabling Microsoft Defender new
Israel arrests new suspect behind Nomad Bridge $190M crypto hack
ChatGPT rolls out Codex, an AI tool for software programming
Hackers exploit VMware ESXi, Microsoft SharePoint zero-days at Pwn2Own
Leak confirms OpenAI's ChatGPT will integrate MCP
ChatGPT will soon record, transcribe, and summarize your meetings
Windows 10 KB5058379 update triggers BitLocker recovery on some devices
The Hacker News
New HTTPBot Botnet Launches 200+ Precision DDoS Attacks on Gaming and Tech Sectors
Top 10 Best Practices for Effective Data Protection
Meta to Train AI on E.U. User Data From May 27 Without Consent; Noyb Threatens Lawsuit
Pen Testing for Compliance Only? It's Time to Change Your Approach
New Chrome Vulnerability Enables Cross-Origin Data Leak via Loader Referrer Policy
5 BCDR Essentials for Effective Ransomware Defense
Russia-Linked APT28 Exploited MDaemon Zero-Day to Hack Government Webmail Servers
Malicious npm Package Leverages Unicode Steganography, Google Calendar as C2 Dropper
Samsung Patches CVE-2025-4632 Used to Deploy Mirai Botnet via MagicINFO 9 Exploit
BianLian and RansomExx Exploit SAP NetWeaver Flaw to Deploy PipeMagic Trojan
Xinbi Telegram Market Tied to $8.4B in Crypto Crime, Romance Scams, North Korea Laundering
Earth Ammit Breached Drone Supply Chains via ERP in VENOM, TIDRONE Campaigns
Hacker Noon #Security
Ring Cameras Can Perpetuate Bias to Police: Here's How new
The TechBeat: The State of Cloud Storage: #Decentralize-Cloud (5/17/2025)
Godot 4.4.1: The Maintenance Release - Changes, Incompabilities, and More
How Data Guardians Network Plans to Undermine Big Tech Without Ever Competing With It
Why Everyone Is Building Personal AI and What That Means for Privacy
Your Phone Still Trusts WEP? Wifi Honey Shows Just How Bad That Is
Unlock OSINT Skills with Wtfis: A Beginner-Friendly Guide to Domain and IP Lookups
Why UK Employees and Citizens Back GDPR
Top 5 Collaboration Tools for Remote Teams Using Jira
Anonymous vs “ICE Air:” GlobaIX Needs A Security Fix
Continuous CVE Practice Closes Critical Gap Between Vulnerability Alerts and Effective Defense
Building Privacy‑First Generative AI Chat Analytics Pipelines
CISO Mag
We Live Security
Sednit abuses XSS flaws to hit gov't entities, defense companies
Operation RoundPress
How can we counter online disinformation? | Unlocked 403 cybersecurity podcast (S2E2)
Catching a phish with many faces
Beware of phone scams demanding money for ‘missed jury duty’
Toll road scams are in overdrive: Here’s how to protect yourself
RSAC 2025 wrap-up – Week in security with Tony Anscombe
TheWizards APT group uses SLAAC spoofing to perform adversary-in-the-middle attacks
This month in security with Tony Anscombe – April 2025 edition
How safe and secure is your iPhone really?
Deepfake 'doctors' take to TikTok to peddle bogus cures
How fraudsters abuse Google Forms to spread scams

Bloggers

Curated RSS Aggregator: category thehackernews not found

ThreatWire

Articles

Podcasts

Curated RSS Aggregator: category cyber-security-interviews not found

Current Alerts

Threat Level - GUARDED

Privacy & Rights

Slashdot - Rights
Meta Argues Enshittification Isn't Real
FBI: US Officials Targeted In Voice Deepfake Attacks Since April
Anthropic's Lawyer Forced To Apologize After Claude Hallucinated Legal Citation
Telegram Bans $35 Billion Black Markets Used To Sell Stolen Data, Launder Crypto
Google Dominates AI Patent Applications
Judge Slams Lawyers For 'Bogus AI-Generated Research'
A Ripe Target For Identity Thieves: Prisoners on Death Row
FCC Threatens EchoStar Licenses For Spectrum That's 'Ripe For Sharing'
'Qatar's $400 Million Jet For Trump Is a Gold-Plated Security Nightmare'
US Copyright Office to AI Companies: Fair Use Isn't 'Commercial Use of Vast Troves of Copyrighted Works'
CISA/DOGE Software Engineer's Login Credentials Appeared in Multiple Leaks From Info-Stealing Malware in Recent Years
High Tariffs Become 'Real' For Adafruit - With Their First $36K Bill Just For Import Duties
EFF
Security Theater REALized and Flying without REAL ID
Standing Up for LGBTQ+ Digital Safety this International Day Against Homophobia
The U.S. Copyright Office’s Draft Report on AI Training Errs on Fair Use
The Kids Online Safety Act Will Make the Internet Worse for Everyone
EFF to California Lawmakers: There’s a Better Way to Help Young People Online
Keeping People Safe Online – Fundamental Rights Protective Alternatives to Age Checks
Stopping States From Passing AI Laws for the Next Decade Is a Terrible Idea
How Signal, WhatsApp, Apple, and Google Handle Encrypted Chat Backups
The FCC Must Reject Efforts to Lock Up Public Airwaves
No Postal Service Data Sharing to Deport Immigrants
Washington’s Right to Repair Bill Heads to the Governor
Congress Passes TAKE IT DOWN Act Despite Major Flaws
Princeton | Freedom To Tinker

Threat Intelligence

Samsung Germany Customer Tickets - 216,333 breached accounts
Qraved - 984,519 breached accounts
Boulanger - 2,077,078 breached accounts
German Doner Kebab - 162,373 breached accounts
Lexipol - 672,546 breached accounts
Color Dating - 220,503 breached accounts
Flat Earth Sun, Moon and Zodiac App - 33,294 breached accounts
Spyzie - 518,643 breached accounts
Orange Romania - 556,557 breached accounts
ALIEN TXTBASE Stealer Logs - 284,132,969 breached accounts
Spyic - 875,999 breached accounts
Cocospy - 1,798,059 breached accounts

Lockpicking

Creative

Escaping US Tech Giants Leads European YouTuber to Open Source new
The Lost 256 KB Japanese ROM for the MacIntosh Plus Has Been Found new
Determine Fundamental Constants with LEDs and a Multimeter new
This Extra-Large, Two-Stage Fume Extractor Really Sucks new
Zen Flute is a Teensy Powered Mouth Theramin new
Open Source Hiding in Plain Sight new
Animated Widgets On Apple Devices via a Neat Backdoor new
Making Sure the Basement Stays Dry with an ESP8266 new
Hack Aims for Polaroid, Hits Game Boy Camera Sweet Spot
Moon Phase Flip Clock is Fantastic
New Bismuth Transistor Runs 40% Faster and Uses 10% Less Power
A Portable M4 Mac mini

Developer

Secure by Design: Modernizing Authentication With Centralized Access and Adaptive Signals
The Full-Stack Developer's Blind Spot: Why Data Cleansing Shouldn't Be an Afterthought
Debugging With Confidence in the Age of Observability-First Systems
Accelerating Debugging in Integration Testing: An Efficient Search-Based Workflow for Impact Localization
Data Quality: A Novel Perspective for 2025
Building Resilient Networks: Limiting the Risk and Scope of Cyber Attacks
Optimizing Integration Workflows With Spark Structured Streaming and Cloud Services
Designing a Java Connector for Software Integrations
Integration Isn’t a Task — It’s an Architectural Discipline
Vibe Coding With GitHub Copilot: Optimizing API Performance in Fintech Microservices
Memory Leak Due to Time-Taking finalize() Method
Understanding IEEE 802.11(Wi-Fi) Encryption and Authentication: Write Your Own Custom Packet Sniffer