Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Tools

Vulnerabilities

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

PacketStorm
LEAs, CISA Lobby For Breach Reporting Requirement new
Enterprise Data Breach Cost Reached Record High During Pandemic new
Biden: Major Cyber Attack Could Lead To A Real Shooting War new
Babuk Ransomware Gang Ransomed
Microsoft Rushes Fix For PetitPotam Attack PoC
VPN Servers Seized By Ukrainian Authorities Weren't Encrypted
Olympics Broadcaster Announces His Password On Live TV
Mitre Releases 2021 Top 25 Most Dangerous Software Weaknesses
Microsoft Outlines How To Protect Against PetitPotam
Emmanuel Macron Pushes For Israel Inquiry Into NSO Spyware Concerns
Researchers Find New Attack Vector Against Kubernetes Clusters
Kaseya Has Acquired The REvil Ransomware Decryption Key
The Register
Israeli authorities investigate NSO Group over Pegasus spyware abuse claims new
Here's a list of the flaws Russia, China, Iran and pals exploit most often, say Five Eyes infosec agencies new
'Woefully insufficient': Biden administration's assessment of critical infrastructure infosec protection new
Over 100 Taiwanese political figures' messages leaked outta LINE app new
Security breaches where working from home is involved are costlier, claims IBM report new
Iranian state-backed hackers posed as flirty Scouser called Marcy to target workers in defence and aerospace new
UK's National Cyber Security Centre needs its posh Westminster digs, says Cabinet Office, because of WannaCry
Google revamps bug bounty program
Biden warns 'real shooting war' will be sparked by severe cyber attack
Tencent suspends signups to WeChat, citing 'security upgrade' and need to comply with Chinese laws
eBay ex-security boss sent down for 18 months for cyber-stalking, witness tampering
Misconfigured Azure Blob at Raven Hengelsport exposed records of 246,000 anglers – and took months to tackle, claim infosec researchers
Reddit - NetSec
Detecting LDAP enumeration and Bloodhound‘s Sharphound collector using Deception via Active Directory Decoys new
First stable release of isoalloc: general purpose memory allocator that mitigates memory safety issues while maintaining good performance new
Marketo marketplace leak personal data from the Homewood attack new
GitHub - DigeeX/raider: Web authentication testing framework new
Detecting potential exploits of CVE-2021-33909 "Sequoia" with Falco - Linux FS privilege escalation new
FACT SHEET: Biden Administration Announces Further Actions to Protect U.S. Critical Infrastructure | The White House new
From Stolen Laptop to Inside the Company Network new
ligolo-ng: An advanced, yet simple, tunneling tool that uses a TUN interface. new
Revealin - Exploits a design flaw in Linkedin to uncover the fullname of a target when he has his name masked.
BloodHound versus Ransomware: A Defender’s Guide
California Smart Card Vaccine Data Reader, statically hosted client side
Use SQL to query AbuseIPDB deny lists and IP reports (open source)
Bleeping Computer
Grief ransomware operation is DoppelPaymer rebranded new
New US security memorandum bolsters critical infrastructure cybersecurity new
Biden: Severe cyberattacks could escalate to 'real shooting war' new
Google Play Protect fails Android security tests once more new
Google: Android apps must provide privacy information by April 2022 new
Critical Microsoft Hyper-V bug could haunt orgs for a long time new
FBI reveals top targeted vulnerabilities of the last two years new
Northern Ireland's COVID certification service suspended after data leak
Northern Ireland suspends vaccine passport system after data leak
LockBit ransomware automates Windows domain encryption via group policies
LockBit ransomware now encrypts Windows domains using group policies
UC San Diego Health discloses data breach after phishing attack
The Hacker News
New Ransomware Gangs — Haron and BlackMatter — Emerge on Cybercrime Forums new
Best Practices to Thwart Business Email Compromise (BEC) Attacks new
New Android Malware Uses VNC to Spy and Steal Passwords from Victims new
Top 30 Critical Security Vulnerabilities Most Exploited by Hackers new
UBEL is the New Oscorp — Android Credential Stealing Malware Active in the Wild new
Chinese Hackers Implant PlugX Variant on Compromised MS Exchange Servers
Hackers Posed as Aerobics Instructors for Years to Target Aerospace Employees
New Bug Could Let Attackers Hijack Zimbra Server by Sending Malicious Email
Several Bugs Found in 3 Open-Source Software Used by Several Businesses
Hackers Turning to 'Exotic' Programming Languages for Malware Development
Apple Releases Urgent 0-Day Bug Patch for Mac, iPhone and iPad Devices
BIMI: A Visual Take on Email Authentication and Security

Threat Wire

Exploits

Packet Storm Exploits
Backdoor.Win32.WinShell.40 Code Execution new
Event Registration System With QR Code 1.0 Shell Upload new
Denver Smart Wifi Camera SHC-150 Remote Code Execution new
eGain Chat 15.5.5 Cross Site Scripting new
TripSpark VEO Transportation SQL Injection new
PHP 7.3.15-3 PHP_SESSION_UPLOAD_PROGRESS Session Data Injection
WordPress Social Warfare 3.5.2 Remote Code Execution
WordPress SP Project And Document Remote Code Execution
Backdoor.Win32.Nbdd.bgz Buffer Overflow
Backdoor.Win32.Bifrose.acci Buffer Overflow
WordPress Modern Events Calendar Remote Code Execution
Backdoor.Win32.PsyRat.b Code Execution
Exploit-DB Webapps
[webapps] Denver IP Camera SHO-110 - Unauthenticated Snapshot new
[webapps] Longjing Technology BEMS API 1.21 - Remote Arbitrary File Download new
[webapps] IntelliChoice eFORCE Software Suite 2.5.9 - Username Enumeration new
[webapps] Care2x Integrated Hospital Info System 2.7 - 'Multiple' SQL Injection new
[webapps] CloverDX 5.9.0 - Cross-Site Request Forgery (CSRF) to Remote Code Execution (RCE) new
[webapps] Oracle Fatwire 6.3 - Multiple Vulnerabilities new
[webapps] Event Registration System with QR Code 1.0 - Authentication Bypass & RCE
[webapps] TripSpark VEO Transportation - Blind SQL Injection
[webapps] PHP 7.3.15-3 - 'PHP_SESSION_UPLOAD_PROGRESS' Session Data Injection
[webapps] Customer Relationship Management System (CRM) 1.0 - Sql Injection Authentication Bypass
[webapps] Elasticsearch ECE 7.13.3 - Anonymous Database Dump
[webapps] NoteBurner 2.35 - Denial Of Service (DoS) (PoC)
Exploit-DB Local and Privilege Escalation
[local] Argus Surveillance DVR 4.0 - Weak Password Encryption
[local] Linux Kernel 2.6.19 < 5.9 - 'Netfilter Local Privilege Escalation
[local] WinWaste.NET 1.0.6183.16475 - Privilege Escalation due Incorrect Access Control
[local] SAPSprint 7.60 - 'SAPSprint' Unquoted Service Path
[local] ASUS DisplayWidget Software 3.4.0.036 - 'ASUSDisplayWidgetService' Unquoted Service Path
[local] Wise Care 365 5.6.7.568 - 'WiseBootAssistant' Unquoted Service Path
[local] iFunbox 4.2 - 'Apple Mobile Device Service' Unquoted Service Path
[local] Lexmark Printer Software G2 Installation Package 1.8.0.0 - 'LM__bdsvc' Unquoted Service Path
[local] Remote Mouse GUI 3.008 - Local Privilege Escalation
[local] Sync Breeze 13.6.18 - 'Multiple' Unquoted Service Path
[local] Disk Savvy 13.6.14 - 'Multiple' Unquoted Service Path
[local] Dup Scout 13.5.28 - 'Multiple' Unquoted Service Path
Exploit-DB DoS
[dos] Leawo Prof. Media 11.0.0.1 - Denial of Service (DoS) (PoC)
[dos] Secure Notepad Private Notes 3.0.3 - Denial of Service (PoC)
[dos] Notex the best notes 6.4 - Denial of Service (PoC)
[dos] Post-it 5.0.1 - Denial of Service (PoC)
[dos] Sticky Notes Widget Version 3.0.6 - Denial of Service (PoC)
[dos] n+otes 1.6.2 - Denial of Service (PoC)
[dos] NBMonitor 1.6.8 - Denial of Service (PoC)
[dos] Nsauditor 3.2.3 - Denial of Service (PoC)
[dos] Sticky Notes & Color Widgets 1.4.2 - Denial of Service (PoC)
[dos] Inkpad Notepad & To do list 4.3.61 - Denial of Service (PoC)
[dos] Color Notes 1.4 - Denial of Service (PoC)
[dos] Macaron Notes great notebook 5.5 - Denial of Service (PoC)
Exploit-DB Shellcode
Exploit-DB Papers
Exploit-DB Remote
[remote] Denver Smart Wifi Camera SHC-150 - 'Telnet' Remote Code Execution (RCE)
[remote] KevinLAB BEMS 1.0 - Undocumented Backdoor Account
[remote] Aruba Instant 8.7.1.0 - Arbitrary File Modification
[remote] Aruba Instant (IAP) - Remote Code Execution
[remote] ES File Explorer 4.1.9.7.4 - Arbitrary File Read
[remote] Solaris SunSSH 11.0 x86 - libpam Remote Root (3)
[remote] Dlink DSL2750U - 'Reboot' Command Injection
[remote] CHIYU IoT Devices - 'Telnet' Authentication Bypass
[remote] ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution (2)
[remote] Solaris SunSSH 11.0 x86 - libpam Remote Root (2)

LiveOverflow

Vulnerabilities

Tools

Exploit Dev

Reddit - Exploit Dev
Good Exploits to Replicate new
[11 Minutes] UNIX Permissions - Special, Stat, Octal new
"Illegal instruction" while exploiting a buffer overflow
Techniques to use after gaining exploit primitives on Windows
Operations are pushed by a byte in the buffer
Getting into browser internals with security in mind.
Challenge Site Dedicated To Hardware Hacking Education
Blackbox Fuzzing #4: Binary-only fuzzing using AFL++ FRIDA mode
CVE-2021-31956 Exploiting the Windows Kernel via NTFS with WNF – Part 1
ROP Emporium MIPS Solutions
Experimental Go language CSGO exploit proof-of-concept
Resource Request
Source Incite
Full Stack Web Attack 2021 :: Zero Day Give Away
Google Project Zero
An EPYC escape: Case-study of a KVM breakout
Fuzzing iOS code on macOS at native speed
Security Researchers
Common web vulnerabilities every hacker and developer should know new
Of course you can't trust scientists on politics
Risk analysis for DEF CON 2021
All Your Base Are [Still] Belong To Us
Hooking Candiru: Another Mercenary Spyware Vendor Comes into Focus
Ransomware: Quis custodiet ipsos custodes
Does free software benefit from ML models being derived works of training data?
Top 5 high severity CVEs detected by Detectify since June 2020
Know where your project stands with the new project overview!
Some quick notes on SDR
The Buyer’s Guide to Scalable Application Security

Reversing/I like ASM

Reddit - Reverse Engineering
XOpcodeCalc 0.02 (x86/x64 Opcode Calculator for Windows, Linux and OSX) new
CVE-2021-27077: Selecting Bitmaps into Mismatched Device Contexts new
HookHunter: Analyze patches in a Windows process for investigation or 'healing' purposes.
Trying to fit that x64 assembly in one.[ Beginner friendly]
Hacking the dlink DIR-615 for fun and no profit Part 4: Buffer Overflow
Analysis of Malware from Kaseya/Revil Supply Chain attack.
Hacking the dlink DIR-615 for fun and no profit Part 2: CVE-2020–10215
MapoAnalyzer v1.3 - Code analysis, decompiling plugin for x64dbg, make x64dbg as powerful as IDA Pro
Reversing for dummies - x86 assembly and C code (Beginner/ADHD friendly) · 0x41.cf
Fuzzing Modern UDP Game Protocols With Snapshot-based Fuzzers
CVE-2021-31969: An integer underflow in the Windows Cloud Filter API
Rooting an Arlo Q Plus Camera w/ a backdoor
Reddit - Game Hacks
CHEAP FORTNITE SOFT AIM, AIMBOT, ESP, UPDATED AND UNDETECTED new
THE BEST CHEAP UNDETECTED RUST HACKS/SCRIPTS FOR AN AFFORDABLE PRICE (ESP+, Scripts, Aimbot, etc) new
EFT Carries
Cheapest and most reliable place to get dark aether, dark matter, and Damascus!! JOIN NOW
Battlefield V Undetected cheats (Aimbot, ESP, Misc)
[REQUEST] Maphack for Starcraft Remastered
Rust script
[REQUEST] Dauntless hacks?
[REQUEST] hack for ninja new legends
Selling rust cheat for low price (accepting paypal and all crypto) for more info check my discord server
Best Place to buy cheap cheats
Warzone aimbot, walls, radar, unlock all tool, daily giveaways and great customer support
Reddit - REGames
[United States] Hiring a freelance software developer to reverse engineer & create license key generator for legacy, unsupported application. new
Put together a script for running Cheat Engine with Steam Proton games on Linux
Disassemble r5900l binaries?
Analysis of large binaries and games in Ghidra-SRE
wrote a blog documenting my current process with reverse engineering Nitemare 3D
added some basic enemies and weapon in OpenNitemare3D
So, I'd like to learn how to RE games...
Is there a method for decompiling .cab files from old 90s game CD?
I messed up Radians and Degrees in OpenNitemare3D and thought ya'll would like it (I really hope the audio uploaded properly)
implemented guard patrolling in OpenNitemare3D (maps have their paths for patrolling built in so it was pretty easy to implement)
I've just been shooting in the dark with OpenNitemare3D but I finally figured out Ghidra and man it's cool, have no idea what's going on…
Help wanted for OpenNitemare3D!
StackExchange - ReverseEngineering
How to hack fan control speed? new
How to bypass anti-debugging C++ new
radare2: Print strings in function for 32-bit binaries
IDA Pro plugins for indirect calls
Where stack canary is located?
What is the structure of the Stack in a minidump?
IDA Pro 7.5 Breakpoint Python Script: 'invalid non-printable character U+FEFF'
Need help reverse engineering an 1995 Arcade game with jackie chan in it for modding purposes, (Motorola 68k)
Finding (or building) a kernel for Huawei EchoLife EG8145V5
Launching linux kernel on UART serial interface, but can't login because key-mappings change randomly
Immunity Debugger Trace of Vulnerable Application
How to find main() of Windows EXE with Ghidra?

Guided Hacking

Malware/APT

Reddit - Malware
REMnux new
Malware Lab
Scripting with Ghidra to decrypt XOR DDOS' string array
Kaseya Denies Paying $70 Million Bitcoin Ransom
Homelab HoneyPot
Best C language Books To Program Malware type tools
SANS GREM and Sandboxing
[Video] Trojan Horse is not a Malware Type
.QSCX Decryption
MS-DOS Malware: Europe-92
Is there any list available for malware specially ransomwares with respective ransomware name and windows event ID related to it?
Flare On Challenges
Unit42
Ransomware Families: 2021 Data to Supplement the Unit 42 Ransomware Threat Report new
THOR: Previously Unseen PlugX Variant Deployed During Microsoft Exchange Server Attacks by PKPLUG Group
Evade Sandboxes With a Single Bit – the Trap Flag
Mespinoza Ransomware Gang Calls Victims “Partners,” Attacks with Gasket, "MagicSocks" Tools
Threat Brief: Windows Print Spooler RCE Vulnerability (CVE-2021-34527 AKA PrintNightmare)
Understanding REvil: The Ransomware Gang Behind the Kaseya VSA Attack
Threat Brief: Kaseya VSA Ransomware Attack
Network Attack Trends: February-April 2021
Conti Ransomware Gang: An Overview
Matanbuchus: Malware-as-a-Service with Demonic Intentions
Prometheus Ransomware Gang: A Group of REvil?
TeamTNT Using WatchDog TTPs to Expand Its Cryptojacking Footprint
FireEye Threat Research
capa 2.0: Better, Faster, Stronger
Smoking Out a DARKSIDE Affiliate’s Supply Chain Software Compromise
Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices
Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices
Crimes of Opportunity: Increasing Frequency of Low Sophistication Operational Technology Compromises
Crimes of Opportunity: Increasing Frequency of Low Sophistication Operational Technology Compromises
Purgalicious VBA: Macro Obfuscation With VBA Purging
Shining a Light on DARKSIDE Ransomware Operations
The UNC2529 Triple Double: A Trifecta Phishing Campaign

Bug Bounties

Crypto

Reddit - Crypto
Considerations and Implications of Publicly Available Ciphertext at-rest new
Should I be concerned with in-band nonces?
Why are banking PIN's 4 numbers?
Aumasson's list of controversial cryptography papers
Why do folks care so much about using 256-bit symmetric keys, when key agreement (RSA/ECDH) is only 128-bit hard?
Temporary change to address horrendous levels of spam
Is the Enigma Machine still considered safe?
Decoding broken QR codes
Ksd file
Trending topics in Crypto
What is Meryt Protocol?-Initial use-cases explained!
What is currently the most secure Verifiable Delay Function for randomness beacons?
StackExchange - Crypto
Quadratic Sieve: Sieving with prime powers new
Decrypting .enc files from holiday cruise photo CD [closed] new
Paillier versus Lifted ElGamal for homomorphic addition for e-voting new
Use peppers with Bcrypt (HMAC + Bcrypt) new
Managing master keys used in PBKDF2 and HMAC (store, rotate) new
How to change any symmetric algorithm to obtain hash of key and hash of data from encrypted output? [closed] new
Decisional Diffie-Hellman Assumption on Pairing Friendly Curves new
A finite group with a threshold functionality new
HMAC vs hashing (data + pepper) [duplicate]
Hidden message in photo [closed]
How do we say that one cryptographic primitive is stronger than another?
PBKDF2 with pepper [duplicate]

Podcasts

Security Weekly
Nefarious Drivers - PSW #703
Glorious Purpose - PSW #702
Meat Scented Candles - PSW #701
The Godfather - PSW #700
Adrian Overlord - PSW #699
PCI Security Deathmatch - PSW #698
The Wrong Lawyer - PSW #697
Jingle the Keys - PSW #696
Jerry the Hedgehog - PSW #695
Very Exciting & Very Scary - PSW #694
Dusty Corners - PSW #693
Vulcan Mind Meld - PSW #692
Risky.Biz
Risky Business #632 -- The Kaseya incident wasn't nearly as big as we thought
Risky Business #631 -- USA and friends send nastygram to China
Risky Biz Feature Podcast: An interview with Rob Joyce
Risky Business #630 -- We tried the carrot, it's time for the stick
Risky Business #629 -- Kaseya 0day was utter trash
Risky Business #628 -- Microsoft is not your friend
Risky Biz Soap Box: EclecticIQ's CEO Joep Gommers on operationalising threat intelligence
Risky Biz Soap Box: Banks to embrace Yubikeys for customers
Risky Business #627 -- USG claws back Colonial pipeline ransom money
Risky Business #626 -- Russian ransomware beef simmers
Risky Business #625 -- Iranians wipe some machines, Israelis kaboom some
Risky Biz Feature Podcast: The politics of cybersecurity
The CyberWire
US ICS Cybersecurity Initiative formalized. Developments in the ransomware world. Addressing known vulnerabilities. Caucasus coinmining crackdown. A long-running IRGC catphishing campaign. new
South African ports invoke force majeure over cyberattack. Documents indicate Iranian interest in control systems attacks. Dark web wanted ads. Cyber diplomacy. Lousy cafeteria food?
The source of Kaseya’s REvil key remains unknown. Cyber incident disrupts port operations at Cape Town and Durban. Updates on the Pegasus Project. And a…
Ingrid Toppelberg: Knowing how to take risks will pay off. [Cybersecurity education] [Career Notes]
Is enhanced hardware security the answer to ransomware? [CyberWire-X]
Free malware with cracked software. [Research Saturday]
Cyber threats to, and around, the Olympic Games. Kaseya got a decryptor, from somewhere…. NSO says it’s not responsible for Pegasus misuse. US cyber policy…
Extortion is the motive in the Saudi Aramco incident. Updates on the Pegasus Project. Chinese cyberespionage and Beijing’s tu quoque. FIN7 resurfaces, and a post-mortem…
Historical threats to industrial control systems inform current security practices. Ransomware privateering and side-hustling. Updates on the Pegasus Project.
APT side hustles and evidence of espionage. NSO replies to the Pegasus Project, and AWS removes NSO from its CloudFront CDM. Other data breaches and…
Microsoft Exchange Server hacks officially attributed to China. Indictment in industrial espionage case. Entities List expands. Abuse of NSO Group’s Pegasus tool reported.
Peter Baumann: Adding value to data. [CEO] [Career Notes]
Cyber Security Interviews
#122 – Leeann Nicolo: Go For It
#121 – Shannon Brazil: Teach Business to Tech People
#120 – Cimone Wright-Hamor: Cybersecurity Is An Applied Field
#119 – Jenna Waters: This Is My Team
#118 – Nato Riley: Reinvent Reality and Reinvent the World
ISC Daily Stormcast
ISC StormCast for Thursday, July 29th, 2021 new
ISC StormCast for Wednesday, July 28th, 2021
ISC StormCast for Tuesday, July 27th, 2021
ISC StormCast for Monday, July 26th, 2021
ISC StormCast for Friday, July 23rd, 2021
ISC StormCast for Thursday, July 22nd, 2021
ISC StormCast for Wednesday, July 21st, 2021
ISC StormCast for Tuesday, July 20th, 2021
ISC StormCast for Monday, July 19th, 2021
ISC StormCast for Friday, July 16th, 2021
Darknet Diaries
97: The Pizza Problem
96: The Police Station Incident
95: Jon & Brian's Big Adventure
Introducing: World's Greatest Con
94: Mariposa
93: Kik
92: The Pirate Bay

Threat Intel

Reddit - Onions
Requests for dark.fail V3 onion new
anyone wanna dm me the dark.fail v3 onion? i was an idiot and didn't bookmark it and got booted off v2 today new
does anyone know how too get v3 for tor? new
exclamation mark new
Las Vegas Group Busted After Selling Millions Worth of C on the Dark Web - Dark Net Daily new
cant seem too find any working forums all are dead or not loading or outdated any ideas? new
What happened to Dread ? new
Paid access? new
Is the Tor browser chrome-based? new
Does anyone know the link to Xonion? new
does anyone know any real markets that sell X?
Do you know WHM?
Reddit - Pwned
HaveIBeenPwned
Audi - 2,743,539 breached accounts
Guntrader - 112,031 breached accounts
Short Édition - 505,466 breached accounts
Raychat - 938,981 breached accounts
Teespring - 8,234,193 breached accounts
yotepresto.com - 1,444,629 breached accounts
University of California - 547,422 breached accounts
Fotolog - 16,717,854 breached accounts
Domino's India - 22,527,655 breached accounts
JD - 77,449,341 breached accounts
Moneycontrol - 762,874 breached accounts
Yam - 13,258,797 breached accounts

Privacy/VPNs

Slashdot - Rights
UK Government Backs Scheme For Motorway Cables To Power Lorries
EFF Sues US Postal Office For Records About Covert Social Media Spying Program
Activision Blizzard Employees To Walk Out Following Sexual Harassment Lawsuit
'Pharma Bro' Martin Shkreli's One-of-a-Kind Wu-Tang Clan Album Sold By US Government
Former eBay Supervisor Sentenced To 18 Months in Prison For Cyberstalking Case Targeting Natick Couple
A Grandfather Died in 'Swatting' Over His Twitter Handle, Officials Say
Is Your Phone Infected With Pegasus?
Tether Executives Said To Face Criminal Probe Into Bank Fraud
Google Updates Timeline For Unpopular Privacy Sandbox, Which Will Kill Third-Party Cookies In Chrome By 2023
Japan Pitches 'Society 5.0' To Keep Its Edge In Tech and Science
Police Are Telling ShotSpotter To Alter Evidence From Gunshot-Detecting AI
Citizen is Now Paying New Yorkers To Livestream Crimes
Reddit - Privacy
Social Media Detox Day new
Does Omegle assign a specific tracker to your computer? new
Cloud Storage (not NextCloud or Tresorit) new
House’s Resolve to Curb Surveillance State Faces Biggest Test Since Trump Presidency new
The last refuge of the criminal: Encrypted smartphones new
Calgary’s parking authority exposed driver’s personal data and tickets new
Tell congress: no more warrantless FBI backdoors. House is voting *this afternoon* on an amendment requiring warrants for FBI searches of NSA data. new
TikTok’s opens cybersecurity center in Dublin – To eliminate security risks
Is YogaDNS safe?
usps “informed delivery”
A reminder that ProtonMail can and will disclose account information -- including registration information, linked accounts, and IP history -- to US law enforcement agencies
I've been receiving strange calls over the past year...
Reddit - VPN
Is this picture reliable? If so, how much does ownership of a VPN effect its users’ privacy? new
How to create a VPN server with these requirements? new
General Question about the Uses of VPN (WFH) new
Can VPN protect my search history? new
I've always wondered: can no-logs VPNs be legally forced by LE to allow server monitoring? Like wiretapping for data new
Can a VPN prevent a cut off time in wifi? new
Reconfigure a certain VPN client for another VPN service new
Reddit is having a problem(?) dealing with VPNs on the site for over a week now. new
Non-File-Based VPN Configuration new
Is Zenmate vpn safe?
Is Reddit blocking VPN users? Any sources or details?
Is BeetVPN good/safe?
PrivacyTools.io
I want to use a custom email address, but I have a concern about the domain bill not getting payed anymore after I die new
Iran is not "blocking the internet", it's just a bill designed to "control" the internet (read more inside) new
Thoughts on credit freeze? new
Encryption Software new
Internet block in Iran new
TikTok opens cybersecurity center in Dublin – To eliminate security risks new
New iPhone wot FreeOTP new
how do i stop windows 10 from uploading what im doing new
NSA's best practices to handle a mobile device. If that's how they protect their personnel, imagine what we should grow wary of. new
Security Camera NVR setup with FOSS app? new
Brave Fork like "Braver"/"Bold Browser"? new
Encrypting Personal Photos new
EFF
Disentangling Disinformation: Not as Easy as it Looks new
Should Congress Close the FBI’s Backdoor for Spying on American Communications? Yes. new
EFF at 30: Freeing the Internet, with Net Neutrality Pioneer Gigi Sohn new
EFF Sues U.S. Postal Service For Records About Covert Social Media Spying Program
EFF, ACLU Urge Appeals Court to Revive Challenge to Los Angeles’ Collection of Scooter Location Data
Data Brokers are the Problem
Council of Europe’s Actions Belie its Pledges to Involve Civil Society in Development of Cross Border Police Powers Treaty
Venmo Takes Another Step Toward Privacy
Cheers to the Winners of EFF's 13th Annual Cyberlaw Trivia Night
India’s Draconian Rules for Internet Platforms Threaten User Privacy and Undermine Encryption
Victory! Californians Can Now Choose Their Broadband Destiny
Pegasus Project Shows the Need for Real Device Security, Accountability, and Redress for Those Facing State-Sponsored Malware

Help Wanted

Reddit - AskNetSec
Reddit - Netsec Students
INE Premium worth it for a free exam voucher and 50% off another exam vouncher? (~$600 discount in exam fees) new
Buffer Overflow Attack: Definition, Types, Use By Hackers. Part 1 new
BS cyber security capstone topic: looking for help selecting something new
Is elearnsecurity premium worth it. new
Hey everyone, one of the most common things I ran into as a SOC Analyst was encoded PowerShell. I created this quick tutorial how you… new
Red Team Assessments: Setting up Phishing Campaigns
How can I test Zeek notices are working?
Vun Analyst Role
Do you guys recommend this specialization?
What additional features should be added to make sso more secure?
HackTheBox Armageddon Write Up
Explain this piece of text please
Stackoverflow - Security
Is version 3.5.10 of D3js affected by vulnerability CVE-2017-16044 (malicious code) new
Unable to notarise .pkg file due to The signature of the binary is invalid and The binary is not signed new
What is the best sensor to detect a human in a forest and stop illegal entries and stop deforestation with help of IoT? new
Unsafe Object binding Checkmarx new
How is webContents.send detected by ipcRenderer.on which is inside preload.js? new
Are there any available SCVP Clients that conform to the rfc5055 standard? new
Angular make secure login/register page new
error ERR_HTTP2_INADEQUATE_TRANSPORT_SECURITY on google chorme [duplicate] new
how to make burp suite the proxy for all interfaces of pc? new
About choosing subjects in 12th Maharashtra State Board [closed] new
Unable to add registry in Anchore running on kubernetes new
Sending secure data from javascript to php new
Stack Exchange
Why not just use a small but odd number of hashing rounds? new
Are those secure folders there by default? [migrated] new
AppCertDLLs does not work in GUI apps, why? new
Is there any way that I can redirect to other site when someone access to a particular site? new
American sources attacking Russia/China [closed] new
Working With Hydra Brute Force [closed] new
What does Snowden mean by "majority of vulnerabilities ... are introduced, for technical reasons ..., at the exact time the code is written"? new
Minecraft exploit finder new
Hydra with a 3-part username new
If we fixed SIM jacking would SMS then become a valid way to send an MFA token to? new
How does Sequoia allow unprivileged users to get root if it requires mounting a filesystem? new
Historical examples of breached TOTP secrets? new

Locks/Social Engineering

Reddit - Lockpicking
Skeletonized core (aka why we need shims for gutting) new
Mul-T-Lock Omega Plus Picked new
#RPDoubleTrouble Winner! new
Wickes 5 Lever Mortice Deadlock picked - How to get pick wire under levers sitting on curtain new
What would be a fair price? new
Paclock 90A Pro PICKED! new
When lockpicking is life but you still gotta change that waterpump. u/JUSTINMCSLAPPY new
RATTLE CLUB, BABY: Master LOTO has surprising difficulty and crazy deep false sets. new
Vice advice new
Another skill to train to open your locks new
ABUS 80TI/50 Picked for 1st time! new
[11] Entry for #pandafrog21jul new
Reddit - Social Engineering
How the hell can we shoulder the increasing amounts of power in our society?
What DiSC type is my boxing coach? Is he steady conscious type?
How do you deal with toxic manipulators with addictions who go on tantrums fairly often?
I have a hard time analyzing people and putting their communication styles into DISC categories. Could someone help me out?
A weird but effective method to make it easier to approach & talk to strangers/girls
Social Engineering for unlimited free food at Wendy's
The healing potential of knowing our true history
What is the purpose of the question: "What do you think should happen to you, now that you have commited (insert crime)?"
I started reading Human Hacking by Chris
Does anyone know if these courses are going to be available any other time besides Black Hat conference?
Has anyone here had SANS social engineering training?
How to apply stoicism

Hak5

Security Blogs

Security Bloggers Network
CERT-In and Its Role in Securing India’s Cyber Space new
Tech Support Scammer Language | Avast new
The Perils of Cyber Insurance new
ManageEngine reconnu dans le Magic Quadrant Gartner 2021 pour la gestion des informations et événements de sécurité pour la cinquième fois! new
Elevating Web App Security to a National Priority new
Phishing Attacks Often Target Small Businesses – Here’s What to Watch for new
Pushing the Limits of IDaaS with AMaaS new
A Modern Approach to Authentication for Modern Times – Simple, Accurate & Frictionless new
“Quitting” When Unready: A Curious Case of Sleep Loss new
Porsche “Adaptive Cruise” Safety Model new
As Time to Fix Flaws Ticks Up, Mitigation Efforts Fall Short new
Segurança de TI sob ataque: por que a participação em grupos é tão importante? new
ThreatPost
BlackMatter & Haron: Evil Ransomware Newborns or Rebirths new
Reboot of PunkSpider Tool at DEF CON Stirs Debate new
Podcast: Why Securing Active Directory Is a Nightmare
No More Ransom Saves Victims Nearly €1 billion Over 5 Years
Zimbra Server Bugs Could Lead to Email Plundering
Three Zero-Day Bugs Plague Kaseya Unitrends Backup Servers
Apple Patches Actively Exploited Zero-Day in iOS, MacOS
Podcast: IoT Piranhas Are Swarming Industrial Controls
Babuk Ransomware Gang Ransomed, New Forum Stuffed With Porn
Microsoft Rushes Fix for ‘PetitPotam’ Attack PoC
Malware Makers Using ‘Exotic’ Programming Languages
The True Impact of Ransomware Attacks
digitalmunition
eHacking News
Data of 100 Million JustDial Customers Left Unsecured for Over a Year new
Bugs in the Zimbra Server Could Lead to Unrestricted Email Access new
Signal Patches Zero-Day Bug in its Android App new
Cyberattacks Zero in Tokyo Olympics as Games Begin new
Hackers Applying HTML Smuggling To Distribute Malware new
Fake Windows 11 Installers are Being Used to Spread Malware new
Mobile County Officials Informs County Employees of Data Breach
Q2 2021 Report by Digital Shadow, Abridged
WhatsApp CEO: US Allies' National Security Officials Targeted with NSO Malware
3.8 Billion Phone Numbers of Clubhouse Users up for Sale on Dark Web
IT expert: How To Avoid being Tracked by Photos
Cloud-Delivered Malware Increased 68% in Q2, Netskope Reports
Wired - Security
Phantom Warships Are Courting Chaos in Conflict Zones new
A Controversial Tool Calls Out Vulnerabilities Across the Web
The Shapeshifting Cam Girl Rewriting the Rules of Porn
Porn Showed Up on Legit News Sites Thanks to Internet Rot
The Kaseya Ransomware Nightmare Is Almost Over
An Explosive Spyware Report Shows the Limits of iOS Security
Venmo Gets More Private—but It's Still Not Fully Safe
How China’s Hacking Entered a Reckless New Phase
Biden Puts a $10M Bounty on Foreign Hackers
Biden’s Cybersecurity Team Gets Crowded at the Top
Hackers Got Past Windows Hello by Tricking a Webcam
The SolarWinds Hackers Used an iOS Flaw to Compromise iPhones
Krebs on Security
Spam Kingpin Peter Levashov Gets Time Served
Don’t Wanna Pay Ransom Gangs? Test Your Backups.
Microsoft Patch Tuesday, July 2021 Edition
Spike in “Chain Gang” Destructive Attacks on ATMs
Kaseya Left Customer Portal Vulnerable to 2015 Flaw in its Own Software
We Infiltrated a Counterfeit Check Ring! Now What?
MyBook Users Urged to Unplug Devices from Internet
How Cyber Sleuths Cracked an ATM Shimmer Gang
How Cyber Safe is Your Drinking Water Supply?
First American Financial Pays Farcical $500K Fine
How Does One Get Hired by a Top Cybercrime Gang?
Justice Dept. Claws Back $2.3M Paid by Colonial Pipeline to Ransomware Gang
Naked Security
Microsoft researcher found Apple 0-day in March, didn’t report it new
Apple emergency zero-day fix for iPhones and Macs – get it now!
Windows “PetitPotam” network attack – how to protect against it
US court gets UK Twitter hack suspect arrested in Spain
S3 Ep42: Viruses, Nightmares, patches, rewards and scammers [Podcast]
Windows “HiveNightmare” bug could leak passwords – here’s what to do!
Apple iPhone patches are out – no news if recent Wi-Fi bug is fixed
S3 Ep41: Crashing iPhones, PrintNightmares, and Code Red memories [Podcast]
More PrintNightmare: “We TOLD you not to turn the Print Spooler back on!”
Want to earn $10 million? Snitch on a cybercrook!
The Code Red worm 20 years on – what have we learned?
Home delivery scams get smarter – don’t get caught out
Schneier on Security
De-anonymization Story
Hiding Malware in ML Models
Disrupting Ransomware by Disrupting Bitcoin
Friday Squid Blogging: The Evolution of Squid
Commercial Location Data Used to Out Priest
Nasty Windows Printer Driver Vulnerability
NSO Group Hacked
Candiru: Another Cyberweapons Arms Manufacturer
Friday Squid Blogging: Giant Squid Model
REvil is Off-Line
Colorado Passes Consumer Privacy Law
China Taking Control of Zero-Day Exploits
Linux Security
Hackers turning to 'exotic' languages for next-gen malware, report warns> new
Open Source is Revolutionizing Careers in Cybersecurity - What You Need to Know> new
The 10 Best Tools to Scan Your Linux Server for Malware and Security Flaws>
Black Hat USA & DEFCON 2021 Coverage on LinuxSecurity: What You Need to Know>
Microsoft Warns of LemonDuck Malware Targeting Windows and Linux Systems>
Canonical Pushes New Ubuntu Kernel Updates to All Supported Releases>
Let the Linux kernel Rust>
New Windows and Linux Flaws Give Attackers Highest System Privileges>
Say hi to Microsoft's own Linux: CBL-Mariner>
GNOME 40.3 Released with Improvements to GNOME Software, Many Bug Fixes>
TLS Email Encryption Explained - How To Encrypt Email with TLS>
Keeping Your System Secure is Easier than Ever with LinuxSecurity Customized Advisories!>
Dark Reading
8 Security Tools to be Unveiled at Black Hat USA new
Biden Administration Responds to Geopolitical Cyber Threats
7 Hot Cyber Threat Trends to Expect at Black Hat
Securelist
APT trends report Q2 2021 new
DDoS attacks in Q2 2021
Whitehat Security Blog
HITB News
Hunting IcedID and unpacking automation with Qiling Framework
Clubhouse Opens Its Doors. Is Anyone Rushing to Get In?
Pegasus spyware is just the latest tool autocrats are using to stay in power
Microsoft introduces new phishing protections in Teams
TikTok to open cyber-security centre in Ireland
Apple reports a 50% year-over-year jump in iPhone sales
Intel’s foundry roadmap lays out the post-nanometer “Angstrom” era
Biden: If U.S. has 'real shooting war' it could be result of cyber attacks
PunkSpider Tool Calls Out Thousands of Hackable Websites
Behind the Mercenary Spyware Industry
Brazil creates cyberattack response network
VPN servers seized by Ukrainian authorities weren’t encrypted
The RISKS Digest
Re: Rounding errors could make certain stop-watches pick wrong race winners
The Problem With Stealing High-End Electronics and Beer
Breast Cancer Patient Attacked by Violent Anti-Mask Protest Outside Los Angeles Clinic
'STFU' is anti-science
Re: Some locals say a bitcoin mining operation is ruining one of the Finger Lakes. Here's how.
‘Advanced’ Nuclear Reactors? Don’t Hold Your Breath
Hoe no! Facebook snafu spells trouble for gardening group
Hackers Turning to 'Exotic' Programming Languages for Malware Development
The end of open source?
Niemoeller's Boiled Frog: Weaponization of App Data
A Severe Drought Is Threatening the Hoover Dam Reservoir -- and Water Throughout the West
What Ever Happened to IBM's Watson?
Kaspersky Blog
How to remove banner ads with Kaspersky Security Cloud | Kaspersky official blog new
Use of Google Apps Script in phishing | Kaspersky official blog
How to host a secure meeting in Zoom | Kaspersky official blog
Community Conversations: Geneva Dialogue | Kaspersky official blog
How to download Windows 11 while avoiding malware | Kaspersky official blog
Transatlantic Cable podcast, episode 211 | Kaspersky official blog
Six tips for hybrid work security and efficiency | Kaspersky official blog
Online dating apps security and privacy in 2021 | Kaspersky official blog
How to avoid fake brand account scams on Twitter | Kaspersky official blog
Transatlantic Cable podcast, episode 210 | Kaspersky official blog
How end-to-end encryption works in Zoom | Kaspersky official blog
Lessons from Mobile World Congress 2021 | Kaspersky official blog
Adam Shostack & friends
Threat Model Thursday: NIST’s Code Verification Standard
Collaboration in Threat Modeling
Sketching to Answer “What Are We Working On?”
Threat Model Thursday: 5G Infrastructure
Applied Threat Modeling at Blackhat 2021!
Why Threat Model?
Juneteenth: A New Federal Holiday
Fast threat modeling videos
“Not in my threat model”?
Ransomware is Not the Problem
Thoughts on the Executive Order
Van Buren
Graham Cluley
Smashing Security podcast #238: Fashion captain, fraud family, and DEF CON. D’oh! new
Despite all the advice, 97.7% of Twitter users have still not enabled two-factor authentication
Patch your iPhones and Macs against “actively exploited” zero-day right now
Who us??? Kaseya says it hasn’t paid anybody for its ransomware decryption key
Average ransomware payments decline… but that’s not good news
No More Ransom website celebrates five years of providing free ransomware recovery tools and advice
Good news! I’m getting a salary increase!
Stay sharp this summer with security tips from the experts – sign up to 1Password’s Security Summer School today
Vikings hack Instagram account of SBS News in Australia
Fraud Family cybercrime ring under the spotlight as arrests made in the Netherlands
Kaseya offers universal decryptor to customers following ransomware attack
British man arrested in connection with Twitter mega-hack that posted cryptocurrency scam from celebrity accounts
Rapid7
[Security Nation] Philipp Amann on No More Ransom new
Multiple Open Source Web App Vulnerabilities Fixed
Decrypter FOMO No Mo’: Five Years of the No More Ransom Project
What’s New in InsightAppSec and tCell: Q2 2021 in Review
[Security Nation] Brian Honan on creating Ireland's first CERT
Microsoft SAM File Readability CVE-2021-36934: What You Need to Know
Grow Your Career at Rapid7: North America Sales
[The Lost Bots] Episode 1: External Threat Intelligence
Rapid7 + XDR: Security that Moves as Fast as Your Business
Rapid7 Acquires IntSights to Tackle the Expanding Threat Landscape
Accelerating SecOps and Emergent Threat Response with the Insight Platform
What’s New in InsightVM: Q2 2021 in Review
Hacker News (YCombinator) - Security
Remote Culture War Has Begun, Executives Pumping Out "Back to Work" Propaganda new
Emulating the IBM PC on an ESP32 new
Pfizerleak: Exposing the Pfizer Manufacturing and Supply Agreement
Ask a Bartender a Question
Ask a bartender a question
Hack NFL data using Postgres (and maybe win your fantasy draft)
Former eBay employee gets 18 months in prison for cyberstalking campaign
Tencent's WeChat suspends new user registration for security compliance
WeChat suspends new user registration for security compliance
Threema OnPrem: Maximum Security Thanks to Self-Hosting
Google launches new vulnerability reward platform
Apple Gave Uber Access to a Secret Feature That Can Record iPhone Screens (2017)
Hacker Noon #Security
Choosing between Object Storage and Block Storage for Security new
The Vulnerabilities of NFC Payments Need to be Addressed
Exploring Quality in Pentesting
Security issues in the Blockchain That Need To Be Talked About More
Running a Global Blockchain Node Infrastructure Ecosystem: How We Do It
Self-Sovereign Identity, smart contracts and Web 3.0
Hunting Exploits by looking for the Author’s fingerprints: Graphology of an Exploit
Putting the Blinders on AI
Understanding Cyber Attackers: Who They Are and How They Work
5 Best Cybersecurity Books for Beginners
Why IAM Architects Prescribe Enterprise Application Security
Breaking Down The HIPAA Regulations and It's Role In Telehealth

Security in Mainstream Media

Google News Hacking
Hackers used never-before-seen wiper in recent attack on Iranian train system: report - ZDNet new
Why SpaceX and commercial space companies must prepare for hackers - Vox.com new
Marcelito Pomoy's YouTube channel hacked, removed - Rappler new
Beijing called out for breaking down door for hackers - NEWS.com.au new
Hong Kong man admits to hacking son with knife in dispute over bathroom use - South China Morning Post new
Titanfall Fan Presents 'Easy' Solution to Current DDoS Hacking Issues - GameRant new
Singer Ronan Keating accepts damages in tabloid phone hacking case - The Star Online new
One simple step can thwart top phone hackers, experts say - WLWT Cincinnati new
Line messaging accounts of Taiwan officials hacked - Kyodo News Plus new
'We weighed the threat': Grass Valley officials explain decision to pay ransom to hackers - The Union of Grass Valley new
Hackers breach UC San Diego hospital, gaining access to SSNs and medical info of patients, employees, and students - ZDNet new
The City Council's gift to hackers in the name of helping restaurants - New York Post new
Google Cyber Security
Over 6 lakh cyber security incidents observed in first half of 2021 - MediaNama.com new
Cybersecurity Chiefs Are in High Demand as Companies Face Rising Hacking Threats - The Wall Street Journal new
Top 30 Critical Security Vulnerabilities Most Exploited by Hackers - The Hacker News new
DMU Works wonders for Ethan's future in cyber security - De Montfort University new
China 'crossed line' with email cyber attack, cyber security tsar says - The Australian Financial Review new
Over 6.07 lakh cyber security incidents reported in India during first half of 2021: Govt - ETTelecom.com new
What is Mitre D3FEND? A new knowledge graph for cyber security defenders - Reseller News new
7 Tips on Working to Create a Cybersecurity Strategy for Your Business - WRCB-TV new
Good guy hackers: St. Paul company uncovers companies' cybersecurity weaknesses - KSTP new
Acronis Cyber Protect Cloud's protection pack boosts cybersecurity for MSPs - Help Net Security new
Bringing the CISO and the Board Closer Together - Cyber Security Hub new
FBI launches cybersecurity boot camp for students - FOX21News.com new

Thirsty for more

Hacker News (YCombinator)
The Array Cast: A podcast about the array programming languages new
Show HN: Notes.cx – A simple, anonymous online notepad w Markdown support new
Liveblocks: Add real‑time collaboration to your product in minutes new
The Baked Data architectural pattern new
Let’s Talk OpenZFS Snapshots new
It’s not funny anymore. Far-right extremists’ use of humour new
Why does man print “gimme gimme gimme” at 00:30? new
Why does man print “gimme gimme gimme” at 00:30? (2017) new
M4 – the one true templating language new
m4 macro processor (2020) new
M4 macro processor (2020) new
Thousands of scientists warn climate tipping points ‘imminent’ new
Reddit - Cyberpunk
Aeon Flux by Dustin Weaver (2017 con sketch) new
On Max Headroom: The Most Misunderstood Joke on TV new
Cyberpunk type game: Vigilance 2099 new
Pick Up The Phone new
Straight from Moscow for your dystopian pleasure new
Don’t know if this is the subreddit for the table top new
Neons x Lexus new
I'm pretty proud of this little edit new
Why does everything look grainy in shadows even on max settings. new
One of my Kenpo Cats. Cyber Martial Arts inspired Cats. Countless houres (Weeks) of Work i finished my Collection. new
Anyone down to help me make up futuristic streamer terminology? new
Cyberpunk Red - Advertising Blimp by Neil Branquinho new
Reddit - Security CTF
Pipe vs Pipe Pipe new
Hacky Holidays CTF Write Up: Decrypting SMB3 Traffic from information available in PCAP new
Encyption and Cryptography 101 - TryHackMe Encryption - Crypto 101 new
Phase 1 - Hacky Holidays Space Race CTF 2021 - Beginner Friendly Walkthroughs!!
Investigation IAM Events in Amazon Web Service with Splunk | TryHackMe
HTB Business CTF 2021 - Theta
Harish S.G on LinkedIn: How I hacked into the internal helpdesk of 100 + companies including
I though RSA 2048 bit was secure until 2030 but this article says different?
"Security Alert: Encryption is not very hard to crack 1024-bit, 2048..."
Hashing and Cryptography 101 | TryHackMe Hashing - Crypto 101
Hack The Box: Amageddon - Write-up by Khaotic
SQL injection on Damn Vulnerable Web Application
Reddit - Sysadmin
A noob question new
If you contact on-call, have an actual problem new
Is there such a thing...? new
Windows Autopilot starting but not completing new
Thickheaded Thursday - July 29, 2021 new
Defender Application Guard new
Disable SNMPv2 on ESXi hosts new
Signature management solution new
Mini-rant, allowing apps through Windows Firewall when it's switched off new
clients adding/installing new printers from printers existing print server new
Failover Cluster Hyper-V (HA) doesn't automatically start after crash. new