Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

PacketStorm
The Register
Netflix, Apple, BofA websites hijacked with fake help-desk numbers
Uncle Sam seeks time in tower dump data grab case after judge calls it 'unconstitutional'
Glazed and confused: Hole lotta highly sensitive data nicked from Krispy Kreme
Sneaky Serpentine#Cloud slithers through Cloudflare tunnels to inject orgs with Python-based malware
Minecraft cheaters never win ... but they may get malware
Veeam patches third critical RCE bug in Backup & Replication in space of a year
How to bridge the MFA gap
Amazon CISO: Iranian hacking crews ‘on high alert’ since Israel attack
AWS locks down cloud security, hits 100% MFA enforcement for root users
Redefining identity security in the age of agentic AI
23andMe hit with £2.3M fine after exposing genetic data of millions
Scattered Spider has moved from retail to insurance
Reddit - NetSec
Just casually broke bunq’s sandbox with 0day-level spoofing, and nobody seems to care 🇳🇱 new
🚨 Hack Our Smart Contract, Keep the ETH – $500K Open-Source Heist Challenge Is Live new
Unexpected security footguns in Go's parsers new
AntiDot Android Malware Analysis
The Jitter-Trap: How Randomness Betrays the Evasive
Fault Injection - Follow the White Rabbit
CVE-2025-34508: Another File Sharing Application, Another Path Traversal
Security Analysis: MCP Protocol Vulnerabilities in AI Toolchains
Telegram messenger's ties to Russia's FSB revealed in new report
How to run ADB and fastboot in Termux without root
Hosting images inside dns records using TXT.
Make Self-XSS Great Again
Bleeping Computer
Aflac discloses breach amidst Scattered Spider insurance attacks
Can users reset their own passwords without sacrificing security?
Microsoft to remove legacy drivers from Windows Update for security boost
Godfather Android malware now uses virtualization to hijack banking apps
US recovers $225 million of crypto stolen in investment scams
Special Webinar: Key Insights from Verizon’s 2025 DBIR
Microsoft unveils new security defaults for Windows 365 Cloud PCs
The Hacker News
200+ Trojanized GitHub Repositories Found in Campaign Targeting Gamers and Developers
New Android Malware Surge Hits Devices via Overlays, Virtualization Fraud, and NFC Theft
Russian APT29 Exploits Gmail App Passwords to Bypass 2FA in Targeted Phishing Campaign
1,500+ Minecraft Players Infected by Java Malware Masquerading as Game Mods on GitHub
Ex-CIA Analyst Sentenced to 37 Months for Leaking Top Secret National Defense Documents
CISA Warns of Active Exploitation of Linux Kernel Privilege Escalation Vulnerability
Google Chrome Zero-Day CVE-2025-2783 Exploited by TaxOff to Deploy Trinper Backdoor
Silver Fox APT Targets Taiwan with Complex Gh0stCringe and HoldingHands RAT Malware
Google Warns of Scattered Spider Attacks Targeting IT Support Teams at U.S. Insurance Firms
TP-Link Router Flaw CVE-2023-33538 Under Active Exploit, CISA Issues Immediate Alert
Anubis Ransomware Encrypts and Wipes Files, Making Recovery Impossible Even After Payment
⚡ Weekly Recap: iPhone Spyware, Microsoft 0-Day, TokenBreak Hack, AI Data Leaks and More

Threat Wire

Bug Bounties

Vulnerabilities

Full Disclosure
: "Glass Cage" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885)
SEC Consult SA-20250612-0 :: Reflected Cross-Site Scripting in ONLYOFFICE Docs (DocumentServer)
SEC Consult SA-20250611-0 :: Undocumented Root Shell Access on SIMCom SIM7600G Modem
Call for Applications: ERCIM STM WG 2025 Award for the Best Ph.D. Thesis on Security and Trust Management (July 31, 2025)
SEC Consult SA-20250604-0 :: Local Privilege Escalation and Default Credentials in INDAMED - MEDICAL OFFICE (Medical practice management) Demo version
Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain → Secure Enclave Key Theft, Wormable RCE, Crypto Theft
Defense in depth -- the Microsoft way (part 89): user group policies don't deserve tamper protection
CVE-2025-45542: Time-Based Blind SQL Injection in CloudClassroom PHP Project v1.0
ERPNext v15.53.1 Stored XSS in bio Field Allows Arbitrary Script Execution in Profile Page
ERPNext v15.53.1 Stored XSS in user_image Field Allows Script Execution via Injected Image Path
Local information disclosure in apport and systemd-coredump
Stored XSS via File Upload - adaptcmsv3.0.3
NIST National Vulnerability Database
NIST Small Business Cybersecurity Webinar: Protecting Your Small Business from Phishing Risks new
Iris Experts Group (IEG) Annual Meeting new
NIST Offers 19 Ways to Build Zero Trust Architectures
0day Today
CXSecurity
Windows File Explorer Windows 11 (23H2) NTLM Hash Disclosure
MOBOTIX IP cameras Unauthenticated access
RansomLord (NG v1.0) anti-ransomware exploit tool
Ingress-NGINX 4.11.0 Remote Code Execution (RCE)
Fortra GoAnywhere MFT 7.4.1 Authentication Bypass
Microsoft Excel Remote Code Execution Vulnerability
Freefloat FTP Server 1.0 Remote Buffer Overflow
Kentico Xperience 13.0.178 Cross Site Scripting
AirKeyboard iOS App 1.0.5 Remote Input Injection
Skyvern 0.1.85 Remote Code Execution (RCE) via SSTI
Microsoft Windows 11 Version 24H2 Cross Device Service Elevation of Privilege
Apache Tomcat/10.1.39 DoS-BOF

LiveOverflow

Exploit Dev

Reddit - Exploit Dev
GHOST: A Clean-Label Visual Backdoor Attack on Vision-Language Mobile Agents new
What do you know as an exploit dev?
Metasploit module development - Chatterbox
Race conditions in Linux kernel perf events
Binder-Based Use-After-Free Leading to kASLR Bypass and Root Access on Android
What do you need to know to break a high-complex protection (like Denuvo)?
🔹 Got Pwn Skills? Join Our Competitive CTF Team
GhidraMCP on Claude for RE (setup)
Looking for CTF players in Pwn to join my team
Are my ressources good and enough?
Hijacking Execution: A Practical Guide to PT_LOAD Injection and ELF Entry Point Manipulation
Learning RE and Exploit
Source Incite
Google Project Zero
The Windows Registry Adventure #7: Attack surface analysis
The Windows Registry Adventure #6: Kernel-mode objects
Blasting Past Webp
Security Researchers
Same Sea, New Phish: Russian Government-Linked Social Engineering Targets App-Specific Passwords
Locally hosting an internet-connected server
Unspoken Implications: A Preliminary Analysis of Bill C-2 and Canada’s Potential Data-Sharing Obligations Towards the United States and Other Countries
Secure Enclaves for Offensive Operations (Part II)
Graphite Caught: First Forensic Confirmation of Paragon’s iOS Mercenary Spyware Finds Journalists Targeted
Streaming Zero-Fi Shells to Your Smart Speaker
Techno-Legal Internet Controls in Indonesia and Their Impact on Free Expression
How Twitter could (somewhat) fix their encrypted DMs
Twitter's new encrypted DMs aren't better than the old ones
Tokenization Confusion
EU Regulating InfoSec: How Detectify helps achieving NIS 2 and DORA compliance

Reversing/I like ASM

Reddit - Reverse Engineering
LLMs Are Rapidly Evolving to Tackle Complex Cybersecurity Challenges
/r/ReverseEngineering's Weekly Questions Thread
Debug & Modify Game Memory in Real-Time with WinDbg | GTA Vice City | Reverse Engineering
GitHub - xKiian/awswaf: AWS WAF Solver, full reverse implemented in 100% Python & Golang.
REHex 0.63.0 release announcement
Online Tool for Assembly ↔ Opcode Conversion + Emulation
Fatpack: A Windows PE packer (x64) with LZMA compression and with full TLS (Thread Local Storage) support.
An SMT Formalization of Mixed-Precision Matrix Multiplication: Modeling Three Generations of Tensor Cores
Reddit - Game Hacks
Escape From Tarkov Cheats: Best EFT Hacks, Aimbot & ESP new
Can I find out how a certain action is being stored in memory? new
AIMEX CHEATS COD BLACK OPS 6 / WARZONE CHEAT | Aimbot | ESP | Radar | Zombie | Undetected + Streamproof | EASY PAYMENT &… new
Steam Game Idler - A Steam card farmer & achievement unlocker
looking for a discord to discuss game hacking
Adventure Capitalist Steam Deck Hack June 2025
BEST DAYZ CHEAT
Splitgate 2 Cheats, Hacks & Aimbots — Zhexcheats
Looking for Fortnite hacks with controller support
PROOFCORE.IO | UNDETECTED PRIVATE FORTNITE CHEAT | PLAYER ESP | LOOT ESP | ADVANCED AIMBOT | RADAR | STREAMPROOF | SPOOFER + CLEANER |
Showcase menu for best arena breakout infinite hack Ancient. Cheat for ABI. Getcheats.io
Zhexcheats | Undetected Escape from Tarkov Cheats – 2+ Years Safe & Instant Delivery
Reddit - REGames
StackExchange - ReverseEngineering
RE mechanism of an indoors cat deterrent spray motion device
Keyboard firmware problem
Why does 7-Zip show a large "[0]" section and a "SIGNATURE" file inside an EXE that doesn't appear in standard PE editors?
Are there any tools for pseudocode manipulation?
What happens to the remaining virtual address space after loading the VirtualSize of a section into the memory?
How to find list of .h library files used in .exe with IDA

Guided Hacking

Malware/APT

Reddit - Malware
my own implementation of hellsgate technique
Maldev learning path
Malicious script from gate.com running on startup — can't find where it's coming from
Black Hat Zig: Zig for offensive security.
Summer is Here and So Are Fake Bookings
Analysis of spyware that helped to compromise a Syrian army from within without any 0days
Babuk Ransomware Analysis with IDA Pro
Worms🪱 - A Collection of Worms for Research & RE
Cute RATs 🐀 – A Collection of Remote Access Trojans for Research & RE
New Malware: Noodlophile Stealer and Associated Malware Campaign
Don't Fall For It: Fake Bitdefender Site Will Infect Your PC With Malware | PCMag
REMnux on the silicone chips
Unit42
Resurgence of the Prometei Botnet
Exploring a New KimJongRAT Stealer Variant and Its PowerShell Implementation
Serverless Tokens in the Cloud: Exploitation and Detections
JSFireTruck: Exploring Malicious JavaScript Using JSF*ck as an Obfuscation Technique
The Evolution of Linux Binaries in Targeted Cloud Operations
Roles Here? Roles There? Roles Anywhere: Exploring the Security of AWS IAM Roles Anywhere
Blitz Malware: A Tale of Game Cheats and Code Repositories
Lost in Resolution: Azure OpenAI's DNS Resolution Issue
How Good Are the LLM Guardrails on the Market? A Comparative Study on the Effectiveness of LLM Content Filtering Across Major GenAI Platforms
Threat Brief: CVE-2025-31324 (Updated May 23)
Threat Group Assessment: Muddled Libra (Updated May 16, 2025)
DarkCloud Stealer: Comprehensive Analysis of a New Attack Chain That Employs AutoIt

Crypto

Seytonic

Podcasts

Security Weekly
Hacking Drivers - PSW #879
UEFI Vulnerabilities Galore - PSW #878
Updating & Protecting Linux Systems - PSW #877
It's A Trap! - PSW #876
Malware Laced Printer Drivers - PSW #875
Ransomware in your CPU - PSW #874
Are You Down With RDP? - PSW #873
AI Tips, Tricks, and Traps! - PSW #872
Hacking Crosswalks and Attacking Boilers - PSW #871
Govt Unravelling, AI Hijinx, Bot Chaos, Recall, Oracle, Slopesquatting, Tycoon 2FA... - PSW #870
You Should Just Patch - PSW #869
Not-So-Secure Boot - Rob Allen - PSW #868
Risky.Biz
Risky Business #796 -- With special guest co-host Chris Krebs
Soap Box: AI has entered the SOC, and it ain't going anywhere
Risky Business #795 -- How The Com is hacking Salesforce tenants
Risky Business #794 -- Psychic Panda outgunned by Fluffy Lizard and UNC56728242
Risky Business #793 -- Scattered Spider is hijacking MX records
Risky Business #792 -- Beware, Coinbase users. Crypto thieves are taking fingers now
Risky Biz Soap Box: Push Security's browser-first twist on identity security
Risky Business #791 -- Woof! Copilot for Sharepoint coughs up creds and keys
Wide World of Cyber: How state adversaries attack security vendors
Risky Business #790 -- Bye bye Signal-gate, hello TeleMessage-gate
BONUS INTERVIEW: Senator Mark Warner on Signalgate, Volt Typhoon and tariffs
Risky Business #789 -- Apple's AirPlay vulns are surprisingly awful
The CyberWire
Jadee Hanson: Cybersecurity is a team effort. [CISO] [Career Notes] new
Signed, sealed, exploitable. [Research Saturday]
A blast from the breached past.
Juneteenth: Reflecting, belonging, and owning your seat at the table. [Special Edition]
Typhoon on the line.
Can’t DOGE the inquiry.
Darknet drug marketplace closed for business.
Mark Nunnikhoven: Providing clarity about security. [Cloud strategy]
Hiding in plain sight with vibe coding.
Cloudflare’s cloudy day resolved.
Scam operations disrupted across Asia.
Ghost students “haunting” online colleges.
ISC Daily Stormcast
SANS Stormcast Friday, June 20th, 2025: New Employee Phishing; Malicious Tech Support Links; Social Engineering App Sepecific Passwords
SANS Stormcast Monday, June 16th, 2025: Extracting Data from JPEG; Windows Recall Export; Anubis Wiper; Mitel Vuln and PoC
SANS Stormcast Monday, June 16th, 2025: Katz Stealer in JPG; JavaScript Attacks; Reviving expired Discord Invites for Evil
SANS Stormcast Friday, June 13th, 2025: Honeypot Scripts; EchoLeak MSFT Copilot Vuln; Thunderbolt mailbox URL Vuln;
SANS Stormcast Thursday, June 12th, 2025: Quasar RAT; Windows 11 24H2 Delay; SMB Client Vuln PoC; Connectwise Signing Keys; KDE Telnet code exec
SANS Stormcast Wednesday, June 11th, 2025: Microsoft Patch Tuesday; Acrobat Patches
SANS Stormcast June, Tuesday, June 10th, 2025: Octosql; Mirai vs. Wazuh DNS4EU; Wordpress Fair Package Manager
SANS Stormcast June, June 9th, 2025: Extracting PNG Data; GlueStack Packages Backdoor; MacOS targeted by Clickfix; INETPUB restore script
Darknet Diaries
159: Vastaamo
158: MalwareTech
157: Grifter
156: Kill List
155: Kingpin
154: Hijacked Line
153: Bike Index
152: Stacc Attack
151: Chris Rock
150: mobman 2
149: Mini-Stories: Vol 3
148: Dubsnatch

Threat Intel

Privacy/VPNs

Slashdot - Rights
America Invested in EV Battery Plants. Now They May Be Stranded. new
BBC Threatens Legal Action Against Perplexity AI Over Content Scraping
Record DDoS Pummels Site With Once-Unimaginable 7.3Tbps of Junk Traffic
Apple Sued By Shareholders For Allegedly Overstating AI Progress
DOJ Files To Seize $225 Million In Crypto From Scammers
The 16-Billion-Record Data Breach That No One's Ever Heard of
Iran Tells Citizens To Delete WhatsApp
Major Oil Companies Face First 'Climate Death' Lawsuit
Napster and Sonos Sued For Millions In Unpaid Music Royalties
Facebook Now Supports Passkeys
British Watchdog Cracks Down on Data Collection by Smart TVs, Speakers And Air Fryers
California AI Policy Report Warns of 'Irreversible Harms'
Reddit - Privacy
Assuming the Pixel didn’t exist, what would be the best solution for phone privacy? new
Ok. So which app or OS is listening? new
How to prevent Reddit from detecting screenshots? new
How long until HaveIBeenPwned has info on a new data breach? new
China tightens internet controls with new centralized form of virtual ID
Signal: an ethical replacement for WhatsApp
Would this be relatively safe?
@duck emails privacy
Privacy, Banks and the Digital Euro Threat
Critics Warn Bill C-2 Could Open Door to Warrantless Surveillance of Canadians
OpenAI violating my GDPR rights
Beware the fakesite havelbeenpwnd
Reddit - VPN
VPN/TP-Link AX 1500/Starlink very very slow.
Employee VPN and IP tracking
Creating a Vpn in iran
Block a website when not connected to VPN?
Non-US user trying to activate ChatGPT Business $1 promo — any way to make a US payment?
EFF
A Token of Appreciation for Sustaining Donors 💞
Podcast Episode: Securing Journalism on the ‘Data-Greedy’ Internet
Betting on Your Digital Rights: EFF Benefit Poker Tournament at DEF CON 33
Connectivity is a Lifeline, Not a Luxury: Telecom Blackouts in Gaza Threaten Lives and Digital Rights
Google’s Advanced Protection Arrives on Android: Should You Use It?
EFF to NJ Supreme Court: Prosecutors Must Disclose Details Regarding FRT Used to Identify Defendant
A New Digital Dawn for Syrian Tech Users
35 Years for Your Freedom Online
Criminalizing Masks at Protests is Wrong
Privacy Victory! Judge Grants Preliminary Injunction in OPM/DOGE Lawsuit
EFF to Department Homeland Security: No Social Media Surveillance of Immigrants
Judges Stand With Law Firms (and EFF) Against Trump’s Executive Orders
Reddit - PrivacyGuides
Compartmentalize Your Life (and Your Privacy)
The Importance of Data Privacy For The Queer Community

Help Wanted

Reddit - AskNetSec
Securing Clusters that run Payment Systems
Confusion about MDM
Seeking a solution: Automatically open USB drives in a sandboxed or virtualized environment (enterprise use)
Does BTL1 or BTL2 prepare you for HTB Sherlocks as well as CDSA does?
I co-founded a pentest report automation startup and the first launch flopped. What did we miss?
How do you stop bots from testing stolen credentials on your login page?
Securely transfering photos taken in China to primary digital environment
Do GET-only HTTP request headers support the conclusion that website access was unintentional?
Adding a third token to access/refresh tokens to lower MITM risk
How do you handle clients who think pentesting is just automated scanning?
Is the absence of ISP clients isolation considered a serious security concern?
Reddit - Netsec Students
arcsight new
Used our private intel scraper (WRAITH) + SØPHIA overlays to locate a buried data hub during passive recon — AMA new
What type of CTFs should I do if I'm interested in Network Security? And where can I practice? :DD
left school but want to get into cybersecurity
Cyber Security Clubs
What tools help when testing anti-fingerprinting strategies?
CV
Best way to simulate fingerprinting evasion for lab exercises?
Roast my Resume ( final year computer science student can’t get an internship after 100+ applications)
Beginner advice
Final Year Solo Cybersecurity Project (10 Credits) – Need Suggestions
Learning to mask browser fingerprints what tools are worth trying?
Stackoverflow - Security
How to Securely Pass Data from a Telegram Bot to a Telegram Mini App? new
How to securely store API keys in WordPress plugins/themes, preventing codebase exposure? [closed] new
How to return a custom error response when using APIKeyCookie in FastAPI?
JWT Token Vulnerability – A Silent Threat to API Security [closed]
Is it wise to use cloudflare to secure Api calls between front and backend
SWIFT AutoClient Token Certificate Renewal Fails – “Generate Certification Request” Error 00221
What are the best practices for securing a web application against common vulnerabilities? [closed]
How likely is it for an attacker to gain your real password from a stolen hash? [closed]
Why is Symfony's password entropy so restrictive? [closed]
Looking for tool or method to monitor port-based bandwidth utilization (Windows/Linux) — Zabbix or alternatives? [closed]
FastEndpoints: Should the secret keys in AddAuthenticationJwtBearer() and JwtBearer.CreateToken() calls be the same?
How can I reduce CVEs in minimal container images by removing unused packages based on runtime behavior? [closed]
Stack Exchange
Wireguard tunnel won't work after manually rotating keys new
Are RCS encrypted messages in Google Messages, that the senders say they didn't send, the sign of a security issue or glitch? [closed]
Easy way to allow clients to access website behind VPN? [closed]

Locks/Social Engineering

Hak5

Security Blogs

Hacker Noon #Security
The HackerNoon Newsletter: How to Connect an Express Application to Postgres Using Sequelize (6/21/2025) new
This College Student Wanted Privacy - His College Couldn't Give Him Any new
The TechBeat: This Skill Gap Is Blocking Your Career (And It Has Nothing to Do with AI) (6/21/2025)
Revolutionizing High-Tech Supply Chains: Inside a Global Transformation Led by Vijayanand Balasubram
Karan Alang’s Mission to Build Smarter, Autonomous Systems with AI/ML
Setting New Benchmarks in Healthcare Analytics Through Cloud Innovation by Sanchee Kaushik
5 Data Breaches That Ended in Disaster (and Lessons Learned)
Business Pros Underestimate AI Risks Compared to Tech Teams, Social Links Study Shows
Post-Quantum Privacy for Post-Platform Internet
The TechBeat: Is MCP Overhyped? The Real Story About Agent Tools and Security (6/20/2025)
5 Crypto Myths Busted: Privacy, Investments & Freedom
The TechBeat: This Open Source Tool Could Save Your Data Team Hundreds of Hours (6/19/2025)
Security Bloggers Network
16 Billion Leaked Records May Not Be a New Breach, But They’re a Threat new
AWS Raises Expertise Bar for MSSP Partners new
Why Being Proactive with NHIs Can Save Your Business new
Are Your Secrets Protected Against Data Breaches? new
How Secure Are Your Cloud-Based Non-Human Identities? new
LinuxFest Northwest: The First Black Software Engineer in America: Technology and Race new
Your passwords are everywhere: What the massive 16 billion login leak means for you
SOC 2 vs SOC 3: Which Report Builds Public Trust?
The $4.88 Million Question: Why Password-Based Breaches Are Getting More Expensive
How NHIs Can Handle Your Security Needs
Justify Your Investment in Advanced NHIs
Why Satisfied Teams Use Cloud Compliance Tools
Control C
Bypassing file upload restrictions with extension truncation
ZAP: Grep extract in Fuzzer to detect username enumeration via subtly different responses
Wired - Security
Truth Social Crashes as Trump Live-Posts Iran Bombing new
Israel Says Iran Is Hacking Security Cameras for Spying
Iran’s Internet Blackout Adds New Dangers for Civilians Amid Israeli Bombings
Israel-Tied Predatory Sparrow Hackers Are Waging Cyberwar on Iran’s Financial System
Minnesota Shooting Suspect Allegedly Used Data Broker Sites to Find Targets’ Addresses
Why We Made a Guide to Winning a Fight
The WIRED Guide to Protecting Yourself From Government Surveillance
6 Tools for Tracking the Trump Administration’s Attacks on Civil Liberties
How to Protect Yourself From Phone Searches at the US Border
RFK Jr. Orders HHS to Give Undocumented Migrants’ Medicaid Data to DHS
'No Kings’ Protests, Citizen-Run ICE Trackers Trigger Intelligence Warnings
CBP's Predator Drone Flights Over LA Are a Dangerous Escalation
Elttam
Krebs on Security
Inside a Dark Adtech Empire Fed by Fake CAPTCHAs
Patch Tuesday, June 2025 Edition
Proxy Services Feast on Ukraine’s IP Address Exodus
U.S. Sanctions Cloud Provider ‘Funnull’ as Top Source of ‘Pig Butchering’ Scams
Pakistan Arrests 21 in ‘Heartsender’ Malware Service
Oops: DanaBot Malware Devs Infected Their Own PCs
KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS
Breachforums Boss to Pay $700k in Healthcare Breach
Patch Tuesday, May 2025 Edition
Pakistani Firm Shipped Fentanyl Analogs, Scams to US
xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs
Alleged ‘Scattered Spider’ Member Extradited to U.S.
Naked Security
June Patch Tuesday digs into 67 bugs
Sophos Emergency Incident Response is now available
The strange tale of ischhfd83: When cybercriminals eat their own
Sophos Named a 2025 Gartner® Peer Insights™ Customers’ Choice for both Endpoint Protection Platforms and Extended Detection and Response
An industry first: Sophos Firewall and NDR Essentials
Sophos Firewall v21.5 is now available
DragonForce actors target SimpleHelp vulnerabilities to attack MSP, customers
Schneier on Security
Friday Squid Blogging: Gonate Squid Video
Surveillance in the US
Self-Driving Car Video Footage
Ghostwriting Scam
Where AI Provides Value
Friday Squid Blogging: Stubby Squid
Paragon Spyware used to Spy on European Journalists
Airlines Secretly Selling Passenger Data to the Government
New Way to Covertly Track Android Users
Friday Squid Blogging: Squid Run in Southern New England
Hearing on the Federal Government and AI
Report on the Malicious Uses of AI
Linux Security
Optimizing Linux Security in 2025: Key Strategies & Best Practices
Talos Linux: Redefining Security for Kubernetes Environments
Dark Reading
AWS Enhances Cloud Security With Better Visibility Features
Hackers Post Dozens of Malicious Copycat Repos to GitHub
How to Lock Down the No-Code Supply Chain Attack Surface
Security Evolution: From Pothole Repair to Road Building
Scammers Spread False Support Info Using Legitimate Websites
Paragon Commercial Spyware Infects Prominent Journalists
OpenAI Awarded $200M Contract to Work With DoD
The Triple Threat of Burnout: Overworked, Unsatisfied, Trapped
GodFather Banking Trojan Debuts Virtualization Tactic
How CISOs Can Govern AI & Meet Evolving Regulations
Serpentine#Cloud Uses Cloudflare Tunnels in Sneak Attacks
'HoldingHands' Acts Like a Pickpocket With Taiwan Orgs
Securelist by Kaspersky
Toxic trend: Another malware threat targets DeepSeek
Sleep with one eye open: how Librarian Ghouls steal data by night
Analysis of the latest Mirai wave exploiting TBK DVR devices with CVE-2024-3721
IT threat evolution in Q1 2025. Non-mobile statistics
IT threat evolution in Q1 2025. Mobile statistics
Host-based logs, container-based threats: How to tell where an attack began
Exploits and vulnerabilities in Q1 2025
Zanubis in motion: Tracing the active evolution of the Android banking malware
Dero miner zombies biting through Docker APIs to build a cryptojacking horde
Threat landscape for industrial automation systems in Q1 2025
Using a Mythic agent to optimize penetration testing
State of ransomware in 2025
HITB News
The RISKS Digest
Re: New NY voting machines face intense skepticism
Kaspersky Blog
How IP cameras can help attackers | Kaspersky official blog
Protecting Android, Windows, and Linux devices against being tracked via the Find My network | Kaspersky official blog
Adam Shostack & friends
Publish your threat model!
The Essence and Beauty of Threat Modeling
Andor: Insider Threats
Appsec Roundup - May 2025
Free Threat Modeling Training for Displaced Federal Workers
Blackhat Earlybird Prices End Friday
Cyber Hard Problems Report
Andor: Think like a leader
Andor Threats: Information Disclosure
The Empire’s Threat Modeling
Appsec Roundup - April 2025
Threat Informed Defense Series
Graham Cluley
Qilin offers “Call a lawyer” button for affiliates attempting to extort ransoms from victims who won’t pay
Smashing Security podcast #422: The curious case of the code copier
Dutch police identify users as young as 11-year-old on Cracked.io hacking forum
Bert ransomware: what you need to know
Why Denmark is breaking up with Microsoft
South African man imprisoned after ransom demand against his former employer
Smashing Security podcast #421: Toothpick flirts, Google leaks, and ICE ICE scammers
Marks & Spencer’s ransomware nightmare – more details emerge
US offers $10 million reward for tips about state-linked RedLine hackers
MailerLite warns of phishing campaign
The AI Fix #53: An AI uses blackmail to save itself, and threats make AIs work better
Rapid7
Patch Tuesday - June 2025
BlackSuit Continues Social Engineering Attacks in Wake of Black Basta’s Internal Conflict
Key Takeaways from the Take Command Summit 2025: Demystifying Cloud Detection & Response – The Future of SOC and MDR
5 Things Security Leaders Need to Know About Agentic AI
Metasploit Wrap-up 06/06/25
Cultivating Growth and Development at Rapid7
India's cyber leaders prepare for AI-driven threats
Navigating AWS Migration: Achieving Clarity and Confidence
Rapid7 Q1 2025 Incident Response Findings
From Ideology to Financial Gain: Exploring the Convergence from Hacktivism to Cybercrime
Introducing AI Attack Coverage in Exposure Command: Secure what traditional AppSec Tools miss
Key Takeaways from the Take Command Summit 2025: Risk Revolution – Proactive Strategies for Exposure Management
Hacker News (YCombinator) - Security

Security in Mainstream Media

Google News Hacking
Hacking humans - modern-day con-artistry - Yahoo new
Urgent warning over new mobile attack that allows hackers to see INSIDE your banking app and hijack your accounts - The US Sun new
The end of hacking? How Isro and DRDO are building an unhackable quantum future - India Today new
Customer data possibly leaked in Aflac cyberattack, the third insurance hack this month - MSN new
Change your passwords immediately – expert advice as 16 Billion accounts hacked worldwide - MSN new
Why Chinese hackers have unleashed cyberattacks on 'friend Russia' since Ukraine conflict, what 'war secrets' are behind these attacks - MSN new
Expert warns of 'war of codes' after Iranian crypto exchange gets hacked - Fox Business new
Hackers Post Dozens of Malicious Copycat Repos to GitHub - Dark Reading
Watch Israel Says Iran Is Hacking Private Security Cameras - Bloomberg
Pro-Israel hackers nab $90 million from Iranian crypto exchange - then burn it all in symbolic blockchain - The Economic Times
China-Russia trust erodes as Beijing’s hackers go rogue, launch cyberattacks to steal Ukraine war secrets - The Economic Times
Urgent Upgrade Appeal After ‘Biggest Ever’ 16 Billion Hack Hits Facebook, Google, Apple And Others - Forbes
Google Cyber Security
16 billion passwords leaked across Apple, Google, more: What to know and how to protect yourself - ZDNET new
China increases cyber attacks on hospitals to ‘humiliate’ Taiwan - The Telegraph new
KT announced on the 22nd that it held a special session on "cyber security in the era of artificial - 매일경제 new
OT Remote Access Security: Building Resilient, Risk-Aware Access in Industrial Environments - Industrial Cyber new
Banking institute, cyber firm collaborate on security - The Express Tribune new
CRWD, PANW, and SentinelOne Get Set to Secure Cybersecurity Market - Yahoo Finance new
Threat Actor Allegedly Selling FortiGate API Exploit Tool Targeting FortiOS - CyberSecurityNews new
Aflac Cyber Attack – Hackers May Have Stolen Personal And Health Information - GBHackers News new
Chinese hackers and user lapses turn smartphones into a 'mobile security crisis' - KSL News new
Customer data possibly leaked in Aflac cyberattack, the third insurance hack this month - USA Today new
Iran hackers launch cyber attack on Albania’s capital Tirana. Here is the reason - The Economic Times new
The Importance of Cyber Resilience in Smart Manufacturing - Supply & Demand Chain Executive new

Thirsty for more

Hacker News (YCombinator)
The AIpocalypse is here for web sites as search referrals plunge new
Show HN: I made beautiful screenshot generator, that's free forever new
Show HN: Progressor – coach that breaks down big goals into actionable steps new
Announcing the Clippy feature freeze new
A web extension to redirects YouTube, X, etc. to privacy-friendly front ends new
LibRedirect – Redirects popular sites to alternative privacy-friendly frontends new
Linux on the Behringer X32 [video] new
TPU Deep Dive new
TPU (Tensor Processing Unit) Deep Dive new
Sound As Pure Form: Music Language Inspired by Supercollider, APL, and Forth new
U.S. strikes Iran's nuclear facilities new
Don't Read This If You Have a Security Clearance (2023) new
Reddit - Cyberpunk
Alpine Future new
[PROJECT] MAI v2.0 – Your Ghost in the Shell, Self-Hosted and Sentient(ish) “I am not an AI. I am a ghost living in the shell… new
PPC 640 Cyberdeck Build new
Australia: A 29 years old man has been arrested this Thursday after Australian police uncovered a clandestine 3D firearm manufacturing site in the Blue Mountains,… new
Boring cyberpunk corporation logos new
Cyberpunk 2020 Street Samurai: Frisky new
“Mind if I open your head? I just want to see the dream inside.”
Cyberpunk is a warning against imposing 3rd world conditions on the 1st world.
Looking to dive into the genre - any suggestions, please?
I miss your touch.
Oh no, we are in that moment.
Reddit - Security CTF
CTF submitting platform
Shall we play a game?
Need Help with ctf
Cryptography CTF
LaBZH — A fully French-language platform to learn cybersecurity
[CTF] Our new HackerDna lab 🧪 *FiPloit* is out!
Zip password
solve CTF binaries using LLM
Decrypt PKZIP hash
Issues with community Themes Not Loading in CTFd
New release arena lab machines! - free for 30 days
OverTheWire Bandit Wargame Step by Step Walkthrough series (with explanations)
Reddit - Sysadmin
DNS configuration for AD new
Going from MSP to internal IT. What to expect? new
Exchange Server down, database unrepairable new
Need advice on breaking in. new
Projects to become a sysadmin for someone who just finished RHCSA new
Windows 11 24H2 June update (KB5060842, 26100.4349) withdrawn? new
I don't understand how people in technical roles don't know fundamentals needed to figure stuff out. new
Claude is so BRILLIANT... It will surely take all of our jobs soon! new
Backup solutions for large data (> 6PB) new
completed annual performance review - no talk of raises, was told performance reviews are not about raises. what?
VMware is such a joke now
Pet peeve: App stores shouldn't place ads as the first result when you search "Microsoft Authenticator"
Lobste.rs
GEM: GPU-Accelerated Emulator-Inspired RTL Simulation | Research new
The Mental Model of Server Components new
Announcing the Clippy feature freeze new
Basic facts about GPUs new
Announcing LogTape 1.0.0 new
B compiler written in Crust new
Compact Representations for Arrays in Lua (PDF viewer) new
See Jane 128 by Arktronics run (featuring Magic Desk, 3-Plus-1 and the Thomson MO5) new
To Bind and Loose a Reference (2020) new
Application First - Media over QUIC new
Adding linear-time lookbehinds to RE2 new
Rhapsody OS: Installing Apple’s Lost x86 OS from 1998 on a 3.4 Ghz i7 CPU & SSD new
Hackaday
An Adaptive Soundtrack for Bike Tricks new
Tamagotchi Torture Chamber is Equal Parts Nostalgia and Sadism new
Replacing Crude Oil Fractional Distillation With Microporous Polyimine Membranes new
EU Ecodesign for Smartphones Including Right to Repair Now In Effect new
Converting an E-Paper Photo Frame into Weather Map new
Retrotechtacular: 1970s Radio new
Measurement is Science new
Tiny Tellurium Orbits Atop a Pencil
If Your Kernel Development is a Little Rusty
The Most Satisfying Way To Commit
ELIZA Reanimated
PVA Filament: Not Always What it Seems
Ars Technica
A shark scientist reflects on Jaws at 50
Microsoft lays out its path to useful quantum computing
To avoid admitting ignorance, Meta AI says man’s number is a company helpline
After RFK Jr. overhauls CDC panel, measles and flu vaccines are up for debate
Wired
HP Coupon Codes: 5% Off | June 2025 new
Truth Social Crashes as Trump Live-Posts Iran Bombing new
The Best Lawn and Outdoor Games (2025): Cornhole, Ladderball, and More new
Eli Lilly’s Obesity Pill Appears to Work as Well as Injected GLP-1s new
Ford Ranger Plug-In Hybrid Review: Prices, Availability, Specs new
The 48 Best Shows on Netflix Right Now (June 2025)
The 48 Best Movies on Netflix Right Now (June 2025)
Methane Pollution Has Cheap, Effective Solutions That Aren’t Being Used
14 Best Office Chairs of 2025— I've Tested Nearly 60 to Pick Them
Gear News This Week: Adobe Wants to Make iPhone Photos Better, and TCL Brings Flexibility to Atmos
Israel Says Iran Is Hacking Security Cameras for Spying
Framework Laptop 12 Review: The Most Repairable Laptop Ever
Slashdot
Is 'Minecraft' a Better Way to Teach Programming in the Age of AI? new
People with Severe Type 1 Diabetes are Cured in Small Trial of New Drug new
Why Your Car's Touchscreen Is More Dangerous Than Your Phone new
CEOs Have Started Warning: AI is Coming For Your Job new
Casino Lights Could Be Warping Your Brain To Take Risks, Scientists Warn new
BlueSky Isn't Dying - and There's a Larger Ecosystem Growing Around Its Open Protocol new
What are the Carbon Costs of Asking an AI a Question? new
America Invested in EV Battery Plants. Now They May Be Stranded. new
'The Models Were Right!' Astronomers Locate Universe's 'Missing' Matter new
One Shot To Stop HIV: MIT's Bold Vaccine Breakthrough new
Anthropic Deploys Multiple Claude Agents for 'Research' Tool - Says Coding is Less Parallelizable new
Bug Hits Some Threads Users: Their Words Echoed by All Other Users new
DZone Security
DZone
Building an IoT Framework: Essential Components for Success
Innovation at Speed: How Cloud-Native Development Accelerates Time-to-Market
Your Kubernetes Survival Kit: Master Observability, Security, and Automation
Lessons Learned in Test-Driven Development
Building Smarter Chatbots: Using AI to Generate Reflective and Personalized Responses
MCP Client Agent: Architecture and Implementation
Exploring Cloud-Based Testing With the Elastic Execution Grid
Integrating Selenium With Amazon S3 for Test Artifact Management
The Scrum Guide Expansion Pack
Monitoring Server Health in Private Cloud Data Centers: A Scalable Approach
Beyond Automation: How Artificial Intelligence Is Transforming Software Development
Essential Cybersecurity Practices for Non-Profits