Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

The Hacker News
Top 3 Threat Report Insights for Q2 2024 new
Iranian Cyber Group OilRig Targets Iraqi Government in Sophisticated Malware Attack new
Ireland's Watchdog Launches Inquiry into Google's AI Data Practices in Europe new
WordPress Mandates Two-Factor Authentication for Plugin and Theme Developers new
Quad7 Botnet Expands to Target SOHO Routers and VPN Appliances new
DragonRank Black Hat SEO Campaign Targeting IIS Servers Across Asia and Europe new
Singapore Police Arrest Six Hackers Linked to Global Cybercrime Syndicate new
Why Is It So Challenging to Go Passwordless?
Developers Beware: Lazarus Group Uses Fake Coding Tests to Spread Malware
Microsoft Issues Patches for 79 Flaws, Including 3 Actively Exploited Windows Flaws
Ivanti Releases Urgent Security Updates for Endpoint Manager Vulnerabilities
CosmicBeetle Deploys Custom ScRansom Ransomware, Partnering with RansomHub
PacketStorm
Proposed Underwater Datacenter Surprises Regulators Who Hadn't Heard About It new
Chinese Hackers Linked To Syndicate Arrested In Singapore new
Hacker Steals Data On 300k From Avis new
When You Pay A Ransom And The Decryptor Doesn't Work new
NPD Breach Underscores The Need For Stronger Digital Identities new
Microsoft Says Windows Update Zero-Day Being Exploited To Undo Security Fixes new
Electronic Payment Firm Slim CD Notifies 1.7M Customers Of Data Breach
Crypto Scams Rake In $5.6B A Year For Lowlifes, FBI Says
Microsoft Hosting Cybersecurity Summit After Global IT Outage
WhatApp's View Once Could Be View Whenever Due To A Flaw
CISA Breaks Silence On Controversial Airport Security Bypass Vulnerability
Russia's Top Secret Military Unit Reportedly Plots Undersea Cable Sabotage
The Register
About that Windows Installer 'make me admin' security hole. Here's how it's exploited new
Mind your header! There's nothing refreshing about phishers' latest tactic new
NIS2, DORA, and Tiber-EU expanding cybersecurity regulation new
If HDMI screen rips aren't good enough for you pirates, DeCENC is another way to beat web video DRM new
Pokémon GO was an intelligence tool, claims Belarus military official new
Healthcare giant to pay $65M settlement after crooks stole and leaked nude patient pics new
Cyber crooks shut down UK, US schools, thousands of kids affected new
Major sales and ops overhaul leads to much more activity ... for Meow ransomware gang new
Hunters International cyber-gang extorts Chinese mega-bank's London HQ new
So you paid a ransom demand … and now the decryptor doesn't work new
How $20 and a lapsed domain allowed security pros to undermine internet integrity
Mind the talent gap: Infosec vacancies abound, but hiring is flat
Reddit - NetSec
We Spent $20 To Achieve RCE And Accidentally Became The Admins Of .MOBI - watchTowr Labs
CloudGoat Official Walkthrough Series: ‘glue_privesc’
Hijacking SQL Server Credentials using Agent Jobs for Domain Privilege Escalation
When Certificates Fail: A Story of Bypassed MFA in Remote Access
A Security Analysis of Azure DevOps Job Execution
Bleeping Computer

Threat Wire

Exploits

Exploit-DB Shellcode
Exploit-DB Papers
Exploit-DB Remote
Packet Storm Exploits
VICIdial 2.14-917a Remote Code Execution new
VICIdial 2.14-917a SQL Injection new
Queuing Simple Chatbot 1.0 Shell Upload new
Profiling System 1.0 Shell Upload new
Passion Responsive Blogging 1.0 Cross Site Scripting new
Online Survey System 1.0 Cross Site Scripting / Remote File Inclusion new
Online Birth Certificate System 1.0 Insecure Settings new
Medical Card Generations System 1.0 Insecure Settings new
Emergency Ambulance Hiring Portal 1.0 WYSIWYG Code Injection new
Printable Staff ID Card Creator System 1.0 Insecure Direct Object Reference new
GitHub sqlpad/sqlpad Template Injection / Remote Code Execution
Spring Cloud Data Flow Remote Code Execution
Exploit-DB Webapps
[webapps] Gitea 1.22.0 - Stored XSS
[webapps] Invesalius3 - Remote Code Execution
[webapps] NoteMark < 0.13.0 - Stored XSS
[webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
[webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
[webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Device Config Disclosure
[webapps] HughesNet HT2000W Satellite Modem - Password Reset
[webapps] Aurba 501 - Authenticated RCE
[webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
[webapps] Calibre-web 0.6.21 - Stored XSS
[webapps] Helpdeskz v2.0.2 - Stored XSS
Exploit-DB Local and Privilege Escalation
[local] SolarWinds Kiwi Syslog Server 9.6.7.1 - Unquoted Service Path
[local] Genexus Protection Server 9.7.2.10 - 'protsrvservice' Unquoted Service Path
[local] Oracle Database 12c Release 1 - Unquoted Service Path
[local] Bonjour Service 'mDNSResponder.exe' - Unquoted Service Path Privilege Escalation
Exploit-DB DoS
[dos] Windows TCP/IP - RCE Checker and Denial of Service

LiveOverflow

Bug Bounties

HackerOne Hacktivity
HackerOne Blog
The Rise of Bug Bounty Programs in S-1 Filings: A New Standard in Corporate Security new
Announcing Hai Plays: Personalize Your Playbook for Spot-On Security Advice
Hack My Career: Harley Kimball’s Journey to DEFCON
Capital One Launches Public Bug Bounty Program with HackerOne
From Prospect to Partner: Jon Stone Shares HackerOne Career Story
Quantifying the Value of Bug Bounty Programs: ROI, ROM, or Both?
Crushing FUD: Embracing Ethical Hackers to Strengthen Cybersecurity
HackerOne’s Commitment to Learning and Development
Pentesting for iOS Mobile Applications
How Hai Facilitates Clear and Effective Communication
100 Hacking Tools and Resources
Retail Under Attack: 6 Learnings from a Retail Customer
Reddit - BugBounty
Yandex API exposure is fine? new
I confirmed some triagers don't even read reports new
macOS LPE bounty new
Do triagers even read the full reports ? new
Interesting/Memorable Experiences in BB
Is this a valid bug ?
What is the easiest google product to find vulnerabilities in?
CTFs DO prepare you to the real thing ( IMO )
Would bug hunters/pentesters be interested in automated recon?
MSRC- " Review / Repro to Planning " Could someone explain the meaning of this and provide an estimate of how long it will take…
Steganography: Hiding Data in Plain Sight
Bug
Pentester Land
Portswigger
Burp Suite Performance Improvements
Try it for yourself: the latest PortSwigger Research from Black Hat USA
Unlock enhanced API scanning with Burp Suite
Investing to deliver more

Vulnerabilities

Full Disclosure
CVE-2024-25286 - RedSys - A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Authorization Method of 3DSecure 2.0 new
CVE-2024-25285 - RedSys - 3DSecure 2.0 is vulnerable to form action hijacking new
CVE-2024-25284 - RedSys - Multiple reflected Cross-Site Scripting (XSS) vulnerabilities in the 3DS Authorization Method of 3DSecure 2.0 new
CVE-2024-25283 - RedSys - Multiple reflected Cross-Site Scripting (XSS) vulnerabilities exist in the 3DS Authorization Challenge of 3DSecure 2.0 new
CVE-2024-25282 - RedSys - 3DSecure 2.0 is vulnerable to Cross-Site Scripting (XSS) in its 3DSMethod Authentication new
KL-001-2024-012: VICIdial Authenticated Remote Code Execution
KL-001-2024-011: VICIdial Unauthenticated SQL Injection
OXAS-ADV-2024-0005: OX App Suite Security Advisory
[SYSS-2024-030]: C-MOR Video Surveillance - OS Command Injection (CWE-78)
[SYSS-2024-029]: C-MOR Video Surveillance - Dependency on Vulnerable Third-Party Component (CWE-1395)
[SYSS-2024-028]: C-MOR Video Surveillance - Cleartext Storage of Sensitive Information (CWE-312)
[SYSS-2024-027]: C-MOR Video Surveillance - Improper Privilege Management (CWE-269)
NIST National Vulnerability Database

Tools

Exploit Dev

Reversing/I like ASM

Reddit - Reverse Engineering
https://vimeo.com/1001425219Watch Top Secret 8/21/2024 new
How windows executables work inside new
Help with crackme solution?
Backtraces in the Mirror: Stealing the Secrets of Elves and Dwarves to Perform Mad Science!!
Still seeing people use HxD, checkout ImHex instead
Reverse Engineering SIP based door intercom/control system
Reverse Engineering a Kernel Driver challenge
“Unstripping” binaries: Restoring debugging information in GDB with Pwndbg
BinSub: The Simple Essence of Polymorphic Type Inference for Machine Code
Process injection done easy - DD Oriented Programming
Cracking an old ZIP file to help open source the ANC's "Operation Vula" secret crypto code
Frida 16.5 is out with new hardware breakpoint and watchpoint APIs, Windows ARM support, and other goodies
Reddit - Game Hacks
UNDETECTED UNLOCK ALL TOOL | PERMA UAV TOOL | AIMBOT,WALLS CHAIR | CHEAP COD POINTS + HIGH LEVEL FULL ACCESS MW3 ACCOUNTS new
UNDETECTED FC 24/25 CHEAT 99 STATS,SLIDERS ETC ALOT OF OTHER GAME CHEATS TOO. JOIN DISCORD OPEN TICKET new
Game Hacking (Beginner) Roadmap
Which folder allows you to change how much chrono crystals you have in dragon ball legends
Krunker Aimbot with Yolov8 and Roboflow Step by Step Guide - Sly Automation
Aimex Cheats COD MW3-Warzone-BO6 Cheat/Hack
First Apex ban
Sample Project That Does DLL Hijacking And Scans For And Modifies Memory
Mod Announcement
PROOFCORE BLACK OPS 6 OPEN BETA CHEAT - UNDETECTED - ESP - AIMBOT - RADAR
Best Apex provider?
VALORANT HACK
Reddit - REGames
StackExchange - ReverseEngineering
Reverse engineering a Bluetooth smart lock (Aqara N200)
In Ghidra is there a way to add an overall top comment rather than just the top of one memory block?
reverse engineering 2.4g mouse
Which Windows kernel function is responsible for creating a crash dump file?
Is There any way to deobfuscate armdot .net Obfuscator?
Inject DLLs into Xbox 360 games with Xenia
Identify SWDI on this TSSOP20 MCU
Could a decompiler give better results if provided with part of the original code?
directX mapping for IDA
Asking for Reverse Engineering Tool Ideas
What does "overlap with smaller symbols" mean?
Dynamic analysis of Android applications' interaction

Guided Hacking

Malware/APT

Crypto

Seytonic

Podcasts

ISC Daily Stormcast
ISC StormCast for Wednesday, September 11th, 2024
ISC StormCast for Tuesday, September 10th, 2024
ISC StormCast for Monday, September 9th, 2024
ISC StormCast for Friday, September 6th, 2024
ISC StormCast for Thursday, September 5th, 2024
ISC StormCast for Wednesday, September 4th, 2024
ISC StormCast for Tuesday, September 3rd, 2024
ISC StormCast for Friday, August 30th, 2024
Darknet Diaries
149: Mini-Stories: Vol 3
148: Dubsnatch
147: Tornado
Security Weekly
Hacker Heroes - Mark Loveless - PSW Vault
Building AI BOMs - Helen Oakley - PSW #841
How do we patch the right things? - Josh Bressers - PSW #840
Cybersecurity Myths - Eugene Spafford - PSW #839
Downgrades and Attacking Security Things & Things Not to Miss at BH/DC - Trent Lo - PSW #838
PK Fail - John Loucaides - PSW #837
MS Patch Tuesday: Which Vulnerabilities Really Need Prioritizing. - Douglas McKee - PSW #836
3D Printing For Hackers - David Johnson - PSW #835
RFID hacking & More Vulnerability Shenanigans - Iceman - PSW #834
Hacker Heroes - Joe Grand - PSW Vault
Do We Need Penetration Testing and Vulnerability Scanning? - Josh Bressers, Adrian Sanabria - PSW #833
Hacker Heroes - Dave Aitel - PSW Vault
Risky.Biz
Risky Business #763 – Microsoft un-patches critical bug
Snake Oilers: Authentik, Dropzone and SlashID
Risky Business #762 -- Brazil nukes X, Iranian APTs deploy ransomware
Risky Business #761 – Telegram v frogs. Fight!
Feature interview: ASIO Director General Mike Burgess on encryption and access
Risky Business #760 – Microsoft to make MFA mandatory
Wide World of Cyber: 2024 election interference, the media and Iran's hack and leak
Risky Business #759 – Why Iran's hack and leak will amount to naught
Soap Box: Making security tech more people friendly
Risky Business #758 – Crowdstrike's postmortem underwhelms
Risky Business #757 – The ClownStrike cleanup continues
Wide World of Cyber: Why we should show CrowdStrike no mercy
The CyberWire
A Patch Tuesday overload. new
A CSO's 9/11 Story: CSO Perspectives Bonus.
Solution Spotlight: Mary Haigh, Global CISO of BAE Systems, on building a cybersecurity team.
Stealth, command, exfiltrate: The three-headed cyber dragon of Crimson Palace.
A ticking clock to exploitation.
Ann Johnson: Trying to make the world safer. [Business Development] [Career Notes]
The playbook for outpacing China. [Research Saturday]
Blizzard warning: Russia’s GRU unleashes new cyber saboteurs.
U.S. rains on Russia’s fake news parade.
From secure to clone-tastic.
Brazil nixes Twitter’s successor.
AWS in Orbit: Building Opportunity with Axiom Space. [AWS in Orbit]
Cyber Security Interviews

Threat Intel

Privacy/VPNs

EFF
Stopping the Harms of Automated Decision Making | EFFector 36.12 new
Britain Must Call for Release of British-Egyptian Activist and Coder Alaa Abd El Fattah new
School Monitoring Software Sacrifices Student Privacy for Unproven Promises of Safety
You Really Do Have Some Expectation of Privacy in Public
EFF & 140 Other Organizations Call for an End to AI Use in Immigration Decisions
U.S. Federal Employees: Plant Your Flag for Digital Freedoms Today!
EFF Calls For Release of Alexey Soldatov, "Father of the Russian Internet"
Victory! California Bill To Impose Mandatory Internet ID Checks Is Dead—It Should Stay That Way
EFF to Tenth Circuit: Protest-Related Arrests Do Not Justify Dragnet Device and Digital Data Searches
The French Detention: Why We're Watching the Telegram Situation Closely
The California Supreme Court Should Help Protect Your Stored Communications
Americans Are Uncomfortable with Automated Decision-Making
Slashdot - Rights
Facebook Admits To Scraping Every Australian Adult User's Public Photos and Posts To Train AI, With No Opt-out Option new
Former Samsung Execs Arrested For Using Stolen Tech To Build Chip Factory In China
Malaysia's Plan To Block Overseas DNS Dies After a Day
Pacific Islands Submit Court Proposal For Recognition of Ecocide As a Crime
US Proposes Requiring Reporting For Advanced AI, Cloud Providers
US Prepares To Challenge Google's Online Ad Dominance
The NSA Has a Podcast
US Government Asks 3D Printing Industry to Help Stop the Printing of Machine Gun Conversion Devices
How an Engineer Exposed an International Bike Theft Ring - By Its Facebook Friends
During Georgia School Shooting, Newly-Installed Tech Spread Warnings and Called Police
'Thousands" of Telegram Channels Sell Stolen Identities, Reports WSJ
Is the Tech World Now 'Central' to Foreign Policy?
Reddit - Privacy
Just purchased a 2023 Molarola Razr are there privacy focused ROMs available? new
Your public Facebook and Instagram posts were used to train Meta’s AI models. new
All your YouTube comments can now be seen by someone else? new
How did Google Gemini know what TV show I was watching? new
Teacher forced me to sign up with my phone number new
why i am "forced" to use collage app? new
Tracking social media safety measures in New York new
What is your data used for? new
Apps can now block sideloading more easily and force downloads through Google Play new
What can someone find out by my number new
Custom mail domain - privacy trade? new
Reddit - VPN
Want to get a VPN but university will ban my account if I use one new
I have a problem connect After stopping VPN new
Twitter is banned in my country. Can anyone track me using a VPN? new
Banned VPN in Jordan
Netflix not working
How does a VPN work with the Device?
VPN timing
Key Symbol disappeared and replaced with Location
WG Server and WG Client on same public IP?
Help - trying to set up openvpn to router! Private WAN IP? Port forwarding?
PrivacyTools.io

Help Wanted

Reddit - AskNetSec
CoWorker has illegal wifi setup new
Do 3D printers contain surveillance software?
Seeking Guidance on SecOps Certified AppSec Practitioner (SCAP) - Advice for Preparation
Phishing email
Explaining common uses of encryption to students
Using App Script with Google Advanced Protection Program?
Reddit - Netsec Students
Exalumnos del máster de CiberSeguridad de Evolve Academy new
Temporary Mail Recovery
Practice Test Resource for CCNA 200-301 Certification Exam
Need Help with Game Idea
Cyber Security Project Idea
Stackoverflow - Security
Nmap Scan Results shows IP Blocked [closed] new
Search for Algorithm to verify authentication by adding a value to a random number
How to properly use `eraseCredentials` in my User entity for default authentication in symfony app?
XXE in java library - how far do you need to go [closed]
Is encrypting the access token before sending it to the frontend and decrypting it on the backend a secure approach?
Make an application that consumes an API and prevent the user from consuming the same API without using the aplication
Snyk vulnerability for sending unsanitized HTML from Nodejs server
Is Use After Free vulnerability in your project? [closed]
How to set jass conf string in ci/cd pipeline so that it's probably formated
Container Secret Security... Looking for guidance or secure methodologies [closed]
What security measures should I implement for a public FastAPI server? [closed]
Choosing Between Frontend Development and Cybersecurity Engineer as a Career Path [closed]
Stack Exchange
Is there a security reason why few CAs offer IP-based SSL/TLS certificates? new
Auto-unlock private key: which implications? new
Is it always possible to copy digital information from a physical medium? new
Hire the best crypto/bitcoin/Ethereum recovery expert new
Is it wise to use sudo in .bash_aliases? new
Can I sufficiently protect my REST Service using shared Tokens?
Is the Windows PIN sign-in option good protection in case of device theft? [duplicate]
What Are the Security Risks of Sharing Software License Keys Across Multiple Devices or Users? [closed]
Did you know? Vulnerability allows execution of TROJAN after unpacking files" and "Attack on CMS allows data leakage through vulnerabilities
Why are some Cloudflare challenges CPU intensive?
Balancing security with usability when using nonce for CSRF protection [duplicate]
How resiliant is a private key passphase to brute force attacks?

Locks/Social Engineering

Reddit - Lockpicking
Total beginner, stuck with starter kit new
Good deal? new
First Orange Belt - ABUS 55/40. Anyone else feel like it’s easier to pick then the yellow belt masterlock Magnum? new
The Rook new
Sparrow kits new
Does anyone know what measurements do these blueprints use? new
Peterson Manufacturing is Harassing Me new
Show off your rank - The Belt Chip / Coming Soon - 44delta.com new
Update after yesterday’s pick break. Finally did it! new
Opinions on the Reaper set? new
The Reaper just dropped!!! new
Reddit - Social Engineering
Reasons why someone puts words into somebody's mouth new
What do people think of Dale Carnegie here?
Give your best pitch for blood donation drive
Social climbing
Debunking Chase Hughes
HackFest SECTF offering $2500 first prize
Prevent scams through scam emails
How to see through people's defenses
How does one get through to people?
Alethe is Back with Great Social Engineering Stories!
What I can tell When someone is shaking his legs in front of me during a conversation.
What do people here think of the book "Way Of The Wolf" by Jordan Belfort?

Hak5

Security Blogs

Krebs on Security
Bug Left Some Windows PCs Dangerously Unpatched
When Get-Out-The-Vote Efforts Look Like Phishing
New 0-Day Attacks Linked to China’s ‘Volt Typhoon’
Local Networks Go Global When Domain Names Collide
National Public Data Published Its Own Passwords
NationalPublicData.com Hack Exposes a Nation’s Data
Six 0-Days Lead Microsoft’s August 2024 Patch Push
Cybercrime Rapper Sues Bank over Fraud Investigation
Low-Drama ‘Dark Angels’ Reap Record Ransoms
U.S. Trades Cybercriminals to Russia in Prisoner Swap
Don’t Let Your Domain Name Become a “Sitting Duck”
Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services
Elttam
Abusing Amazon VPC CNI plugin for Kubernetes
PwnAssistant - Controlling /home’s via a Home Assistant RCE
Naked Security
September Patch Tuesday addresses 79 CVEs new
Sophos Firewall v21: Third-party threat feeds
Crimson Palace returns: New Tools, Tactics, and Targets
Atomic macOS Stealer leads sensitive data theft on macOS
The SEC’s 2023 final rules on cybersecurity disclosures
Sophos Firewall v21 early access is now available
Attack tool update impairs Windows computers
Qilin ransomware caught stealing credentials stored in Google Chrome
Sophos UK Volunteers Transform Outdoor Learning Space for Autistic Youth
Free ZTNA licenses for Sophos Firewall customers
Sophos NDR 1.7 is now available
Content updates and product architecture: Sophos Endpoint
Schneier on Security
Evaluating the Effectiveness of Reward Modeling of Generative AI Systems
New Chrome Zero-Day
Australia Threatens to Force Companies to Break Encryption
Live Video of Promachoteuthis Squid
YubiKey Side-Channel Attack
Long Analysis of the M-209
Security Researcher Sued for Disproving Government Statements
List of Old NSA Training Videos
SQL Injection Attack on Airport Security
Friday Squid Blogging: Economic Fallout from Falklands Halting Squid Fishing
Adm. Grace Hopper’s 1982 NSA Lecture Has Been Published
Matthew Green on Telegram’s Encryption
Linux Security
CISA Sounds Alarm on Newly Exploited Vulnerabilities: Is Your System at Risk? new
Linux in the Cloud: Exploring Linux-based Cloud Computing Solutions
Defending Against Remote Code Execution in Google Chrome: A Critical Update
Unmasking Cicada3301: Examining the Threat of the New Rust-Based Ransomware
5 Open-Source Blockchain Technologies That Linux Users Need to Know About
8 Expert-Recommended Security Practices to Fortify Your Linux Systems
The Future-Proof Server: Antivirus and Beyond for Linux Admins
Open Source Strategies for Enhancing Security in Digital Business Operations
The Three Best Tools You Need to Scan Your Linux System for Malware
Microsoft Update Mayhem: Rescuing Linux Dual-Boot Systems from Secure Boot Woes
Navigating the Linux Kernel's Latest DMA Security Vulnerability
Why Every Business Needs Professional Cybersecurity Services
Dark Reading
Hackers Proxyjack &amp; Cryptomine Selenium Grid Servers new
SOAR Is Dead, Long Live SOAR new
Poppy Gustafsson to Step Down As CEO of Darktrace; Jill Popelka Appointed Successor new
Remote Access Sprawl Strains Industrial OT Network Security new
How Law Enforcement's Ransomware Strategies Are Evolving new
'Ancient' MSFT Word Bug Anchors Taiwanese Drone-Maker Attacks
India Needs Better Cybersecurity for Space, Critical Infrastructure
Wiz Launches Wiz Code Application Security Tool
Microsoft Discloses 4 Zero-Days in September Update
How a Centuries-Old Company Reached Security Maturity
Mustang Panda Feeds Worm-Driven USB Attack Strategy
Platform Engineering Is Security Engineering
Securelist
Loki: a new private agent for the popular Mythic framework
Whitehat Security Blog
HITB News
AI-Powered Super Soldiers Are More Than Just a Pipe Dream
China's APT40 gang is ready to attack vulns within hours or days of public release
Massive car dealer ransom attack is mostly over after 2 weeks of work-arounds
The president ordered a board to probe a massive Russian cyberattack. It never did.
Two of the German military’s new spy satellites appear to have failed in orbit
“RegreSSHion” vulnerability in OpenSSH gives attackers root on Linux
Cisco Talos warns of wider security implications following Snowflake breach
Indonesian Airports, Data Centres Hit By Worst Cyberattack in Years
YouTube tries convincing record labels to license music for AI song generator
Researchers upend AI status quo by eliminating matrix multiplication in LLMs
I Wore Meta Ray-Bans in Montreal to Test Their AI Translation Skills. It Did Not Go Well
Critical MOVEit vulnerability puts huge swaths of the Internet at severe risk
The RISKS Digest
Kaspersky Blog
Transatlantic Cable podcast episode 359 | Kaspersky official blog
Kaspersky’s Safe Travel Guide | Kaspersky official blog
Phishing-as-a-Service through Telegram bot
How to protect yourself from surveillance that uses AirTag beacons or similar devices (on either Android or iOS) | Kaspersky official blog
New LianSpy spyware targets Android smartphones | Kaspersky official blog
Transatlantic Cable podcast episode 358 | Kaspersky official blog
How to guard against fake Wi-Fi hotspots on planes and at airports | Kaspersky official blog
Fake leaks of passwords and seed phrases are scammers' new weapons | Kaspersky official blog
Comparing From and Reply-To headers | Kaspersky official blog
A safe process for updating cybersecurity products | Kaspersky official blog
Transatlantic Cable podcast episode 357 | Kaspersky official blog
A shield of trust: managing cybersecurity risks through an evidence-based approach | Kaspersky official blog
Adam Shostack & friends
Graham Cluley
Smashing Security podcast #384: A room with a view, AI music shenanigans, and a cocaine bear new
Hacker pleads guilty after arriving on plane from Ukraine with a laptop crammed full of stolen credit card details
The AI Fix #15: AI robot butlers and gigawatt banana highways
Cicada ransomware – what you need to know
Smashing Security podcast #383: The Godfather club, and AirTags to the rescue
The AI Fix #14: There are two Rs in “strawberry”, and an AI makes unsmellable smells
IT worker charged over $750,000 cyber extortion plot against former employer
$2.5 million reward offered for hacker linked to notorious Angler Exploit Kit
‘Big-game hunting’ – Ransomware gangs are focusing on more lucrative attacks
Crypto scammers who hacked McDonald’s Instagram account say they stole $700,000
University criticised for using Ebola outbreak lure in phishing test
The AI Fix #13: ChatGPT runs for mayor, and should we stop killer robots?
Security Bloggers Network
BYOD Policies Fueling Security Risks new
Ubuntu 24.04.1 LTS Released: This is What’s New new
US Elections: Iranian Hackers Target Political Campaigns new
News alert: Criminal IP partners with IPLocation.io to deliver new tech to mitigate IP address evasion new
News alert: Opus Security’s new ‘Advanced Multi-Layered Prioritization Engine’ elevates VM new
Criminal IP Teams Up with IPLocation.io to Deliver Unmatched IP Solutions to Global Audiences new
NSFOCUS Recognized in Eight Security Innovations in the Gartner® Hype Cycle™ for Security in China, 2024 Report new
Imperva Protects Against Critical Apache OFBiz Vulnerability (CVE-2024-45195) new
5 Stages of Shadow IT Grief | Grip new
800% Growth: LLM Attacker Summaries a Hit with Customers new
Vulnerability handling requirements for NIS2 compliance new
FFIEC Will Sunset the Cybersecurity Assessment Tool: Everything You Need to be Prepared new
Rapid7
Patch Tuesday - September 2024
Rapid7 Named a Leader in IDC MarketScape: Worldwide SIEM for SMB
CVE-2024-40766: Critical Improper Access Control Vulnerability Affecting SonicWall Devices
Multiple Vulnerabilities in Veeam Backup & Replication
Our 4 Essential Strategy Takeaways from the Gartner® 2024 Report – How to Prepare for Ransomware Attacks
Metasploit Weekly Wrap-Up 09/06/2024
CVE-2024-45195: Apache OFBiz Unauthenticated Remote Code Execution (Fixed)
Metasploit Weekly Wrap-Up 08/30/2024
Command with Confidence: Insights from Andrew Bustamante
Assessing Container Images Across Private Registries with InsightCloudSec
Metasploit Weekly Wrap-Up 08/23/2024
Key Takeaways From The Take Command Summit: Navigating New SEC Cybersecurity Disclosure Rules
ThreatPost
Hacker News (YCombinator) - Security
Microsoft hosts a security summit but no press, public allowed new
House passes $1.6B to deliver anti-China propaganda overseas new
Movie industry touts takedown of " largest" pirate streaming ring new
Boar's Head plant posed an 'imminent threat' years before listeria outbreak new
The CIA-in-Chile Scandal at 50 new
Why some of us like "interdiff" code review systems (not GitHub)
Some of us like "interdiff" code review
Another police raid in Germany
Pixhell Attack: Leaking Info from Air-Gap Computers via 'Singing Pixels'
Show HN: Visahacks.in – you don't always need a visa
FTC Pushed to Crack Down on Companies That Ruin Hardware via Software Updates
Hacking misconfigured AWS S3 buckets: A complete guide
digitalmunition
Hacker Noon #Security
Top 10 AD Copies That Programmers Loved on HackerNoon new
Starting to Care About Security: The Path Ahead new
Opus Security Elevates Vulnerability Management With Its AI-Powered Multi-Layered Engine new
The TechBeat: Finance from First Principles (9/11/2024)
Small Business, Big Threats: INE Security To Train SMBs, Close a Critical Skills Gap
How Remote Access Trojans Bypass Traditional Security Measures
Seventh Sense Unveils Privacy-Preserving Face-Based Public Key Infrastructure And eID Solution
Here's the Truth: Nobody Cares About Security
Bottling Trust: How Manufacturers Can Use QR Codes to Stamp Out Fake Drinks
PIN AI Secures $10M From a16z CSX, Hack VC And All-Star Angels
The Automated Spam War: Why Hosting Providers Only Fight Back After the Damage Is Done?
Goodbye: A Major Victory In The Fight Against Copyright
Wired - Security
Apple Vision Pro’s Eye Tracking Exposed What People Type new
Apple Intelligence Promises Better AI Privacy. Here’s How It Actually Works new
What You Need to Know About Grok AI and Your Privacy
Hackers Threaten to Leak Planned Parenthood Data
The NSA Has a Podcast—Here's How to Decode It
Therapy Sessions Exposed by Mental Health Care Firm’s Unsecured Database
YubiKeys Are a Security Gold Standard—but They Can Be Cloned
Russia’s Most Notorious Special Forces Unit Now Has Its Own Cyber Warfare Team
Why It's So Hard to Fully Block X in Brazil
We Hunted Hidden Police Signals at the DNC
The Japanese Robot Controversy Lurking in Israel’s Military Supply Chain
The US Navy Is Going All In on Starlink
Control C

Security in Mainstream Media

Google News Hacking
BT identifying 2,000 signals a second indicating possible cyber-attacks - The Guardian new
Hackers Proxyjack & Cryptomine Selenium Grid Servers - Dark Reading new
Iranian Hackers Targeting Iraqi Government: Security Firm - SecurityWeek new
Failed Solana Token Scheme? Hacker Targets 2.6 Million Indian Cricket Fans With X Scam - NewsBTC new
Man attempts suicide after hacking woman in Palakkad | Onmanorama News | Kerala News - Onmanorama new
On hacking Planned Parenthood - The Catholic Thing new
Crypto Exchange Indodax Reportedly Hacked, Bappebti Advises Investors to Stay Calm - Jakartaglobe.id new
Hacking An NVIDIA CMP 170HX Crypto GPU For EM Sim Work - Hackaday new
Halliburton Hack Highlights Ongoing Security Threats to Energy Firms - Manufacturing.net new
Shannon Sharpe Allegedly 'Hacked' After NSFW Instagram Live - ClutchPoints new
Crypto Hack: Indonesia's Indodax Goes Offline After Suspected $22M Breach | Bitcoinist.com - Bitcoinist new
Security Breach: Inside the Growing Complexity of Ransomware Hacking Groups - Manufacturing.net new
Google Cyber Security
Mastercard paying $2.65 billion for cyber security company that uses AI - MarketWatch new
INE Security Aligns with White House Plan to Close Cyber Skills Gap - GlobeNewswire new
The CISO’s Roadmap to Purposeful Vulnerability Management - InformationWeek new
Realm.Security Emerges from Stealth, Raises $5M to Manage Explosion of Cyber Security Data - GlobeNewswire new
FBI Warns Crypto Companies of Sophisticated Social Engineering Attacks by North Korean Hackers - CPO Magazine new
Liquid Intelligent Technologies expands cyber security offering to provide holistic data and asset protection for East African businesses - African Business new
Iranian Cyber Group OilRig Targets Iraqi Government in Sophisticated Malware Attack - The Hacker News new
US proposes new AI development and computing clusters, cybersecurity reporting rules - IndustrialCyber new
Cybersecurity Talent Shortage Prompts White House Action - InformationWeek new
iCloud And iPhone Photos Get Surprise New Security Protection From Today - Forbes new
BT spots 2,000 potential attacks on its network a second - Yahoo Finance new
BT ‘logs 2,000 signals of potential cyber attacks every second’ - Alloa Advertiser new

Thirsty for more