Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

PacketStorm
The Register
CISA says SaaS providers in firing line after Commvault zero-day Azure attack
Ivanti makes dedicated fans of Chinese spies who just can't resist attacking its buggy kit
US Navy sailor charged in horrific child sextortion case
How lean security teams can build resilient defenses
Feds finger Russian 'behind Qakbot malware' that hit 700K computers
Irish privacy watchdog OKs Meta to train AI on EU folks' posts
Russia expected to pass experimental law that tracks foreigners in Moscow via smartphones
Signal shuts the blinds on Microsoft Recall with the power of DRM
US teen to plead guilty to extortion attack against PowerSchool
Judge allows Delta's lawsuit against CrowdStrike to proceed with millions in damages on the line
Google carves out cloudy safe spaces for nations nervous about America's reach
Trump announces $175B for Golden Dome defense shield over America
Reddit - NetSec
BadUSB Attack Explained: From Principles to Practice and Defense new
Live Forensic Collection from Ivanti EPMM Appliances (CVE-2025-4427 & CVE-2025-4428)
Automating MS-RPC vulnerability research
CVE-2024-45332 brings back branch target injection attacks on Intel
CVE-2025-26147: Authenticated RCE In Denodo Scheduler
BadSuccessor: Abusing dMSA to Escalate Privileges in Active Directory
EvilWorker: a new AiTM attack framework leveraging service workers — much more effective, autonomous, and adaptable than Evilginx2? 🎣
Humans are Insecure Password Generators
New Vulnerabilities in Foscam X5
Introducing EntraFalcon – A Tool to Enumerate Entra ID Objects and Assignments
O2 VoLTE: locating any customer with a phone call
Stateful Connection With Spoofed Source IP — NetImpostor
Bleeping Computer
Vibe coding company says Claude 4 reduced syntax errors by 25% new
Leak suggests xAI is getting ready to ship Grok 3.5 new
Glitch to end app hosting and user profiles on July 8 new
Fake Zenmap. WinMRT sites target IT staff with Bumblebee malware
OpenAI confirms Operator Agent is now more accurate with o3
Dozens of malicious packages on NPM collect host and network data
Hacker steals $223 million in Cetus Protocol cryptocurrency heist
FBI warns of Luna Moth extortion attacks targeting law firms
TikTok videos now push infostealer malware in ClickFix attacks
The Hacker News
Hackers Use TikTok Videos to Distribute Vidar and StealC Malware via ClickFix Technique
ViciousTrap Uses Cisco Flaw to Build Global Honeypot from 5,300 Compromised Devices
300 Servers and €3.5M Seized as Europol Strikes Ransomware Networks Worldwide
SafeLine WAF: Open Source Web Application Firewall with Zero-Day Detection and Bot Protection
CISA Warns of Suspected Broader SaaS Attacks Exploiting App Secrets and Cloud Misconfigs
GitLab Duo Vulnerability Enabled Attackers to Hijack AI Responses with Hidden Prompts
Chinese Hackers Exploit Ivanti EPMM Bugs in Global Enterprise Network Attacks
Webinar: Learn How to Build a Reasonable and Legally Defensible Cybersecurity Program
Identity Security Has an Automation Problem—And It's Bigger Than You Think
Critical Versa Concerto Flaws Let Attackers Escape Docker and Compromise Hosts
Russian Hackers Exploit Email and VPN Vulnerabilities to Spy on Ukraine Aid Logistics
Fake Kling AI Facebook Ads Deliver RAT Malware to Over 22 Million Potential Victims

Threat Wire

Bug Bounties

Vulnerabilities

Full Disclosure
Unauthenticated Blind SQL Injection | RSI queue management system - V 3.0 | CVE-2025-26086
CVE-2025-30072 Tiiwee X1 Alarm System - Authentication Bypass by Capture-replay
SEC Consult SA-20250506-0 :: Honeywell MB Secure Authenticated Command Injection
SEC Consult SA-20250429-0 :: Multiple Vulnerabilities in HP Wolf Security Controller and more
SEC Consult SA-20250422-0:: Local Privilege Escalation via DLL Search Order Hijacking
Session Invalidation in Economizzer Allows Unauthorized Access After Logout
Persistent Cross-Site Scripting in Economizzer Category Entry
Persistent Cross-Site Scripting in Economizzer Cashbook Entry
APPLE-SA-05-12-2025-9 Safari 18.5
APPLE-SA-05-12-2025-8 visionOS 2.5
APPLE-SA-05-12-2025-7 tvOS 18.5
APPLE-SA-05-12-2025-6 watchOS 11.5
NIST National Vulnerability Database
Sixth PQC Standardization Conference new
0day Today
CXSecurity
TechKnock Digital Services - Xpath Injection Vulnerability
Casdoor 1.901.0 Cross-Site Request Forgery (CSRF)
SIAKAD STEKOM - Stored XSS Vulnerability(Login Page)
Techknock Digital Services - Sql Injection
Microsoft SQL Server Privilege Escalation from Control Server To Sysadmin role
Remote Keyboard Desktop 1.0.1 Remote Code Execution (RCE)
Drupal 11.x-dev Full Path Disclosure
Magnolia DX Core 6.3.8 - Command Injection
Tiiwee X1 Alarm System Replay Attack
Kingdia CD Extractor 3.7.12 - Buffer Overflow SEH
CrushFTP 11.3.1 Authentication Bypass
Oracle database password hash exposure in sharding component

LiveOverflow

Exploit Dev

Reversing/I like ASM

Reddit - Reverse Engineering
Rooting Bosch lcn2kai Headunit new
DecompAI – an LLM-powered reverse engineering agent that can chat, decompile, and launch tools like Ghidra or GDB
RE//verse 2025 Videos
Calling All Crackme Creators: Booby Trap Bytes CONTEST is LIVE!
Announcing Fibratus 2.4.0 | Adversary tradecraft detection, protection, and hunting
What a Binance CAPTCHA solver tells us about today’s bot threats
Stealthy Thread Manipulation Library for Windows x64 — with a DLL injection example
Frida 17 is out
Oracle VM VirtualBox - VM escape via VGA device
Mario Kart 64 Has Been Decompiled
Multiple Security Issues in Screen
Mario Party 4 is the First GameCube Decompilation
Reddit - Game Hacks
Bot Clash of clans new
Rust cheat/hack ancient on getcheats.io. Best rust cheat is here. new
AIMEX CHEATS COD BLACK OPS 6 / WARZONE CHEAT | Aimbot | ESP | Radar | Zombie | Undetected + Streamproof | EASY PAYMENT &…
Arrow 🔥Panel BO6 – Unlimited Keys🔥
Rtlcopymemory Ud for fortnite?
Looking for hacks for Yu-Gi-Oh! Master Duel
🔥Panel Access – Unlimited Keys for Warzone / Black Ops 6 / MW3 Cheats 🔥
Looking for lps game hack!
Ghosts of Tabor hack
🔥 EA FC 25 ELITE DIVISION CHEAT - INSTANT RANK UP! (Only at zhexcheats.com)
A game wouldn't start in Hyper V vm, any solution?
Looking for a hwid spoofer
Reddit - REGames
StackExchange - ReverseEngineering
Modifying solar powered LED light string, help identifying IC?
How to load previous decompiled dlls on IDA Pro while live debugging?
How to un-pack kkrunchy packed executable files?

Guided Hacking

Malware/APT

Crypto

Seytonic

Podcasts

Security Weekly
AI Is Oversharing and Leaking Data - Sounil Yu - PSW #865
Risky.Biz
Risky Business #792 -- Beware, Coinbase users. Crypto thieves are taking fingers now
Risky Biz Soap Box: Push Security's browser-first twist on identity security
Risky Business #791 -- Woof! Copilot for Sharepoint coughs up creds and keys
Wide World of Cyber: How state adversaries attack security vendors
Risky Business #790 -- Bye bye Signal-gate, hello TeleMessage-gate
BONUS INTERVIEW: Senator Mark Warner on Signalgate, Volt Typhoon and tariffs
Risky Business #789 -- Apple's AirPlay vulns are surprisingly awful
Snake Oilers: LimaCharlie, Honeywell Cyber Insights, CobaltStrike and Outflank
Snake Oilers: Pangea, Cosive and Sysdig
Risky Business #788 -- Trump targets Chris Krebs, SentinelOne
Wide World of Cyber: How the Trump admin is changing the cybersecurity landscape
Risky Business #787 -- Trump fires NSA director, CISA cuts inbound
The CyberWire
Pattie Dillon: Take the leap. [Anti-fraud] [Career Notes] new
Purple teaming in the modern enterprise. [CyberWire-X] new
Pandas with a purpose. [Research Saturday]
When malware masters meet their match.
Lights out for Lumma.
Bear in the network.
The Take It Down Act walks a fine line.
Redacted realities: Inside the MoJ hack.
Dave Bittner: From puppet shows to podcasts. [Media] [Career Notes]
Leveling up their credential phishing tactics. [Research Saturday]
Preparing for the cyber battlespace.
Bypassing Bitlocker encryption.
ISC Daily Stormcast
SANS Stormcast Friday, May 23rd 2025: Backup Connectivity; Windows 2025 dMSA Abuse; Samlify Vulnerability
SANS Stormcast Thursday, May 22nd 2025: Crypto Confidence Scams; Extension Mayhem for VS Code and Chrome
SANS Stormcast Wednesday, May 21st 2025: Researchers Scanning the Internet; Forgotten DNS Records; openpgp.js Vulneraiblity
SANS Stormcast Tuesday, May 20th 2025: AutoIT Code RAT; Fake Keepass Download; Procolored Printer Software Compromise
SANS Stormcast Monday, May 18th 2025: xorsearch python functions; pwn2own Berlin; senior govt official impersonation; dynamic domain risk
SANS Stormcast Friday, May 16th: Increase in Sonicwall Scans; RVTools Compromised?; RountPress
SANS Stormcast Thursday, May 15th: Google Open Redirects; Adobe, Ivanti, and Samsung patches
SANS Stormcast Wednesday, May 14th: Microsoft Patch Tuesday; 0-Days patched for Ivanti Endpoint Manager and Fortinet Products
SANS Stormcast Tuesday, May 12th: Apple Patches; Unipi Technologies Scans;
SANS Stormcast Monday, May 11th: Steganography Challenge; End-of-Life Routers; ASUS Driverhub; RV-Tools SEO Poisoning
Darknet Diaries
158: MalwareTech
157: Grifter
156: Kill List
155: Kingpin
154: Hijacked Line
153: Bike Index
152: Stacc Attack
151: Chris Rock
150: mobman 2
149: Mini-Stories: Vol 3
148: Dubsnatch
147: Tornado

Threat Intel

Privacy/VPNs

Slashdot - Rights
Does the World Need Publicly-Owned Social Networks? new
The USSR Once Tried Reversing a River's Direction with 'Peaceful Nuclear Explosions' new
Ask Slashdot: Do We Need Opt-Out-By-Default Privacy Laws?
Trump Launches Reform of Nuclear Industry, Slashes Regulation
DanaBot Malware Devs Infected Their Own PCs
Destructive Malware Available In NPM Repo Went Unnoticed For 2 Years
Russia To Enforce Location Tracking App On All Foreigners in Moscow
Signal Deploys DRM To Block Microsoft Recall's Invasive Screenshot Collection
Denver Detectives Crack Deadly Arson Case Using Teens' Google Search Histories
SEC Sues Crypto Startup Unicoin and Its Executives For Fraud
Quebec To Impose French-Language Quotas On Streaming Giants
Most AI Chatbots Easily Tricked Into Giving Dangerous Responses, Study Finds
Reddit - Privacy
Need a private text extraction tool OR a private image translator new
Is it bad practice to buy second-hand devices? new
Apple, ADP and non-Apple apps new
Anyone look into privacy issues with Opal, the focus app for phones? new
Anyone who uses passkeys on Robinhood? new
Google maps notification while using CarPlay new
UK folks what second phone line app would you recommend or is there another method that free or cheap. Google Voice isn't available. Doesn't matter… new
I'm in USA and Would like a UK Phone Number a la Burner Phone to Link to Accounts
how to protect your privacy on PC?
Well, I finally Googled myself, and…
Least worst AI LLM for privacy
Is there any way to do a genetic test in the USA safely?
Reddit - VPN
Use my home network as a VPN source to download while away?
Betriebslaptop mit VPN auf Router für Arbeit im Ausland
In what modern public WiFi situations does a VPN actually protect you when everything is HTTPS?
Exceptions in Wireguard client config
Finally I get relatively cheap and fast VPN working on my Linux
EFF
Please Drone Responsibly: C-UAS Legislation Needs Civil Liberties Safeguards
Security Theater REALized and Flying without REAL ID
Standing Up for LGBTQ+ Digital Safety this International Day Against Homophobia
The U.S. Copyright Office’s Draft Report on AI Training Errs on Fair Use
The Kids Online Safety Act Will Make the Internet Worse for Everyone
EFF to California Lawmakers: There’s a Better Way to Help Young People Online
Stopping States From Passing AI Laws for the Next Decade Is a Terrible Idea
How Signal, WhatsApp, Apple, and Google Handle Encrypted Chat Backups
The FCC Must Reject Efforts to Lock Up Public Airwaves
No Postal Service Data Sharing to Deport Immigrants
Washington’s Right to Repair Bill Heads to the Governor
Congress Passes TAKE IT DOWN Act Despite Major Flaws
Reddit - PrivacyGuides
Recall Is Back, But You Still Shouldn't Use It
Sam Altman Wants Your Eyeball
When Code Became a Weapon - Crypto Wars Explained
A Flaw With the Security Level Slider in Tor Browser
Age Verification Wants Your Face, and Your Privacy
Best Private Free & Paid VPN Providers

Help Wanted

Reddit - AskNetSec
Does this violate least privilege? GA access for non-employee ‘advisor’ in NIH-funded Azure env new
Storing passwords in encrypted plaintext new
Security Awareness Training – Any Vendors You’d Actually Recommend?
What's going on with my email?
Should I go for Security+ ?
Security Automation
DefectDojo: question about vulnerabilities' "Severity" field
govt tracking internet usage
Is there demand in Europe for a tool that scans Kubernetes clusters for security and inefficiency?
CompTIA Trifecta or Cysa+
AI integration security governance
Public or archived sources are also welcome.
Reddit - Netsec Students
Curious: How Do You Approach Securing Network Layers in Blockchain-Based Projects?
Beginner from India who has just started learning CyberSec, want same kind of people not pros but beginners
Anyone else noticed this new macOS malware campaign using fake Realtek updates?
Join the hunt — XRock, a CTF/ARG game, is live!
How Hackers Break Into Windows via SMB - Course
🎓 Walkthrough HTB Shoppy en Español – MongoDB & PrivEsc explicado
Looking for a Networking Internship in London – Any Leads or Feedback on My Resume?
Free Practical Memory-Exploitation Course (Stack Overflows, ROP, Heaps) [Mod Approved]
Anyone did the John Deere cyber tractor challenge?
Has anyone heard of or used Dilton E-University?
CloudQix is running a security hackathon—come try to break our no-code platform.
Which Path to Choose?
Stackoverflow - Security
How to Integrate Burp Suite Enterprise Edition with Azure DevOps CI/CD Pipeline for Automated Security Testing in QA? [closed] new
Best approach to attracting "out of the box" contributor bloggers
Using AWS secret Manager to store kubernetes secret and then mount kuberentes secret in deployment.yaml [closed]
Results of security calls A-ok when chart loads but in bar replay, they are all over the place
Weird entry in ~/.zsh_history [closed]
Is there a vulnerability here in php func , how can it be exploited? [duplicate]
mimikatz: Prevent clear text passwords within "ssp" and "credman"
Cross-Site Request Forgery Vulnerability for DWR request calls
JPM Security Services Pvt
Ensure the security of PostgreSQL database with Docker on VPS Server [closed]
Integration of Wazuh, Logstash, and MISP in a Preventive Security Analysis Module (Docker-based)
Best encryption option available within .NET Core for better encryption and would also need to decrypt later [closed]
Stack Exchange
i am trying to sign to github but the 2FA sms i received looks suspicious [closed] new
Is this a safe Google Chrome extension? [closed]
Is Content-Security-Policy advised when allowing external scripts through a plugin?
Models that embed SynthID Text watermarks [closed]
Why don't people publish their PGP public key in a GitHub repo?
Long-validity SSL certificates -- for non-browser X.509 client certificate authentication

Locks/Social Engineering

Reddit - Lockpicking
Lishi new
Anyone got a photo of this set full? new
$10 CAD, hell yeah! Plus a bunch of lockout hasps, maybe I'll use them to organize locks new
How to know what core comes in this lock? new
FB Marketplace find new
Covert instruments shipping price went up? new
Birthday vise new
Just got a bunch of cutaways from @_thelocksmith on instagram. Here's the MTL400. Man he does awesome work 😎👌🏼 new
Stripping and fixing a double side lever lock. new
My first Black Belt lock!!! new
Master Lock M1 EDULF gifted and opened new
Going for 🍊 belt.
Reddit - Social Engineering
(complete idiot and noob at debate here): Is there any resource for defending a merited position despite its flaws
Four Narcissistic Conversational Tactics to Confuse & Control - How to Spot Them and How to Defuse Them
Making mass manipulation easier
Question about social engineering
Want to talk to Robert Greene's works? (update on our experiment from 6 months back)
What are the most effective person-modeling systems used by intelligence and psy-op units for manipulation, influence, and behavioral prediction?
Trump Fitting the Mormon Model
Fake users data
How to reframe situations in a way that highlights common goals or values?
Attempted phone hack????
Are you an independent thinker, or an order taker?

Hak5

Security Blogs

Dark Reading
[Virtual Event] Strategic Security for the Modern Enterprise new
3 Critical Pillars of Cyber-Resilience
Picus Launches Exposure Validation to Safely Deprioritize CVEs
Following Data Breach, Multiple Stalkerware Apps Go Offline
Russian Threat Actor TAG-110 Goes Phishing in Tajikistan
3am Ransomware Adopts Email Bombing, Vishing Combo Attack
UK Retail Cyberattacks May Drive Up US Insurance Premiums
CISA: Russia's Fancy Bear Targeting Logistics, IT Firms
Blurring Lines Between Scattered Spider & Russian Cybercrime
Security Threats of Open Source AI Exposed by DeepSeek
Keeping LLMs on the Rails Poses Design, Engineering Challenges
GitLab's AI Assistant Opened Devs to Code Theft
Securelist by Kaspersky
Dero miner zombies biting through Docker APIs to build a cryptojacking horde
Threat landscape for industrial automation systems in Q1 2025
Using a Mythic agent to optimize penetration testing
State of ransomware in 2025
Outlaw cybergang attacking targets worldwide
Triada strikes back
Operation SyncHole: Lazarus APT goes back to the well
Russian organizations targeted by backdoor masquerading as secure networking software updates
Lumma Stealer – Tracking distribution channels
Phishing attacks leveraging HTML code inside SVG files
IronHusky updates the forgotten MysterySnail RAT to target Russia and Mongolia
Streamlining detection engineering in security operation centers
HITB News
The RISKS Digest
Kaspersky Blog
Adam Shostack & friends
Appsec Roundup - May 2025
Free Threat Modeling Training for Displaced Federal Workers
Blackhat Earlybird Prices End Friday
Cyber Hard Problems Report
Andor: Think like a leader
Andor Threats: Information Disclosure
The Empire’s Threat Modeling
Appsec Roundup - April 2025
Threat Informed Defense Series
CVE Futures
Andor, Season 2
Free Threats
Graham Cluley
3AM ransomware attack poses as a call from IT support to compromise networks
DOJ charges 12 more in $263 million crypto fraud takedown where money was hidden in squishmallow stuffed animals
Smashing Security podcast #418: Grid failures, Instagram scams, and Legal Aid leaks
SEC Twitter hack: Man imprisoned for role in attack that caused Bitcoin’s price to soar.
The AI Fix nominated for top podcast award. Vote now!
Smashing Security podcast #417: Hello, Pervert! – Sextortion scams and Discord disasters
The AI Fix #50: AI brings dead man back for killer’s trial, and the judge loves it
LockBit ransomware gang breached, secrets exposed
Hackers hit deportation airline GlobalX, leak flight manifests, and leave an unsubtle message for “Donnie” Trump
NCSC warns of IT helpdesk impersonation trick being used by ransomware gangs after UK retailers attacked
TeleMessage, the Signal clone used by US government officials, suffers hack
The AI Fix #49: The typo from hell
Rapid7
Threats don’t wait, neither should you: Mastering Emergent Threat Response Validation
Metasploit Wrap-Up
What the Take Command 2025 Survey Tells Us About the State of Security
NSIS Abuse and sRDI Shellcode: Anatomy of the Winos 4.0 Campaign
Key Takeaways from the Take Command Summit 2025: Inside the Mind of an Attacker
Metasploit Wrap-Up 05/16/2025
Ivanti Endpoint Manager Mobile exploit chain exploited in the wild
CVE-2025-32756 Exploited in the Wild, Affecting Multiple Fortinet Products
Patch Tuesday - May 2025
Vendor-Agnostic Security: The Key To Smarter Risk Management
Recognizing Excellence: Rapid7’s Kelly Hiscoe and Heather DeMartini Honored as CRN’s 2025 Women of the Channel
Metasploit Wrap-Up 05/09/2025
Hacker News (YCombinator) - Security
Hacker Noon #Security
The TechBeat: Model Context Protocol Is the Kind of AI Future All Of Us Should Want to See (5/24/2025)
NexChain and Crypto Bull Run
Here's The Code You Need to Build a Secure Password Manager in Python
The Role of Boundary Objects in New Tech Adoption
NexChain Presale: It’s Time to Go Security First
Researchers Reflect on Ethics and Bias in U.S. Census Study
The TechBeat: Police Officers Are Turning Into Reddit Mods Thanks to Amazon's Neighborhood Watch (5/23/2025)
A Conversation with Kashmir Hill: Envisioning a Chaotic Future
Halo Security Achieves SOC 2 Type 1 Compliance, Validating Security Controls For Its Attack Surface
ThreatBook Named a Notable Vendor In Global Network Analysis And Visibility (NAV) Independent Report
The Handoff Model: A New Lens for Sociotechnical Change
Stop Feeding the Algorithm: Creative Ways to Disconnect from Data-Hungry Platforms
Security Bloggers Network
OTP Authentication in 2025: How MojoAuth Stacks Up Against Twilio Verify, Auth0, Stytch & Descope new
Feel Empowered by Mastering NHI Compliance
Your Assurance in Securing NHIs Properly
Stay Reassured with Latest NHI Security Practices
BSidesLV24 – PasswordsCon – That’s Not My Name
Cyber Heads Up: “BadSuccessor”—A Critical Active Directory Privilege Escalation Vulnerability in Windows Server 2025
How FedRAMP Reciprocity Works with Other Frameworks
Feel Protected: Advances in NHI Security Techniques
Ensuring Stability with Robust NHI Strategies
Crypto Drainers are Targeting Cryptocurrency Users
Emulating the Blazing DragonForce Ransomware
U.S. Authorities Seize DanaBot Malware Operation, Indict 16
Control C
Bypassing file upload restrictions with extension truncation
ZAP: Grep extract in Fuzzer to detect username enumeration via subtly different responses
Wired - Security
The US Is Building a One-Stop Shop for Buying Your Data
Feds Charge 16 Russians Allegedly Tied to Botnets Used in Ransomware, Cyberattacks, and Spying
Why 3D-Printing an Untraceable Ghost Gun Is Easier Than Ever
Mysterious Database of 184 Million Records Exposes Vast Array of Login Credentials
Authorities Carry Out Elaborate Global Takedown of Infostealer Heavily Used by Cybercriminals
3 Teens Almost Got Away With Murder. Then Police Found Their Google Searches
What to Expect When You’re Convicted
Trump Signs Controversial Law Targeting Nonconsensual Sexual Content
A Silicon Valley VC Got Israel Starlink Access Within Days of October 7 Attack
How to Win Followers and Scamfluence People
For Tech Whistleblowers, There’s Safety in Numbers
We Made Luigi Mangione’s 3D-Printed Gun—and Fired It
Elttam
Krebs on Security
Oops: DanaBot Malware Devs Infected Their Own PCs
KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS
Breachforums Boss to Pay $700k in Healthcare Breach
Patch Tuesday, May 2025 Edition
Pakistani Firm Shipped Fentanyl Analogs, Scams to US
xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs
Alleged ‘Scattered Spider’ Member Extradited to U.S.
DOGE Worker’s Code Supports NLRB Whistleblower
Whistleblower: DOGE Siphoned NLRB Case Data
Funding Expires for Key Cyber Vulnerability Database
Trump Revenge Tour Targets Cyber Leaders, Elections
China-based SMS Phishing Triad Pivots to Banks
Naked Security
Sophos Firewall v21.5: Streamlined management
DragonForce targets rivals in a play for dominance
A familiar playbook with a twist: 3AM ransomware actors dropped virtual machine with vishing and Quick Assist
Sophos Partners with Capsule on New Cyber Insurance Program
Sophos MDR: New analyst response actions for Microsoft 365
Beyond the kill chain: What cybercriminals do with their money (Part 5)
Beyond the kill chain: What cybercriminals do with their money (Part 4)
Beyond the kill chain: What cybercriminals do with their money (Part 3)
Beyond the kill chain: What cybercriminals do with their money (Part 2)
Beyond the kill chain: What cybercriminals do with their money (Part 1)
Sophos Firewall v21.5: DNS protection
Microsoft primes 71 fixes for May Patch Tuesday
Schneier on Security
Friday Squid Blogging: US Naval Ship Attacked by Squid in 1978
Signal Blocks Windows Recall
The Voter Experience
More AIs Are Taking Polls and Surveys
DoorDash Hack
The NSA’s “Fifty Years of Mathematical Cryptanalysis (1937–1987)”
Friday Squid Blogging: Pet Squid Simulation
Communications Backdoor in Chinese Power Inverters
AI-Generated Law
Google’s Advanced Protection Now on Android
Court Rules Against NSO Group
Florida Backdoor Bill Fails
Linux Security
Understanding Malicious .desktop Files: A Persistent Threat to Linux Systems
Tails 6.15.1 Fixes Critical Tor Browser Flaws
RHEL 10 Enhances Security Across Hybrid Environments
Microsoft Open-Sources WSL Years After Its Debut

Security in Mainstream Media

Google News Hacking
Blockchain security firm releases Cetus hack post-mortem report - Cointelegraph new
Bribery-Led Coinbase Hack Affects 70,000 Crypto Customers - Bank Info Security new
Cetus Protocol’s $223 Million Hack Puts Sui’s Decentralization in the Spotlight - Bitcoin.com News new
Authorities crack down on cyber hacking tools - KSWT
Week in Review: Notorious hacking group tied to the Spanish government - TechCrunch
SUI’s $220 Million Crypto Hack Fuels Centralization Backlash - Bitcoinist.com
Google Cyber Security
Major S. Korean firms spend annual average of 2.9 bln won on cybersecurity - MSN new
Text Scam May Be Part Of Bigger Malware Plot, FBI Says - dailyvoice.com new
Public ‘should create secret code with family to help stop AI deepfake scams’ - London Evening Standard new
Public urged to create secret passwords with family and friends to avoid AI-generated scams - Yahoo News UK new
Public ‘should create secret code with family to help stop AI deepfake scams’ - The Independent new
Public told to use secret codes to stop AI deepfake scams - The Independent new
IMD restricts access to weather data over fear of cyber attack - Times of India new
Switzerland Receives EU Approval to Join Multinational Cybersecurity Project - Мілітарний new
Southern Miss Hosting Mississippi Cyber Initiative Summit June 10-11 - WXXV News 25 new
Silver lining of a shifting cybersecurity landscape - Talk Business & Politics new
Tech coalition to push for faster US foreign cybersecurity aid - Digital Watch Observatory new
I'm A Cyber Security Expert – This Is The 1 Change I Want Parents To Make ASAP - HuffPost UK new

Thirsty for more

Ars Technica
How farmers can help rescue water-loving birds new
200 mph for 500 miles: How IndyCar drivers prepare for the big race
Penguin poop may help preserve Antarctic climate
Desktop Survivors 98 is more than just a retro Windows nostalgia trip
CDC can no longer help prevent lead poisoning in children, state officials say
Rocket Report: SpaceX’s expansion at Vandenberg; India’s PSLV fails in flight
In 3.5 years, Notepad.exe has gone from “barely maintained” to “it writes for you”
The Pentagon seems to be fed up with ULA’s rocket delays
Why console makers can legally brick your game console
Wired
10 Best Reusable Water Bottles of 2025, Tested & Reviewed new
We Hand-Picked the 61 Best Deals From the 2025 REI Anniversary Sale new
22 Best Memorial Day Mattress and Bedding Sales (2025) new
Samsung Galaxy S25 Edge Review: Super Thin With a Catch new
The Quest to Prove the Existence of a New Type of Quantum Particle new
3D Is Back. This Time, You Can Ditch the Glasses new
Best Mirrorless Cameras (2025): Full-Frame, APS-C, and More
Anker Nebula X1 Home Projector Review: Gorgeous Anywhere
DJI Mavic Pro Review: Powerful and Easy to Use
Breville Oracle Jet Review (2025): Easy and Delicious
7 Best Coffee Pod Machines (2025), Tested and Reviewed
The 23 Best Movies on Amazon Prime Right Now (May 2025)
Slashdot
Is AI Turning Coders Into Bystanders in Their Own Jobs? new
OpenAI's ChatGPT O3 Caught Sabotaging Shutdowns in Security Researcher's Test new
Python Can Now Call Code Written in Chris Lattner's Mojo new
'Star Wars'-Inspired Tabletop Games Bring Rebellion and Glory (without Disney) new
Does the World Need Publicly-Owned Social Networks? new
Researchers Warn Some Infectious Fungus Could Spread as Earth's Temperatures Rise new
SerenityOS Creator Is Building an Independent, Standards-First Browser Called 'Ladybird' new
Will GM's Bet on Battery Tech Jumpstart the Transition to Electric Cars? new
Apple's Bad News Keeps Coming. Can They Still Turn It Around? new
The USSR Once Tried Reversing a River's Direction with 'Peaceful Nuclear Explosions' new
Duolingo Faces Massive Social Media Backlash After 'AI-First' Comments new
New 'Doom: The Dark Ages' Already Adjusted to Add Even More Dangerous Demons
DZone Security
Proactive Security in Distributed Systems: A Developer’s Approach
Prioritizing Cloud Security Risks: A Developer's Guide to Tackling Security Debt
Cloud Security and Privacy: Best Practices to Mitigate the Risks
Secure by Design: Modernizing Authentication With Centralized Access and Adaptive Signals
Developers Beware: Slopsquatting and Vibe Coding Can Increase Risk of AI-Powered Attacks
Understanding IEEE 802.11(Wi-Fi) Encryption and Authentication: Write Your Own Custom Packet Sniffer
AI-Based Threat Detection in Cloud Security
Immutable Secrets Management: A Zero-Trust Approach to Sensitive Data in Containers
DZone
Enhancing Business Decision-Making Through Advanced Data Visualization Techniques
Event Driven Architecture (EDA) - Optimizer or Complicator
Rust, WASM, and Edge: Next-Level Performance
Optimizing Software Performance for High-Impact Asset Management Systems
Scaling Microservices With Docker and Kubernetes on Production
Apple and Anthropic Partner on AI-Powered Vibe-Coding Tool – Public Release TBD
Modern Test Automation With AI (LLM) and Playwright MCP
Power BI Embedded Analytics — Part 3: Power BI Embedded Demo
System Coexistence: Bridging Legacy and Modern Architecture
GitHub Copilot's New AI Coding Agent Saves Developers Time – And Requires Their Oversight
Intro to RAG: Foundations of Retrieval Augmented Generation, Part 2
Hacker News (YCombinator)
Ten Years of JSON Web Token (JWT) and Preparing for the Future new
Ten Years of JSON Web Token and Preparing for the Future new
We broke down the Sam Altman and Jony Ive video new
We broke down that weird 9-minute Sam Altman and Jony Ive video new
Advice to Tenstorrent new
Ask HN: What are you working on? (May 2025) new
Beware the Complexity Merchants new
Gemma 3n Architectural Innovations – Speculation and poking around in the model new
Plwm – An X11 window manager written in Prolog new
Chomsky on what ChatGPT is good for (2023) new
Chomsky on What ChatGPT Is Good For new
Path to a free self-taught education in Computer Science new
Reddit - Cyberpunk
Philip K. Dick
back to the future (cyberpunk 2020)
So I was walking through Iasi and saw this
What decade/era of futurism does this look like it was most inspired by?
Blade Runner is still one of the most depressingly beautiful movies i've ever seen and Vangelis' score perfectly captures the atmosphere.
When Humans in the Window Reflection Are No Longer Interesting, Me (Arseny Ivanov), 2017
Where could someone find cyberpunk style electronics either wearable or for the car or home?
Blade Runner...
Reddit - Security CTF
Which Certificates? new
Web Rev Pwn
What's the Fastest Setup to Outspeed Everyone in CTF?
CTFd docker plugin
Looking for CTF members and active cybersecurity learners
Looking for CTF team
Howdy! I’m Looking for a CTF Team!
Reddit - Sysadmin
Why is my share folder triggering .io tld connections ? new
Reports from SOC service provider new
Underperforming or overscoped ? new
CompTIA A+ , Network + or CCNA for System admin career path ? new
I was given a Lenovo x3650 M5 and the Remote Console key has expired. Is there anything I can do? new
Server 2016 - KB5058383 caused Hyper-V issues new
Evaluating Security Awareness Training Vendors: Lessons Learned and Recommendations new
Heads-up for fellow IT leaders: SIM swapping is no longer just a consumer problem—it’s a legit business risk. new
VMware Engine increased costs - Is GCP obligating clients to convert to a commitment contract? new
Calls While Phone is Silenced new
Ajera Outage? new
Unofficial leadership in teams — how do you handle it? new
Lobste.rs
Art of the Propagator (2008) new
Car Physics for Games new
The Windows Registry Adventure #7: Attack surface analysis new
How I Replaced Next.js for My App with HMPL.js new
plwm: An X11 window manager written in Prolog new
Writing your own CUPS printer driver in 100 lines of Python new
UE1 homebrew 1-bit vacuum computer in action new
How to Guarantee Your Red Team Will Fail new
On File Formats new
Programming On 34 Keys (2022) new
Systematic design of multi-join GROUP BY queries new
Mathpad: A mathematical keypad for students and professionals new
Hackaday
Hackaday Links: May 25, 2025 new
Unreleased Amiga Hardware Plays MP3s new
NES Zapper Becomes Telephone new
The Commodore 64 Gets An HDMI Upgrade new
A Quick Introduction to TCP Congestion Control new
2025 Pet Hacks Contest: Feline Facial Recognition Foils Food Filching new
Making a Backyard Observatory Complete With Retractable Roof new
AI Art Installation Swaps Diffusion for Reflection
Reverse Engineering LEGO Island
A Presence-sensing drive for Securely Storing Secrets
Nerf Blaster Becomes Remote Control Turret
The Need For Speed?