Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

PacketStorm
The Register
Hackers game out infowar against China with the US Navy new
How to leave the submarine cable cutters all at sea – go Swedish new
Ransomware attack forces Brit high school to shut doors new
Sage Copilot grounded briefly to fix AI misbehavior new
Datacus extractus: Harry Potter publisher breached without resorting to magic new
When food delivery apps reached Indonesia, everyone put on weight new
Donald Trump proposes US government acquire half of TikTok, which thanks him and restores service
OpenAI's ChatGPT crawler can be tricked into DDoSing sites, answering your queries
FCC to telcos: By law you must secure your networks from foreign spies. Get on it
Biden signs sweeping cybersecurity order, just in time for Trump to gut it
Fortinet: FortiGate config leaks are genuine but misleading
Clock ticking for TikTok as US Supreme Court upholds ban
Reddit - NetSec
v0.1.0 released - Analyze IoC with OpenCTI, Threat fox and more #FOSS new
The cost of false positives - how we became a target new
Tear Down The Castle - Part 1 | dfir.ch new
Windows BitLocker -- Screwed without a Screwdriver
A publicly available OpenCTI connector for IoC analysis FOSS tool
Karmada Security Audit - Shielder
2024 CVEs in Review – Vulnerability Blog
From arbitrary pointer dereference to arbitrary read/write in latest Windows 11
RCE in rsync, CVE-2024-12084 (and 5 more vulnerabilities)
New Microsoft OLE Vulnerability, Exploitable via Email
Millions of Accounts Vulnerable due to Google’s OAuth Flaw
Command Line Underdog: WMIC in Action -- How to use wmic as an alternate shell in a pinch
Bleeping Computer
The Hacker News
Unsecured Tunneling Protocols Expose 4.2 Million Hosts, Including VPNs and Routers new
DoNot Team Linked to New Tanzeem Android Malware Targeting Intelligence Collection new
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [20 January] new
Product Walkthrough: How Satori Secures Sensitive Data From Production to AI new
Hackers Deploy Malicious npm Packages to Steal Solana Wallet Keys via Gmail SMTP new
TikTok Goes Dark in the U.S. as Federal Ban Takes Effect January 19, 2025
U.S. Sanctions Chinese Cybersecurity Firm Over Treasury Hack Tied to Salt Typhoon
Critical Flaws in WGS-804HPT Switches Enable RCE and Network Exploitation
Python-Based Bots Exploiting PHP Servers Fuel Gambling Platform Proliferation
How to Bring Zero Trust to Wi-Fi Security with a Cloud-based Captive Portal?
U.S. Sanctions North Korean IT Worker Network Supporting WMD Programs
New 'Sneaky 2FA' Phishing Kit Targets Microsoft 365 Accounts with 2FA Code Bypass

Threat Wire

Exploits

Packet Storm Exploits
Exploit-DB Webapps
Exploit-DB Local and Privilege Escalation
Exploit-DB DoS
Exploit-DB Shellcode
Exploit-DB Papers
Exploit-DB Remote

LiveOverflow

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Reddit - Reverse Engineering
Malware Analysis of Fake Banking Reward APK Targeting WhatsApp Users new
Investigating an "evil" RJ45 dongle
Reverse Engineering Conference happening this February in Orlando!
Release of IDA Python script helper (community_base.py)
USB Ethernet Adapter Malware??? OALABS Line-by-Line Code Analysis
The Permission Slip Attack, Leveraging a Confused Deputy in Android with 'pSlip'
How Hard Is It to Port Frida to an Unsupported Platform? (Let’s Find Out)
/r/ReverseEngineering's Weekly Questions Thread
Core Explorer, a core dump analysis tool that runs in the browser
Reverse-engineering meets AI: My new benchmark asks you to deduce hidden byte transforms—thoughts?
One Dog v. the Windows 3.1 Graphics Stack
Parsing the c64 Bubble Bobble Wind Currents
Reddit - Game Hacks
HYPEX.TO PUBG MOD ✔️ CHAMS ✔️ NORECOIL✔️ MISCS 🛡️ UPDATED SINCE 2018 ⭐ 1 YEAR+ UD ⭐ new
Tenchu Z freecam commission new
Hi!! Help pls <333 new
BO6 UNDETECTED UNLOCK |PERM UAV | FORTNITE,MARVEL RIVALS, RUST CHEATS | BOT LOBBIES
AIMEX-CHEATS COD BLACK OPS 6 / WARZONE CHEAT | Aimbot | ESP | Radar | Undetected, Streamproof, Easy to use
PROOFCORE.IO | UNDETECTED PRIVATE FORTNITE CHEAT | PLAYER ESP | LOOT ESP | ADVANCED AIMBOT | RADAR | STREAMPROOF | SPOOFER + CLEANER |
🌊 Aqua Services - Lifetime cheats, tools, and spoofers for BO6, Delta Force, Marvel Rivals, and more ($15-20 USD) 🌊
Accepting PI coins as payment for bo6 mods
GET COD TOOLS INCLUDING THIS ONE INSTANT DELIVERY
Soul Knight mod force exit problem
🌊 Aqua Services - Lifetime cheats, tools, and spoofers for BO6, Delta Force, Marvel Rivals, and more ($15-20 USD) 🌊
Girl testing cheats at mavel rival
Reddit - REGames
StackExchange - ReverseEngineering
Reverse engineering settings stored in a file without hooking or debugging
Enigma locked files help decrypyt
project, exe file gives error, required to use WinDbg to solve this
Request for Partner/Developer to Finish Complex Lotto Prediction Algorithm
Combining a RAM snapshot and an exe in Ghidra
Encrypted UART communication protocol

Guided Hacking

Malware/APT

Reddit - Malware
Where I can find the redragon official page
Downloaded a .bin file from an old email
Scammers Shift to Malware in Telegram Crypto Heists
Beware! "creative" malware, hidden as a reCaptcha, Could be on any "YoU NeED tO ProOF tHaT yOu'Re a HumAn bEfOre ENteRinG" type site
SSH LLM Honeypot caught a real threat actor
Researchers hijack thousands of backdoors thanks to expired domains
How to develop an Effective Machine Learning Model for Malware Detection: A Step-by-Step Guide - Overview
Phishing Campaigns and SEO-Poisoned Trojanized VPN Apps Distribute PLAYFULGHOST Malware
Deep Dive: Kernel-Level Monitoring for Real-Time Malware Behavior Analysis
We've built an AI-driven antivirus to tackle modern malware - Here's what I've learned
An article I made going over beavertail and invisibleferret
Malware in Python
Unit42
Threat Brief: CVE-2025-0282 and CVE-2025-0283 (Updated Jan. 17)
One Step Ahead in Cyber Hide-and-Seek: Automating Malicious Infrastructure Discovery With Graph Neural Networks
Bad Likert Judge: A Novel Multi-Turn Technique to Jailbreak LLMs by Misusing Their Evaluation Capability
Now You See Me, Now You Don’t: Using LLMs to Obfuscate Malicious JavaScript
Effective Phishing Campaign Targeting European Companies and Organizations
LDAP Enumeration: Unveiling the Double-Edged Sword of Active Directory
Dirty DAG: New Vulnerabilities in Azure Data Factory’s Apache Airflow Integration
Crypted Hearts: Exposing the HeartCrypt Packer-as-a-Service Operation
Network Abuses Leveraging High-Profile Events: Suspicious Domain Registrations and Other Scams
Threat Assessment: Howling Scorpius (Akira Ransomware)
Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012 and CVE-2024-9474 (Updated Nov. 22)
Lateral Movement on macOS: Unique and Popular Techniques and In-the-Wild Examples

Crypto

Seytonic

Podcasts

Security Weekly
Stopping The Bad Things - Rob Allen - PSW #857
Threat Actors With A Thousand Names - PSW #856
Hacker Heroes - Haroon Meer - PSW Vault
When Public Payphones Become Smart Phones - Inbar Raz - PSW #855
Navigating Regulations in Supply Chain Security - Eric Greenwald - PSW #854
Hacker Gadgets - PSW #853
Hacker Heroes - Aaron Turner - PSW Vault
Confessions of a Cyber Criminal Stalker - Ken Westin - PSW #852
No CVE and No Accountability - Ed Skoudis - PSW #851
Cybersecurity For Schools - Kayne McGladrey - PSW #850
Shadow IT and Security Debt - Dave Lewis - PSW #849
Secure By Default - How do we get there? - Andy Syrewicze - PSW #848
Risky.Biz
Risky Biz Soap Box: Cool compliance tricks with the Island enterprise browser
Risky Business #775 -- Cl0p is back, SEC hack disclosures disappoint
Wide World of Cyber: SentinelOne's Chris Krebs on Chinese cyber operations
Risky Business #774 -- Cleo file transfer appliances under widespread attack
Risky Biz Soapbox: Enterprise Yubikeys can now be pre-registered
Risky Business #773 -- Cybercriminals are dropping like flies in Russia
Risky Business #772 -- Salt Typhoon is truly a national security disaster
Risky Business #771 -- Palo Alto's firewall 0days are very, very stupid
Risky Business #770 -- A Russian IR guy discovers extremely cool spookware
Risky Biz Soap Box: Why black box email security is dead
Risky Business #769 -- Sophos drops implants on Chinese exploit devs
Risky Business #768 -- CSRB will investigate China's Wiretap Hacks
The CyberWire
AWS in Orbit: Data Automation and Space Domain Awareness with Kayhan Space. [AWS in Orbit] new
Baan Alsinawi: Trust ourselves and be courageous. [Compliance] [Career Notes]
A cute cover for a dangerous vulnerability. [Research Saturday]
Hacking the bureau.
Bolstering the digital shield.
Massive malware cleanup.
National security in the digital age.
Multi-factor frustration.
Michael Bishop Jr.: Good, bad or indifferent. [Security] [Career Notes]
The hidden cost of data hoarding. [Research Saturday]
When retaliation turns digital.
Biden’s final cyber order tackles digital weaknesses.
Cyber Security Interviews
ISC Daily Stormcast
ISC StormCast for Monday, January 20th, 2025
ISC StormCast for Friday, January 17th, 2025
ISC StormCast for Thursday, January 16th, 2025
ISC StormCast for Wednesday, January 15th, 2025
ISC StormCast for Tuesday, January 14th, 2025
ISC StormCast for Monday, January 13th, 2025
SANS ISC Stormcast: Cryptomining Malware, Fake PoC Exploit, Malicious Browser Extensions, and Palo Alto Vulnerabilities. Jan 9th 2024
ISC StormCast for Thursday, January 9th, 2025
ISC StormCast for Wednesday, January 8th, 2025
ISC StormCast for Tuesday, January 7th, 2025
Darknet Diaries
153: Bike Index
152: Stacc Attack
151: Chris Rock

Threat Intel

Privacy/VPNs

Slashdot - Rights
The Powerful AI Tool That Cops (Or Stalkers) Can Use To Geolocate Photos In Seconds new
Donald Trump Is Sworn In as 47th President new
California Drops Its Pending Zero-Emission Truck Rules new
In AI Arms Race, America Needs Private Companies, Warns National Security Advisor
RedNote Scrambles to Hire English-Speaking Content Moderators
On Eve of TikTok Ban, Chinese App RedNote Surges in Popularity, Delighting Chinese State Media
NATO Will Deploy Unmanned Vessels to Protect Baltic Sea Cables - Plus Data-Assessing AI
Proposed New York Law Could Require Background Checks Before Buying 3D Printers
Arrested by AI: When Police Ignored Standards After AI Facial-Recognition Matches
America's Top Three Insurers Reaped $7.3 Billion From Their Drug-Middlemen's Markups, FTC Says
FDIC Sues 17 Former Silicon Valley Bank Execs Over Collapse
US Sanctions Chinese Firm, Hacker Behind Telecom and Treasury Hacks
Reddit - Privacy
Epic Games may bypass showing the EULA and accept it on your behalf via at least 1 site page new
Help! What to do with wechat account new
How do I remove images from reddit deleted posts new
macOS Gmail Desktop notifications when Gmail isn't installed or open in browser new
Do we know what post/comment privacy is like on Reddit? new
Reddit and my network traffic new
What's the best way to delete my reddit accounts? new
What is the difference between never logging into a fake facebook account again, vs deleting the account new
Why does my banking app need certain permissions? new
Is there a tool to disable location for specific apps in Windows 11 version 24H2? new
Don't Use Session - Round 2 new
School is requiring all students to use Okta Verify on personal phones new
Reddit - VPN
While i was using vpn, i was auto-banned by an account on facebook why this happens? new
RPi4 VPN Configuration Check
Youtube TV and time zone shift
TikTok Bypass
Trying to watch UFC PPV
Xbox Store Turkey VPN
Even with an Albania vpn, i keep getting YouTube ads on the app.
How?
I downloaded a VPN, but it’s asking me to pay.
Getting ads on youtube while setting location to Albania?
Hiding IP address from Google
PrivacyTools.io
EFF
VPNs Are Not a Solution to Age Verification Laws
Mad at Meta? Don't Let Them Collect and Monetize Your Personal Data
EFF Statement on U.S. Supreme Court's Decision to Uphold TikTok Ban
Systemic Risk Reporting: A System in Crisis?
Digital Rights and the New Administration | EFFector 37.1
Police Use of Face Recognition Continues to Wrack Up Real-World Harms
EFFecting Change: Digital Rights & the New Administration
Platforms Systematically Removed a User Because He Made "Most Wanted CEO" Playing Cards
Five Things to Know about the Supreme Court Case on Texas’ Age Verification Law, Free Speech Coalition v Paxton
Meta’s New Content Policy Will Harm Vulnerable Users. If It Really Valued Free Speech, It Would Make These Changes
EFF Statement on Meta's Announcement of Revisions to Its Content Moderation Processes
Sixth Circuit Rules Against Net Neutrality; EFF Will Continue to Fight

Help Wanted

Reddit - AskNetSec
Application Security Gap Analysis new
NDA & Service Contracts with Vendor or VAR?
Question about school project
Submitting Vulnerability to WPScan
Elasticsearch V8
CyberArk and the Federal Government
Query: infosec risks - publishing Google Doc online open to Comments
How does Multi-Factor Authentication (MFA) work?
Reddit - Netsec Students
Would the Comptia A+ certification be worth it in this scenario?
Stackoverflow - Security
How is the Metamask Spender contract splitting the funds to the DS Proxy and the user? new
Setting up PgBouncer with Google Compute Engine and Cloud SQL PostgreSQL: Security Concerns, Multiple Databases, and User Management new
Storing and accessing jwt secret key in spring boot application new
Is There a Security Risk Using ADB Over TCP/IP for Wireless App Development in Expo?
Where can I find libraries for detecting malicious scripts in container images? [closed]
Veracode identified CWE-80 & CWE-601 in spring-security-webauthn.js on line 199 in version 6.4.2
Terrascan whitelist the rules [closed]
Designing an Adaptive Intrusion Detection System using Machine Learning trained on CICIDS2017 and Suricata [closed]
Why does Cross-Origin-Opener-Policy prevent opening links to the same-origin/domain when target="_blank" is used?
Email/password mobile authorization using Google Identity Platform & custom Node.js backend
CVE-2024-38474 in RHEL [closed]
How to test these models trained on CICIDS2017 data will they be able to detect attacks from suricata logs? [closed]
Stack Exchange
Government Website Backend [closed]
What kind of game is this?
How to use character sets to limit the search space in hashcat?
Clarifying BitLocker Full Disk Encryption and the role of TPM
Card number I'll buy!
Is it bad practice to state the purpose of a verification code?
Are repeated (daily and global) attempts to access my email address unusual?
How does Bob trust that X is a physical fingerprint of Alice?
BSOD Kernel Security + Corrupt BIOS Update [closed]
How safe are password generator sites for htaccess

Locks/Social Engineering

Reddit - Lockpicking
Abus 55/40 (video) new
Paclock 200k video new
Practice lock box new
My first Abus 72/40 new
Key type identification for Lishi tool new
Musings on Lock Classifications and Belt Rankings new
Picked my first A 1100! new
Federal puck lock opened with a Lawlock Tipene hook. new
Brinks really made me pick my own lock to get my keys... smh my head 🤦‍♂️ new
Picked the Abus 55/40 new
DeGuard Interactive Clone finally picked! new
Well… new
Reddit - Social Engineering
Festival beer run new
Best way to keep in touch with people as a freelancer?
Richard Madeley: Homeowner & Homeless Skeptic
The hidden psychology of abusers
Every Psychological Trick to Hijack Minds
How to make lighthearted personal observations about yourself during conversations?
My Way of Social Engineering Without Masking my Neurodivergence- I Call it "Wearing Make-Up"
How to ask reasonably focused open questions during a conversation?
Skip the peers, empower the people?
Customizable bank? (Custombank) how would you use?
What are some convincing psychological tricks good liars use to always get away with lying?

Hak5

Security Blogs

HITB News
Found on VirusTotal: The world’s first UEFI bootkit for Linux
OpenAI is at war with its own Sora video testers following brief public leak
North Korean hackers posing as IT workers steal over $1B in cyberattack
WhatsApp: NSO Group Operates Pegasus Spyware for Customers
Korea extradites Russian, Vietnamese suspects linked to $16M ransomware scheme
CISA Director Jen Easterly, in Place Since 2021, to Step Down
Man sick of crashes sues Intel for allegedly hiding CPU defects
North Korean hackers target cryptocurrency with malware
Law enforcement operation takes down 22,000 malicious IP addresses worldwide
Here’s the paper no one read before declaring the demise of modern cryptography
OpenAI launches ChatGPT with Search, taking Google head-on
Chinese attackers accessed Canadian government networks – for five years
The RISKS Digest
Kaspersky Blog
Tor Browser and anonymity: what you need to know | Kaspersky official blog
New 2024 NIST requirements for password strength and storage
Security and privacy settings in adidas Running | Kaspersky official blog
ID card selfie: pros and cons | Kaspersky official blog
Adam Shostack & friends
Lessons for Cybersecurity from the American Public Health System
Who Are 'We?' Power Centers in Threat Modeling
Appsec Roundup - Dec 2024
A Different Hackathon Design?
Stocking stuffers for security nerds
Gavle Goat Endures
Human Centered Security
Appsec Roundup - Nov 2024
Risk Talk at JPL
The Four Question Framework for Threat Modeling
Black Friday Sale
Is Cybersecurity Awareness Month Worth the Money?
Graham Cluley
No, Brad Pitt isn’t in love with you
UK government proposes ransomware payment ban for public sector
Smashing Security podcast #400: Hacker games, AI travel surveillance, and 25 years of IoT
The AI Fix #33: AI’s deliberate deceptions, and Elon’s “unhinged” mode
Pastor’s “dream” crypto scheme alleged to be a multi-million dollar scam
Canadian man loses a cryptocurrency fortune to scammers – here’s how you can stop it happening to you
Smashing Security podcast #399: Honey in hot water, and reset your devices
Space Bears ransomware: what you need to know
United Nations aviation agency hacked, recruitment database plundered
The AI Fix #32: Agentic AI, killer robot fridges, and the robosexual revolution
Fireside chat with Graham Cluley about risks of AI adoption in 2025
The AI Fix #31: Replay: AI doesn’t exist
Security Bloggers Network
U.S. Treasury Sanctions Chinese Individual, Company for Data Breaches new
The AI Revolution No One Saw Coming Until It Was Too Late new
Mobile Cybersecurity Trends for 2025: Key Predictions and Preparations new
Executive Order 14144 on Cybersecurity: Building on 2021’s Foundation with Advanced NHI Security new
Bluesky AT Protocol: Building a Decentralized TikTok new
Privacy Roundup: Week 3 of Year 2025 new
The 2025 Themes on Data GPS new
From Dark Web to Jackpot: How Cybercriminals Exploit Stolen Credentials in iGaming new
Information Security Manual (ISM) new
Dr. Martin Luther King, Jr. Day 2025 new
MY TAKE: Here’s why Donald Trump really needs to fully embrace Joe Biden’s cybersecurity EO new
Considerations for Selecting the Best API Authentication Option new
Rapid7
Metasploit Wrap-Up 01/17/2025
Perfect Fit or Business Threat? How to Mitigate the Risk of Rogue Employees
Fortinet firewalls hit with new zero-day attack, older data leak
Patch Tuesday - January 2025
Metasploit Wrap-Up 01/10/2025
Securing Success: Stories from the SOC Webinar Series
Unlocking the Power of AI in Cybersecurity: Key Takeaways from Our Latest Webinar
Built In Honors Rapid7 with “2025 Best Places To Work” Award
New Research: Enhancing Botnet Detection with AI using LLMs and Similarity Search
CVE-2025-0282: Ivanti Connect Secure zero-day exploited in the wild
Rapid7 Recognized with Top Score of 100 in 2025 Corporate Equality Index
Out With the Old, In With the New: Securely Disposing of Smart Devices
ThreatPost
Hacker News (YCombinator) - Security
Bambu Lab - Setting the Record Straight About Our Security Update new
Falcon 9 Rocket Launch Scrubbed After Delta Air Flies into Restricted Airspace new
The Making of Community Notes (2024) new
Reverse engineering my #1 Hacker News article new
Bambu Connect's Authentication X.509 Certificate and Private Key Extracted new
F-Droid Security Issues new
Hacking the Yamaha DX9 to Turn It into a DX7 (2023)
TikTok users posting cat videos do not threaten UK national security, minister
Zuckerberg appeared to know Llama trained on Libgen
Book and Dagger: How scholars and librarians became spies during World War II
When America's Top Spies Were Academics and Librarians
Brits still associate working-class accents with criminals – study warns of bias
digitalmunition
Hacker Noon #Security
AI Agents To Become a $47.1 Billion Powerhouse? new
The TechBeat: Nuffle: The Ethereum Finality-As-A-Service Layer (1/20/2025) new
Suicide Hotlines Promised Anonymity - So Why Was Sensitive Data Sent to Facebook?
The HackerNoon Newsletter: Lumoz Unveils TEE+ZK Multi-Proof for On-chain AI Agent (1/19/2025)
The TechBeat: Project DIGITS: NVIDIA’s Leap into Personal AI Supercomputing (1/19/2025)
The TechBeat: A Peek Into BlueSky's AT Protocol Helped Me Understand Why It Needs to Exist (1/18/2025)
Why JWT Is the Key to Securing Your Enterprise App – And Why KumuluzEE Might Be Your New Best Friend
The TechBeat: Crypto 2024 Recap: Key Updates from MEXC’s December Highlights (1/17/2025)
Will 2025 Be The Turning Point For Passwords: What’s Next For The Passwordless Future?
Lumoz: Decentralized Compute Infrastructure for the Era of AI, ZK, & RaaS
Company WEEX Announces WXT’s Significant 101% Surge, Breaking $0.339
Educational Byte: Chatbots in Obyte and What They Do
Wired - Security
How to Get Around the US TikTok Ban
US Names One of the Hackers Allegedly Behind Massive Salt Typhoon Breaches
The FCC’s Jessica Rosenworcel Isn’t Leaving Without a Fight
Hackers Likely Stole FBI Call Logs From AT&T That Could Compromise Informants
Biden's Cyber Ambassador Urges Trump Not to Cede Ground to Russia and China in Global Tech Fight
GitHub’s Deepfake Porn Crackdown Still Isn’t Working
A New Jam-Packed Biden Executive Order Tackles Cybersecurity, AI, and More
5 Best VPN Services (2024): For Routers, PC, iPhone, Android, and More
The ‘Largest Illicit Online Marketplace’ Ever Is Growing at an Alarming Rate, Report Says
Inside the Black Box of Predictive Travel Surveillance
Secret Phone Surveillance Tech Was Likely Deployed at 2024 DNC
Candy Crush, Tinder, MyFitnessPal: See the Thousands of Apps Hijacked to Spy on Your Location
Control C
Krebs on Security
Chinese Innovations Spawn Wave of Toll Phishing Via SMS
Microsoft: Happy 2025. Here’s 161 Security Updates
U.S. Army Soldier Arrested in AT&T, Verizon Extortions
Happy 15th Anniversary, KrebsOnSecurity!
Web Hacking Service ‘Araneida’ Tied to Turkish IT Firm
How to Lose a Fortune with Just One Bad Click
How Cryptocurrency Turns to Cash in Russian Banks
Patch Tuesday, December 2024 Edition
U.S. Offered $10M for Hacker Just Arrested by Russia
Why Phishers Love New TLDs Like .shop, .top and .xyz
Hacker in Snowflake Extortions May Be a U.S. Soldier
Feds Charge Five Men in ‘Scattered Spider’ Roundup
Elttam
Abusing Amazon VPC CNI plugin for Kubernetes
PwnAssistant - Controlling /home’s via a Home Assistant RCE
Naked Security
Gootloader inside out
Sophos ZTNA Updates
159-CVE January Patch Tuesday smashes single-month record
Prioritizing patching: A deep dive into frameworks and tools – Part 2: Alternative frameworks
Prioritizing patching: A deep dive into frameworks and tools – Part 1: CVSS
Schneier on Security
Biden Signs New Cybersecurity Order new
Friday Squid Blogging: Opioid Alternatives from Squid Research
Social Engineering to Disable iMessage Protections
FBI Deletes PlugX Malware from Thousands of Computers
Phishing False Alarm
Upcoming Speaking Engagements
The First Password on the Internet
Microsoft Takes Legal Action Against AI “Hacking as a Service” Scheme
Friday Squid Blogging: Cotton-and-Squid-Bone Sponge
Apps That Are Spying on Your Location
Zero-Day Vulnerability in Ivanti VPN
US Treasury Department Sanctions Chinese Company Over Cyberattacks
Linux Security
A Linux Admin's Guide to Ensuring Data Privacy in 2025 new
Linux Mint 22.1 'Xia': A New Era of Stability and Security Until 2029 new
Lessons from Bootkitty: Securing Linux Systems Against UEFI Intrusions
Migrating from .NET Framework to .NET Core: Security and Open Source Benefits
Guarding Against CVE-2024-7344: Ensuring UEFI Secure Boot Integrity
Urgent Chrome 132 Update Released to Fix 13 Security Flaws
Rsync Under Siege: Essential Steps to Protect Against Recent RCE Vulnerabilities
OpenSSF & OpenJS Warn of Social Engineering Threats to Open-Source Projects
MX Linux 23.5 Brings Xfce 4.20 and Updated Kernel Options to the Linux Desktop
Navigating The Rising Threat of Zero-Day Rootkits in Linux Environments
Simplifying CPU Mitigations with Attack Vector Controls
The Linux Foundation's Collaborative Initiative to Transform Chromium Browser Development
Dark Reading
US Ban on Automotive Components Could Curb Supply Chain new
Has the TikTok Ban Already Backfired on US Cybersecurity?
Employees Enter Sensitive Data Into GenAI Prompts Far Too Often
15K Fortinet Device Configs Leaked to the Dark Web
US Sanctions Chinese Hacker &amp; Firm for Treasury, Critical Infrastructure Breaches
Leveraging Behavioral Insights to Counter LLM-Enabled Hacking
Russian APT Phishes Kazakh Gov't for Strategic Intel
Biden's Cybersecurity EO Leaves Trump a Comprehensive Blueprint for Defense
183M Patient Records Exposed: Fortified Health Security Releases 2025 Healthcare Cybersecurity Report
Karl Triebes Joins Ivanti as Chief Product Officer
CISA and US and International Partners Publish Guidance for OT Owners and Operators
SEALSQ in Cooperation With WISeKey Expands Post-Quantum Footprint in Saudi Arabia
Securelist
Mercedes-Benz Head Unit security research report
Whitehat Security Blog

Security in Mainstream Media

Google News Hacking
Russian hackers target WhatsApp in new tactic, Microsoft warns - Kyiv Independent new
Massive Russian hack on government database shows cracks in Ukraine's digitalization drive - Kyiv Independent new
The FBI Hacked US Computers to Make Malware Delete Itself - VICE new
Russian State-Linked Hackers Target WhatsApp Accounts, Warns Microsoft - Silicon UK new
The Most Dangerous Hacking Tools and How to Fight Back | by Lineesh Kumar ✨ | Jan, 2025 - DataDrivenInvestor new
New Email Hack Warning—Microsoft Users Hit By Crafty Fatigue Attacks - Forbes new
New Password Hack Warning—Act Now If Yours Is On This List - Forbes new
Star Blizzard hackers abuse WhatsApp against diplomats - Techzine Europe new
HPE’s sensitive data exposed in alleged IntelBroker hack - CSO Online new
Chinese Cyberattack on US Treasury Department: Hackers Access 400+ PCs - Regtechtimes new
US Treasury sanctions Chinese cybersecurity firm and hacker behind US network breaches - CyberNews.com new
Star Blizzard hackers abuse WhatsApp to target high-value diplomats - BleepingComputer
Google Cyber Security
Defence Cybersecurity Market to Witness Stunning Growth | Major Giants Airbus, BAE Systems, Symantec, Cisco - openPR new
Mobile Cybersecurity Trends for 2025: Key Predictions and Preparations - Security Boulevard new
Information Security Manual (ISM) - Security Boulevard new
TSA head who oversaw pipeline cyber rules pushed out by Trump - Nextgov/FCW new
Startups' Lax IP Cybersecurity Could Be Their Undoing - hackernoon.com new
DORA: New EU Cybersecurity Requirements for the Financial Sector Enter into Force - JD Supra new
Watch Check Point Software's Dor on Cybersecurity, TikTok, India - Bloomberg new
Ukraine restores state registers after suspected Russian cyberattack - The Record from Recorded Future News new
The 13th Global Edition of CYSEC QATAR 2025 to Gather 500+ Global Experts in Cybersecurity to Strengthen Qatar’s Future - U.Today new
SailPoint IPO Filing Reveals Sales Growth, Improving Losses - GovInfoSecurity.com new
Name That Toon: Incentives - Dark Reading new
Phishing Attacks Are Top Security Issue for Consumers - Dark Reading new

Thirsty for more

Hacker News (YCombinator)
An Astronomical View of Ancient Egyptian Star Clocks (2021) new
Reverse Engineering Call of Duty Anti-Cheat new
Malicious extensions circumvent Google's remote code ban new
US safety regulators expand Ford hands-free driving tech investigation new
The Selma March (1965) new
DeepSeek-R1-Distill-Qwen-1.5B Surpasses GPT-4o in certain benchmarks new
Bambu Lab - Setting the Record Straight About Our Security Update new
Falcon 9 Rocket Launch Scrubbed After Delta Air Flies into Restricted Airspace new
Authors Seek Meta's Torrent Client Logs and Seeding Data in AI Piracy Probe new
The Making of Community Notes (2024) new
After Authenticity new
After Authenticity (2018) new
Reddit - Cyberpunk
Tech leaders have better seats than cabinet members and are seated in same section as Trump's family new
"Freya Rogue Valkerie" by Matheus Calza new
Is this the official start of cyberpunk era? High tech, low life new
Pouring Rain - Fabricated Memories new
A redditor commented about my cyberpunk character "He looks like he should have a partner - a short guy in a black overcoat wearing his… new
What did you think of the Intro Video of our game DeTechtive 2112 that will be released on January 29? new
A Night in 2099 by Y01 Graphics new
Budayeen series by George Alec Effinger new
The Science Of The Matrix with Laurence Fishburne new
I’m wanting to explore a post US/Mexico/Canadian future that’s cyberpunk but instead of mega corporations in control, it’s cartels and black market Syndicates new
So mechanized trees?
Louis's Yale High Speed Driving
Reddit - Security CTF
Expanding CTF Team (Crypto/Forensics/RE) new
Can anyone help me to do the ctf(hackerone) on micro-cms v2
Remedy by Hexens CTF with 42,000 USD rewards! Free to enter!
steam galgame extracted by krkrextract problem
New Palo Alto Expedition RCE
[CTF] New vulnerable VM at hackmyvm.eu
Blue team advice
How
Problem in install.php in bWAPP
Looking for combined study and participate in CTF
LOOKING FOR A SERIOUS CTF TEAM
Creating a CTF site for a school project
Reddit - Sysadmin
Windows DNS server issue new
Nimble SQL performance policy new
How do you manage power automate connections? ie: service accounts and permissions creep new
Akamai CDN certificate new
Calling all SysAdmins for career support new
Is there any way to ACTUALLY opt out of Copilot in 365 Business and remove it from your environment? new
Fdisk + baby + dd = disaster! new
Universal V4 Print Driver deployment new
Came across something unusual on a clients system running windows 10, thoughts? new
Sudden Intune Access Restriction Jan 20, 2025 new
What are your regulations for unlocking remote users? new
How you would deal with a SW-Vendor which tells you that you need to install the same .MSI 3 times in a row? new
Lobste.rs
VS Code Extension to let LLMs interactively debug your code new
InAppBrowser.com: see what JavaScript commands get injected through an in-app browser (2022) new
Migrating away from bcachefs new
FNV Hash Map new
Documentation on using Renovate with haskell-actions new
Encrypted NixOS home server with passwordless reboot new
Generating Test Values using JavaScript Generators new
Async Pipeline Pattern - Eager to work new
Anatomy of Table-Level Locks: Reducing Locking Impact new
altair-upset: The Evolution of UpSet plots in Altair new
Project 8086 Part II: Real Mode Productivity; or, 8,086 Reasons to Get a Newer Computer new
When the Simplest Concurrent Program Goes Against All Intuition new
Hackaday
Smallest USB Device… So Far new
Modulathe Is CNC Ready And Will Machine What You Want new
Keebin’ with Kristina: the One with the Hardware-Layered Keyboard new
DIY Strontium Aluminate Glows in the Dark new
Time-of-Flight Sensors: How Do They Work? new
You Can Now Play DOOM In Microsoft Word, But You Probably Shouldn’t new
Innovative Clock Uses Printed Caustic Lens new
Bone Filament, For Printing Practice Bones new
Robotics Class is Open new
Hackaday Links: January 19, 2025
Dillo Turns 25, and Releases a New Version
Bambu Connect’s Authentication X.509 Certificate and Private Key Extracted
Ars Technica
The New Glenn rocket’s second stage set to roll to the launch pad on Monday
The New Glenn rocket’s second stage set to roll to the launch pad on Monday
Audi replaces its bestseller—here’s the next Q5 SUV
Audi replaces its bestseller—here’s the next Q5 SUV
The Starliner spacecraft has started to emit strange noises
The Starliner spacecraft has started to emit strange noises
Agatha All Along’s latest teaser hints at one character’s true identity
Agatha All Along’s latest teaser hints at one character’s true identity
City of Columbus sues man after he discloses severity of ransomware attack
City of Columbus sues man after he discloses severity of ransomware attack
Harmful “nudify” websites used Google, Apple, and Discord sign-on systems
Harmful “nudify” websites used Google, Apple, and Discord sign-on systems
Wired
Neo-Nazis Love the Nazi-Like Salutes Elon Musk Made at Trump's Inauguration new
The Trump Memecoin's 'Money-Grab' Economics new
The White House Website Is Basically a Marvel Movie Trailer Now new
The Donald Trump 2.0 Grift Is Already On new
RedNote Recruited US Influencers to Promote App Amid TikTok Ban Uncertainty new
Best Running Underwear to Beat Burn on Your Bits (2025) new
MAGA Influencers Take Their Victory Lap, With Big Tech Picking Up the Tab new
How to Use Parental Controls in Your Google, Apple, and Microsoft Accounts new
How to Use Apple’s Genmoji to Create New Kinds of Emojis new
The 13 Best TVs We’ve Reviewed, Plus Buying Advice (2025) new
Best Cooking Equipment for Meal Kits (2025), Tested and Reviewed new
TikTok Is Already Back Online
Slashdot
CIA's Chatbot Stands In For World Leaders new
Authors Seek Meta's Torrent Client Logs and Seeding Data In AI Piracy Probe new
Meta Announces a New CapCut Rival Called Edits new
Donald and Melania Trump Launch a Pair of Meme Coins new
The Powerful AI Tool That Cops (Or Stalkers) Can Use To Geolocate Photos In Seconds new
AI Benchmarking Organization Criticized For Waiting To Disclose Funding from OpenAI new
France's 2024 Power Grid Was 95% Fossil Free as Nuclear, Renewables Jumped new
Employees of Failed Startups Are at Special Risk of Stolen Personal Data Through Old Google Logins new
Canon's New Livestreaming App Doesn't Support Canon Cameras new
China To Host World's First Human-Robot Marathon new
Donald Trump Is Sworn In as 47th President new
More Teens Say They're Using ChatGPT For Schoolwork, a New Study Finds new
DZone Security
ISO 27001 vs SOC 2: Understanding the Differences
Bye Tokens, Hello Patches
Advanced Bot Mitigation Using Custom Rate-Limiting Techniques
Data-First IDP: Driving AI Innovation in Developer Platforms
AWS Nitro Enclaves: Enhancing Security With Isolated Compute Environments
Buildpacks: An Open-Source Alternative to Chainguard
Security in the Age of AI: Challenges and Best Practices
A Hands-On Guide to Enable Amazon GuardDuty on AWS Account
AI Governance: Building Ethical and Transparent Systems for the Future
Non-Human Identity Security Strategy for Zero Trust Architecture
API and Security: From IT to Cyber
AWS Cloud Security: Key Components, Common Vulnerabilities, and Best Practices
DZone
AWS CloudTrail Insights for AWS Glue new
Seamless Transition from Elasticsearch to OpenSearch new
Real-Time Data Streaming With AI new
Create a Custom Logger to Log Response Details With Playwright Java new
How to Edit a PowerPoint PPTX Document in Java new
Evolution of Recommendation Systems: From Legacy Rules Engines to Machine Learning new
A Guide to Deploying AI for Real-Time Content Moderation new
Building a Reactive Event-Driven App With Dead Letter Queue new
Optimizing Prometheus Queries With PromQL new
Troubleshooting Connection Issues When Connecting to MySQL Server new
Chain-of-Thought Prompting: A Comprehensive Analysis of Reasoning Techniques in Large Language Models new