Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

PacketStorm
Corrupted Microsoft Office Documents Used In Phishing Campaign
Meta Says It Has Taken Down 20 Covert Influence Ops In 2024
Apple Illegally Surveilled and Censored Workers, Employee Lawsuit Says
Severity Of Risk Facing The UK Is Widely Underestimated
Hackers Stole $1.49 Billion In Cryptocurrency To Date In 2024
760k Employee Records From Major Firms Leaked Online
Code Found Online Exploits LogoFAIL To Install Bootkitty Linux Backdoor
Telco Security Is A Dumpster Fire And Everyone's Getting Burned
Starbucks, Grocery Stores Hit By Blue Yonder Ransomware Attack
Chinese Lidar Sensors Pose Hacking Risk To US Defense Equipment
Russian Hacker With $10 Million Bounty On His Head Reportedly Arrested
Telco Engineer Who Spied On Employer For Beijing Gets 4 Years
The Register
Micropatchers share 1-instruction fix for NTLM hash leak flaw in Windows 7+
Facing sale or ban, TikTok tossed under national security bus by appeals court
Salt Typhoon forces FCC's hand on making telcos secure their networks
Badass Russian techie outsmarts FSB, flees Putinland all while being tracked with spyware
Protect your clouds
PoC exploit chains Mitel MiCollab 0-day, auth-bypass bug to access sensitive files
Microsoft: Another Chinese cyberspy crew targeting US critical orgs 'as of yesterday'
Solana blockchain's popular web3.js npm package backdoored to steal keys, funds
Explore strategies for effective endpoint control
British hospitals hit by cyberattacks still battling to get systems back online
BT Group confirms attackers tried to break into Conferencing division
Shape the future of UK cyber security
Reddit - NetSec
Azure CLI Token Leak
Trying to Exploit My Old Android Device, take 2 (CVE-2020-0401, PackageManagerService)
Where There’s Smoke, There’s Fire - Mitel MiCollab CVE-2024-35286, CVE-2024-41713 And An 0day - watchTowr Labs
Bypassing WAFs with the phantom $Version cookie
DroidBot: Insights from a new Turkish MaaS fraud operation | Cleafy Labs
XS-Leaks through Speculation Rules
A step-by-step intro to Client Side Path-Traversal with Eval Villain
OAuth Labs: OAuth 2.0 Vulnerabilites
Pentesting Salesforce Communities
Research: Automated attacks defeats secrets rotation
Mystery google.com certificate issued by Brazilian CA
Bleeping Computer
The Hacker News
Ultralytics AI Library Compromised: Cryptocurrency Miner Found in PyPI Versions new
Learn How Experts Secure Privileged Accounts—Proven PAS Strategies Webinar
Hackers Using Fake Video Conferencing Apps to Steal Web3 Professionals' Data
Romania Cancels Presidential Election Results After Alleged Russian Meddling on TikTok
FSB Uses Trojan App to Monitor Russian Programmer Accused of Supporting Ukraine
Researchers Uncover Flaws in Popular Open-Source Machine Learning Frameworks
Conquering the Complexities of Modern BCDR
More_eggs MaaS Expands Operations with RevC2 Backdoor and Venom Loader
Hackers Leveraging Cloudflare Tunnels, DNS Fast-Flux to Hide GammaDrop Malware
This $3,000 Android Trojan Targeting Banks and Cryptocurrency Exchanges
Critical Mitel MiCollab Flaw Exposes Systems to Unauthorized File and Admin Access
Europol Shuts Down Manson Market Fraud Marketplace, Seizes 50 Servers

Threat Wire

Exploits

LiveOverflow

Bug Bounties

HackerOne Blog
Harnessing the Working Genius for Team Success
Hai’s Latest Evolution: Intelligence, Context, and More Intuitive UX
5 Questions to Assess Your Organization’s Bug Bounty Readiness
Why Retail and E-commerce Organizations Trust Security Researchers During the Holiday Shopping Season
Network and Information Systems Directive (NIS2) Compliance: What You Need to Know
5 Insights Attendees Gained from the Security@ World Tour
Breaking Down the OWASP Top 10: Injection
How Inadequate Authentication Logic Led to an MFA Bypass and Account Takeover
How HackerOne Employees Stay Connected and Have Fun
How REI Strengthens Security with HackerOne’s Global Security Researcher Community
Flexible Data Retrieval at Scale with HAQL
AI in SecOps: How AI is Impacting Red and Blue Team Operations
Reddit - BugBounty
is there anything I'm doing wrong while looking for IDORs? new
I am confused with this bug new
Hunting Bugs for Bike worth $2850
Anyone can help ? android apps connection error when using burpsuite
Recon methodology
What's the best approach for dealing with 403 subdomains?
How do you approach researching on big targets?
Please check this out
Is learning xss worth it now?
PII Disclosure worth $750
Sub needs an overhaul
Website banned me after i started looking for bugs
Pentester Land
Portswigger
Take control of your security posture: The Burp Suite Enterprise Edition winter update
API Security: The 6 biggest challenges AppSec teams face, and how to solve them.
Introducing Burp Suite’s game-changing performance update ⚡🏎️
Burp Suite Performance Improvements
Performance Improvements to table sorting and Repeater
HackerOne Hacktivity

Vulnerabilities

Tools

Exploit Dev

Reddit - Exploit Dev
Exploiting using packets
I absolutely love this I fear for a lack of jobs in it. What other security fields benefit from it?
Mobile Hacking Lab Android training experiences?
Is fuzz testing common practice in SDLC?
where to find applications for discover CVE ?
Ret2 WarGames Platform
WRATH Minecraft exploit
Opinion on MalDev Academy Especially the Database Access
How well does EDR perform against unknown ransomware
Union type confusions
Guidance
Got tired learning windows kernel exp dev
Source Incite
Remote Code Execution with Spring Properties
Google Project Zero
Simple macOS kernel extension fuzzing in userspace with IDA and TinyInst
From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code
The Windows Registry Adventure #4: Hives and the registry layout
Effective Fuzzing: A Dav1d Case Study
Security Researchers
Senior fellow Lex Gill delivers testimony to the Foreign Interference Commission
Something to Remember Us By: Device Confiscated by Russian Authorities Returned with Monokle-Type Spyware Installed
無處可逃：以數碼跨境鎮壓為目的的性別問題武器化
无处可逃：以数码跨国镇压为目的的性别问题武器化
Pas d’échappatoire : La militarisation du genre à des fins de répression numérique transnationale
Не убежать: Использование гендера в качестве орудия цифровых транснациональных репрессий
گریزناپذیر: استفاده از جنسیت به‌عنوان سلاح برای سرکوب فراملی دیجیتال
لا مفرّ: استغلال النّوع الاجتماعيّ لأغراض القمع الرقميّ العابر للحدود
No Escape: The Weaponization of Gender for the Purposes of Digital Transnational Repression
كتب محظورة: تحليل الرقابة على موقع Amazon.com
Banned Books: Analysis of Censorship on Amazon.com
How our new engine framework helped address the critical CUPS vulnerability within the day

Reversing/I like ASM

Reddit - Reverse Engineering
DOS Game "Dune1" Reversing: Room and Globe Viewer from madmoose
Tweaking Stunt Island’s 30-year-old 3D Engine
Dependency Walker Rewrite
my keybord frimwere
I need some to help me extract data from an apk .
Reverse engineering Microsoft BASIC
"Bootkitty": The First UEFI Bootkit Targeting Linux Systems
Everyday Ghidra: Ghidra Data Types — Creating Custom GDTs From Windows Headers — Part 2
Supporting 65816 Hardware in the Chiplab
LLVM-powered devirtualization
GitHub - nevillegrech/gigahorse-toolchain: A binary lifter and analysis framework for Ethereum smart contracts
Reversed .eye format
Reddit - Game Hacks
What's the point of cheating? No one can explain it. No one can justify it new
Anyone know how to boot servers???
BO6 & MW3 UNDETECTED UNLOCK ALL TOOL | PERMA UAV TOOL | AIMBOT,WALLS CHEATS | BOT LOBBIES
Bleed Services (Console Services!)(BO6 Unlock All, MWIII Unlock All)
Warzone features
if anyone hacks on RUST lmk i need content and dont want to hack myself lmk dm me
Bleed Services (Console Services!)(BO6 Unlock All, MWIII Unlock All)
BO6 Service Ps5,Ps4,Xbox1 & Pc
LIFETIME UNLOCK ALL TOOLS AND CHAIRS FOR BO6 & MORE - AQUA SERVICES
HYPEX.TO PUBG MOD ✔️ CHAMS ✔️ NORECOIL✔️ MISCS 🛡️ UPDATED SINCE 2018 ⭐ 1 YEAR+ UD ⭐
BLACK OPS 6 AND WARZONE TOOLS!!! RESELLER WANTED
BO6 & MW3 UNDETECTED UNLOCK ALL TOOL | PERMA UAV TOOL | AIMBOT,WALLS CHEATS | BOT LOBBIES
Reddit - REGames
StackExchange - ReverseEngineering
How can I reverse engeneer a communication that looks to be always random? new
Reverse Engineering S/EX RE-MAN BOARD INTERFACE SR2 SL (MRD-45-2276)
Find all calls of a given function with Ghidra
Analysing an executable with a 24bit segmented address space
can we decrypt a hash function of SHA256
Enigma 5 unpack unpacking [closed]
Ghidra find xref function chain
Studying obfuscation
Looking for DLL source code for spawning vehicles in GTA III [closed]
Functions in Ida are divided into many local functions, how to remove unnecessary transitions?
How to unlock the ISP-blocked 4th Ethernet port on a 812Gv2 device
What scripts or plugins would you like to see for Ghidra? [closed]

Guided Hacking

Malware/APT

Crypto

Seytonic

Podcasts

Security Weekly
Hacker Gadgets - PSW #853
Hacker Heroes - Aaron Turner - PSW Vault
Confessions of a Cyber Criminal Stalker - Ken Westin - PSW #852
No CVE and No Accountability - Ed Skoudis - PSW #851
Cybersecurity For Schools - Kayne McGladrey - PSW #850
Shadow IT and Security Debt - Dave Lewis - PSW #849
Secure By Default - How do we get there? - Andy Syrewicze - PSW #848
Effective Operational Outcomes - Ken Dunham - PSW #847
The Code of Honor: Embracing Ethics in Cybersecurity - Ed Skoudis - PSW #846
Analyzing Malware at Scale - John Hammond - PSW #845
AI in Cyber & Addressing Analyst Burnout - Kayla Williams - PSW #844
Exploding Pagers - Tod Beardsley - PSW #843
Risky.Biz
Risky Business #773 -- Cybercriminals are dropping like flies in Russia
Risky Business #772 -- Salt Typhoon is truly a national security disaster
Risky Business #771 -- Palo Alto's firewall 0days are very, very stupid
Risky Business #770 -- A Russian IR guy discovers extremely cool spookware
Risky Biz Soap Box: Why black box email security is dead
Risky Business #769 -- Sophos drops implants on Chinese exploit devs
Risky Business #768 -- CSRB will investigate China's Wiretap Hacks
Risky Biz Soap Box: Thinkst Canary's decade of deception
Risky Business #767 – SEC fines Check Point, Mimecast, Avaya and Unisys over hacks
Risky Business #766 – China hacks America's lawful intercept systems
Snake Oilers: Sandfly Security, Permiso and Wiz
Risky Business #765 -- The Kaspersky switcheroo
The CyberWire
Aviv Grafi: There needs to be fundamental changes in security. [CEO] [Career Notes] new
Digital Mindhunters: a novel look at cybersecurity and artificial intelligence. [Special Edition] new
The JPHP loader breaking away from the pack. [Research Saturday]
The NTLM bug that sees and steals.
Dismantling the Manson cybercrime market.
The end of MATRIX.
Nam3l3ss but not harmless.
The international effort making digital spaces safer.
Debra Danielson: Be fearless. [CTO] [Career Notes]
Leaking your AWS API keys, on purpose? [Research Saturday]
Science fiction meets reality with Ronald D. Moore. [T-Minus Deep Space]
Solution Spotlight: Simone Petrella talking with Lee Parrish, CISO of Newell Brands, about his book and security relationship management. [Special Edition]
Cyber Security Interviews
ISC Daily Stormcast
ISC StormCast for Friday, December 6th, 2024
ISC StormCast for Thursday, December 5th, 2024
ISC StormCast for Wednesday, December 4th, 2024
ISC StormCast for Tuesday, December 3rd, 2024
ISC StormCast for Monday, December 2nd, 2024
ISC StormCast for Wednesday, November 27th, 2024
ISC StormCast for Tuesday, November 26th, 2024
Darknet Diaries
152: Stacc Attack
151: Chris Rock
150: mobman 2

Threat Intel

Privacy/VPNs

Slashdot - Rights
US Government Orders Nationwide Testing of Milk for Bird Flu to Stop the Virus's Spread
TikTok is One Step Closer to Being Banned in the US
Backdoor in Compromised Solana Code Library Drains $184,000 from Digital Wallets
Hard Drive Tossed in Landfill With Bitcoin Now Worth $800 Million. Lawsuits Continue
Hard Drive Tossed in Landfill With Bitcoin Now Worth $8 Billion. Lawsuits Continue
Is Europe Better Prepared to Protect Undersea Internet Cables?
Internet Archive: We Will Not Appeal 'Hachette v. Internet Archive' Ruling
America's Next NASA Administrator May Be Former SpaceX Astronaut Jared Isaacman
Founder of Cryptocurrency Lender 'Celsius Network' Pleads Guilty to Fraud
US Officials Urge Americans to Use Encrypted Apps Amid Unprecedented Cyberattack
FTC Bans Location Data Company That Powers the Surveillance Ecosystem
Mexican Cartels Lure Chemistry Students To Make Fentanyl
Reddit - Privacy
How to encrypt the data to cloud storage new
how safe is it to drive a car with sunset 3g? new
Microsoft teases Copilot Vision, the AI sidekick that judges your tabs new
Biometrics upgrades arriving at borders (but check the schedule for updates) new
browser extension that automatically deletes history? new
Help me find the name of a fully virtual OS new
Bluesky CEO Jay Graber is reshaping social media, but advertising isn’t off the table new
Any guide how to remove my name out of as many databases as possible? new
I bought my dad a new laptop recently. What are the "do's and don'ts" for him making sure it stays healthy (performance, security, etc)? new
Private heart rate monitor - Bangle.js + Polar H10 new
Web Privacy is getting more and more difficult or am I crazy? new
Pretty low threat level, advice would still be appreciated new
Reddit - VPN
What's the most UNEXPECTED thing that happened to you as a result of being on a VPN? new
Iphone 11 can't connect to vpn but iphone 14 can
How to change location using a VPN on my router?
Problem with DRM using VPN
Can Outlook and Teams Track My Location If I Use VPN While Traveling?
Best method to VPN into my home via iPhone
If I buy a prepaid UK Mastercard gift card, can I use it to buy discovery+ over a VPN?
Does using vpn allow me to use my home country's mobile data?
What is the difference between third-party VPNs and Wireguard?
How do you choose a VPN ? Is there something i can analyse to choose the best option for me ?
Need help or advice
Asking for help
PrivacyTools.io
EFF
FTC Rightfully Acts Against So-Called “AI Weapon Detection” Company Evolv
This Bill Could Put A Stop To Censorship By Lawsuit
Let's Answer the Question: "Why is Printer Ink So Expensive?"
Location Tracking Tools Endanger Abortion Access. Lawmakers Must Act Now.
Top Ten EFF Digital Security Resources for People Concerned About the Incoming Trump Administration
Speaking Freely: Aji Fama Jobe
🍿 Today’s Double Feature: Privacy and Free Speech
Amazon and Google Must Keep Their Promises on Project Nimbus
One Down, Many to Go with Pre-Installed Malware on Android
Tell the Senate: Don’t Weaponize the Treasury Department Against Nonprofits
EFF Tells the Second Circuit a Second Time That Electronic Device Searches at the Border Require a Warrant
Looking for the Answer to the Question, "Do I Really Own the Digital Media I Paid For?"

Help Wanted

Reddit - AskNetSec
Reddit - Netsec Students
Coursera Courses new
How to start with Ethical hacking or hacking?
Whats the best cyber sec certifications timeline in order for very beginners with 0 knowledge
Stackoverflow - Security
"How can beginners start a career in cybersecurity and build a successful business in this field?" [closed] new
High max-age in strict-transport-security is seen as 1 new
How API providers handle webhook callback functions?
block cheating using tamper monkey and ant-captcha api [closed]
Best Practices or Frameworks for Secure Data Handling in Complex Data Pipelines
Container image security scan - wildly different results docker hub vs gitlab ultimate scan [closed]
Is there a way to prevent React from obscuring error messages in production?
IPTables Redirection Issue
SwiftShield Obfuscation Fails to Exclude Pods Files Properly
I was doing 2 CTF exercises from college and I reached a point where I can't progress anymore, if anyone can help me, I would…
I'm looking for advice on building a checklist of best practices to ensure I include in my project before beggining
Format string vulnerabilities
Stack Exchange
OAuth2 authorization code grant: in the case of a public client, what is the point of exchanging the authorization code for a token? new
OAuth2 authorization code grant: how does redirection work for mobile applications? new
Microsoft Identity vs ASP.NET Core Identity
MacOS: How to verify dialogue box is genuinely from Apple (not Malware)
Why might an operating system require a restart after N failed login attempts?
Microphone and screen recording [closed]
Oauth2 client credentials grant: does authorization server always have to return an opaque access token?
Why is a scammer requesting a contact via WhatsApp and not SMS? [closed]
How could Telegram OTP password be compromised / hacked?
Android APK file leak from internal testing [closed]
What's the best method of securing keys/passwords used by a Powershell Script that runs when no user is logged in, using only one server, for…
of the cookies created by OTHER websites, which ones would the browser allow a website to access?

Locks/Social Engineering

Hak5

Security Blogs

Whitehat Security Blog
HITB News
Found on VirusTotal: The world’s first UEFI bootkit for Linux
OpenAI is at war with its own Sora video testers following brief public leak
North Korean hackers posing as IT workers steal over $1B in cyberattack
WhatsApp: NSO Group Operates Pegasus Spyware for Customers
Korea extradites Russian, Vietnamese suspects linked to $16M ransomware scheme
CISA Director Jen Easterly, in Place Since 2021, to Step Down
Man sick of crashes sues Intel for allegedly hiding CPU defects
North Korean hackers target cryptocurrency with malware
Law enforcement operation takes down 22,000 malicious IP addresses worldwide
Here’s the paper no one read before declaring the demise of modern cryptography
OpenAI launches ChatGPT with Search, taking Google head-on
Chinese attackers accessed Canadian government networks – for five years
The RISKS Digest
Kaspersky Blog
Tor Browser and anonymity: what you need to know | Kaspersky official blog
New 2024 NIST requirements for password strength and storage
Security and privacy settings in adidas Running | Kaspersky official blog
ID card selfie: pros and cons | Kaspersky official blog
Security and privacy settings in MapMyRun | Kaspersky official blog
Which cybersecurity processes can be automated with AI? | Kaspersky official blog
Security and privacy settings in Nike Run Club | Kaspersky official blog
What to do if you receive a sextortion email | Kaspersky official blog
Kaspersky apps are no longer available on Google Play: what to do? | Kaspersky official blog
Transatlantic Cable podcast episode 365 | Kaspersky official blog
How to snoop on what an Apple Vision Pro user is typing | Kaspersky official blog
Is technology increasing potential threats in relationships? | Kaspersky official blog
Adam Shostack & friends
Graham Cluley
Russian money-laundering network linked to drugs and ransomware disrupted, 84 arrests
Smashing Security podcast #396: Dishy DDoS dramas, and mining our minds for data
AI chatbot startup WotNot leaks 346,000 files, including passports and medical records
Ransomware-hit vodka maker Stoli files for bankruptcy in the United States
Tech support scams leverage Google ads again and again, fleecing unsuspecting internet users
The AI Fix #27: Why is AI full of real-life Bond villains?
North Korean hackers masquerade as remote IT workers and venture capitalists to steal crypto and secrets
No guarantees of payday for ransomware gang that claims to have hacked children’s hospital
UK hospital, hit by cyberattack, resorts to paper and postpones procedures
Mimic ransomware: what you need to know
Smashing Security podcast #395: Gym hacking, disappearing DNA, and a social lockout
The AI Fix #26: Would AI kill sentient robots, and is water wet?
Security Bloggers Network
Best Practices for Machine Identity Management new
Mastering PAM to Guard Against Insider Threats new
Enhancing Data Security with Advanced Secrets Rotation new
Qualys DAST: Key Features and Alternatives new
Lest We Forget: United States National Pearl Harbor Remembrance Day, In Memoriam: The 2,403
How Secure Vaulting Keeps Your Secrets Safe
Exploring the Future of Cloud-Native Security Solutions
Emerging Ransomware Group Termite Claims Attack on Blue Yonder
Attention CISOs: The New EU PLD Product Liability Directive Is Effective Now – Compliance and Cybersecurity Readiness Required
DEF CON 32 – Encrypted Newspaper Ads In The 19th Century
Daniel Stori’s Turnoff.US: ‘Super Power’
Stoli Vodka: Bankrupt After Ransomware Attack
Rapid7
Metasploit Weekly Wrap-Up 12/06/2024
Rapid7 Extends Cloud Security Capabilities with Updates to Exposure Command
Black Basta Ransomware Campaign Drops Zbot, DarkGate, and Custom Malware
Lorex 2K Indoor Wi-Fi Security Camera: Multiple Vulnerabilities (FIXED)
Expanded SOC Coverage Into AWS Environments with Rapid7 MXDR
Why Cybercriminals Are Not Necessarily Embracing AI
Metasploit Weekly Wrap-up 11/29/2024
New “CleverSoar” Installer Targets Chinese and Vietnamese Users
Metasploit Weekly Wrap-Up 11/22/2024
A Bag of RATs: VenomRAT vs. AsyncRAT
Multiple Vulnerabilities in Wowza Streaming Engine (Fixed)
Rapid7 Extends AWS Support to Include Coverage for Newly-Launched Resource Control Policies (RCPs)
ThreatPost
Hacker News (YCombinator) - Security
Hacker.txt (1993) new
Nyxt: The Hacker's Browser new
Brian Krebs Investigates Internet's Most Vicious Hackers–From a Secret Location new
Ultralytics AI model hijacked to infect thousands with cryptominer new
Police illegally sell restricted weapons, supplying crime new
DSPy – Programming–not prompting–LMs
United Health CEO Decries "Aggressive" Media Coverage in Leaked Recording
Vanir: Open-Source Security Search and Patch Validation Tool
Serverless VPN Self-hosted Be your own private on-demand VPN provider
Romania cancels election after systems targeted in cyberattacks
ExxonMobil's Alleged Hack-for-Hire Campaign Targeting Climate Activists
Install Docker Natively on Android Phone and Use It as a Home Server
digitalmunition
Hacker Noon #Security
Synthetic Data in Face Recognition: A Game Changer or Just Hype? new
The HackerNoon Newsletter: Wall Street (Probably) Doesnt Want You to Know About Duck Code (12/7/2024) new
Ethical Considerations in QAnon Authorship Attribution Research new
Social Impacts, Global Reach, and the Mystery of 'Q' new
Machine Learning Reveals the Faces Behind Viral QAnon Posts new
The TechBeat: No, You Don't Need a Highly Specialized Team to Build Your SaaS Application (12/7/2024)
Anaxi Labs And Carnegie Mellon University’s CyLab Unveil a Breakthrough Proof System
Fight For Your Right To Use Bitcoin As It Was Intended To Be Used
A Pentester Took Apart a Website’s Code to Prove It Was Totally Pointless
Sankalp Kumar: Safeguarding Millions Through Cybersecurity Innovation
Web3-native Advertising Platform Slise to Be Acquired by Media Conglomerate Web3 Media Ventures
The Battle Against DDoS Attacks in Decentralized Finance
Wired - Security
US Officials Recommend Encryption Apps Amid Chinese Telecom Hacking new
The Real Story of “The Order”
She Escaped an Abusive Marriage—Now She Helps Women Battle Cyber Harassment
A New Phone Scanner That Detects Spyware Has Already Found 7 Pegasus Infections
Senators Warn the Pentagon: Get a Handle on China’s Telecom Hacking
She Was a Russian Socialite and Influencer. Cops Say She’s a Crypto Laundering Kingpin
With Threats to Encryption Looming, Signal’s Meredith Whittaker Says ‘We’re Not Changing’
FTC Says Data Brokers Unlawfully Tracked Protesters and US Military Personnel
He Got Banned From X. Now He Wants to Help You Escape, Too
Top US Consumer Watchdog Has a Plan to Fight Predatory Data Brokers
Are You Being Tracked by an AirTag? Here’s How to Check
Malicious Ads in Search Results Are Driving New Generations of Scams
Control C
Krebs on Security
U.S. Offered $10M for Hacker Just Arrested by Russia
Why Phishers Love New TLDs Like .shop, .top and .xyz
Feds Charge Five Men in ‘Scattered Spider’ Roundup
Fintech Giant Finastra Investigating Data Breach
An Interview With the Target & Home Depot Hacker
Microsoft Patch Tuesday, November 2024 Edition
FBI: Spike in Hacked Police Emails, Fake Subpoenas
Canadian Man Arrested in Snowflake Data Extortions
Booking.com Phishers May Leave You With Reservations
Change Healthcare Breach Hits 100M Americans
The Global Surveillance Free-for-All in Mobile Ad Data
Brazil Arrests ‘USDoD,’ Hacker in FBI Infragard Breach
Elttam
Abusing Amazon VPC CNI plugin for Kubernetes
PwnAssistant - Controlling /home’s via a Home Assistant RCE
Naked Security
Upgrade your Sophos Firewall to v21 today
Sophos named a Gartner® Peer Insights™ Customers’ Choice for Managed Detection and Response (MDR) Services for the 2nd time
A milestone for Sophos NDR: 1,000 customers and counting
Sophos XDR: New generative AI functionality and case investigation enhancements
Sophos MDR blocks and tracks activity from probable Iranian state actor “MuddyWater”
November Patch Tuesday loads up everyone’s plate
VEEAM exploit seen used again with a new ransomware: “Frag”
Schneier on Security
Friday Squid Blogging: Safe Quick Undercarriage Immobilization Device
Detecting Pegasus Infections
AI and the 2024 Elections
Algorithms Are Coming for Democracy—but It’s Not All Bad
Details about the iOS Inactivity Reboot Feature
Friday Squid Blogging: Squid-Inspired Needle Technology
Race Condition Attacks against LLMs
NSO Group Spies on People on Behalf of Governments
What Graykey Can and Can’t Unlock
Security Analysis of the MERGE Voting Protocol
Friday Squid Blogging: Transcriptome Analysis of the Indian Squid
The Scale of Geoblocking by Nation
Linux Security
OpenSUSE Leap Micro 6.1: Elevating Security with Enhanced 2FA, Immutability & Other Improvements
The End of the Road for Linux 6.11: A Call to Upgrade to Kernel 6.12
A Linux Admin's Guide to Tackling Emerging Cloud-Native Security Risks
Leveraging Insights from the Linux Foundation's Census III Report for More Secure Linux Administration
Chrome 131 Released: Emergency Security Update Fixes Over a Dozen Significant Vulns
From Wayland Fixes to Security Boosts: Examining Qt 6.8.1's Impact on Linux Administration
Exploring Arch Linux 2024.12.01: Security Implications & Notable Enhancements for Linux Admins
Deck the Halls with Enhanced Security: Linux Kernel 6.13's Top Features & Improvements
Lessons from Bootkitty: Securing Linux Systems Against UEFI Intrusions
Why ITDR is Crucial for Securing Your Linux Systems
How Passkey Solutions Enhance Open-Source Security
CISA's Red Team Assessment on a Critical Infrastructure Organizations Aims to Enhance Cyber Resilience
Dark Reading
Library of Congress Offers AI Legal Guidance to Researchers
African Law Enforcement Nabs 1,000+ Cybercrime Suspects
Onapsis Expands Code Security Capabilities to Accelerate and De-Risk SAP BTP Development Projects
Wyden and Schmitt Call for Investigation of Pentagon's Phone Systems
Misconfigured WAFs Heighten DoS, Breach Risks
BigID Releases Data Activity Monitoring to Extend DDR, Detect Malicious Actors, and Strengthen Data Security Posture
KnowBe4 Releases the Latest Phishing Trends in Q3 2024 Phishing Report
Cyber-Unsafe Employees Increasingly Put Orgs at Risk
'Bootkitty' First Bootloader to Take Aim at Linux
Name That Edge Toon: Shackled!
Does Your Company Need a Virtual CISO?
2 UK Hospitals Targeted in Separate Cyberattacks
Securelist
Exploits and vulnerabilities in Q3 2024
Our secret ingredient for reverse engineering
Kaspersky Security Bulletin 2024. Statistics
Horns&Hooves campaign delivers NetSupport RAT and BurnsRAT

Security in Mainstream Media

Google News Hacking
He Investigates the Internet’s Most Vicious Hackers—from a Secret Location - MSN new
He Investigates the Internet’s Most Vicious Hackers—From a Secret Location - The Wall Street Journal new
Hackers Infect 8,000,000 Smartphones As ‘SpyLoan’ Drains Bank Accounts, Steals Sensitive Data for Extortion: McAfee Alert - The Daily Hodl new
‘Salt Typhoon’ unleashed: How Chinese hackers targeted America’s communication backbone - The Economic Times new
A huge hack of U.S. phone companies means your text messages may not be safe - CBC.ca new
Feds urge public to send encrypted text messages after Chinese hacking campaign - Baltimore Sun
a16z-backed Toka wants to help US agencies hack into security cameras and other IoT devices - TechCrunch
Feds: When an iPhone texts an Android, hackers might be watching - Yahoo! Voices
How Subaru Hacked The Mind Of The Average Car Buyer - The Autopian
What is Salt Typhoon? A security expert explains the Chinese hackers and their attack on US telecommunications networks - The Conversation
Hacking Humans 2.0: Redefining Health with Gut Bacteria - Food Institute Blog
Man cleared of wrongdoing in alleged hacking of East Texas city's computer system - Longview News-Journal
Google Cyber Security
Harmonizing risk and consequence strategies across IT and OT environments for greater cyber resilience - IndustrialCyber new
Cybersecurity Insurance Market Securing Enterprises Against Evolving Digital Threats - openPR new
Brussels adopts new laws to strengthen cybersecurity capabilities in the EU - The Diplomat in Spain new
Critical Windows Zero-Day Vulnerability Lets Attackers Steal Users NTLM Credentials - CybersecurityNews new
MCMC issues cybersecurity guidelines to bolster network security - theSun new
FBI Says Everyone Should Use Encryption Apps for Their Calls and Texts After China Hack: ‘Encryption Is Your Friend’ - Yahoo! Voices new
US govt says Cisco gear often targeted in China's Salt Typhoon attacks on 8 telecommunications providers — issues Cisco-specific advice to patch networks to fend… new
73% establishments failed to report cyber attacks: Survey - The Times of India new
US alleges China hacked calls of 'very senior' political figures, official says - Reuters new
Phishing Attacks Are Evolving – Is Your Mobile Safe from This Sneaky Cyber Security Threat? - Digital Information World new
Apple, Android users on notice from FBI, CISA about texts amid 'massive espionage campaign' - USA TODAY new
Top Cybersecurity Stock Picks for 2025 - MSN new

Thirsty for more

DZone
Hacker News (YCombinator)
The Sony Vaio PCG-XR MiniDisc Laptop new
Syrian government falls in end to 50-year rule of Assad family new
AI Agents as Neuro-Symbolic Systems? [video] new
What Arm's CEO makes of the Intel debacle new
Hacker.txt (1993) new
Honda's award winning commercial "Cogs" [video] new
Nyxt: The Hacker's Browser new
Assad Has Left Damascus new
Composite and hard reset mods for the Tandyvision One new
Brian Krebs Investigates Internet's Most Vicious Hackers–From a Secret Location new
Airline informant received thousands from passenger cash seizures new
Lower-cost sodium-ion batteries are finally having their moment new
Reddit - Cyberpunk
New additions to The CHIMERA. My IRL Cyberpunk Miata build. new
Robot in China persuades others to 'go home' new
I thought what I'd do was d̸̟̯̻̅̚e̷̛̞͚̪̐̈n̵̼̼͖͂̓y̵̪̥̔ ̵̫͓̠̾͝ ̷̛͈̤̭ ̵̟̙͗͠ ̶̼͑̈́̓ ̷̹̪̗̀̃ď̴̨̘ͅȩ̷͆̿f̶͖͋̅e̴̪̲̽͐͌n̵͍̒̒ͅd̶͙̖̑̽̅ ̵̜̰̓͊͋ ̸̹̑̀̐ ̷̯̗̩͗ ̴̞̭̀d̵̝̖̼̆e̸̪̾p̶͚̕o̶͔̊̈̕s̸̲̝͎͌̄͂ē̴̻̙̄ new
Scammers made $1.9 million using fake AI video of the Canadian Prime Minister and Elon Musk new
Murdered Insurance CEO Had Deployed an AI to Automatically Deny Benefits for Sick people.
Most cyberpunk thing I've read in a while
this actually is the cyberpunk i expected
"Orwell" Management watermark on video footage, irony is our reality.
This feels so dystopian
Don't have your pocket con? No transo, pre-tek!
In the future all keyboards will have monitors & processors attached, this "wireless" gimmick will fade away, trust me #OnoSendai
Happy Holo-days 🎅🤖
Reddit - Security CTF
Need help with web CTF
What do you consider an interesting Reverse CTF challenge ?
Where to get CTFs from?
[Worldwide CTF] Join Cyber League 2.0, a next-gen CTF competition
Need some help in the a steganography Challenge
Guide: How to Get Started in CTFs and Join a Team (From Personal Experience)
New Windows OS PE!
Reddit - Sysadmin
cannot connect due to to many active connections to this desktop new
I Was Overdue for a Screw Up new
question about DMARC new
Why on earth does the world need another uptime monitoring tool? new
Error when I save PowerShell modules on network share new
Hardware that were *better* in the past than today new
US sys admin, please write your senators and representatives regarding FLSA exempt new
Just started as an Oracle HCM sys admin new
This call had my blood boiling new
The senior Linux admin never installs updates. That's crazy, right? new
Windows 2k19 DC is trying to use FRS for sysvol replication. new
Potential Internet Outage new
Lobste.rs
Jepsen Test on Patroni: A PostgreSQL High Availability Solution new
When is inlining useful? new
Galloping Search new
How a solar Minecraft server is changing the way we play video games new
Understanding the Odin Programming Language new
How to manage services in FreeBSD jails with Ansible new