Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

Bleeping Computer
Hackers turn ScreenConnect into malware using Authenticode stuffing new
Google releases Gemini CLI with free Gemini 2.5 Pro new
Citrix warns of NetScaler vulnerability exploited in DoS attacks new
WinRAR patches bug letting malware launch from extracted archives new
New 'CitrixBleed 2' NetScaler flaw let hackers hijack sessions new
Google rolls out text-to-image model Imagen 4 for free
Claude catches up to ChatGPT with built-in memory support
Google Cloud donates A2A AI protocol to the Linux Foundation
The Hacker News
Citrix Bleed 2 Flaw Enables Token Theft; SAP GUI Flaws Risk Sensitive Data Exposure new
SonicWall NetExtender Trojan and ConnectWise Exploits Used in Remote Access Attacks new
North Korea-linked Supply Chain Attack Targets Developers with 35 Malicious npm Packages new
New U.S. Visa Rule Requires Applicants to Set Social Media Account Privacy to Public
Researchers Find Way to Shut Down Cryptominer Campaigns Using Bad Shares and XMRogue
Hackers Target Over 70 Microsoft Exchange Servers to Steal Credentials via Keyloggers
U.S. House Bans WhatsApp on Official Devices Over Security and Data Protection Issues
APT28 Uses Signal Chat to Deploy BEARDSHELL Malware and COVENANT in Ukraine
China-linked Salt Typhoon Exploits Critical Cisco Vulnerability to Target Canadian Telecom
XDigo Malware Exploits Windows LNK Flaw in Eastern European Government Attacks
⚡ Weekly Recap: Chrome 0-Day, 7.3 Tbps DDoS, MFA Bypass Tricks, Banking Trojan and More
200+ Trojanized GitHub Repositories Found in Campaign Targeting Gamers and Developers
PacketStorm
The Register
Amazon's Ring can now use AI to 'learn the routines of your residence' new
Computer vision research feeds surveillance tech as patent links spike 5× new
Supply chain attacks surge with orgs 'flying blind' about dependencies new
UK govt dept website that campaigns against encryption hijacked to advertise ... payday loans new
Beware of fake SonicWall VPN app that steals users' credentials
Four REvil ransomware crooks walk free, escape gulag fate, after admitting guilt
Psylo browser tries to obscure digital fingerprints by giving every tab its own IP address
Iran cyberattacks against US biz more likely following air strikes
Experts count staggering costs incurred by UK retail amid cyberattack hell
Looks like Aflac is the latest insurance giant snagged in Scattered Spider’s web
Qilin ransomware top dogs treat their minions to on-call lawyers for fierier negotiations
Attack on Oxford City Council exposes 21 years of election worker data
Reddit - NetSec
Security Benchmarking Authorization Policy Engines new
FileFix – New Alternative to ClickFix Attack
Remote code execution in CentOS Web Panel - CVE-2025-48703
Iran's Internet: A Censys Perspective
Remote Code Execution on 40,000 WiFi alarm clocks
What secures LLMs calling APIs via MCP? A stack of OAuth specs—here’s how they fit together
Unexpected security footguns in Go's parsers
AntiDot Android Malware Analysis
The Jitter-Trap: How Randomness Betrays the Evasive
Fault Injection - Follow the White Rabbit
CVE-2025-34508: Another File Sharing Application, Another Path Traversal
Telegram messenger's ties to Russia's FSB revealed in new report

Threat Wire

Bug Bounties

Vulnerabilities

CXSecurity
Microsoft Excel LTSC Professional Pilus 2021 - Microsoft® Word LTSC MSO (16.0.14334.20090) 64-bit - Remote Code Execution Bypa new
Windows File Explorer Windows 11 (23H2) NTLM Hash Disclosure
MOBOTIX IP cameras Unauthenticated access
RansomLord (NG v1.0) anti-ransomware exploit tool
Ingress-NGINX 4.11.0 Remote Code Execution (RCE)
Fortra GoAnywhere MFT 7.4.1 Authentication Bypass
Microsoft Excel Remote Code Execution Vulnerability
Freefloat FTP Server 1.0 Remote Buffer Overflow
Kentico Xperience 13.0.178 Cross Site Scripting
AirKeyboard iOS App 1.0.5 Remote Input Injection
Skyvern 0.1.85 Remote Code Execution (RCE) via SSTI
Microsoft Windows 11 Version 24H2 Cross Device Service Elevation of Privilege
Full Disclosure
Remote DoS in httpx 1.7.0 – Out-of-Bounds Read via Malformed <title> Tag new
CVE-2025-32978 - Quest KACE SMA Unauthenticated License Replacement
CVE-2025-32977 - Quest KACE Unauthenticated Backup Upload
CVE-2025-32976 - Quest KACE SMA 2FA Bypass
CVE-2025-32975 - Quest KACE SMA Authentication Bypass
Disclosure Yealink Cloud vulnerabilities
: "Glass Cage" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885)
SEC Consult SA-20250612-0 :: Reflected Cross-Site Scripting in ONLYOFFICE Docs (DocumentServer)
SEC Consult SA-20250611-0 :: Undocumented Root Shell Access on SIMCom SIM7600G Modem
Call for Applications: ERCIM STM WG 2025 Award for the Best Ph.D. Thesis on Security and Trust Management (July 31, 2025)
SEC Consult SA-20250604-0 :: Local Privilege Escalation and Default Credentials in INDAMED - MEDICAL OFFICE (Medical practice management) Demo version
Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain → Secure Enclave Key Theft, Wormable RCE, Crypto Theft
NIST National Vulnerability Database
Sixth PQC Standardization Conference new
Now Available: NIST NCCoE Chatbot Internal Report
New NIST 5G Cybersecurity White Paper - Network Security Design Principles
0day Today

LiveOverflow

Exploit Dev

Security Researchers
Why is there no consistent single signon API flow?
My a11y journey
Same Sea, New Phish: Russian Government-Linked Social Engineering Targets App-Specific Passwords
Locally hosting an internet-connected server
Unspoken Implications: A Preliminary Analysis of Bill C-2 and Canada’s Potential Data-Sharing Obligations Towards the United States and Other Countries
Secure Enclaves for Offensive Operations (Part II)
Graphite Caught: First Forensic Confirmation of Paragon’s iOS Mercenary Spyware Finds Journalists Targeted
Streaming Zero-Fi Shells to Your Smart Speaker
Techno-Legal Internet Controls in Indonesia and Their Impact on Free Expression
How Twitter could (somewhat) fix their encrypted DMs
Twitter's new encrypted DMs aren't better than the old ones
Tokenization Confusion
Reddit - Exploit Dev
GHOST: A Clean-Label Visual Backdoor Attack on Vision-Language Mobile Agents
What do you know as an exploit dev?
Metasploit module development - Chatterbox
Race conditions in Linux kernel perf events
Binder-Based Use-After-Free Leading to kASLR Bypass and Root Access on Android
What do you need to know to break a high-complex protection (like Denuvo)?
GhidraMCP on Claude for RE (setup)
Are my ressources good and enough?
Hijacking Execution: A Practical Guide to PT_LOAD Injection and ELF Entry Point Manipulation
Learning RE and Exploit
What will happen if LLM can execute scripts and invoke more tools in a sandbox?
Router exploit research/study group
Source Incite
Google Project Zero

Reversing/I like ASM

StackExchange - ReverseEngineering
Prevent WinDbg from switching process context while stepping through syscall
Keyboard firmware problem
Help with editing some elements from a decompiled APK
Pronto Peel Bluetooth IR blaster
Reverse Engineering an IR Signal from a Remote
MCU processor name for MG5 instrument clustering
Format of I/Q signal for SDR
Reddit - Reverse Engineering
Release Ghidra 11.4 · NationalSecurityAgency/ghidra
A DLL Injection Detector for Windows
Beginner Malware Analysis: DCRat with dnSpy
Frida 17.2.0 Released
Shooting Bugs-in-a-Barrel With AI-Driven Binary Analysis on a TOTOLINK Router
NHook – Minimal Inline Hooking Library for Windows x64
Animal Crossing Has Been Decompiled
Demystifying API Hooking on Windows ARM
Basic & Necessary Tooling for Creating FPGA Retro Hardware Game Cores by Pramod
Private Server for a MMOTPS game
Online Tool for Assembly ↔ Opcode Conversion + Emulation
Bypassing the Renesas RH850/P1M-E read protection using fault injection
Reddit - Game Hacks
Full game with the best cheat for arena breakout infinite. ABI hacks.
Looking for a dev
Rp cracking?
Can I find out how a certain action is being stored in memory?
AIMEX CHEATS COD BLACK OPS 6 / WARZONE CHEAT | Aimbot | ESP | Radar | Zombie | Undetected + Streamproof | EASY PAYMENT &…
Steam Game Idler - A Steam card farmer & achievement unlocker
Adventure Capitalist Steam Deck Hack June 2025
BEST DAYZ CHEAT
Looking for Fortnite hacks with controller support
PROOFCORE.IO | UNDETECTED PRIVATE FORTNITE CHEAT | PLAYER ESP | LOOT ESP | ADVANCED AIMBOT | RADAR | STREAMPROOF | SPOOFER + CLEANER |
Showcase menu for best arena breakout infinite hack Ancient. Cheat for ABI. Getcheats.io
UNITEDCHEATS | UNDETECTED | 1000+ CUSTOMERS | 24/7 SUPPORT
Reddit - REGames

Guided Hacking

Malware/APT

Reddit - Malware
Lumma Stealer
my own implementation of hellsgate technique
Maldev learning path
Malicious script from gate.com running on startup — can't find where it's coming from
Black Hat Zig: Zig for offensive security.
Summer is Here and So Are Fake Bookings
Analysis of spyware that helped to compromise a Syrian army from within without any 0days
Babuk Ransomware Analysis with IDA Pro
Worms🪱 - A Collection of Worms for Research & RE
Cute RATs 🐀 – A Collection of Remote Access Trojans for Research & RE
New Malware: Noodlophile Stealer and Associated Malware Campaign
Don't Fall For It: Fake Bitdefender Site Will Infect Your PC With Malware | PCMag
Unit42
Threat Brief: Escalation of Cyber Risk Related to Iran new
Cybercriminals Abuse Open-Source Tools To Target Africa’s Financial Sector
Resurgence of the Prometei Botnet
Exploring a New KimJongRAT Stealer Variant and Its PowerShell Implementation
Serverless Tokens in the Cloud: Exploitation and Detections
JSFireTruck: Exploring Malicious JavaScript Using JSF*ck as an Obfuscation Technique
The Evolution of Linux Binaries in Targeted Cloud Operations
Roles Here? Roles There? Roles Anywhere: Exploring the Security of AWS IAM Roles Anywhere
Blitz Malware: A Tale of Game Cheats and Code Repositories
Lost in Resolution: Azure OpenAI's DNS Resolution Issue
How Good Are the LLM Guardrails on the Market? A Comparative Study on the Effectiveness of LLM Content Filtering Across Major GenAI Platforms
Threat Brief: CVE-2025-31324 (Updated June 25)

Crypto

Seytonic

Podcasts

ISC Daily Stormcast
SANS Stormcast Tuesday, June 24th, 2025: Telnet/SSH Scan Evolution; Fake Sonicwall Software; File-Fix vs Click-Fix
SANS Stormcast Tuesday, June 24th, 2025: Ichano ATHome IP Camera Scans; Netscaler Vulnerability; WinRar Vulnerability
SANS Stormcast Monday, June 23rd, 2025: ADS and Python; More Secure Cloud PCs; Zend.to Path Traversal; Parser Differentials
SANS Stormcast Friday, June 20th, 2025: New Employee Phishing; Malicious Tech Support Links; Social Engineering App Sepecific Passwords
SANS Stormcast Monday, June 16th, 2025: Extracting Data from JPEG; Windows Recall Export; Anubis Wiper; Mitel Vuln and PoC
SANS Stormcast Monday, June 16th, 2025: Katz Stealer in JPG; JavaScript Attacks; Reviving expired Discord Invites for Evil
SANS Stormcast Friday, June 13th, 2025: Honeypot Scripts; EchoLeak MSFT Copilot Vuln; Thunderbolt mailbox URL Vuln;
Darknet Diaries
159: Vastaamo
158: MalwareTech
157: Grifter
156: Kill List
155: Kingpin
154: Hijacked Line
153: Bike Index
152: Stacc Attack
151: Chris Rock
150: mobman 2
149: Mini-Stories: Vol 3
148: Dubsnatch
Security Weekly
Hacking Drivers - PSW #879
UEFI Vulnerabilities Galore - PSW #878
Updating & Protecting Linux Systems - PSW #877
It's A Trap! - PSW #876
Malware Laced Printer Drivers - PSW #875
Ransomware in your CPU - PSW #874
Are You Down With RDP? - PSW #873
AI Tips, Tricks, and Traps! - PSW #872
Hacking Crosswalks and Attacking Boilers - PSW #871
Govt Unravelling, AI Hijinx, Bot Chaos, Recall, Oracle, Slopesquatting, Tycoon 2FA... - PSW #870
You Should Just Patch - PSW #869
Not-So-Secure Boot - Rob Allen - PSW #868
Risky.Biz
Risky Business #797 -- Stuxnet vs Massive Ordnance Penetrators
Risky Business #796 -- With special guest co-host Chris Krebs
Soap Box: AI has entered the SOC, and it ain't going anywhere
Risky Business #795 -- How The Com is hacking Salesforce tenants
Risky Business #794 -- Psychic Panda outgunned by Fluffy Lizard and UNC56728242
Risky Business #793 -- Scattered Spider is hijacking MX records
Risky Business #792 -- Beware, Coinbase users. Crypto thieves are taking fingers now
Risky Biz Soap Box: Push Security's browser-first twist on identity security
Risky Business #791 -- Woof! Copilot for Sharepoint coughs up creds and keys
Wide World of Cyber: How state adversaries attack security vendors
Risky Business #790 -- Bye bye Signal-gate, hello TeleMessage-gate
BONUS INTERVIEW: Senator Mark Warner on Signalgate, Volt Typhoon and tariffs
The CyberWire
Open-source, open season. new
Iran’s digital threat after U.S. strikes.
Iran’s digital retaliation looms.
Jadee Hanson: Cybersecurity is a team effort. [CISO] [Career Notes]
Signed, sealed, exploitable. [Research Saturday]
A blast from the breached past.
Juneteenth: Reflecting, belonging, and owning your seat at the table. [Special Edition]
Typhoon on the line.
Can’t DOGE the inquiry.
Darknet drug marketplace closed for business.
Mark Nunnikhoven: Providing clarity about security. [Cloud strategy]
Hiding in plain sight with vibe coding.

Threat Intel

Privacy/VPNs

EFF
California’s Corporate Cover-Up Act Is a Privacy Nightmare new
FBI Warning on IoT Devices: How to Tell If You Are Impacted
Major Setback for Intermediary Liability in Brazil: Risks and Blind Spots
Copyright Cases Should Not Threaten Chatbot Users’ Privacy
New Journalism Curriculum Module Teaches Digital Security for Border Journalists
A Journalist Security Checklist: Preparing Devices for Travel Through a US Border
EFF to European Commission: Don’t Resurrect Illegal Data Retention Mandates
Protect Yourself From Meta’s Latest Attack on Privacy
A Token of Appreciation for Sustaining Donors 💞
Strategies for Resisting Tech-Enabled Violence Facing Transgender People
Apple to Australians: You’re Too Stupid to Choose Your Own Apps
LGBT Q&A: Your Online Speech and Privacy Questions, Answered
Reddit - PrivacyGuides
Creating a Tricked-Out Monero Server with TrueNAS
Slashdot - Rights
US Senators Push For American Version of EU's Digital Markets Act new
Psylo Browser Obscures Digital Fingerprints By Giving Every Tab Its Own IP Address new
How Foreign Scammers Use U.S. Banks to Fleece Americans new
Australia Regulator and YouTube Spar Over Under-16s Social Media Ban new
Health Secretary Wants Every American To Be Sporting a Wearable Within Four Years new
WD Escapes Half a Billion in Patent Damages as Judge Trims Award To $1
Anthropic Bags Key 'Fair Use' Win For AI Platforms, But Faces Trial Over Damages For Millions of Pirated Works
Judge Denies Creating 'Mass Surveillance Program' Harming All ChatGPT Users
IYO Sues OpenAI Over IO
OpenAI Pulls Promotional Materials About Jony Ive Deal (After Trademark Lawsuit)
America Invested in EV Battery Plants. Now They May Be Stranded.
BBC Threatens Legal Action Against Perplexity AI Over Content Scraping
Reddit - Privacy
Fossify or FUTO Keyboard? new
Paramount + Account compromised - but how? I am lost. new
Alternatives to Google Maps for public transport i.e. buses, trains, trams etc? new
State-Sponsored Surveillance new
PSA: Turn off Yahoo mail's "AI summaries"...regardless of any previous opt-outs (fellow reminder to ditch your yahoo services) new
Are cameras everywhere the "future"? new
Alernative to google timeline new
Over 300 Organizations Unite to Demand Complete Withdrawal of Bill C-2 new
I searched my name on Google's AI Mode - HOLY HELL. new
Good travel burner phone for a US journalist?
how's the EU compared to America when it comes to privacy
The NO FAKES Act Has Changed – and It’s So Much Worse
Reddit - VPN
VPN compatible with BBC iPlayer on an iPhone?
Whatismyipaddress Leaked VPN Service
Tried to redesign LogMeIn Hamachi (WIP)
Does Multi-hop really work for school wifi
Can you use your own DNS while being connected to a corporate Tailscale?
What’s this “legal” mean when I’m signed on my vpn? I click it and it takes me to some apple stuff.
Can I make myself untracable with a VM and VPN?
Simple VPN;Single IP, multiple users.
Question regarding ping while using a vpn.
AT&T Home Internet Not Allowing VPN Connection
I got a copyright letter for torrenting despite having VPN on - what'd I do wrong?
Solution for heavy internet restriction in Iran

Help Wanted

Stack Exchange
Is VPN really that required?
Should you format a USB card reader?
Is this "nglocalhost" link dangerous? [closed]
Is it secure to allow unauthenticated users limited access to a phone-number-based SaaS before verifying the number?
Is dynamic email based on AMP secure enough?
Something added TLS certificate exceptions to my Firefox profile
Is it necessary for all to change passwords due to the recent 16 billion records data leak?
Ham radio interference or compromised smartphone? [closed]
Reddit - AskNetSec
Do developers really care about package security when trying to move fast?
How does one register for a CVE these days?
Can hashcat's 'brain' server 'synthesize' password candidates from wordlists and rules?
My recent deep dive into WebRTC security - more to it than I thought!
What Feature Do You Think Makes or Breaks a Security Tool?
Automating Certificate Deployment in Response to Reduced Renewal Periods?
Anyone gone through the Tesla Red Team Security Engineer interview? Looking for insights
nmap sweep scan in Apple M4 shows fake vendors and MAC addresses
How do you audit what your app might be accidentally logging?
Realistic risks of EOS hardware as VPN gateway/edge device
Reddit - Netsec Students
🎓 Found a Free ParrotOS Linux Course – Anyone Tried It or Have Better Beginner Resources? new
🎓 Found a Free ParrotOS Linux Course – Anyone Tried It or Have Better Beginner Resources? new
🔍 How do you approach reverse engineering on ParrotOS? Looking for tool/flow tips
Roast my resume. 1st year of an Associates in Cybersecurity. I’m applying to help desk roles. Thanks for the help!
semi-experienced kid
Thoughts on Black Hat or Red Siege Trainings?
RAWPA - hierarchical methodology, comprehensive toolkits, and guided workflows
I built a web pentesting assistant (RAWPA). Looking for early testers.
FTP 530 Login Incorrect
Totally unpaid internship
Need advice
Correct me if I'm wrong: It's not easy to read encrypted traffic even if you set up the AP yourelf
Stackoverflow - Security
How can I protect my Flutter app using Talsec FreeRASP, and what additional steps should I take? [closed] new
How to automate the removal of unused binaries from Docker images in a CI/CD pipeline? [closed]
How can I automate container hardening by stripping unused binaries and libraries?
How can I get the socketId in Java 17? [closed]
Is this SQL INSERT query vulnerable to SQL injection attacks?
Starting out in cybersecurity: how did you get started in the field? [closed]
How can I use ChatGPT to analyze suspicious log files or indicators of compromise?
Using AI to detect cyber attacks in web application [closed]
How to Securely Pass Data from a Telegram Bot to a Telegram Mini App? [closed]
How to securely store API keys in WordPress plugins/themes, preventing codebase exposure? [closed]
How to return a custom error response when using APIKeyCookie in FastAPI?
JWT Token Vulnerability – A Silent Threat to API Security [closed]

Locks/Social Engineering

Hak5

Security Blogs

Naked Security
The State of Ransomware 2025
June Patch Tuesday digs into 67 bugs
Sophos Emergency Incident Response is now available
The strange tale of ischhfd83: When cybercriminals eat their own
Sophos Named a 2025 Gartner® Peer Insights™ Customers’ Choice for both Endpoint Protection Platforms and Extended Detection and Response
An industry first: Sophos Firewall and NDR Essentials
Sophos Firewall v21.5 is now available
DragonForce actors target SimpleHelp vulnerabilities to attack MSP, customers
Schneier on Security
What LLMs Know About Their Users new
Here’s a Subliminal Channel You Haven’t Considered Before
Largest DDoS Attack to Date
Friday Squid Blogging: Gonate Squid Video
Surveillance in the US
Self-Driving Car Video Footage
Ghostwriting Scam
Where AI Provides Value
Friday Squid Blogging: Stubby Squid
Paragon Spyware used to Spy on European Journalists
Airlines Secretly Selling Passenger Data to the Government
New Way to Covertly Track Android Users
Linux Security
IBM Donates CBOM Toolset to Linux Foundation
Secure RHEL Clones Chart Diverging Paths
Reevaluating Security in Open-Source: Is a Baseline Truly Sufficient?
Dark Reading
Charming Kitten APT Tries Spying on Israeli Cybersecurity Experts new
And Now Malware That Tells AI to Ignore It? new
Dire Wolf Ransomware Comes Out Snarling, Bites Technology, Manufacturing new
Hundreds of MCP Servers Expose AI Models to Abuse, RCE new
Africa Sees Surge in Cybercrime as Law Enforcement Struggles
Threat Actor Trojanizes Copy of SonicWall NetExtender VPN App
Oh! Canada Added to List of Nations Targeted in Salt Typhoon Telecom Spree
SparkKitty Swipes Pics From iOS, Android Devices
Telecom Giant Viasat Is Latest Salt Typhoon Victim
How Cyber Warfare Changes the Face of Geopolitical Conflict
Iran-Israel War Triggers a Maelstrom in Cyberspace
New Tool Traps Jitters to Detect Beacons
Securelist by Kaspersky
AI and collaboration tools: how cyberattackers are targeting SMBs in 2025 new
SparkKitty, SparkCat’s little brother: A new Trojan spy found in the App Store and Google Play
Toxic trend: Another malware threat targets DeepSeek
Sleep with one eye open: how Librarian Ghouls steal data by night
Analysis of the latest Mirai wave exploiting TBK DVR devices with CVE-2024-3721
IT threat evolution in Q1 2025. Non-mobile statistics
IT threat evolution in Q1 2025. Mobile statistics
Host-based logs, container-based threats: How to tell where an attack began
Exploits and vulnerabilities in Q1 2025
Zanubis in motion: Tracing the active evolution of the Android banking malware
Dero miner zombies biting through Docker APIs to build a cryptojacking horde
Threat landscape for industrial automation systems in Q1 2025
HITB News
The RISKS Digest
Kaspersky Blog
How IP cameras can help attackers | Kaspersky official blog
Protecting Android, Windows, and Linux devices against being tracked via the Find My network | Kaspersky official blog
Adam Shostack & friends
Publish your threat model!
The Essence and Beauty of Threat Modeling
Andor: Insider Threats
Appsec Roundup - May 2025
Free Threat Modeling Training for Displaced Federal Workers
Blackhat Earlybird Prices End Friday
Cyber Hard Problems Report
Andor: Think like a leader
Andor Threats: Information Disclosure
The Empire’s Threat Modeling
Appsec Roundup - April 2025
Threat Informed Defense Series
Graham Cluley
Smashing Security podcast #423: Operation Endgame, deepfakes, and dead slugs new
Aflac, one of the USA’s largest insurers, is the latest to fall “under siege” to hackers
Marks & Spencer ransomware attack was good news for other retailers
Twitter refuses to explain what it’s doing about hate speech and misinformation, sues New York State for asking
Iranian State TV hacked, and that’s modern warfare
Qilin offers “Call a lawyer” button for affiliates attempting to extort ransoms from victims who won’t pay
Smashing Security podcast #422: The curious case of the code copier
Yes, the Co-op lost your data. Have a £10 shopping voucher
Infecting insurance firms with ransomware… for dummies
Breaking news – the Washington Post has been hacked
Cybercriminals left hanging as Victoria’s Secret bounces back
Dutch police identify users as young as 11-year-old on Cracked.io hacking forum
Rapid7
Patch Tuesday - June 2025
BlackSuit Continues Social Engineering Attacks in Wake of Black Basta’s Internal Conflict
Key Takeaways from the Take Command Summit 2025: Demystifying Cloud Detection & Response – The Future of SOC and MDR
5 Things Security Leaders Need to Know About Agentic AI
Metasploit Wrap-up 06/06/25
Cultivating Growth and Development at Rapid7
India's cyber leaders prepare for AI-driven threats
Navigating AWS Migration: Achieving Clarity and Confidence
Rapid7 Q1 2025 Incident Response Findings
From Ideology to Financial Gain: Exploring the Convergence from Hacktivism to Cybercrime
Introducing AI Attack Coverage in Exposure Command: Secure what traditional AppSec Tools miss
Key Takeaways from the Take Command Summit 2025: Risk Revolution – Proactive Strategies for Exposure Management
Hacker News (YCombinator) - Security
Hacker Noon #Security
Zama Raises $57M In Series B To Bring End-to-End Encryption To Public Blockchains new
Gelato and Morpho To Offer Embedded Crypto-Backed Loans For Wallets, Brokers, And Fintech Apps new
Magic Newton Foundation Redefines Fair Token Launches With $NEWT new
Moca Foundation Announces Moca Chain For Self-Sovereign, Privacy-Preserving ID And user Verification new
Reddio Mainnet Alpha Is Live – The First GPU-Accelerated Parallel EVM For AI-Native dApps new
The HackerNoon Newsletter: Building for the World That Doesn’t Blink (6/25/2025) new
The Reality of Building Trust in Mobile AI Markets new
Cutting Blockchain Costs with Reputation Rollup new
How ProSecutor Was Built and Tested new
How OS2A Uses Smart Contracts to Incentivize Mobile AIGC Providers new
How to Measure the Quality of AIGC Services new
OS2a: Objective Service Assessment for Mobile AIGC new
Security Bloggers Network
Lessons from the Titanic: when you don’t respond to a crisis new
Is Container OS Insecurity Making Your K8s Infrastructure Less Secure? new
Bankers Association’s Attack on Cybersecurity Transparency new
LinuxFest Northwest: Operating System Upgrades In A High Performance Computing Environment new
The Era of Agentic Security with Microsoft Security Copilot new
Beyond Backup: How Coveware is Revolutionizing Veeam’s Ransomware Defense new
How a Fractional CTO Can Help You Nail Product Market Fit (Without Burning Budget) new
Kasada and Vercel Launch BotID: Invisible Bot Protection, Built for Developers new
Replacing a GitHub Personal Access Token With a GitHub Application new
The Best CAPTCHA is No CAPTCHA: Introducing Vercel BotID, Powered by Kasada new
Fortanix Adds Dashboard to Better Prioritize Remediation Efforts for PQC Era new
LinuxFest Northwest: Securing Your Web Server new
Control C
File upload testing with Fuxploider
Wired - Security
‘They're Not Breathing’: Inside the Chaos of ICE Detention Center 911 Calls new
Telegram Purged Chinese Crypto Scam Markets—Then Watched as They Rebuilt
Taiwan Is Rushing to Make Its Own Drones Before It's Too Late
What Satellite Images Reveal About the US Bombing of Iran's Nuclear Sites
Truth Social Crashes as Trump Live-Posts Iran Bombing
Israel Says Iran Is Hacking Security Cameras for Spying
Iran’s Internet Blackout Adds New Dangers for Civilians Amid Israeli Bombings
Israel-Tied Predatory Sparrow Hackers Are Waging Cyberwar on Iran’s Financial System
Minnesota Shooting Suspect Allegedly Used Data Broker Sites to Find Targets’ Addresses
How to Protect Yourself From Phone Searches at the US Border
Why We Made a Guide to Winning a Fight
The WIRED Guide to Protecting Yourself From Government Surveillance
Elttam
Krebs on Security
Inside a Dark Adtech Empire Fed by Fake CAPTCHAs
Patch Tuesday, June 2025 Edition
Proxy Services Feast on Ukraine’s IP Address Exodus
U.S. Sanctions Cloud Provider ‘Funnull’ as Top Source of ‘Pig Butchering’ Scams
Pakistan Arrests 21 in ‘Heartsender’ Malware Service
Oops: DanaBot Malware Devs Infected Their Own PCs
KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS
Breachforums Boss to Pay $700k in Healthcare Breach
Patch Tuesday, May 2025 Edition
Pakistani Firm Shipped Fentanyl Analogs, Scams to US
xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs
Alleged ‘Scattered Spider’ Member Extradited to U.S.

Security in Mainstream Media

Google News Hacking
Hackers sell 436 users’ digital gold on finserv app - Hindustan Times new
The Genius Meal Planning Hack That Will Save You So Much Money - Good Housekeeping new
From cheap parking to selling data: Former student charged over university hacking - SBS Australia new
Former student accused of hacking her university is busted by cops - Daily Mail new
Ex-student hacked uni for free parking before threatening data drop, police say - Australian Broadcasting Corporation new
US seeks extradition of alleged hacker arrested in France - Reuters new
Hacker Who Stole Lawmaker Data From Insurance Market Charged - BankInfoSecurity new
Kansas City man pleads guilty for computer hacking at nonprofit - KCTV new
Hackers abuse Microsoft ClickOnce and AWS services for stealthy attacks - BleepingComputer new
Hackers show how they can fully control your 2020 Nissan Leaf remotely - TechSpot new
Hackers deploy fake SonicWall VPN App to steal corporate credentials - Security Affairs new
Russia Frees REvil Hackers, Despite Guilty Pleas - Silicon UK new
Google Cyber Security
Where cybersecurity maturity meets confidence in C-suite and board leadership - Deloitte new
Australian survey reveals risky passwords & distrust of AI - SecurityBrief Australia new
Forescout-Takepoint Research finds operational security challenges from tool sprawl to staffing gaps in OT cyber defense - Industrial Cyber new
Charming Kitten APT Tries Spying on Israeli Cyber Experts - Dark Reading new
Building cyber resilience in always-on industrial environments - Help Net Security new
Fintech’s guide to defending against nation-state threats - bobsguide.com new
4 Ways to Protect Networks from Botnets Before It’s Too Late - Security Magazine new
Bridging the Gap: How Cyber Resilience is Securing the Future of IT/OT Convergence - Manufacturing Business Technology new
'Cyber plague': Experts warn of growing infostealer threat after billions of login details exposed - CNBC new
Firefox 140 Released With Fix for Code Execution Vulnerability - Update Now - CyberSecurityNews new
North Carolina attorney general demands answers in data breach - WXII new
Realtek Vulnerability Let Attackers Trigger DoS Attack via Bluetooth Secure Connections Pairing Process - CyberSecurityNews new

Thirsty for more

Reddit - Sysadmin
Patch Management Tool or RMM new
Lock screen status in Windows 11 new
Yet another reason to be annoyed with Microsoft new
Automated Active Directory group management new
Apache Guacamole - SSO with Entra ID SAML/OIDC & mapping groups for access new
Why is MS telling me to assign Everyone rights to the ADFS container? new
Is ZFS actually the end-all be-all of file systems/redundancy? new
Does your Organization openly post your Banned Password Dictionary? new
Where do I even begin? new
Do any of you still have or use IceWarp Mail Server? new
Server-Room Sound-Proofing new
How to archive emails and onedrive for user that have left a company new
Lobste.rs
Reverse Engineering the Microchip CLB Part 1: Background and Reverse Engineering the BLEs new
Why Go Rocks for Building a Lua Interpreter new
Swift Android Workgroup new
Paragraph flowing as a fold new
Jan-nano-128k: A 4B Model with a Super-Long Context Window (Still Outperforms 671B [in MCP]) new
HUG CSS, how I approach CSS architecture new
Speculative Optimizations for WebAssembly using Deopts and Inlining new
The best interfaces we never built new
Docs for AI agents new
The Implementation of Postgres (1990) new
Coding in a material world new
PostgreSQL Branching: Xata vs. Neon vs. Supabase new
Hackaday
Simulating Empires with Procedurally Generated History new
Ceramic Printing Techniques for Plastic new
Homebrew Pockels Cell Is Worth the Wait new
FLOSS Weekly Episode 838: AtomVM and The Full Stack Elixir Developer new
The Tao of Bespoke Electronics new
Mechanical 7-Segment Display Combines Servos And Lego new
The Rise And The Fall Of The Mail Chute new
Careful Design Lets 3D Print Emulate Kumiko new
Minecraft Clone Manages With Nothing But HTML + CSS new
Hack Turns Nissan Leaf into Giant RC Car
NREL Maps Out US Data Infrastructure
Digitally-Converted Leica Gets A 64-Megapixel Upgrade
Ars Technica
Google’s spotty Find Hub network could get better thanks to a small setup tweak new
Is DOGE doomed to fail? Some experts are ready to call it. new
Looking at Framework’s progress on software support for its repairable laptops new
Anthropic destroyed millions of print books to build its AI models new
Ubuntu disables Intel GPU security mitigations, promises 20% performance boost new
Ars Live: What’s up with the sudden surge in temperatures? new
It’s a family affair in final Fantastic Four: First Steps trailer new
Apple’s push to take over the dashboard resisted by car makers new
Gemini CLI is a free, open source coding agent that brings AI to your terminal new
Philips Hue bulbs will be even more expensive in July. And it may not end there.
Key fair use ruling clarifies when books can be used for AI training
Media Matters sues FTC, says agency is retaliating on behalf of Elon Musk
Wired
Meta Wins Blockbuster AI Copyright Case—but There’s a Catch new
‘They're Not Breathing’: Inside the Chaos of ICE Detention Center 911 Calls new
31 Best Early Amazon Prime Day Deals On Products We Tested (2025) new
A European Startup’s Spacecraft Made It to Orbit. Now It’s Lost at Sea new
Venice Braces for Jeff Bezos and Lauren Sanchez’s Wedding new
Best Fourth of July Mattress Deals From Helix, Birch, and More (2025) new
AI Agents Are Getting Better at Writing Code—and Hacking It as Well new
Best Binoculars (2025): Zeiss, Swarovski, Leica new
How to Clean a Beer Glass for Perfect Pours new
Best 6 Soda Makers (2025): Drinkmate, SodaStream, Aerflo new
11 Best Computer Monitors (2025): Budget, OLED, 4K new
8 Best Cheap Phones (2025), Tested and Reviewed new
Slashdot
Swarms of Tiny Nose Robots Could Clear Infected Sinuses, Researchers Say new
Meta Beats Copyright Suit From Authors Over AI Training on Books new
Microsoft Sued By Authors Over Use of Books in AI Training new
Aaron Sorkin's The Social Network Sequel Officially in Development new
US Senators Push For American Version of EU's Digital Markets Act new
Psylo Browser Obscures Digital Fingerprints By Giving Every Tab Its Own IP Address new
Bazzite Would Shut Down If Fedora Goes Ahead With Removing 32-Bit new
Games Run Faster On SteamOS Than Windows 11, Ars Testing Finds new
Overfishing Has Caused Cod To Halve in Body Size Since 1990s, Study Finds new
Mozilla Formally Discontinues Its DeepSpeech Project new
Bernie Sanders Says If AI Makes Us So Productive, We Should Get a 4-Day Work Week new
Lyon Abandons Microsoft Office To Strengthen 'Digital Sovereignty' new
DZone Security
Kubernetes Admission Controllers: Your First Line of Defense
AI/ML Big Data-Driven Policy: Insights Into Governance and Social Welfare
Cybersecurity Innovations in Software Development: How Developers Are Tackling Security Threats
DZone
The Unreasonable Effectiveness of the Actor Model for Creating Agentic LLM Applications new
Design Guards: The Missing Layer in Your Code Quality Strategy new
Synergy of Event-Driven Architectures With the Model Context Protocol new
Building an AI-Powered Text Analysis App With React: A Step-by-Step Guide new
How Trustworthy Is Big Data? A Guide to Real-World Challenges and Solutions new
Optimizing Data Pipelines in Cloud-Based Systems: Tools and Techniques
How to Test Multi-Threaded and Concurrent Java
Unveiling Supply Chain Transformation: IIoT and Digital Twins
Why Is NLP Essential in Speech Recognition Systems?
Architects of Ambient Intelligence With IoT and AI Personal Assistants
Real-Object Detection at the Edge: AWS IoT Greengrass and YOLOv5
Hacker News (YCombinator)
Yes, I will judge you for using AI new
Games That Weren't: Preserving Cancelled and Unreleased Video Game History new
Puerto Rico's Solar Microgrids Beat Blackout new
QEMU: Define policy forbidding use of AI code generators new
Define policy forbidding use of AI code generators new
The Hollow Men of Hims new
Why AGI Is Impossible new
IBM's Dmitry Krotov wants to crack the 'physics' of memory new
CUDA Ray Tracing 2x Faster Than RTX: My CUDA Ray Tracing Journey new
Microsoft Dependency Has Risks new
Broken by Design: Systemd new
A New Pyramid-Like Shape Always Lands the Same Side Up new
Reddit - Cyberpunk
Blade Runner came out 43 years ago today. new
NYC has gone full cyberpunk new
Need help and feedback on a new project from the community new
VISUAL THREATS - A Sci-Fi Short Film (4K Cinematic AI) new
Aside from the technological advancements, how is our world different from the Cyberpunk genre? new
Boring cyberpunk corporation logos, pt.2
differences between 1980s visions of cyberpunk and current 21st century ones?
Someone in VR made the Tron "End of the Line" Club from the movie, to run Underground VR Raves out of.
New daylight update on my WIP solo-dev game Mandated Fate - now with a gloomier sun, its tones warped by pollution. What do you think?
Nobody can see us up here
Doom 2099 #2 // They understood the Neofeudal World Order way back in 1993
JEAN CORP - JEAN.FM
Reddit - Security CTF
[CTF] New vulnerable VM at hackmyvm.eu new
I Publish Real-World Go Vulnerabilities – Off-chain & On-chain Security
Trying to reverse engineer a binary that compares MD5 hash of input
SM - Small Web Recon Tool for CTFs and Pentesting
New Challenge Released: "Sense" – Now Live in the Release Arena | Free
[CTF] New vulnerable VM aka "Sabulaji" at hackmyvm.eu
[CTF] Our new HackerDna lab 🧪 *FiPloit* is out!
New release arena lab machines! - free for 30 days