Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

Bleeping Computer
Cloudflare mitigates record number of DDoS attacks in 2025 new
Coinbase fixes 2FA log error making people think they were hacked new
Brave's Cookiecrumbler tool taps community to help block cookie notices
DragonForce expands ransomware model with white-label branding scheme
WooCommerce admins targeted by fake security patches that hijack sites
Windows 11's Recall AI is now rolling out on Copilot+ PCs
Windows 11 KB5055627 update released with 30 new changes, fixes
Craft CMS RCE exploit chain used in zero-day attacks to steal data
Marks & Spencer pauses online orders after cyberattack
Mobile provider MTN says cyberattack compromised customer data
Baltimore City Public Schools data breach affects over 31,000 people
The Hacker News
⚡ Weekly Recap: Critical SAP Exploit, AI-Powered Phishing, Major Breaches, New CVEs & More new
Earth Kurma Targets Southeast Asia With Rootkits and Cloud-Based Data Theft Tools new
WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors new
Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised new
North Korean Hackers Spread Malware via Fake Crypto Firms and Job Interview Lures
Researchers Identify Rack::Static Vulnerability Enabling Data Breaches in Ruby Servers
DslogdRAT Malware Deployed via Ivanti ICS Zero-Day CVE-2025-0282 in Japan Attacks
Lazarus Hits 6 South Korean Firms via Cross EX, Innorix Flaws and ThreatNeedle Malware
Linux io_uring PoC Rootkit Bypasses System Call-Based Threat Detection Tools
159 CVEs Exploited in Q1 2025 — 28.3% Within 24 Hours of Disclosure
Iran-Linked Hackers Target Israel with MURKYTOUR Malware via Fake Job Campaign
Ripple's xrpl.js npm Package Backdoored to Steal Private Keys in Major Supply Chain Attack
PacketStorm
The Register
4chan back online after 'catastrophic' attack, says it's too broke for good IT new
Samsung admits Galaxy devices can leak passwords through clipboard wormhole new
More Ivanti attacks may be on horizon, say experts who are seeing 9x surge in endpoint scans
Oh, cool. Microsoft melts bug that froze Server 2025 Remote Desktop sessions
Claims assistance firm fined for cold-calling people who put themselves on opt-out list
SSNs and more on 5.5M+ patients feared stolen from Yale Health
Microsoft mystery folder fix might need a fix of its own
Your vendor may be the weakest link: Percentage of third-party breaches doubled in a year
Ripple NPM supply chain attack hunts for private keys
We’re calling it now: Agentic AI will win RSAC buzzword Bingo
Ex-NSA chief warns AI devs: Don’t repeat infosec’s early-day screwups
RIP, Google Privacy Sandbox
Reddit - NetSec
Symbol Database for Reverse Engineers new
Remote Code Execution on Viasat Modems (CVE-2024-6198)
io_uring Is Back, This Time as a Rootkit
How I made $64k from deleted files — a bug bounty story
XRP Supplychain attack: Official NPM package infected with crypto stealing backdoor
Hack Your Way In - Web CTF Challenge
Windows Defender antivirus bypass in 2025 - Part 2
Attacking My Landlord's Boiler
Line jumping: The silent backdoor in MCP
r/netsec monthly discussion & tool thread
/r/netsec's Q2 2025 Information Security Hiring Thread

Threat Wire

Bug Bounties

Vulnerabilities

CXSecurity
KiviCare Clinic & Patient Management System 3.6.4 Unauthenticated SQL Injection
ProConf 6.0 Insecure Direct Object Reference
WordPress 123pan Cloud Storage Plugin - Multiple Vulnerabilities
WordPress Easy Restaurant Manager Plugin - Multiple Vulnerabilities
Online Shopping System Advanced - Remote Code Execution
Aom Web Designer - Sql Injection
Money Transfer Management System - MTMS- PHP 1.0 SQLi-Bypass Authentication
TP-Link VN020 F3v(T) TT_V6.2.1021 Buffer Overflow Memory Corruption
FoxCMS 1.2.5 Remote Code Execution
Clothing Store Management System-1.0 SQLi Bypass Authentication
ASUS ASMB8 iKVM 1.14.51 Remote Code Execution
Tatsu 3.3.11 Unauthenticated RCE
Full Disclosure
[IWCC 2025] CfP: 14th International Workshop on Cyber Crime - Ghent, Belgium, Aug 11-14, 2025
Inedo ProGet Insecure Reflection and CSRF Vulnerabilities
Ruby on Rails Cross-Site Request Forgery
Microsoft ".library-ms" File / NTLM Information Disclosure (Resurrected 2025)
HNS-2025-10 - HN Security Advisory - Local privilege escalation in Zyxel uOS
APPLE-SA-04-16-2025-4 visionOS 2.4.1
APPLE-SA-04-16-2025-3 tvOS 18.4.1
APPLE-SA-04-16-2025-2 macOS Sequoia 15.4.1
APPLE-SA-04-16-2025-1 iOS 18.4.1 and iPadOS 18.4.1
Business Logic Flaw: Price Manipulation - AlegroCartv1.2.9
Stored XSS in "Message" Functionality - AlegroCartv1.2.9
XSS via SVG Image Upload - AlegroCartv1.2.9
NIST National Vulnerability Database
NIST Small Business Cybersecurity Webinar: Protecting Your Small Business from Phishing Risks new
Iris Experts Group (IEG) Annual Meeting new
CSF 2.0 Webinar Series: Deep-Dive into the CSF 2.0 Govern Function to Improve Cybersecurity new
5th High-Performance Computing Security Workshop new
Open Industrial Digital Ecosystem Summit
0day Today

LiveOverflow

Exploit Dev

Security Researchers
Weaponized Words: Uyghur Language Software Hijacked to Deliver Malware new
Redefining AppSec Testing with Intelligent Scan Recommendations and Asset Classification
Exploiting the Synology DiskStation with Null-byte Writes
The SQL Server Crypto Detour
JUICYJAM: รายงานเรื่องวิธีการที่เจ้าหน้าที่รัฐเปิดเผยข้อมูลส่วนตัวเพื่อปราบปรามฝ่ายประชาธิปไตยในไทย
JUICYJAM: How Thai Authorities Use Online Doxxing to Suppress Dissent
Creating a Large Text File Viewer by Vibe Coding with Visual Studio Code, Cline, OpenRouter, and Claude 3.7
Gender-Based Digital Transnational Repression and the Authoritarian Targeting of Women in the Diaspora
Reddit - Exploit Dev
Need Help With Process Hollowing
Android Exploit development
Wrote a blog explaining V8 parser workflow with a CVE as a case study.
Want to connect with people in cybersecurity (interested in reverse engineering & exploit development)
POC - CVE-2025-29306 FOXCMS /images/index.html Code Execution Vulnerability
RCE in Telegram Desktop if you accept the Call
how to bypass easy anti cheat with a chicken finger dipped in blarney sauce
PE to Shellcode?
What Would you use your "Ablitrated" AI LLM Local model for? Care To Share Your Ideas on Prompt Engineering?
🛡️ Cyber Sentinel Skills Challenge – compete, win, and gain access to job opportunities!
Could this work to get all games for free?
Source Incite
Google Project Zero
The Windows Registry Adventure #6: Kernel-mode objects
Blasting Past Webp
Windows Exploitation Tricks: Trapping Virtual Memory Access (2025 Update)
Windows Bug Class: Accessing Trapped COM Objects with IDispatch

Reversing/I like ASM

StackExchange - ReverseEngineering
How can I recover Python code from a self-made Discord EXE tool?
Bypass Update Prompt to Run Main Program
Reddit - Reverse Engineering
Rverse engineered 3d model format from a 1999 game new
The first publically shamed individual for leaking IDA Pro is now a Senior Security Engineer @ Apple
Ghosting AMSI: Cutting RPC to disarm AV
Microsoft Won't Fix This Game - So I Hacked It
Reverse Engineering the classic 1984 ZX Spectrum game, Automania
Binary Ninja 5.0 (Gallifrey) is here with Union Support, Dyld Share Cache & Kernel Cache, Firmware Ninja, Auto Stack Arrays, Stack Structure Type Propagation, and…
Analyzing Dark Web Malware
Emulate hash functions in IDA with Unicorn — hash-resolver (x86/x64, CLI + GUI)
TikTok Virtual Machine Reverse Engineering
Binance Captcha Solver
Ghidra 11.3.2 has been released!
Reddit - Game Hacks
Looking for someone to reverse engineering a unity mobile game il2cpp new
Elite services new
AIMEX CHEATS COD BLACK OPS 6 / WARZONE CHEAT | Aimbot | ESP | Radar | Zombie | Undetected + Streamproof | EASY PAYMENT &…
🎯 Delta Force Aimbot & ESP | Undetected & Secure 🎯 (LIFETIME)
Elite services -EXO
Is there cheats for discord activities
Looking someone
🐍 Top AI Aimbot & No-Recoil Scripts for Marvel Rivals + Delta Force + More! 🐍
AIMEX CHEATS COD BLACK OPS 6 / WARZONE CHEAT | Aimbot | ESP | Radar | Zombie | Undetected + Streamproof | EASY PAYMENT &…
Ready or Not
😇 Delta Force Aimbot & ESP | Undetected & Secure 😇 (LIFETIME)
Looking for help
Reddit - REGames

Guided Hacking

Malware/APT

Crypto

Seytonic

Podcasts

ISC Daily Stormcast
SANS Stormcast Monday, April 28th: Image Steganography; SAP Netweaver Exploited new
SANS Stormcast Friday, April 25th: SMS Gateway Scans; Comvault Exploit; Patch Window Shrinkage; More inetpub issues;
SANS Stormcast Thursday, April 24th: Honeypot iptables Maintenance; XRPL.js Compromise; Erlang/OTP SSH Vuln affecting Cisco
SANS Stormcast Wednesday, April 23rd: More xorsearch Updates; DKIM Replay Attack; SSL.com Vulnerability Fixed
SANS Stormcast Tuesday, April 22nd: Phishing via Google; ChatGPT Fingerprint; Asus AI Cloud Vuln; PyTorch RCE
SANS Stormcast Monday, April 21st: MSFT Entra Lockouts; Erlang/OTP SSH Exploit; Sonicwall Exploit; bubble.io bug
SANS Stormcast Friday, April 18th: Remnux Cloud Environment; Erlang/OTP SSH Vuln; Brickstorm Backdoor Analysis; GPT 4.1 Safety Controversy
SANS Stormcast Thursday April 17th: Apple Updates; Oracle Updates; Google Chrome Updates; CVE News;
SANS Stormcast Wednesday Apr 16th: File Upload Service Abuse; OpenSSH 10.0 Released; Apache Roller Vuln; Possible CVE Changes
SANS Stormcast Tuesday April 15th: xorsearch Update; Short Lived Certificates; New USB Malware
Darknet Diaries
157: Grifter
156: Kill List
155: Kingpin
154: Hijacked Line
153: Bike Index
152: Stacc Attack
151: Chris Rock
150: mobman 2
149: Mini-Stories: Vol 3
148: Dubsnatch
147: Tornado
146: ANOM
Security Weekly
Hacking Crosswalks and Attacking Boilers - PSW #871
Govt Unravelling, AI Hijinx, Bot Chaos, Recall, Oracle, Slopesquatting, Tycoon 2FA... - PSW #870
You Should Just Patch - PSW #869
Not-So-Secure Boot - Rob Allen - PSW #868
SignalGate and How Not To Protect Secrets - PSW #867
Its Not Really A 0-Day - PSW #866
Don't Hack Russia - PSW #864
Zero Days Are Not Just Fiction - PSW #863
Live from ZTW - PSW #862
Prompt Injection, CISA, Patch Tuesday - PSW #861
Deepseek, AMD, and Forgotten Buckets - PSW #860
Cred Vaults, Cheap AI, and Hacking Devices - Matt Bishop - PSW #859
Risky.Biz
Snake Oilers: LimaCharlie, Honeywell Cyber Insights, CobaltStrike and Outflank new
Snake Oilers: Pangea, Cosive and Sysdig
Risky Business #788 -- Trump targets Chris Krebs, SentinelOne
Wide World of Cyber: How the Trump admin is changing the cybersecurity landscape
Risky Business #787 -- Trump fires NSA director, CISA cuts inbound
Risky Business #786 -- Oracle is lying
Soap Box: Knocknoc glues your SSO to your firewalls for Just-in-Time network access
Risky Business #785 -- Signal-gate is actually as bad as it looks
Risky Business #784 -- GitHub supply chain attack steals secrets from 23k projects
Risky Business #783 -- Evil webcam ransomwares entire Windows network
Risky Business #782 -- Are the USA and Russia cyber friends now?
Risky Business #781 -- How Bybit oopsied $1.4bn
The CyberWire
Natali Tshuva: Impacting critical industries. [CEO] [Career Notes]
Microsoft for Startups: The benefits of the cyber startup ecosystem. [Special Edition]
China’s new cyber arsenal revealed. [Research Saturday]
Pentagon hits fast-forward on software certs.
Lessons from the latest breach reports.
Are we a trade or a profession? [CISO Perspectives]
States struggle with cyber shift.
Proton66’s malware highway.
When fake fixes hide real attacks.
Rich Hale: Understanding the data. [CTO] [Career Notes]
Crafting malware with modern metals. [Research Saturday]
SSH-attered trust.

Threat Intel

Privacy/VPNs

EFF
IRS-ICE Immigrant Data Sharing Agreement Betrays Data Privacy and Taxpayers’ Trust
Digital Identities and the Future of Age Verification in Europe
Florida’s Anti-Encryption Bill Is a Wrecking Ball to Privacy. There's Still Time to Stop It.
Why the FTC v. Meta Trial Matters: Competition Gaps and Civil Liberties Opportunities
EFF Urges Court to Avoid Fair Use Shortcuts in Kadrey v. Meta Platforms
EFF Joins Amicus Briefs Supporting Two More Law Firms Against Unconstitutional Executive Orders
Florida’s New Social Media Bill Says the Quiet Part Out Loud and Demands an Encryption Backdoor
Cybersecurity Community Must Not Remain Silent On Executive Order Attacking Former CISA Director
Our Privacy Act Lawsuit Against DOGE and OPM: Why a Judge Let It Move Forward
EFF, Civil Society Groups, Academics Call on UK Home Secretary to Address Flawed Data Bill
Calyx Institute: A Case Study in Grassroots Innovation
Vote for “How to Fix the Internet” in the Webby Awards People's Voice Competition!
Reddit - PrivacyGuides
New Privacy Guides release: 2025.04.15
Encryption Is Not a Crime
Is Your Data Really Safe? Understanding Encryption
Slashdot - Rights
Could a 'Math Genius' AI Co-author Proofs Within Three Years? new
'Read the Manual': Misconfigured Google Analytics Led to a Data Breach Affecting 4.7M
US Attorney for D.C. Accuses Wikipedia of 'Propaganda', Threatens Nonprofit Status
Government Censorship Comes To Bluesky
Employee Monitoring App Leaks 21 Million Screenshots In Real Time
New Jersey Sues Property Management Software Firm RealPage, Says Collusion With Landlords Drives Up Rents
Draft Executive Order Outlines Plan To Integrate AI Into K-12 Schools
WhatsApp Blocks People From Exporting Your Entire Chat History
Nintendo Seeks Discord User's Identity Following Major Pokemon Leak
Shopify Must Face Data Privacy Lawsuit In US
Yahoo Will Give Millions To a Settlement Fund For Chinese Dissidents
UN Says Asian Scam Call Center Epidemic Expanding Globally Amid Political Heat
Reddit - Privacy
Feedback on 2FAGuard? new
You Don’t Have to Be a Privacy Purist to Care About Privacy new
SMS services like addy new
When I stream a show with commercials on my Roku, are the commercials customized for my household, or does everyone see the same ones? new
Need recommendation of encrupted note taking app with these features - new
Should I (and we) be worried about AI integration into Whatsapp? new
Do you trust what’s written in Terms of Service and Privacy Policy? new
AMERICAN PANOPTICON
Limits of a stock pixel phone?
Dumb phone launcher
OpenDNS being very laggy lately... What do you all use for Private DNS?
Job search in the US while maintaining your online privacy aka not using LinkedIn?
Reddit - VPN
No VPN not working when using Wi-Fi from Turkey & Central Asia
VPN Seattle Server - Turning webpages chinese??
VPN browser conflict with Steam Vac
PPTP connection with Android 14 tab
Can I use VPN when I upload YouTube vids?
I almost have my WireGuard tunnel working! Having trouble with the last step though
New Tool !!!!
Can employer see browsing activity on personal computer when I’m using their VPN?
Non-obvious VPN: A pipe dream?
Google always ends up finding my real ip address...
DAZN Germany outside EU
Multiple vpns on my server

Help Wanted

Stack Exchange
Extract CRT and KEY from signed PEM file without the openssl tool
Creating a pentester tool in c/c++ that's used for controlled sections like bug bounty programs? [closed]
How to migrate an OLD Yubikey with an OLD PGP key to a NEW Yubikey with a NEW PGP Key? Cross-signing, certifying, etc
Issues consuming HTTP FastAPI from HTTPS-embedded widget (frontend fetch)
What are the preferred ways to exchange public keys physically?
For the same private key, I have two slightly different public keys. Is it normal?
Overlap for One-Time Passwords
Reddit - AskNetSec
Do CSRF "trusted origins" actually matter?
How do you implement least-privilege access control with ABAC in large, complex environments?
How does Matrix and Element work?
Tracking WSL/WSL2 activity in EDR
How are you tracking unsanctioned AI tools in the enterprise?
Is a PeerBlock is safe to use just as a firewall for Windows 10 in 2025?
CyberSec Lab Typology
Xfinity router passwords using Admin tool on unsecure URL
What does an IAM junior engineer do, typically?
Information Security Officer Career
How Does Key Authentication Works in an Apps/APK?
CTF/Vuln Writeups
Reddit - Netsec Students
Entry levelCertifiation in cybersecurity new
Struggling to learn Ghidra for reverse engineering — need advice
Portfolio and projects ideas
How to get a beginner friendly job in Cyber security
Need help
Is TryHackMe worth it for someone trying to get into cybersecurity?
How to monitor a compromised firewall
How to setup Tryhackme full video link https://youtu.be/hgLiBrcOd5E
Learn your way towards CEH with pluralsight or HTB?
Learning OSINT as a Skillset – Here to Share + Learn
Practical security demo to spread awareness
Stackoverflow - Security
GitLab SAST pipeline generates report but vulnerabilities do not appear in the Vulnerability Report [closed] new
Errors with Setting Up custom CodeQL queries
Endpoint Privilege Management not allowing users to use elevated access
Can popen be safely used in setuid/setgid programs? [closed]
Best way to store passwords/sensitive data needed by PHP app/api on Apache (Production env) [closed]
How can I enforce code integrity for a locally installed (unpacked) Chrome extension so it refuses to run if tampered with?
How to use TPM2 key with password protection in OpenSSL (handle-based key)
my batch file only gets the inputs and then goes off and don't do anything
CTF (.png file) Challenge [closed]
Is it possible to protect software from being copied? [closed]
Secure notifications from Microsoft Graph?
Spring Security 6 Custom Filter not getting applied to specific url pattern in

Locks/Social Engineering

Reddit - Lockpicking
Mail Call: Federal Lock FS60 new
1100 Picking Advise new
Curious, can a guy rake open a 1100 for a green belt? I have one with a bitting of 3 1 2 3 4 and… new
Cat burglar in my house🫣 new
New kit 😁 new
How do I get these pins back in place? new
Cutaway done. Pin 5 is cut a bit off centre and I used a spring from another lock but good enough. new
Beginner new
The beginning of a new era - My first selfmade pick new
Someone on Facebook marketplace was selling this as a “13 piece lock picking set” lol new
An Ergonomic Experiment new
Paclock 90a-pro submission
Reddit - Social Engineering
The Dangerous Mirage: Deconstructing Face Value and the Myth of Inherent Goodness
How do i stop the presence of people i dislike affecting how i behave?
How The Modern World Has Made Us Miserable & Lonely | Professor Bill Von Hippel
7 Mind-Blowing Science Trick by Nasa Engineer Mark Rober
Full Lesson P1 | The Fear Appeal (National Security)
How Con Artists Outsell Experts
Does this concept already exist? I've been calling it "Slopaganda"
How do I convince my Boomer dad to let me market his photos?
Social Engineering Practice/Legality?
Lineup of SE Presentations

Hak5

Security Blogs

Naked Security
Moving CVEs past one-nation control
Sophos India Volunteers Bring Color to Local Schools
Sophos Annual Threat Report appendix: Most frequently encountered malware and abused software
The Sophos Annual Threat Report: Cybercrime on Main Street 2025
Sophos Firewall v21.5: NDR Essentials
Industrial-strength April Patch Tuesday covers 135 CVEs
Sophos Firewall v21.5 early access is now available
It takes two: The 2025 Sophos Active Adversary Report
Qilin affiliates spear-phish MSP ScreenConnect admin, targeting customers downstream
Schneier on Security
Friday Squid Blogging: Squid Facts on Your Phone
Cryptocurrency Thefts Get Physical
New Linux Rootkit
Regulating AI Behavior with a Hypervisor
Android Improves Its Security
Friday Squid Blogging: Live Colossal Squid Filmed
Age Verification Using Facial Scans
CVE Program Almost Unfunded
Slopsquatting
Upcoming Speaking Engagements
China Sort of Admits to Being Behind Volt Typhoon
Friday Squid Blogging: Squid and Efficient Solar Tech
Linux Security
Curing Linux Rootkit Bypasses Security Monitoring
Linux 6.15-rc3: Security Advisory for UBLK Driver Enhancements
New Supply Chain Attack: Protect Linux Systems from Typosquatting Threats
Dark Reading
AI, Automation, and Dark Web Fuel Evolving Threat Landscape new
Forget the Stack; Focus on Control new
DoJ Data Security Program Highlights Data Sharing Challenges new
How Organizations Can Leverage Cyber Insurance Effectively
Vehicles Face 45% More Attacks, 4 Times More Hackers
Digital Twins Bring Simulated Security to the Real World
NFC-Powered Android Malware Enables Instant Cash-Outs
Gig-Work Platforms at Risk for Data Breaches, Fraud, Account Takeovers
'Industrial-Scale' Asian Scam Centers Expand Globally
Ransomware Gangs Innovate With New Affiliate Models
Attackers Capitalize on Mistakes to Target Schools
Popular British Retailer Marks & Spencer Addresses 'Cyber Incident'
Securelist by Kaspersky
Triada strikes back
Operation SyncHole: Lazarus APT goes back to the well
Russian organizations targeted by backdoor masquerading as secure networking software updates
Lumma Stealer – Tracking distribution channels
Phishing attacks leveraging HTML code inside SVG files
IronHusky updates the forgotten MysterySnail RAT to target Russia and Mongolia
Streamlining detection engineering in security operation centers
GOFFEE continues to attack organizations in Russia
Attackers distributing a miner and the ClipBanker Trojan via SourceForge
How ToddyCat tried to hide behind AV software
A journey into forgotten Null Session and MS-RPC interfaces, part 2
TookPS: DeepSeek isn’t the only game in town
HITB News
The RISKS Digest
Kaspersky Blog
How IP cameras can help attackers | Kaspersky official blog
Protecting Android, Windows, and Linux devices against being tracked via the Find My network | Kaspersky official blog
Adam Shostack & friends
Appsec Roundup - April 2025
Threat Informed Defense Series
CVE Futures
Andor, Season 2
Free Threats
A few thoughts on CVE
Assets, Again
Learning from Troy Hunt’s Sneaky Phish
Appsec Roundup - March 2025
Introducing the DEF CON 32 Hackers' Almanack
Security Researcher Comments on HIPAA Security Rule
OWASP Training in Barcelona
Graham Cluley
The AI Fix #47: An AI is the best computer programmer in the world
Crosswalks hacked to play fake audio of Musk, Zuck, and Jeff Bezos
Insurance firm Lemonade warns of breach of thousands of driving license numbers
The AI Fix #46: AI can read minds now, and is your co-host a clone?
Medusa ransomware gang claims to have hacked NASCAR
Russian bots hard at work spreading political unrest on Romania’s internet
King Bob pleads guilty to Scattered Spider-linked cryptocurrency thefts from investors
HellCat ransomware: what you need to know
Smashing Security podcast #411: The fall of Troy, and whisky barrel scammers
The AI Fix #44: AI-generated malware, and a stunning AI breakthrough
Hackers exploit little-known WordPress MU-plugins feature to hide malware
£3 million fine for healthcare MSP with sloppy security after it was hit by ransomware attack
Rapid7
Introducing Rapid7’s Exposure Assessment Platform Buyer’s Guide new
Active exploitation of SAP NetWeaver Visual Composer CVE-2025-31324 new
Metasploit Wrap-Up 04/25/2025
THE NEW Rapid7 MDR for Enterprise: Tailored Detection and Response for Complex Environments
From Noise to Action: Introducing Intelligence Hub
Top Lessons from Take Command 2025
Metasploit Wrap-Up 04/18/2025
Following the News: MITRE’s Common Vulnerabilities and Exposures (CVE) Funding
Take Command 2025: A Day of Insight, Innovation, and Impact
Metasploit Weekly Wrap-Up 04/11/2025
Password Spray Attacks Taking Advantage of Lax MFA
Patch Tuesday - April 2025
Hacker News (YCombinator) - Security
Hacker Noon #Security
How EIP-4844 Reduces Ethereum’s Transaction Costs with Blobs new
The TechBeat: The Decentralized Internet Could Turn Us Into a Type-1 Civilization. The Alternative? Mass Slavery (4/28/2025) new
How X Fueled the Kiwi Farms Fire—And What We Learned from It new
A New Ethereum Upgrade Could Solve Rollups’ Biggest Security Flaw new
Blockchains Need “Escape Hatches” in Layer-2 new
Measuring Technology Convergence: Keywords, Citations, and Collaborations new
How SaaS Companies are Changing Their Approach to Authorization
The TechBeat: This 150-Line Go Script Is Actually a Full-On Load Balancer (4/27/2025)
Identifying Technological Convergence in Cybersecurity: A Novel Approach
Can a Decentralized Internet Truly Eliminate Censorship? Share Your Thoughts to Win from 15,000 USDT
BitsLab's Web3SecuringPlan Acknowledged by OneKey for Security Enhancements
The TechBeat: The Fall of OM by Mantra DAO: Accident or Pattern? (4/26/2025)
Security Bloggers Network
Palo Alto Networks to Acquire Protect AI, Launches AI Security Platform new
Court Dismisses Criminal Charges Against VPN Executive, Affirms No-Log Policy new
AppOmni Adds MCP Server to Platform for Protecting SaaS Applications new
Exposure Management Works When the CIO and CSO Are in Sync new
Wallarm Extends API Security Reach to AI Agents new
From Spreadsheets to SaaS-Based Cyber Risk Registers | Kovrr new
Cybersecurity CEO Charged with Installing Malware on Hospital Computers new
Cisco Unveils Open Source AI Reasoning Model for Cybersecurity Use Cases new
AI avalanche: Taming software risk with True Scale Application Security new
How an Innovation Acceleration Workshop Transformed a Startup’s Trajectory by Uncovering Bigger TAM new
Da bloccati a supportati: aiutare i miei clienti ad atterrare in sicurezza con FireMon new
NetRise Adds Tool to Analyze Application Binaries for Security Flaws new
Control C
ZAP: Grep extract in Fuzzer to detect username enumeration via subtly different responses
Wired - Security
Car Subscription Features Raise Your Risk of Government Surveillance, Police Records Show new
Pete Hegseth’s Signal Scandal Spirals Out of Control
Protecting Your Phone—and Your Privacy—at the US Border
Gmail’s New Encrypted Messages Feature Opens a Door for Scams
The Tech That Safeguards the Conclave’s Secrecy
How to Protect Yourself From Phone Searches at the US Border
Florida Man Enters the Encryption Wars
ICE Is Paying Palantir $30 Million to Build ‘ImmigrationOS’ Surveillance Platform
New Jersey Sues Discord for Allegedly Failing to Protect Children
This ‘College Protester’ Isn’t Real. It’s an AI-Powered Undercover Bot for Cops
‘Stupid and Dangerous’: CISA Funding Chaos Threatens Essential Cybersecurity Program
Here’s What Happened to Those SignalGate Messages
Elttam
Krebs on Security
DOGE Worker’s Code Supports NLRB Whistleblower
Whistleblower: DOGE Siphoned NLRB Case Data
Funding Expires for Key Cyber Vulnerability Database
Trump Revenge Tour Targets Cyber Leaders, Elections
China-based SMS Phishing Triad Pivots to Banks
Patch Tuesday, April 2025 Edition
Cyber Forensic Expert in 2,000+ Cases Faces FBI Probe
How Each Pillar of the 1st Amendment is Under Attack
When Getting Phished Puts You in Mortal Danger
Arrests in Tap-to-Pay Scheme Powered by Phishing
DOGE to Fired CISA Staff: Email Us Your Personal Data
ClickFix: How to Infect Your PC in Three Easy Steps

Security in Mainstream Media

Google News Hacking
Crypto Theft: Loopscale Hackers Agree To Return Stolen $5.8 Million — For A Price - Bitcoinist.com new
DragonForce ransomware group announces its forming a hacking cartel - Mashable SEA new
Fired Disney employee gets 3 years in prison for hacking and changing menus - CTV News new
FBI warns of time-traveling hackers - Fox News new
FBI places bounty on Salt Typhoon, $10 million for info on infamous Chinese hacking group - TechRadar new
Former Disney World employee sentenced to prison, fined 750K for hacking into menus at park - firstcoastnews.com new
(LEAD) Over 200,000 SKT users replace USIM chips on 1st day of hacking-prompted replacement service - Yonhap News Agency new
SK Telecom takes full responsibility amid USIM hacking fallout - Light Reading new
4chan is Back and No One Can Replace it - TECHi new
4chan Returns: Site Restored After Massive Hack Attack - Cybernews new
SKT customers eye collective action as hack hits bank accounts - Korea JoongAng Daily new
SKT’s delayed response to hacking incident fuels consumer anxiety - Korea JoongAng Daily
Google Cyber Security
Trump is shifting cybersecurity to the states, but many aren’t prepared - The Dakotan new
Optery Wins Best Service for Attack Surface Management in the 13th Annual Global InfoSec Awards at RSAC 2025 - StreetInsider new
Radiant Logic Wins Editor’s Choice for Identity Security at the Global InfoSec Awards - Business Wire new
360 Privacy Named Winner of the Global InfoSec Awards during RSA 2025 - GlobeNewswire new
Blackpoint Cyber Unveils CompassOne: A Unified Security Posture and Response Platform to Secure Every Moment - GlobeNewswire new
Keeper Security Honored with Nine Global InfoSec Awards at RSA Conference 2025 - PR Newswire new
Commvault Wins Coveted "Outstanding Cyber Resilience" Global InfoSec Award for 2025 - PR Newswire new
Bitsight Surpasses $200 Million in ARR, Accelerating Leadership in Cyber Risk Intelligence - PR Newswire new
2025 Verizon DBIR: Cyber Attacks Increasingly Driven by Vulnerability Exploitation, VPNs and Edge Devices Heavily Targeted - CPO Magazine new
Forward Networks Named Winner of the Global InfoSec Awards For The Third Year In A Row - PR Newswire new
Cyber Defense Magazine Announces Winners of the Global InfoSec Awards 2025 - PRWeb new
Cloud Range Wins 2025 Global InfoSec Award for Visionary Cybersecurity Training - Business Wire new

Thirsty for more

Reddit - Sysadmin
Cool tools that you guys use? new
issues with Latitude 7450 latest BIOS 1.13 and docks? new
How do you utilize ITGlue Documentation system? I need ideas to better our documentation new
Delinea Secret Server REST API Question new
VxRail Add Disk Guidance new
Meeting room camera new
Crowdstrike vs Defender w/Huntress new
onmicrosoft.com issues activating my Windows 11 new
Help on how to talk about Internet domain names to users in general, considering the existence of country-specific TLDs. new
Managing EXO resource problems new
Wall mountable UPS that will keep a fortigate running for a few minutes in case of power outage new
Fortiguard down today? new
Lobste.rs
Audit of the Rust p256 Crate new
anticrawl new
What if we embraced simulation-driven development? new
What are you doing this week? new
OpenBSD 7.7 new
Python sub-micro GPIO new
Burning Data with Malicious Firewall Rules in Azure SQL Server new
Optimizing Go Microservices for Low Latency & High Throughput new
Using HAProxy to protect me from scrapers new
Nouveau: The Rule Based Language Family new
Boxie - an always offline audio player for my 3 year old new
Watching o3 guess a photo’s location is surreal, dystopian and wildly entertaining new
Hackaday
X-Rays From an Overdriven Magnetron new
Life on K2-18b? Don’t Get Your Hopes Up Just Yet new
ASUS GPU Uses Gyroscope to Warn for Sagging Cards new
Look! It’s a Knob! It’s a Jack! It’s Euroknob! new
Kaleidoscopico Shows Off Pi Pico’s Capabilities new
Design Constraints Bring Lockbox to Life new
Hackaday Links: April 27, 2025 new
How Methane Took Over the Booster World new
Quick and Easy Digital Stethoscope Keeps Tabs on Cat new
VESC Mods Made Via Vibe Coding
Save Cells from the Landfill, Get a Power Bank For Your Troubles
Deep Dive on Panel Making
Ars Technica
Massive power outage in Spain, Portugal leaves millions in dark new
In HBO’s The Last of Us, revenge is a dish best served democratically new
Revisiting iZombie, 10 years later new
Weapons of war are launching from Cape Canaveral for the first time since 1988
Netflix introduces a new kind of subtitles for the non-hearing impaired
FBI offers $10 million for information about Salt Typhoon members
Thermal imaging shows xAI lied about supercomputer pollution, group says
Google announces 1st and 2nd gen Nest Thermostats will lose support in October 2025
Silicon Valley billionaires literally want the impossible
Wired
7 Best Flower Delivery Services of 2025, Tested and Reviewed new
Which Instax Camera Should You Buy? new
HP EliteBook Ultra G1i Review: A Laptop That’s All Business new
Oxo Rapid Brewer Review (2025): Fast, Tasty Cold Brew new
Poop Drones Are Keeping Sewers Running So Humans Don't Have to new
Car Subscription Features Raise Your Risk of Government Surveillance, Police Records Show new
Donald Trump Is Already Ruining Christmas new
Scientists Believe They’ve Witnessed ‘Planetary Suicide’ for the First Time new
How to Watch the Eta Aquariids Meteor Shower new
7 Best Mesh Routers (2025), Tested and Reviewed
Parallelle Traveler Review: Unparalleled Attention to Detail
Dyson Supersonic r Hair Dryer Review: A Tiny Powerhouse
Slashdot
Dyson Founder Says He Has Lived a 'Life of Failure' new
IBM Pledges $150 Billion US Investment new
'Don't Make Google Sell Chrome' new
Widespread Power Outage Is Reported in Spain, France and Portugal new
America's Electric Vehicle Sales Have Jumped 10.6% Compared to 2024 new
AI Helps Unravel a Cause of Alzheimer's Disease and Identify a Therapeutic Candidate new
Could a 'Math Genius' AI Co-author Proofs Within Three Years? new
Nuclear Fusion Pioneer Abandons Plan for Prototype Reactor, Will License Reaction-Boosting Nuclear Fuel Capsule new
To 'Reclaim Future-Making', Amazon Workers Published a Collection of Science Fiction Stories new
Russian Satellite Linked to Its Nuclear Anti-Satellite Weapon Program Appears Out of Control, Analyst says new
Starbucks Opens Its First 3D-Printed Store new
Consumers Aren't Flocking to Microsoft's AI Tool 'Copilot' new
DZone Security
The Hidden Breach: Secrets Leaked Outside the Codebase Pose a Serious Threat
Zero Trust Architecture: Revolutionizing Network Security in the Digital Age
Enhancing Avro With Semantic Metadata Using Logical Types
Securing Parquet Files: Vulnerabilities, Mitigations, and Validation
Jira Restore And Disaster Recovery: Scenarios and Use Cases
Your Ultimate Website QA Checklist
Understanding ldd: The Linux Dynamic Dependency Explorer
AWS WAF Classic vs WAFV2: Features and Migration Considerations
DZone
Thermometer Continuation in Scala
Scalability 101: How to Build, Measure, and Improve It
The Role of Functional Programming in Modern Software Development
Power BI Embedded Analytics — Part 1: Introduction and Power BI Authoring Overview
Scaling in Practice: Caching and Rate-Limiting With Redis and Next.js
CRDTs Explained: How Conflict-Free Replicated Data Types Work
Why Testing is a Long-Term Investment for Software Engineers
Auto-Instrumentation in Azure Application Insights With AKS
Reinforcement Learning for AI Agent Development: Implementing Multi-Agent Systems
Optimizing AI Model: A Guide to Improving Performance (3 of 3)
Key Considerations in Cross-Model Migration
5 Best Node.js Practices to Develop Scalable and Robust Applications
Hacker News (YCombinator)
Reanimation of the original Logic Theorist, the first AI, in IPL-V new
Show HN: Autarkie – Instant Grammar Fuzzing Using Rust Macros new
Anthropic Economic Index: AI's Impact on Software Development new
Unauthorised AI Bots on Reddit Are Eroding Sociality new
We Found Insurance Fraud in Our Crash Data new
Spain and Portugal suffering nationwide power outage new
Widespread power outage hits Spain and neighboring countries France and Portugal new
Optery (YC W22) – Engineering Team Lead and Engineers with Node.js (U.S., Latam) new
Show HN: I built a hardware processor that runs Python new
I built a hardware processor that runs Python new
Spain, Portugal and parts of France hit by power outage new
Making a game from scratch using only a guitar [video] new
Reddit - Cyberpunk
Thought this was a fun little BTS on Blade Runner new
Cyber Dreams by Plum Parrot stopping at book 6? new
A cyberpunk girl design I drew a while back. new
Dillinger's Cybercopter new
My First Three Nights in Recursion Point: An Introduction to Wet-hacking, Protagonism, and Polyreality new
Luohan Temple, Chongqing new
Who are you in a Cyberpunk society? new
My netrunner look for neotropolis this year. new
Move Fast And Break Kings new
Would these elements make my setting not fully cyberpunk? new
New Orleans JAZZ FEST After Dark CHKNDRUM CYBERPUNK EDM Techno RAVE new
WAKE UP, OMENS. Welcome to the open playtest of TITANOMACHY: Dreams of the Hue, an upcoming queer southern cyberbiopunk roleplaying game by Jackrabbit Collective! new
Reddit - Security CTF
Looking for Members - CTF Team new
Looking for tools to host a small vps based CTF
🦖 Jurassic Park: InGenV1 Node - Full CTF VM Release
🚀 Try my new API Lab Tarkash - Quiver of arrows
Should I start a blog for HTB, THM, VulnHub writeups?
2 New UAF Vulnerabilities in Chrome
I've come a long way in ctf challenge to get this video, but I don't understand what to do next. Any ideas?
SSRF (probably) CTF help
We security ctf
help solve the eval-related exploit
Is VulnHub still worth it in 2025?
Expanding CTF Team (Crypto/Forensics/RE)