Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

Reddit - NetSec
Justice Dept. Dismantles a Major Ransomware Operation
Azure/ 365 discord for learning and discussions
Factorization (DCQF) of a 48-bit integer using 10 trapped-ion qubits
Kamailio's exec module considered harmful – RTC security
Pre-Auth RCE on OpenEMR: Using a rogue MySQL server to steal your health data
Fun with Gentoo: Why don't we just shuffle those ROP gadgets away?
Advisory: XXS Vulnerability for Arbitrary Domains in Skyhigh Security's Secure Web Gateway
Yandex Services Source Code Leaked
Exploiting a Critical Spoofing Vulnerability in Windows CryptoAPI
Software Supply Chain Security Debt is Increasing: Here's How To Pay If Off
Help! is this a false positive? this file was flagged by defender, it is from a mod downloaded from moddb
Ransacking your password reset tokens
Bleeping Computer
The Hacker News
Microsoft Urges Customers to Secure On-Premises Exchange Servers new
Eliminating SaaS Shadow IT is Now Available via a Self-Service Product, Free of Charge new
ISC Releases Security Patches for New BIND DNS Software Vulnerabilities new
Ukraine Hit with New Golang-based 'SwiftSlicer' Wiper Malware in Latest Cyber Attack new
Experts Uncover the Identity of Mastermind Behind Golden Chickens Malware Service
Researchers Discover New PlugX Malware Variant Spreading via Removable USB Devices
3 Lifehacks While Analyzing Orcus RAT in a Malware Sandbox
British Cyber Agency Warns of Russian and Iranian Hackers Targeting Key Industries
Hive Ransomware Infrastructure Seized in Joint International Law Enforcement Effort
Google Takes Down 50,000 Instances of Pro-Chinese DRAGONBRIDGE Influence Operation
Researchers Release PoC Exploit for Windows CryptoAPI Bug Discovered by NSA
Researchers Uncover Connection b/w Moses Staff and Emerging Abraham's Ax Hacktivists Group
PacketStorm
US Hacks Back Against Hive Ransomware Crew
2 Federal Agencies Hacked With Remote Monitoring
Russian Hackers Launch Attack On Germany In Leopard Retaliation
Google Slays Thousands Of Fake News Vids Posted By Dragonbridge
What Happens When Crypto Derivatives Crash
Notice On Hive Ransomware Site Claims Seizure By FBI, Europol
RSA's Demise From Quantum Attacks Is Very Much Exaggerated
Hackers Demand $10M From Riot Games To Stop Leak Of League Of Legends Source Code
DragonSpark Threat Actor Leverages Open Source RAT
GoTo Warns Customers Of Crypto Key And Backup Heist
Quantum Computers No Threat To Encryption Just Yet
Ransomware Victims Are Refusing To Pay
The Register
Mon Dieu! Suspected French ShinyHunters gang member in the dock new
Microsoft to enterprises: Patch your Exchange servers new
Uncle Sam slaps $10m bounty on Hive while Russia ban-hammers FBI, CIA new
Savvy cybersecurity pros benefit from host of free resources to step up fight against hackers and cyber threats
UK Cyber Security Centre's scary new story: One phish, two phish, Russia phish, Iran phish
Google slays thousands of fake news vids posted by pro-China group Dragonbridge
FBI smokes ransomware Hive after secretly buzzing around gang's network for months
Bloke allegedly stole, sold private info belonging to 'tens of millions' globally
Months after NSA disclosed Microsoft cert bug, datacenters remain unpatched
Microsoft closes another door to attackers by blocking Excel XLL files from the internet
Strengthening the human element
Cybersecurity professionals upskill in Brazil and Mexico

Threat Wire

Exploits

LiveOverflow

Bug Bounties

Pentester Land
Portswigger
Burp Suite roadmap update: January 2023
Packetlabs Ltd delivers advanced testing capabilities with Burp Suite Certified Practitioners
Browser powered scanning 2.0
New Burp Suite API: we want your feedback!
The Burp challenge
HackerOne Hacktivity
HackerOne Blog
Hacker AFK: InsiderPhD
HackerOne Named a Leader in Penetration Testing as a Service (PTaaS) GigaOm Radar Report
H1 Hackers Walk the Streets of Barcelona at H1-3493!
How Human Security Testing Helps the U.S. Government’s Zero Trust Mandate
Brand Ambassador Announcement
Changes to Disclosure Assistance
Reddit - BugBounty
EJPT Learning new
Bug reported in May 2022 was just paid by the program. Unexpected 1500 dollars, lol new
IDOR on marketing preferences page - worth reporting? new
I ran lazyrecon script on a domain and my internet got disconnected. new
Bug Bounty Tip: Change your Content-Type header on random endpoints to different things like application-xml or application/x-java-serialized-object which leads to XXE or Deserialization flaws new
Am I chasing a rabbit? (JS in plain text) new
Two Factor Authentication Bypass On Facebook
Im holding weekly CTF for people to join in from all levels & forming a CTF team if your intrested hit the link
looking for a small group
Exploiting XML-RPC on WordPress that is protected by NGINX
Tax Season - Where will our 1099s come from? (USA)
Looking to team up

Vulnerabilities

Tools

Exploit Dev

Google Project Zero
DER Entitlements: The (Brief) Return of the Psychic Paper
Exploiting CVE-2022-42703 - Bringing back the stack attack
Mind the Gap
A Very Powerful Clipboard: Analysis of a Samsung in-the-wild exploit chain
Gregor Samsa: Exploiting Java's XML Signature Verification
Security Researchers
Further adventures in Apple PKCS#11 land new
I'm still bitter about Slammer
Build security with the assumption it will be used against your friends
4 fundamental questions on EASM — and how Detectify’s solution answers them
PKCS#11. hardware keystores, and Apple frustrations
You Move, They Follow: Uncovering Iran’s Mobile Legal Intercept System
Blogging and microblogging
Restoring Dyld Memory Loading
Integrating Linux with Okta Device Trust
Happy 20th Birthday TaoSecurity Blog
The trouble with CVEs and vulnerability management in modern tech stacks
Changing firmware config that doesn't want to be changed
Reddit - Exploit Dev
Getting into evasion
Ptrace Injection CTF Challenge Walkthrough
CVE-2021-21551 - Privilege escalation exploit for physical memory read/write vulnerability
A template for modern shellcode coding + A socks proxy shellcode for pivoting on IOT
Help with arm exploitation
How do you decide what to exploit?
Any discord servers for exploit dev?
Moving to bugbounty.
Awesome IDA, Ghidra, x64DBG, GDB & OllyDBG plugins
Blueprint for All Pentests!
Thoughts on Signal Labs vulnerability research course?
Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463
Source Incite

Reversing/I like ASM

Reddit - REGames
Intrinsic Alchemy (Game Engine Kit + Documentation) used for many games in 2000-2010s. new
How do I extract World of Warplanes models? new
Regarding .ENC format on an iOS game.
Porting the arcade version of Tekken 5: Dark Resurrection on PS2 by reverse engineering
REing a class's "operator=" function, but the ASM violates the const keyword?
Resources for manipulating Historyline?
Cracking games from 2005 and older
unofficial ports >?
Is there anyone who could help me RE a mobile game?
REGames Discord?
Is it already possible to train Large Language Models to accurately decompile code (ie Game Codes?)
Tutorial: Hacking Electron Games - Part 2: Coding an Internal Overlay with HTML/CSS/JS for Persistent Cheats (Game: Vampire Survivors)
StackExchange - ReverseEngineering
Overwriting the Global Offset Table + format string vulnerability new
Weird anti-debugging mechanism new
Is it possible to enhance CAPEv2 detection? new
why is this code not working , trying to bring two .bin files together in 16bit mode always got segmentation fault new
Check if libc.so use tcache
Java bytecode dynamic analysis
Compression algorithm from very old tape backup?
Tracing odd variant of call analysis failed
The execution is not at AddressOfEntryPoint after patching .text section bytes
How to use dnSpyEx or some other .NET debugger to attach to a .NET process started with a process-hollowing technique?
get thread count remotely with immunity debugger
Frida hook X509Certificate
Reddit - Reverse Engineering
Writing a custom Android Decryptor in Java
SmmLoader - load your system management mode module at runtime
Lytro Unlock - Making a bad camera slightly better
.prt and .asm file reverse engineered
Reverse-engineering the Intel 8086 processor's HALT circuits
Statistical Analysis to Detect Uncommon Code
How to learn reverse engineering fast | A Practical Approach
A searcheable database of the internet's SSL/TLS certificate names
Hands-Free Binary Deobfuscation with gooMBA
CTF Challenge Walkthrough: Reversing seccomp and using PTrace code injection to get Flag.
Ghidra, Pyhidra (via Jpype), and Callgraphs Oh My!
Do More with VMs | Oracle Virtual Box Install (for Beginners)
Reddit - Game Hacks
EFT FLY CHEATING x STERNCLIENT.BIZ new
Zoldout Global v00.12.23 Hack Mod for Android new
AngelKnights : Idle RPG v2.21.22 Hack Mod for Android new
valorant cheats
Guys is there any mod for android sling kong where you can have all the maps and unlimited money?
Eroica v1.7.1 Hack Mod for Android
ANOTHER EDEN MENU v2.14.510 Hack Mod for Android
Zoldout Global v00.12.21 Hack Mod for Android
im offering tarkov carries! join the discord for more info
Evermore Knights vOpen Beta v0.96a Hack Mod for Android
Hacker for hire
Ragnarok Labyrinth NFT v59.2435.0 Hack Mod for Android

Guided Hacking

Malware/APT

Crypto

Reddit - Crypto
Performance of NIST DRBGs
librandombytes: API for applications generating fresh randomness
The KGZ/Kate Polynomial Commitment Scheme
Typescript/WASM library with cryptographic operations based on libsodium, Shamir secret sharing, Merkle trees. Runs on Nodejs and the browser. Feedback is encouraged!
D.Bleichenbacher attack on RSA PKCS#1, part I
RSA with modulo close to power of 2
Weekly cryptography community and meta thread
Can someone help me do this POC length extension attack?
StackExchange - Crypto
Proving the generator criterion for group $Zp$ new
Zero-knowledge proof and privacy-utility trade-off new
Chosen-plaintext attact on AES with MixColumns omitted new
Decentralized identity, how to prevent duplicate uses of the same identity new
Breaking Ed25519 Discrete Logarithm with Degenerate Curve Attack new
Publishing a message with a computationally enforced delay [duplicate] new
For password-based authenticated encryption is it OK to derive the auth key from the crypt key with 1 iteration? new
Should I implement a key store / key management system into my python library? [closed]
Will a bloom filter produce false negatives if it becomes full?
Arithmetic Circuits to R1CS. Do we consider addition gates or not?
How will the ability to do comparison or modulo efficiently in Finite Cyclic Groups break Elliptic Curve Cryptography?
Security Strength of Symmetric vs Asymmetric Ciphers

Seytonic

Podcasts

The CyberWire
Flagging firmware vulnerabilities. [Research Saturday] new
An update on the Hive ransomware takedown. More DDoS from Killnet. Advisories from CISA, and an addition to the Known Exploited Vulnerabilties Catalog.
Remote monitoring and management tools abused. Russian and Iranian cyberespionage reported. The world according to the CIO. And if volume is your secret, maybe look…
CISA Alert AA23-025A – Protecting against malicious use of remote monitoring and management software
TA444 and crypto theft on behalf of the Dear Successor. CryptoAPI spoofing vulnerability described. New Python-based malware campaign. User headspace. Tanks vs. hacktivists.
Cyber Marketing Con 2022: From the horse’s mouth: CISO Q&A on solving the cyber marketer’s dilemma. [Special Editions]
Disentangling cybercrime from cyberespionage. A threat to the IoT supply chain. What do you do with the hacktivists when they stop being hacktivists? A retired…
Contractor error behind FAA outage. OneNote malspam. Vastflux ad campaign disrupted. Ukraine moves closer to CCDCOE membership. Alerts for gamblers and gamers.
Miriam Wugmeister: Technology's not as complicated as you think. [Data Security] [Career Notes]
The power of web data in cybersecurity. [CyberWire-X]
Billbug infests government agencies. [Research Saturday]
Ransomware in Costa Rica. Cyberespionage against unpatched FortiOS instances. Credential stuffing PayPal, breaching T-Mobile. Utility business systems hit. Hackathons and phishing in Russia.
Cyber Security Interviews
ISC Daily Stormcast
ISC StormCast for Friday, January 27th, 2023
ISC StormCast for Thursday, January 26th, 2023
ISC StormCast for Wednesday, January 25th, 2023
ISC StormCast for Tuesday, January 24th, 2023
ISC StormCast for Monday, January 23rd, 2023
ISC StormCast for Friday, January 20th, 2023
ISC StormCast for Thursday, January 19th, 2023
ISC StormCast for Wednesday, January 18th, 2023
ISC StormCast for Tuesday, January 17th, 2023
ISC StormCast for Monday, January 16th, 2023
Darknet Diaries
131: Welcome to Video
130: Jason's Pen Test
129: Gollumfun (Part 2)
128: Gollumfun (Part 1)
127: Maddie
Security Weekly
PSW #770 - Brian Behlendorf
Throwback Episode - Gary McGraw - PSW366
PSW #769 - Kate Stewart
PSW #768 - Robert Martin
PSW #767 - Holiday Extravaganza
PSW #766 - Sinan Eren, Nate Warfield
PSW #765 - Josh Bressers, Kurt Seifried
PSW #764 - Jesse Michael
PSW #763 - Dan DeCloss
PSW #762 - Ben Hibben
PSW #760 - Michael Meis, Christopher Crowley
Risky.Biz
Risky Biz Soap Box: Tools alone won't solve your vuln management problems
Risky Business #692 -- Google search results spew malware, phishing sites
Risky Business #691 -- LockBit and "Pablo Escobar syndrome"
Risky Business #690 -- 2023 will be a rough year for critical online services
Risky Business #689 -- FBI baulks at Apple's iCloud encryption push
Risky Biz Soap Box: Attack Path Management is the New Hotness
Risky Business #688 -- APT41 pickpockets Uncle Sam
Risky Business #687 -- Shady deeds in sunny places: Ransomware smashes Vanuatu, Guadeloupe
Risky Business #686 -- White House to move on spyware industry
Risky Biz Soap Box: How to get your developers invested in security
Risky Business #685 -- Australia releases the hounds, and it might just work
Risky Business #684 -- DoJ seizes 50,000 stolen bitcoins from popcorn tin

Threat Intel

HaveIBeenPwned
KomplettFritid - 139,401 breached accounts
Autotrader - 20,032 breached accounts
Zurich - 756,737 breached accounts
DoorDash - 367,476 breached accounts
SlideTeam - 1,464,271 breached accounts
Twitter (200M) - 211,524,284 breached accounts
Deezer - 229,037,936 breached accounts
Benchmark - 93,343 breached accounts
Gemini - 5,274,214 breached accounts
CoinTracker - 1,557,153 breached accounts
Abandonia (2022) - 919,790 breached accounts
Not Acxiom (unverified) - 51,730,831 breached accounts
Reddit - Onions
What's everyone using for search engines? So hard to find any that work right now! new
Using Github with a .onion domain new
Any sites for tutorials how to make legal explosives? (like AN-M14 INCENDIARY) new
There’s a Wild Scramble for Control of the Dark Web Taking Place in Russia new
I think working onions links is a myth. In my last few years I haven't found Tor useful to the point that I can depend… new
I’m a newbie new
What happend to dnmx.org ? down new
What´s up on the with the Tor sites? new
new to this sh!t. any safe and reliable links for purchasing? dm me new
Buy fake money new
Wallet that doesn't need verification new
Uhhh
Reddit - Pwned
Criminals attempt to extort $10M from Riot Games, threatening to leak ‘League of Legends’ source code
GoTo (LogMeIn) says criminals stole customers' backups and encryption key
37 million accounts hacked in latest T-Mobile data breach - second in less than two years
Twitter data leaked - 400 million user details up for sale
Okta's source code stolen after GitHub repositories compromised
FBI’s private info-sharing network ‘InfraGard’ infiltrated; user contact database scraped and offered for sale on cybercrime forum
The Turkish Citizens Health Database (HSYS) (hsys.saglik.gov.tr) suffered a data breach that impacted 100 over million citizens
Suffolk Police apology over sex abuse victims data on website, including names, addresses, DOB, and details of offences, involving hundreds of people
Whoosh confirms data breach after hackers sell 7.2M user records, including partial user identification and payment card data
Cabinet-members of Greece’s Parliament infected with Predator spyware - 33 people in total known so far
DSB, Danish national rail company, hit by financially-motivated cyberattack, internal testing environment compromised. IR shut down servers resulting in trains being un-drivable for several hours
OakBend Medical Center (TX, USA) Confirms Data Breach, leaking data include SSN & DOB, of an estimated 497,000 people

Privacy/VPNs

Reddit - VPN
Router wifi to mobile/cell phone?? new
Anyone using a VPN should always use OpenVPN configuration files instead of the application from the VPN company. new
Is A'tlas VPN also an antivirus? new
hey guys please help me new to this sub reddit!! new
VPN causing internet disruptions on MacBook. new
Ask r/VPN: How do you mainly use your VPN?
IP Address?
Do I need to change locations frequently for true privacy?
Need help with unstable connection with torrents
Risks of Using VPN for Subscriptions
Hi from Germany.
How to save money using VPN?
PrivacyTools.io
EFF
Brazil's Telecom Operators Made Strides and Had Shortcomings in Internet Lab's New Report on User Privacy Practices
EFF Tells Supreme Court: User Speech Must Be Protected
The Next Stage in Security Expert’s Trial Set for January 31
Podcast Episode: Don't Be Afraid to Poke the Tigers
For Would-Be Censors and the Thin-Skinned, Copyright Law Offers Powerful Tools
Right to Repair Advocates Have Had Good Victories. We Have To Keep Fighting.
Fair Use Creep Is A Feature, Not a Bug
Have You Tried Turning It Off and On Again: Rethinking Tech Regulation and Creative Labor
Open Data and the AI Black Box
Digital Rights Updates with EFFector 35.1
US Copyright Term Extensions Have Stopped, But the Public Domain Still Faces Threats
It’s Copyright Week 2023: Join Us in the Fight for Better Copyright Law and Policy
Slashdot - Rights
Wyoming Crypto Bank Denied for Federal Reserve System Membership new
US and EU To Launch First-Of-Its-Kind AI Agreement new
Boeing Pleads Not Guilty To Fraud In Criminal Case Over Deadly 737 Max Crashes new
Apple Brings Mainland Chinese Web Censorship To Hong Kong
Home Depot Canada Found Sharing Customer Personal Data With Meta
US Says It 'Hacked the Hackers' To Bring Down Hive Ransomware Gang
Member of Congress Reads AI-Generated Speech On House Floor
A Robot Was Scheduled To Argue In Court, Then Came the Jail Threats
MSG Probed Over Use of Facial Recognition To Eject Lawyers From Show Venues
A Network of Knockoff Apparel Stores Exposed 330,000 Customer Credit Cards
Arizona Senator Introduces Bill To Make Bitcoin Legal Tender In the State
Massachusetts Bills Would Set a Minimum Wage For Rideshare Drivers
Reddit - Privacy
OnlyOffice is a Russian company with deep ties to their government and military and actively tries to mask its origins. Please stop reccomending this as… new
TiVo privacy? My TiVo's TSN is not registered to my account. new
My PC switches windows (alt+tab) on its own new
can my mom see if i watch porn if they have Xfinity parental control on? new
Where can I find sources on "daily car use" privacy? new
Can you disable webRTC on android? new
Blocking China domains and IPs new
There is nothing wrong with ads on the internet. It is the trackers that are the issue. new
where to rent EU phone numbers? new
Won't let me delete my TikTok account. new
Tip: Speed up your Browser new
Ever since I deleted my Gmail/Google accounts, Why is Google always asking me for CAPTCHA verification every time I search? new

Help Wanted

Stackoverflow - Security
Session userid manipulation generated by PHP new
Is the eval() function safe to use here? new
How to Secure our Computer and Desktop From Hack? [closed] new
MMLS (Sleuth Kit) not working in some situations using DCFLDD new
Cryptography task for repositorium of data new
Python or C++? regarding the security and the safety of the built software (or for entire system) [closed]
Suddnly, loading files through source map is blocked
Encryption/decryption fails
Dynamic CSP header with Firebase Hosting
Secure Postgres remotely connection by SSH or SSL? [closed]
Secure laravel api
When making a form, what's the difference between required in html and checking it later in php?
Stack Exchange
How can I recover a released USA mobile phone number of mine used for 2FA? new
3rd Party API Key in cognito custom attribute JWT new
proxy anonymity level, what is the tehnical difference ? (specific example from hide my name) new
MMLS (Sleuth Kit) not working in some situations new
Control cookies with XSS by adding set-cookies inside a html code? new
My android phone was hacked and a SMS was deleted remotely. How is this possible? [closed] new
How strong is windows wirewall on Windows Server 2019? new
How to show a different screen to a malware installed? [closed] new
How Proxies Can Improve Your Online Experience new
Using the readlink function to avoid symbolic link race conditions when opening a file path
Notepad.exe establishing an outbound TCP over port 1025 from Windows using server to a Teradata server, is this unusual?
How is group membership passed in with JWTs?
Reddit - AskNetSec
Is it possible to hack premium live coins? new
is bitwarden + yubikey 100% secure? new
How do fido u2f security keys work?
could bitwarden have same issue as LastPas
Do you need to backup these things?
Understanding SSH with public keys
bitlocker - two questions
Security Onion issue with Kibana "application not found"
tlsv1 decrypt error with mitmproxy
UTMStack VS Wazuh VS Security Onion
Learn Cybersecurity along with webDev
Microsoft Defender Best Security Policies & Practices To Adopt?
Reddit - Netsec Students
What is the best course you took on Udemy? new
Azure / 365 learning
Blackbox testing web API's?
Death Star security failures
Need advice on closing the knowledge gap between general networking and CCNA.
What online cyber security tools do you wish existed?
Bypassing Cloudflare WAF: XSS via SQL Injection
Making sure I’ve got my terminology right.
What websites do you use to sandbox test anything suspicious?
Encrypted Tunnel vs. Encrypted Traffic
Burp Suite Certification Blind SQL question

Locks/Social Engineering

Reddit - Lockpicking
Looking for advice new
I’m new to lockpicking and I keep breaking or bending my picks. new
Anyone picked a Schlage Primus? new
2 days in, and need some better picks already. These Sparrow picks are hard on the hands/fingers new
3D model of a functional KW1 compatible lock new
Any advice on picking the back of a dial lock? new
Another LLT pick that got some tasty wooden scales. This time it's a Duplex pick with a split Cherry/Walnut mini handle. Absolutely love these Duplex… new
Any idea how to get padlock K.I.K. cylinders in Europe? new
My hobby spot new
Interview with a Lock Picker - Episode 21 - Tarehjerne new
Very slick plug follower new
Buying new HPC locks new
Reddit - Social Engineering
How do you change your rapport building techniques depending on someone's personality? new
what similarities can you point out between yourself & someone to build rapport? new
How To Communicate With Assertiveness: 16 Strategies
Dealing with non committed responses
Any new info on the Chris Hadnagy controversy?
best books on revenge?
"Time to wakey wakey…" Re: The background track will get old, doll. Broken record. Nails on the chalkboard. Nah. Same bs...Have fun with that backup…
15 Shades of Russian Propaganda. An Extensive Guide to Russian Social Engineering Techniques and How To Counter Them.
T H E C O G N I T I V E B I A S C O D E X
seperating kid from their intuition
how can the way someone treats others they deem inferior be used to psychoanalyse them?
Using xPERPS To Build My EVMOS + KAVA Positions

Hak5

Security Blogs

digitalmunition
Hacker News (YCombinator) - Security
Gaggle Drops LGBTQ Keywords from Student Surveillance Tool new
Two of the UK's water companies are still using dowsing to find leaks new
Most criminal cryptocurrency is funneled through just 5 exchanges new
Cyber is a new language for fast, efficient, and concurrent scripting new
Kevin Mitnick Hacked California Law in 1983
Apple’s Mac security is so good, it’s sending used M1 MacBooks to the scrap heap
An AI robot lawyer was set to argue in court. Real lawyers shut it down
An AI lawyer was set to argue in court – real lawyers shut it down
Mexico cracks down on solar geoengineering
Tell HN: Whole Yandex Git repository leaked
Hilton Hotels Loyalty Program Data Breached, Info of 3.7M Users for Sale
Calling Ruby Methods in C: Avoid Memory Leaks
eHacking News
Hacker Noon #Security
Wired - Security
A Link to News Site Meduza Can (Technically) Land You in Russian Prison new
ADS-B Exchange, the Flight Tracker That Powered @ElonJet, Sold to Jetnet
Most Criminal Cryptocurrency Funnels Through Just 5 Exchanges
The Best Personal Safety Devices, Apps, and Alarms (2023)
The Unrelenting Menace of the LockBit Ransomware Gang
Flaw in Diksha App Exposed the Data of Millions of Indian Students
How to Encrypt any File, Folder, or Drive on Your System
The Biggest US Surveillance Program You Didn’t Know About
T-Mobile's New Data Breach Shows Its $150 Million Security Investment Isn't Cutting It
The Small but Mighty Danger of Echo Chamber Extremism
Welcome to the Era of Internet Blackouts
A Sneaky Ad Scam Tore Through 11 Million Phones
Control C
Graphene OS Introduction
Briar Secure Messenger
KeePassXC - Cross-Platform Password Manager
Flipper Zero
Krebs on Security
Experian Glitch Exposing Credit Files Lasted 47 Days
Administrator of RSOCKS Proxy Botnet Pleads Guilty
New T-Mobile Breach Affects 37 Million Accounts
Thinking of Hiring or Running a Booter Service? Think Again.
Microsoft Patch Tuesday, January 2023 Edition
Identity Thieves Bypassed Experian Security to View Credit Reports
Happy 13th Birthday, KrebsOnSecurity!
The Equifax Breach Settlement Offer is Real, For Now
Hacked Ring Cams Used to Record Swatting Victims
Microsoft Patch Tuesday, December 2022 Edition
FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked
New Ransom Payment Schemes Target Executives, Telemedicine
Naked Security
Hive ransomware servers shut down at last, says FBI
Dutch suspect locked up for alleged personal data megathefts
S3 Ep119: Breaches, patches, leaks and tweaks! [Audio + Text]
GoTo admits: Customer cloud backups stolen together with decryption key
Apple patches are out – old iPhones get an old zero-day fix at last!
Serious Security: How dEliBeRaTe tYpOs might imProVe DNS security
T-Mobile admits to 37,000,000 customer records stolen by “bad actor”
S3 Ep118: Guess your password? No need if it’s stolen already! [Audio + Text]
Serious Security: Unravelling the LifeLock “hacked passwords” story
Multi-million investment scammers busted in four-country Europol raid
S3 Ep117: The crypto crisis that wasn’t (and farewell forever to Win 7) [Audio + Text]
Microsoft Patch Tuesday: One 0-day; Win 7 and 8.1 get last-ever patches
Schneier on Security
Friday Squid Blogging: Squid-Inspired Hydrogel new
Kevin Mitnick Hacked California Law in 1983
A Guide to Phishing Attacks
On Alec Baldwin’s Shooting
US Cyber Command Operations During the 2022 Midterm Elections
Bulk Surveillance of Money Transfers
No-Fly List Exposed
Publisher’s Weekly Review of A Hacker’s Mind
Friday Squid Blogging: Another Giant Squid Captured on Video
Real-World Steganography
Security Analysis of Threema
AI and Political Lobbying
Linux Security
BlackBerry: Cyberattacks Are Being Launched Once Every Minute
Linux Malware Rates Rise to Record Levels Amid Hacker Inconsistency
OpenSSF Aimed to Stem Open Source Security Problems in 2022
An IBM Hacker Breaks Down High-Profile Attacks
New Boldmove Linux Malware Used to Backdoor Fortinet Devices
A DevSecOps Process for Node.js Projects
How to Check if Your Linux System is Infected with a Virus
C++ Programming Language and Safety: Here's Where It Goes Next
Exploited Control Web Panel Flaw Added to CISA 'Must-Patch' List
Critical Linux Kernel flaw affects SMB servers with ksmbd enabled
Stealthy Malware Distribution Involves Polyglot Files
Linux Operating System Market Predicted to Grow at a CAGR of 19.8% by 2029
Dark Reading
Enterprises Don't Know What to Buy for Responsible AI
Enterprises Need to Do More to Assure Consumers About Privacy
Why Most Companies Still Don’t Know What’s on Their Network
On Data Privacy Day, Organizations Fail Data Privacy Expectations
Critical RCE Lexmark Printer Bug Has Public Exploit
Google: Influence Operator Dragonbridge Floods Social Media in Sprawling Cyber Campaign
How Noob Website Hackers Can Become Persistent Threats
3 Ways ChatGPT Will Change Infosec in 2023
Riot Games Latest Video-Game Maker to Suffer Breach
A Child's Garden of Cybersecurity
Federal Agencies Infested by Cyberattackers via Legit Remote Management Systems
Dutchman Detained for Dealing Details of Tens of Millions of People
Securelist
What your SOC will be facing in 2023
Whitehat Security Blog
HITB News
Fearing ChatGPT, Google enlists founders Brin and Page in AI fight
China Is the World’s Biggest Face Recognition Dealer
Ukraine deepens NATO cyber partnership
North Korean cryptocurrency hackers expand target list
2023 MacBook Pro review: A refined second generation
China aims to grow local infosec industry by 30 percent a year, to $22 billion by 2025
What You Need to Know About the Kraken Covid Variant
The Overwatch League ruled esports. Then everything went wrong
Amid China’s massive COVID wave, 42% of people on one flight tested positive
ChatGPT has investors drooling, but can it bring home the bacon?
The Work-From-Anywhere War Is Beginning
XBB.1.5: Still more questions than answers on risk of latest omicron subvariant
The RISKS Digest
Re: Calculations on Maryland college savings plans lead to account freeze)
State of the cybersecurity art
How ChatGPT Hijacks Democracy
Re: Cats disrupt satellite Internet service
Southwest airline disruption
Amazing Southwest story...
The oven won't talk to the fridge: 'smart' homes struggle
Colorado ski town emergency dispatch centers fielding dozens of automated 911 calls from skier iPhones
Microsoft to challenge Google by integrating ChatGPT with Bing Search
Programming Languages: Why This Old Favorite Is on the Rise Again
Re: As Tesla stock tanks, videos of Teslas malfunctioning in below-freezing temps go viral
3rd-party Twitter apps stop working without warning, leaks indicate Twitter did this intentionally
Kaspersky Blog
Transatlantic Cable podcast 283 | Kaspersky official blog new
Privacy settings in Untappd | Kaspersky official blog
Apple changes user data protection in 2023 | Kaspersky official blog
How dangerous are Signal vulnerabilities? | Kaspersky official blog
Practical application of ChatGPT | Kaspersky official blog
Recruitment fraud: how to recognize and avoid it | Kaspersky official blog
Transatlantic Cable podcast 282 | Kaspersky official blog
Is Telegram a secure messenger? | Kaspersky official blog
My data was published online — what to do? | Kaspersky official blog
How dangerous are Threema vulnerabilities? | Kaspersky official blog
How to improve your online security: new tips for 2023 | Kaspersky official blog
Communication between information security service and business | Kaspersky official blog
Adam Shostack & friends
Security Bloggers Network
Jan 2023 – FedRAMP, StateRAMP and CMMC 2.0 Roundup new
USENIX Security ’22 – Lei Xue, Yangyang Liu, Tianqi Li, Kaifa Zhao, Jianfeng Li, Le Yu, Xiapu Luo, Yajin Zhou, Guofei Gu – ‘SAID: State-Aware… new
What’s Now, What’s Next? A Deep Dive into Privacy Legislation in 2023 new
Data Privacy Day: The Importance of Managing Your Data Security Posture | Eureka Security new
Overcoming Cyber Overwhelm: Three Security Goals to Focus on in 2023 new
Gartner® Report: Prioritizing Security Controls for Enterprise Servers and End-User Endpoints
Clarification of Obligations for the Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates
There’s No There There….Or is There? You Won’t Find Out With DLP
CBA AND FIDO: One, Other, or Both?
USENIX Security ’22 – R. Spencer Hallyburton, Yupei Liu, Yulong Cao, Z. Morley Mao, Miroslav Pajic – ‘Security Analysis of Camera-LiDAR Fusion Against Black-Box Attacks…
VMware vRealize Log Insight VMSA-2023-0001 IOCs
Chainguard Unveils Memory-Safe Linux Distribution
Graham Cluley
Hive ransomware leak site and decryption keys seized in police sting
ShinyHunters suspect extradited to United States from Morocco, could face 116 years in jail if convicted
Smashing Security podcast #306: No Fly lists, cell phones, and the end of ransomware riches?
After data breach put their lives at risk, US releases 3000 immigrants seeking asylum
FanDuel gamblers warned of phishing threat after data breach at Mailchimp
Kolide – Endpoint security for people, not paper clips
Ransomware attack hit KFC and Pizza Hut stores in the UK
T-Mobile has been hacked… again. 37 million customers’ data stolen
LockBit ransomware – what you need to know
Mailchimp slips up again, suffers security breach after falling on social engineering banana skin
Bitzlato cryptocurrency exchange shut down by authorities, accused of cybercriminal links
Smashing Security podcast #305: Norton unlocked, and police leaks
ThreatPost
Rapid7
The High Cost of Human Error In OT Systems
3 Ways to Apply a Risk-Based Approach to Threat Detection, Investigation, and Response: Gartner® Report
Rapid7 Added to Carahsoft GSA Schedule Contract
Rapid7 Now Available Through Carahsoft’s NASPO ValuePoint
Exploitation of Control Web Panel CVE-2022-44877
CVE-2022-47966: Rapid7 Observed Exploitation of Critical ManageEngine Vulnerability
Trading Convenience for Credentials
What’s New in InsightIDR: Q4 2022 in Review
Gartner® Report: Questions to Ask When Selecting an MDR Provider
Dated, Vulnerable, Insecure Tech Is All Over the News. Hooray.
Recog Release v3.0.3
Increasing The Sting of HIVE Ransomware

Security in Mainstream Media