Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

PacketStorm
The Register
Good luck to Atos' 7th CEO and its latest biz transformation
From hype to harm: 78% of CISOs see AI attacks already
Cyber fiends battering UK retailers now turn to US stores
Coinbase extorted for $20M. Support staff bribed. Customers scammed. One hell of a SNAFU
Metal maker meltdown: Nucor stops production after cyber-intrusion
Why CVSS is failing us and what we can do about it
Uncle Sam pulls $2.4B Leidos deal to support CISA after rival alleges foul play
Go ahead and ignore Patch Tuesday – it might improve your security
Everyone's deploying AI, but no one's securing it – what could go wrong?
Qatar’s $400M jet for Trump is a gold-plated security nightmare
Commvault fixes critical Command Center issue after flaw finder alert
Marks & Spencer admits cybercrooks made off with customer info
Reddit - NetSec
Announcing the Official Parity Release of Volatility 3!
Expression Payloads Meet Mayhem - Ivanti EPMM Unauth RCE Chain (CVE-2025-4427 and CVE-2025-4428) - watchTowr Labs
Integrate LDAP into Keycloak to modernize rather than delete it
Azure Managed Identities Abuse: Security Research - Defense strategies
How I ruined my vacation by reverse engineering WSC
SCIM Hunting. Finding bugs in SCIM implementations
CVE-2024-11477- 7-Zip ZSTD Buffer Overflow Vulnerability - Crowdfense
AI Slop Is Polluting Bug Bounty Platforms with Fake Vulnerability Reports
The Path to Memory Safety is Inevitable
Summarisation of Cross Session Activation / Kerberos relaying attacks
Finding Vulnerable malloc Calls using Ghidra PCode Analysis
SysOwned, Your Friendly Support Ticket - SysAid On-Premise Pre-Auth RCE Chain (CVE-2025-2775 And Friends) - watchTowr Labs
Bleeping Computer
Printer maker Procolored offered malware-laced drivers for months
Ransomware gangs increasingly use Skitnet post-exploitation malware
US charges 12 more suspects linked to $230 million crypto theft
CISA tags recently patched Chrome bug as actively exploited
Government webmail hacked via XSS bugs in global spy campaign
The Hacker News
[Webinar] From Code to Cloud to SOC: Learn a Smarter Way to Defend Modern Applications
Researchers Expose New Intel CPU Flaws Enabling Memory Leaks and Spectre v2 Attacks
Fileless Remcos RAT Delivered via LNK Files and MSHTA in PowerShell-Based Attacks
Coinbase Agents Bribed, Data of ~1% Users Leaked; $20M Extortion Attempt Fails
CTM360 Identifies Surge in Phishing Attacks Targeting Meta Business Users
Microsoft Fixes 78 Flaws, 5 Zero-Days Exploited; CVSS 10 Bug Impacts Azure DevOps Server
China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems Worldwide
Malicious PyPI Package Posing as Solana Tool Stole Source Code in 761 Downloads
Moldovan Police Arrest Suspect in €4.5M Ransomware Attack on Dutch Research Agency
ASUS Patches DriverHub RCE Flaws Exploitable via HTTP and Crafted .ini Files
⚡ Weekly Recap: Zero-Day Exploits, Developer Malware, IoT Botnets, and AI-Powered Scams
Fake AI Tools Used to Spread Noodlophile Malware, Targeting 62,000+ via Facebook Lures

Threat Wire

Bug Bounties

Vulnerabilities

Full Disclosure
Unauthenticated Blind SQL Injection | RSI queue management system - V 3.0 | CVE-2025-26086
CVE-2025-30072 Tiiwee X1 Alarm System - Authentication Bypass by Capture-replay
SEC Consult SA-20250506-0 :: Honeywell MB Secure Authenticated Command Injection
SEC Consult SA-20250429-0 :: Multiple Vulnerabilities in HP Wolf Security Controller and more
SEC Consult SA-20250422-0:: Local Privilege Escalation via DLL Search Order Hijacking
Session Invalidation in Economizzer Allows Unauthorized Access After Logout
Persistent Cross-Site Scripting in Economizzer Category Entry
Persistent Cross-Site Scripting in Economizzer Cashbook Entry
APPLE-SA-05-12-2025-9 Safari 18.5
APPLE-SA-05-12-2025-8 visionOS 2.5
APPLE-SA-05-12-2025-7 tvOS 18.5
APPLE-SA-05-12-2025-6 watchOS 11.5
NIST National Vulnerability Database
NIST Small Business Cybersecurity Webinar: Protecting Your Small Business from Phishing Risks new
Iris Experts Group (IEG) Annual Meeting new
CSF 2.0 Webinar Series: Deep-Dive into the CSF 2.0 Govern Function to Improve Cybersecurity new
5th High-Performance Computing Security Workshop
0day Today
CXSecurity
DiskBoss Enterprise 7.4.28 Remote Buffer Overflow
WordPress SureTriggers 1.0.78 Authentication Bypass / Remote Code Execution
Design By : RVTECH - Blind Sql Injection Vulnerability
fengoffice_3.5.1.5 - SQLi
TP-Link VN020 F3v(T) TT_V6.2.1021) DHCP Stack Buffer Overflow
Dell EMC iDRAC7/iDRAC8 2.52.52.52 Remote Code Execution
ezportal Advisory ( Portal Mod for SMF ) Local SQL injection
VirtualBox 7.0.16 Privilege Escalation
Ruckus IoT Controller 1.7.1.0 Undocumented Backdoor Account
Firefox ESR 115.11 PDF.js Arbitrary JavaScript execution
Explore IT CMS - Blind SQL Injection Vulnerability
Synotec Holdings - Blind Sql Injection Vulnerability

LiveOverflow

Exploit Dev

Reversing/I like ASM

Reddit - Reverse Engineering
Help needed: Decompressing old game files (.PES format)) new
Frida 17 is out new
Oracle VM VirtualBox - VM escape via VGA device
Mario Kart 64 Has Been Decompiled
Multiple Security Issues in Screen
Mario Party 4 is the First GameCube Decompilation
One-Click RCE in ASUS’s Preinstalled Driver Software
Under the microscope: The Lost World – Jurassic Park (Saturn, PlayStation)
Nintendo Threatens to Brick Your Switch 2 if you RE it
How I ruined my vacation by reverse engineering Windows Security Center
OpenWrt on RPi: Hacking with Frida (Part II)
Reverse Engineering DVFS Mechanisms
Reddit - Game Hacks
A game wouldn't start in Hyper V vm, any solution? new
Looking for a hwid spoofer new
AIMEX CHEATS COD BLACK OPS 6 / WARZONE CHEAT | Aimbot | ESP | Radar | Zombie | Undetected + Streamproof | EASY PAYMENT &…
Stracti.com - Create bots for games
Apex Legends FT Stern Services
I'm paying for hacked match masters account, i saw that it is possible
PROOFCORE.IO | UNDETECTED PRIVATE FORTNITE CHEAT | PLAYER ESP | LOOT ESP | ADVANCED AIMBOT | RADAR | STREAMPROOF | SPOOFER + CLEANER |
AIMEX CHEATS COD BLACK OPS 6 / WARZONE CHEAT | Aimbot | ESP | Radar | Zombie | Undetected + Streamproof | EASY PAYMENT &…
Is there any working Device ID Changer?
💙 PUBG Aimbot & ESP | Undetected & Secure 💙 (LIFETIME)
🚀 Black Ops 6/WZ External Chair – Panel Acces (Infinite Keys)
Zhexcheats.com | FC 25 Cheats | HOW I DO 15-0 EVERY FUT CHAMPS? 🙂
Reddit - REGames
StackExchange - ReverseEngineering
how to figure out how the XMLHttpRequest/XHR response being used in the javascript? new
MC6809 disassemble problem related to reset vector. Appears to stop Ghidra finding code
How can I recover Python code from a self-made Discord EXE tool?

Guided Hacking

Malware/APT

Crypto

Seytonic

Podcasts

Security Weekly
Ransomware in your CPU - PSW #874
Are You Down With RDP? - PSW #873
AI Tips, Tricks, and Traps! - PSW #872
Hacking Crosswalks and Attacking Boilers - PSW #871
Govt Unravelling, AI Hijinx, Bot Chaos, Recall, Oracle, Slopesquatting, Tycoon 2FA... - PSW #870
You Should Just Patch - PSW #869
Not-So-Secure Boot - Rob Allen - PSW #868
SignalGate and How Not To Protect Secrets - PSW #867
Its Not Really A 0-Day - PSW #866
Don't Hack Russia - PSW #864
Zero Days Are Not Just Fiction - PSW #863
Live from ZTW - PSW #862
Risky.Biz
Risky Biz Soap Box: Push Security's browser-first twist on identity security
Risky Business #791 -- Woof! Copilot for Sharepoint coughs up creds and keys
Wide World of Cyber: How state adversaries attack security vendors
Risky Business #790 -- Bye bye Signal-gate, hello TeleMessage-gate
BONUS INTERVIEW: Senator Mark Warner on Signalgate, Volt Typhoon and tariffs
Risky Business #789 -- Apple's AirPlay vulns are surprisingly awful
Snake Oilers: LimaCharlie, Honeywell Cyber Insights, CobaltStrike and Outflank
Snake Oilers: Pangea, Cosive and Sysdig
Risky Business #788 -- Trump targets Chris Krebs, SentinelOne
Wide World of Cyber: How the Trump admin is changing the cybersecurity landscape
Risky Business #787 -- Trump fires NSA director, CISA cuts inbound
Risky Business #786 -- Oracle is lying
The CyberWire
Dave Bittner: From puppet shows to podcasts. [Media] [Career Notes] new
Leveling up their credential phishing tactics. [Research Saturday]
Preparing for the cyber battlespace.
Bypassing Bitlocker encryption.
Get to patching: Patch Tuesday updates.
Jamming in a ban on state AI regulation.
No quick fix for a ClickFix attack.
Limor Kessem: Be an upstander. [Security Advisor] [Career Notes]
Beyond cyber: Securing the next horizon. [Special Edition]
Hijacking wallets with malicious patches. [Research Saturday]
Scrutinizing the security of messaging apps continues.
Targeting schools is not cool.
ISC Daily Stormcast
SANS Stormcast Friday, May 16th: Increase in Sonicwall Scans; RVTools Compromised?; RountPress
SANS Stormcast Thursday, May 15th: Google Open Redirects; Adobe, Ivanti, and Samsung patches
SANS Stormcast Wednesday, May 14th: Microsoft Patch Tuesday; 0-Days patched for Ivanti Endpoint Manager and Fortinet Products
SANS Stormcast Tuesday, May 12th: Apple Patches; Unipi Technologies Scans;
SANS Stormcast Monday, May 11th: Steganography Challenge; End-of-Life Routers; ASUS Driverhub; RV-Tools SEO Poisoning
SANS Stormcast Friday, May 9th: SSH Exfil Tricks; magicINFO still vulnerable; SentinelOne Vulnerability; Commvault insufficient patch
SANS Stormcast Thursday, May 8th: Modular Malware; Sysaid Vuln; Cisco Wireless Controller Patch; Unifi Protect Camera Patch
SANS Stormcast Wednesday, May 7th: Infostealer with Webserver; Android Update; CISA Warning
SANS Stormcast Tuesday, May 6th: Mirai Exploiting Samsung magicInfo 9; Kali Signing Key Lost;
SANS Stormcast Monday, May 5th: Steganography Challenge; Microsoft Makes Passkeys Default and Moves Away from Authenticator as Password Manager; Magento Components Backdoored.
Darknet Diaries
158: MalwareTech
157: Grifter
156: Kill List
155: Kingpin
154: Hijacked Line
153: Bike Index
152: Stacc Attack
151: Chris Rock
150: mobman 2
149: Mini-Stories: Vol 3
148: Dubsnatch
147: Tornado

Threat Intel

Privacy/VPNs

Slashdot - Rights
Meta Argues Enshittification Isn't Real
FBI: US Officials Targeted In Voice Deepfake Attacks Since April
Anthropic's Lawyer Forced To Apologize After Claude Hallucinated Legal Citation
Telegram Bans $35 Billion Black Markets Used To Sell Stolen Data, Launder Crypto
Google Dominates AI Patent Applications
Judge Slams Lawyers For 'Bogus AI-Generated Research'
A Ripe Target For Identity Thieves: Prisoners on Death Row
FCC Threatens EchoStar Licenses For Spectrum That's 'Ripe For Sharing'
'Qatar's $400 Million Jet For Trump Is a Gold-Plated Security Nightmare'
US Copyright Office to AI Companies: Fair Use Isn't 'Commercial Use of Vast Troves of Copyrighted Works'
CISA/DOGE Software Engineer's Login Credentials Appeared in Multiple Leaks From Info-Stealing Malware in Recent Years
High Tariffs Become 'Real' For Adafruit - With Their First $36K Bill Just For Import Duties
Reddit - Privacy
Local Newspaper Requires Facebook to Comment on their Posts new
Organic Maps contributors fork project as concerns over governance and transparency grow new
The Illusion of Control: How Much Privacy Do We Really Have Online? new
It's more important than ever to protect yourself online, but a VPN won't do you much good — Here are 5 things that will new
Xiaomi Store Apps Use Weak Home-Rolled Encryption Enabling Surveillance new
I’ve heard that Reddit sells data and a family member told me this week that it’s unsafe to have an account because of that, but… new
Is there a 2FA authenticator app that offers backup to local PC/Mac - NOT to the cloud? new
remove images from google sites new
Brave or Chromium/Ungoogled Chromium
Has anyone here actually put the work in to have an anonymous home, full alias credit cards, etc.?
I’ve got an unusual name so am top hit in a google search on my name. Can I just use a different surname for all…
Accessing Old Unused Social Media Accounts for Deletion
Reddit - VPN
Inbound VPN through TMobile new
EFF
House Moves Forward With Dangerous Proposal Targeting Nonprofits
In Memoriam: John L. Young, Cryptome Co-Founder
Keeping People Safe Online – Fundamental Rights Protective Alternatives to Age Checks
Montana Becomes First State to Close the Law Enforcement Data Broker Loophole
Appeals Court Sidesteps The Big Questions on Geofence Warrants
Podcast Episode: Digital Autonomy for Bodily Autonomy
Nominations Open for 2025 EFF Awards!
Beware the Bundle: Companies Are Banking on Becoming Your Police Department’s Favorite "Public Safety Technology” Vendor
Ninth Circuit Hands Users A Big Win: Californians Can Sue Out-of-State Corporations That Violate State Privacy Laws
Age Verification in the European Union: The Commission's Age Verification App
IRS-ICE Immigrant Data Sharing Agreement Betrays Data Privacy and Taxpayers’ Trust
Digital Identities and the Future of Age Verification in Europe
Reddit - PrivacyGuides
KeePassium Review: A Flexible Password Manager for iOS and macOS
In Praise of Tor: Why You Should Support and Use Tor

Help Wanted

Reddit - AskNetSec
Security Engineer with Software Architect new
Public or archived sources are also welcome.
Anyone tried running EC-Council's iLabs behind a corporate proxy?
Applied Cryptography and public key infrastructure interview questions
How do you manage non-human identities before they become a security mess?
AWS Guard Duty Explanation
How to Bypass a WAF
Need some help in certifications
Password Managers
Is passive BLE/Wi-Fi signal logging (no MAC storage) legally viable for privacy-focused tools?
Advice on making a Snapchat password
Reddit - Netsec Students
Looking for a Networking Internship in London – Any Leads or Feedback on My Resume?
Free Practical Memory-Exploitation Course (Stack Overflows, ROP, Heaps) [Mod Approved]
Anyone did the John Deere cyber tractor challenge?
Has anyone heard of or used Dilton E-University?
CloudQix is running a security hackathon—come try to break our no-code platform.
Which Path to Choose?
Does anyone have a more realistic red team training environment? Feels like the current tools still fall short.
cvelistV5
is class b network something necessary for a small starbucks store?
Solving The Cloud Hunting Games?
I’m new and I think I started off the wrong way — need advice
Stackoverflow - Security
Securing & Verifying Remember Me Cookie/Token Is From The Same Person/Environment After User Has Been Logged In To Website? new
Is Flask less secure than just using the python CGI library? [duplicate] new
Configuring fallback securityFilterChain in shared starter code [closed]
Supabase PostgreSQL row level security not working as expected [closed]
How to safely decrease a variable on a system without any concurrency control?
Fatal Exception: SecurityException - Permission Denial on Intent Starting in XOS (Android Dolphin v7.6.0) on Infinix/TECNO Device
Best practices for building password reset flow without third-party email/SMS services [closed]
Is it possible to disallow all interactive PowerShell usage, but still allow script execution?
How to create an IP rule that ignores IPv6? [closed]
Can an attacker steal JavaScript local variables via XSS, CSRF, or other attacks? [closed]
How can I securely verify the source of a webhook call in Azure Automation Runbooks?
Webhook security - Github calling a Webhook
Stack Exchange
Is multiple encryption with different passwords a good idea? new
Can it be a virus? [closed] new
What type of virus had entered my computer? [closed]
Will GReAT and OverWatch see traffic to Russian servers as a threat? [closed]
How do I implement clear encryption "Block or stream"? [closed]
Apple iPhone 16 iOS 18.5 - Polymorphic Behaviour [closed]
Is my approach to SSH-based addon installation via PHP backend secure?
What is the difference between coreruleset-4.14.0-minimal.zip and Source code (tar.gz). How do I get the 'Full.zip" download?

Locks/Social Engineering

Reddit - Lockpicking
Wheel combination padlocks that won't respond to the indirect method new
Happy Sunday everyone new
Help with opening Master 410 lockout tag. new
Metal 50mm X6J ✓ new
For how cheap it was this KLOM set isn’t bad,fyi I have all the covert instruments apex plus others but really diggin this set!!! new
ABUS 72/40 CONQUERED! new
First Paclock ever!!! 90A-pro!!! new
Update to Brown Belt request requirements. new
More 1100 woes… new
My new handles from 44 Delta
Made a case for my dimple lock picks
New Hilo handles from Multipick
Reddit - Social Engineering
What to do when civilians get caught up in govt/mil-driven cybersecurity attacks & exercises and how should/are perpetrators/attackers held accountable?
The Beauty Bias can be exploited to manipulate
Religion used to be manipulation?
How can you tell if someone is buying your story or just playing along?
Mass Mind Control Through the Scripted Reality of the Media
Six More Psychological Grenades: Questions That Crack Mental Armor on Contact
The Key to Being Persuasive (Trust)
When someone tells a story, how do you gain a perspective on it?
Methods in Social Engineering: Preventing Community Development in Structured Organizations
The Dangerous Mirage: Deconstructing Face Value and the Myth of Inherent Goodness
How do i stop the presence of people i dislike affecting how i behave?
How The Modern World Has Made Us Miserable & Lonely | Professor Bill Von Hippel

Hak5

Security Blogs

Adam Shostack & friends
Cyber Hard Problems Report
Andor: Think like a leader
Andor Threats: Information Disclosure
The Empire’s Threat Modeling
Appsec Roundup - April 2025
Threat Informed Defense Series
CVE Futures
Andor, Season 2
Free Threats
A few thoughts on CVE
Assets, Again
Learning from Troy Hunt’s Sneaky Phish
Graham Cluley
Prescription for disaster: Sensitive patient data leaked in Ascension breach
Two years’ jail for down-on-his-luck man who sold ransomware online
Smashing Security podcast #416: High street hacks, and Disney’s Wingdings woe
The AI Fix #47: An AI is the best computer programmer in the world
Crosswalks hacked to play fake audio of Musk, Zuck, and Jeff Bezos
Insurance firm Lemonade warns of breach of thousands of driving license numbers
Rapid7
Metasploit Wrap-Up 05/16/2025
Ivanti Endpoint Manager Mobile exploit chain exploited in the wild
CVE-2025-32756 Exploited in the Wild, Affecting Multiple Fortinet Products
Patch Tuesday - May 2025
Vendor-Agnostic Security: The Key To Smarter Risk Management
Recognizing Excellence: Rapid7’s Kelly Hiscoe and Heather DeMartini Honored as CRN’s 2025 Women of the Channel
Metasploit Wrap-Up 05/09/2025
Multiple vulnerabilities in SonicWall SMA 100 series (FIXED)
Exploring an Untethered, Unified Approach to CTEM
Key Takeaways from the Take Command Summit 2025: From Zero to Hero: Building the Perfect Defense
Metasploit Wrap-Up 05/02/2025
Why is Ransomware Still a Thing in 2025?
Hacker News (YCombinator) - Security
Magic Leap One Bootloader Exploit
Hacker Noon #Security
The TechBeat: This 150-Line Go Script Is Actually a Full-On Load Balancer (5/18/2025) new
Protecting Location Data in Smart City Digital Twins new
Ring Cameras Can Perpetuate Bias to Police: Here's How new
The TechBeat: The State of Cloud Storage: #Decentralize-Cloud (5/17/2025)
Godot 4.4.1: The Maintenance Release - Changes, Incompabilities, and More
How Data Guardians Network Plans to Undermine Big Tech Without Ever Competing With It
Why Everyone Is Building Personal AI and What That Means for Privacy
Your Phone Still Trusts WEP? Wifi Honey Shows Just How Bad That Is
Unlock OSINT Skills with Wtfis: A Beginner-Friendly Guide to Domain and IP Lookups
Why UK Employees and Citizens Back GDPR
Top 5 Collaboration Tools for Remote Teams Using Jira
Anonymous vs “ICE Air:” GlobaIX Needs A Security Fix
Security Bloggers Network
Fairfax County, Va., CISO Michael Dent on Leadership new
Ensuring Satisfaction in Managing Non-Human Identities new
Are You Capable of Securing Your Digital Assets? new
OAuth 2.0 Overview new
Cyber! Take your dadgum Medicine! new
The Coinbase Data Breach: A Breakdown of What Went Wrong
BSidesLV24 – GroundFloor – Adversaries Also Lift & Shift: Cloud Threats Through The Eyes Of An Adversary
Beware! A threat actor could steal the titles of your private (and draft) WordPress posts!
Coinbase Hacked and Turns the Tables on the Cybercriminals!
Are Your Security Measures Scalable for Growth?
Empowering Teams with Efficient Identity Management
Stay Ahead of Security Breaches with Proactive Measures
Control C
Bypassing file upload restrictions with extension truncation
ZAP: Grep extract in Fuzzer to detect username enumeration via subtly different responses
Wired - Security
How the Signal Knockoff App TeleMessage Got Hacked in 20 Minutes new
Coinbase Will Reimburse Customers Up to $400 Million After Data Breach
The Internet’s Biggest-Ever Black Market Just Shut Down Amid a Telegram Purge
CFPB Quietly Kills Rule to Shield Americans From Data Brokers
North Korean IT Workers Are Being Exposed on a Massive Scale
Google’s Advanced Protection for Vulnerable Users Comes to Android
Google Is Using On-Device AI to Spot Scam Texts and Investment Fraud
An $8.4 Billion Chinese Hub for Crypto Crime Is Incorporated in Colorado
Deepfakes, Scams, and the Age of Paranoia
ICE’s Deportation Airline Hack Reveals Man ‘Disappeared’ to El Salvador
US Customs and Border Protection Plans to Photograph Everyone Exiting the US by Car
US Customs and Border Protection Quietly Revokes Protections for Pregnant Women and Infants
Elttam
Krebs on Security
Breachforums Boss to Pay $700k in Healthcare Breach
Patch Tuesday, May 2025 Edition
Pakistani Firm Shipped Fentanyl Analogs, Scams to US
xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs
Alleged ‘Scattered Spider’ Member Extradited to U.S.
DOGE Worker’s Code Supports NLRB Whistleblower
Whistleblower: DOGE Siphoned NLRB Case Data
Funding Expires for Key Cyber Vulnerability Database
Trump Revenge Tour Targets Cyber Leaders, Elections
China-based SMS Phishing Triad Pivots to Banks
Patch Tuesday, April 2025 Edition
Cyber Forensic Expert in 2,000+ Cases Faces FBI Probe
Naked Security
Sophos MDR: New analyst response actions for Microsoft 365
Beyond the kill chain: What cybercriminals do with their money (Part 5)
Beyond the kill chain: What cybercriminals do with their money (Part 4)
Beyond the kill chain: What cybercriminals do with their money (Part 3)
Beyond the kill chain: What cybercriminals do with their money (Part 2)
Beyond the kill chain: What cybercriminals do with their money (Part 1)
Sophos Firewall v21.5: DNS protection
Microsoft primes 71 fixes for May Patch Tuesday
Nineteen Sophos Women Recognized by CRN’s Women of the Channel
Introducing the Sophos MSP Elevate program
Lumma Stealer, coming and going
Putting the dampener on tamperers
Schneier on Security
Friday Squid Blogging: Pet Squid Simulation
Communications Backdoor in Chinese Power Inverters
AI-Generated Law
Google’s Advanced Protection Now on Android
Court Rules Against NSO Group
Florida Backdoor Bill Fails
Friday Squid Blogging: Japanese Divers Video Giant Squid
Chinese AI Submersible
Fake Student Fraud in Community Colleges
Another Move in the Deepfake Creation/Detection Arms Race
Friday Squid Blogging: Pyjama Squid
Privacy for Agentic AI
Linux Security
Oniux: Secure Tor Routing for Linux Applications
Red Hat Linux Hacked at Pwn2Own Berlin
Emerging ClickFix Attacks Are Now Targeting Linux Systems
The Hidden Risks of Russian-Linked Open-Source Tool easyjson
CNCF and Synadia Resolve NATS Trademark Dispute
Dark Reading
Coinbase Extorted, Offers $20M for Info on Its Hackers
Australian Human Rights Commission Leaks Docs in Data Breach
Dynamic DNS Emerges as Go-to Cyberattack Facilitator
Attacker Specialization Puts Threat Modeling on Defensive
How to Develop and Communicate Metrics for CSIRPs
Turkish APT Exploits Chat App Zero-Day to Spy on Iraqi Kurds
Valarian Unveils Data Management Platform Designed for Government Use
International Crime Rings Defraud US Gov't Out of Billions
Attackers Target Samsung MagicINFO Server Bug, Patch Now
RSAC 2025: AI Everywhere, Trust Nowhere
RealDefense Partner Program Surpasses $100M in Annual Revenue
Critical Infrastructure Under Siege: OT Security Still Lags
Securelist by Kaspersky
Threat landscape for industrial automation systems in Q1 2025
Using a Mythic agent to optimize penetration testing
State of ransomware in 2025
Outlaw cybergang attacking targets worldwide
Triada strikes back
Operation SyncHole: Lazarus APT goes back to the well
Russian organizations targeted by backdoor masquerading as secure networking software updates
Lumma Stealer – Tracking distribution channels
Phishing attacks leveraging HTML code inside SVG files
IronHusky updates the forgotten MysterySnail RAT to target Russia and Mongolia
Streamlining detection engineering in security operation centers
GOFFEE continues to attack organizations in Russia
HITB News
The RISKS Digest
Kaspersky Blog
How IP cameras can help attackers | Kaspersky official blog
Protecting Android, Windows, and Linux devices against being tracked via the Find My network | Kaspersky official blog

Security in Mainstream Media

Google News Hacking
Korea's ICT chief meets with U.S. officials to discuss response to telecom hacking incidents - Korea JoongAng Daily new
Hacker Behind SEC Bitcoin ETF Hoax Sentenced To 14 Months In Prison - TronWeekly new
Huntsville man sentenced to 14 months in prison for hacking SEC’s X account to post about Bitcoin - 1819 News new
Alabama Man Sentenced for Hacking SEC’s Social Media to Post Fake Bitcoin ETF News - CoinDesk
VMware Hacked As $150,000 Zero-Day Exploit Dropped - Forbes
Hack Aims For Polaroid, Hits Game Boy Camera Sweet Spot - Hackaday
Man gets 14 months in jail for role in SEC's X account hack that pumped fake Bitcoin ETF hype - Crypto Briefing
SEC hacker sentenced to 14 months for role in fake Bitcoin ETF post - dlnews.com
Coinbase Extorted, Offers $20M for Info on Its Hackers - Dark Reading
US man who hacked SEC’s X account to spike Bitcoin price sentenced to prison - TechCrunch
Athens man to spend over a year in federal prison for hacking SEC social media - WHNT.com
This Summer, I’m Savings-Hacking a Trip to Disney World & Here’s How You Can Too - PureWow
Google Cyber Security
Growing Cyberthreats to the Internet of Things - Forbes new
FITE: ETF Focused On Defense And Cybersecurity - Seeking Alpha new
Fairfax County, Va., CISO Michael Dent on Leadership - GovTech new
M&S faces multi-million pound lawsuit by Scots over huge data leak - Yahoo News UK new
Hackers have ruined M&S’s incredible comeback - The Telegraph new
OT cybersecurity budgets shift toward strategy and resilience to meet rising threats, compliance demands - Industrial Cyber new
Exclusive: Cyber security: Lack of planning and outdated IT systems putting Scotland at risk - The Scotsman new
PupkinStealer Attacks Windows System to Steal Login Credentials & Desktop Files - CybersecurityNews new
Echelon Risk + Cyber Launches AI Governance Service to Help Organizations Build Secure, Compliant, and Responsible AI Programs | FinancialContent - FinancialContent new
M&S and Co-Op: BBC reporter on talking to the hackers - BBC new
Malware Defense 101 - Identifying and Removing Modern Threats - CybersecurityNews new
Lenovo Aims to Strengthen Laptop Security Amid Rising Cyber Threats - Retail News Asia new

Thirsty for more

Hacker News (YCombinator)
Pluto Flyover from New Horizons new
Solar grants held hostage in Pennsylvania legislature – as demand soars new
Apple Card Disabled My iCloud, App Store, and Apple ID Accounts new
Google Logo Ligature Bug new
How the Sun Enterprise 10000 was born (2007) new
Working with Git Patches in Apple Mail (2023) new
Why some friendships end after kids come into the picture new
Show HN: Hardtime.nvim – break bad habits and master Vim motions new
Thank you Google for breaking my YouTube addiction new
Show HN: A web browser agent in your Chrome side panel new
Spaced repetition systems have gotten way better new
The Conquest of Hell Gate [pdf] new
Reddit - Cyberpunk
You've been spotted new
Which Quote Should I Use For A Game Over Screen? new
Free cyberpunk thriller eBook with a cyber dragon 🐲 new
Title: The future isn’t corporate. It’s protocol. new
Eheh. More nano tech. new
[Short Story] Genesis new
[OC] Nyx get a day off from bounty hunting
Police in Rio de Janeiro, Brazil using robot dogs to monitor gang-controlled favelas
This could be a game changer for electric vehicles.
Reddit - Security CTF
Looking for CTF team
NATAS OVW
Howdy! I’m Looking for a CTF Team!
not sure if this is the right place to ask
Little help, an .PNG with other things in it ?
Can somebody help me about this Cryptology problem.
Challenge: Guess My Hashing Method!
Forming an All-female CTF team.
Starting a small cybersec Discord. Red team, blue team, whatever team, let’s learn together
Reddit - Sysadmin
Remote Access Options new
Migrate from S2D to Proxmox + Ceph new
Free network scan utility that documents devices? new
Hyper-V iSCSI multipathing help new
Outlook 2016 Forced Our Hand new
Emergency reactions to being hacked
I Made It at 26
Would you take a lower title for a raise?
A $130M company faked trials for 10 years instead of running free Open Source
Lobste.rs
My changes to saving Konsole tab layouts new
A Survey of Database TLS Libraries (2022) new
Building my childhood dream PC new
Fixing the infamous Basilisk II Windows “Black Screen” bug new
"Safe" YAML monster new
FreeBSD on a Laptop (2018) new
Working with git Patches in Apple Mail (2023) new
The X220 ThinkPad is the Best Laptop in the World (2023) new
Adding Mastodon Comments to your Blog new
April 2025 in Rust OSDev new
Rust turns 10: baby steps new
A Beginner's Guide to SourceHut new
Hackaday
Magnetohydrodynamic Motors to Spin Satellites new
Casting Shade on “Shade-Tolerant” Solar Panels new
MCP Blender Addon Lets AI Take the Wheel and Wield the Tools new
Escaping US Tech Giants Leads European YouTuber to Open Source new
The Lost 256 KB Japanese ROM for the MacIntosh Plus Has Been Found new
Determine Fundamental Constants with LEDs and a Multimeter new
This Extra-Large, Two-Stage Fume Extractor Really Sucks new
Zen Flute is a Teensy Powered Mouth Theramin new
Open Source Hiding in Plain Sight
Animated Widgets On Apple Devices via a Neat Backdoor
Making Sure the Basement Stays Dry with an ESP8266
Hack Aims for Polaroid, Hits Game Boy Camera Sweet Spot
Ars Technica
Spotify caught hosting hundreds of fake podcasts that advertise selling drugs
The empire strikes back with F-bombs: AI Darth Vader goes rogue with profanity, slurs
From birth to gene-edited in 6 months: Custom therapy breaks speed limits
Forgive me, Volvo, I was wrong: The 2025 V60 Cross Country review
Meta argues enshittification isn’t real in bid to toss FTC monopoly case
FBI warns of ongoing scam that uses deepfake audio to impersonate government officials
After latest kidnap attempt, crypto types tell crime bosses: Transfers are traceable
Microsoft’s Surface lineup reportedly losing another of its most interesting designs
Wired
21 Best High School Graduation Gifts (2025) new
13 Best Soundbars We’ve Tested and Reviewed (2025): Sonos, Sony, Bose new
How to Choose a Router (2025): Tips, Technical Terms, and Advice new
The 13 Best Fans, Editor Tested & Reviewed (2025) new
Are Meal Kits Cheaper than Groceries in 2025? We Break It Down new
How the Signal Knockoff App TeleMessage Got Hacked in 20 Minutes new
Polestar 4 2025 Review: Prices, Specs, Availability new
9 Best Digital Notebooks, Tablets, and Smart Pens (2025)
5 Best Folding Phones (2025), Tested and Reviewed
12 Best Sunscreens, WIRED Tested and Reviewed
14 Best Subscription Boxes for Kids (2025): STEM, Books, Snacks
How to Reduce Browser Battery Drain in Chrome, Edge, and Opera
Slashdot
Firefox Announces Same-Day Update After Two Minor Pwn2Own Exploits new
OSU's Open Source Lab Eyes Infrastructure Upgrades and Sustainability After Recent Funding Success new
YouTube Announces Gemini AI Feature to Target Ads When Viewers are Most Engaged new
9 Months Later, Microsoft Finally Fixes Linux Dual-Booting Bug new
Ask Slashdot: Would You Consider a Low-Latency JavaScript Runtime For Your Workflow? new
Google Restores Nextcloud Users' File Access on Android new
Stack Overflow Seeks Realignment 'To Support the Builders of the Future in an AI World' new
Intel Struggles To Reverse AMD's Share Gains In x86 CPU Market new
Is the Altruistic OpenAI Gone? new
Researchers Finally Link Long Covid 'Brain Fog' to Inflammation new
The Most Promising Ways to Destroy 'Forever Chemicals' new
Curl Warns GitHub About 'Malicious Unicode' Security Issue new
DZone Security
Endpoint Security Controls: Designing a Secure Endpoint Architecture, Part 2
Endpoint Security Controls: Designing a Secure Endpoint Architecture, Part 1
Detection and Mitigation of Lateral Movement in Cloud Networks
FIPS 140-3: The Security Standard That Protects Our Federal Data
Agentic AI for Automated Application Security and Vulnerability Management
5 Subtle Indicators Your Development Environment Is Under Siege
How Trustworthy Is Big Data?
Cookies Revisited: A Networking Solution for Third-Party Cookies
Hybrid Cloud vs Multi-Cloud: Choosing the Right Strategy for AI Scalability and Security
Issue and Present Verifiable Credentials With Spring Boot and Android
While Performing Dependency Selection, I Avoid the Loss Of Sleep From Node.js Libraries' Dangers
DZone
Using Python Libraries in Java
Infrastructure as Code (IaC) Beyond the Basics
Unit Testing Large Codebases: Principles, Practices, and C++ Examples
How Can Developers Drive Innovation by Combining IoT and AI?
AI-Driven Root Cause Analysis in SRE: Enhancing Incident Resolution
AWS to Azure Migration: A Cloudy Journey of Challenges and Triumphs
Integrating Google BigQuery With Amazon SageMaker
Customer 360: Fraud Detection in Fintech With PySpark and ML
Mastering Advanced Aggregations in Spark SQL
Cosmos DB Disaster Recovery: Multi-Region Write Pitfalls and How to Evade Them
Developers Beware: Slopsquatting and Vibe Coding Can Increase Risk of AI-Powered Attacks
Why Database Migrations Take Months and How to Speed Them Up