Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

PacketStorm
US Air Force Reveals The B-21 Raider Stealth Bomber
Rackspace Rocked By Security Incident
Darknet Markets Generate Millions In Revenue Selling Stolen Personal Data
New Malware Is Nuking Data In Russian Courts
After FTX Collapse, Pressure Builds For Tougher Crypto Rules
Proton Calendar On iOS Encrypts More Of Your Work/Life Cloud Data
Researchers Used A Sirius XM Bug To Easily Hijack A Bunch Of Different Cars
Browser Zero Days Linked To Commercial IT Firm In Spain
My Secret Life As An 11-Year-Old BBS SysOp
The Exodus From Elon Musk's Twitter Has Begun. Should The Infosec Community Care?
Lockheed Martin's Army Cyber Training Platform Goes Civilian
SF Votes To Give Cop Robots Permission To Kill
The Register
Securing Application Identities in 2023 new
Remuneration coming for TrustCor customers impacted by CA revocation new
Rackspace customers rage as email outage continues and migrations create migraines new
Rackspace rocked by ‘security incident’ that has taken out hosted Exchange services
US Air Force reveals B-21 Raider stealth bomber that'll fly the unfriendly skies
Medibank prognosis gets worse after more stolen data leaked
FBI warns about Cuba, no, not that one — the ransomware gang
Domain aging gang CashRewindo picks vintage sites to push malvertising
Mozilla, Microsoft drop TrustCor as root certificate authority
Two signs in the comms cabinet said 'Do not unplug'. Guess what happened
Nvidia patches 29 GPU driver bugs that could lead to code execution, device takeover
Google warns about commercial Heliconia spyware hitting Chrome, Firefox and Microsoft Defender
Reddit - NetSec
Slides: Demystifying Practical DoS Attacks new
OWASP Top 10 CI/CD Security Risks project released new
GitHub Actions - Artifact Poisoning Vulnerability new
[KIS-2022-06] Drupal H5P Module <= 2.0.0 (isValidPackage) Zip Slip Vulnerability
kitabisa/teler release v2.0.0-dev
NVIDIA Fixes 25 GPU Display Driver Vulnerabilities
Redigo — New Redis Backdoor Malware
Certpotato : using adcs to privesc from service accounts to local system
VLC : Integer overflow in vnc module - CVE-2022-41325
XSS on account.leagueoflegends.com via easyXDM [2016]
Visual Studio Code: Remote Code Execution
Platform certificates used to sign Android malware
Bleeping Computer
The Hacker News
Critical Ping Vulnerability Allows Remote Attackers to Take Over FreeBSD Systems new
Google Rolls Out New Chrome Browser Update to Patch Yet Another Zero-Day Vulnerability
Hackers Sign Android Malware Apps with Compromised Platform Certificates
CISA Warns of Multiple Critical Vulnerabilities Affecting Mitsubishi Electric PLCs
The Value of Old Systems
Researchers Disclose Supply-Chain Flaw Affecting IBM Cloud Databases for PostgreSQL
Hackers Exploiting Redis Vulnerability to Deploy New Redigo Malware on Servers
What the CISA Reporting Rule Means for Your IT Security Protocol
Watch Out! These Android Keyboard Apps With 2 Million Installs Can be Hacked Remotely
Cuba Ransomware Extorted Over $60 Million in Ransom Fees from More than 100 Entities
Google Accuses Spanish Spyware Vendor of Exploiting Chrome, Firefox, & Windows Zero-Days
Hackers Leak Another Set of Medibank Customer Data on the Dark Web

Threat Wire

Exploits

LiveOverflow

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reddit - Exploit Dev
BOF Exploit fails outside GDB new
Black Hat 2022 USA/ASIA/Europe new
Using AI to write Malware?! (Ethical reasoning and future use cases)
🤯 Mind-Blowing examples of OpenAI ChatGPT for Security, Infosec & Hacking
A Journey into Fuzzing WebAssembly Virtual Machine [BHUSA 2022]
[LIVE Nov 25, 2022 11AM PT] Off By One Security : Introduction to Linux Heap Exploitation
Off By One Security : A Look at Modern Windows Kernel Exploitation
CyberDucky, hacking made fun!
Buffer overflows
Immunity Debugger crash on M1 Mac
Phoenix Challenges -- Stack Two
Buffer overflow, canary enabled but program only seems to accept arguments as input
Source Incite
Eat What You Kill :: Pre-authenticated Remote Code Execution in VMWare NSX Manager
Google Project Zero
Mind the Gap
A Very Powerful Clipboard: Analysis of a Samsung in-the-wild exploit chain
Gregor Samsa: Exploiting Java's XML Signature Verification
RC4 Is Still Considered Harmful
Security Researchers
See technologies on the attack surface plus updates to Attack Surface Custom Policies and API keys
Making unphishable 2FA phishable
Poking a mobile hotspot
Shifting left is great, but shifting right is more cost-effective
Mobility Data and Canadian Privacy Law Explained
Minding Your Business: A Critical Analysis of the Collection of De-identified Mobility Data and Its Use Under Socially Beneficial and Legitimate Business Exemptions in Canadian…
Best of TaoSecurity Blog Kindle Edition Sale
TaoSecurity on Mastodon
More improvements to Attack Surface Custom Policies

Reversing/I like ASM

Reddit - Reverse Engineering
Squalr Beats Cheat Engine Scan Speeds by 2.6x :^) new
ReClass rewrite in rust but with field aligning new
Black Hat 2022 ASIA new
Black Hat 2022 Europe new
Black Hat 2022 USA new
How to replicate OpenSSL vulnerabilities CVE-2022-3602 and CVE-2022-3786 and use libfuzzer
How the 8086 processor's microcode engine works
Using AI to write Malware?! (Short Film on the ethical reasoning)
Can somebody reverse-engineer this 3DS game? (MC for n3DSXL)
Pop Quiz! Can a Large Language Model Help With Reverse Engineering?
[MacOS Fuzzing] How to install jackalope and fuzz a simple program on MacOS
🤯 Mind-Blowing examples of OpenAI ChatGPT for reversing, Security, Infosec & Hacking
Reddit - Game Hacks
Idle Angels v4.29.0.120206 Hack Mod for Android new
Mobile Suit Gundam Iron Blooded Orphans G v1.1.0 Hack Mod for Android new
[NEW FREE] NineSights Warzone Cheats 2022 || UNDETECTED || Aimbot ESP Unlock all || DOWNLOAD NOW! new
Tower of Saviors v2022.700 Hack Mod for Android new
Dragon Quest Monsters Super Light v8.4.0 Hack Mod for Android new
The Eminence in Shadow RPG v1.0.7 Hack Mod for Android
The Eminence in Shadow RPG v1.0.7 Hack Mod for Android
OFFERING CHEAP AIMBOT/ESP AND UNLOCK SERVICES FOR MW2/WZ2 - Discord Morty Smith#8419
Modded controller hack.
Final Hunter KR v6.0.30 Hack Mod for Android
Summoners Era: Idle RPG Heroes v2.1.34 Hack Mod for Android
MODERN WARSHIPS v0.58.1.6218400 Hack Mod for Android
Reddit - REGames
How can I gain access to files of a Google Play game?
How to get the value of a [SerializeField] in a C# Unity script?
What’s necessary to learn before starting to reverse engineer?
How do I extract game models for Cinema 4D to make "machinimas"?
Is there a tool that can show you an EIP trace of a game?
Legacy of Kain 2: Soul Reaver (PS1) Decompile Playable Demo
Help understanding dnSpy with Super Auto Pets
Patching x86 Android apps to run on x86 Linux?
UE4 Console command dumping help
Looking to hire a reverse engineer
Something's wrong with either the 3D ripping program or my PC.
Can someone Reverse engineer Barnyard the video game
StackExchange - ReverseEngineering
What is the following code will do after modifying it?
Mouse click breakpoint
Does anyone know the purpose of the malware,ios,social_engineering file on iOS
Finding a check in Chrome
How does Radare2 hide the variables' comments before the assembly code?
U-boot base address on Ghidra
HEEEEEELP PLS AAAAAAAAAH
Does anyone know what algorithm generated these hashes?
GDB breakpoint crashes at a correct memory location
Assembling BIOS Routine Startup System Checks Op Code
Trouble understanding disassembled code
How to find the the event handler function for a QtAbstractButton?

Guided Hacking

Malware/APT

Crypto

Reddit - Crypto
Weekly cryptography community and meta thread new
Does anyone know how to solve this or has a link for the answer?
Survey of common encryption methods
Intro to Diffie Hellman and Double Ratchet Protocol
[2018] The year in post-quantum crypto
StackExchange - Crypto
Generating an IV from a constant seed and predictable salt larger than the value space of the IV new
Encoding a message as points on elliptic curve new
Request for Bilinear pairing numerical example new
Django password hashes in database new
Flipping bits attack on CBC mode, but only for part of the plaintext - Python new
AES First/Last Round Key Whitening new
Encrypting an IV with XEX using a block cipher and XORing on the plaintext: Is this scheme valid? new
If rabin signature uses a hash function then why cant we use that hash function to sign a message? new
Identifying an encryption algorithm and/or writing an encryption function new
Problems with a LCG for a cipher by hand
Can elliptic curve groups be used for commutative encryption?
Can I use last N blocks of AES-CBC +IV as hash?

Seytonic

Podcasts

Security Weekly
PSW #765 - Josh Bressers, Kurt Seifried
PSW #764 - Jesse Michael
PSW #763 - Dan DeCloss
PSW #762 - Ben Hibben
PSW #760 - Michael Meis, Christopher Crowley
PSW #761 - Charles Shirer
PSW #759 - Ismael Valenzuela
PSW #758 - Ang Cui
PSW #757 - Ev Kontsevoy, Casey Ellis
PSW #756 - Sinan Eren
PSW #755 - Thomas Kinsella
Risky.Biz
Risky Business #687 -- Shady deeds in sunny places: Ransomware smashes Vanuatu, Guadeloupe
Risky Business #686 -- White House to move on spyware industry
Risky Biz Soap Box: How to get your developers invested in security
Risky Business #685 -- Australia releases the hounds, and it might just work
Risky Business #684 -- DoJ seizes 50,000 stolen bitcoins from popcorn tin
Risky Business #683 -- OpenSSL bug is a fizzer, ASD responds to Medibank hack
Snake Oilers: Truffle Security, KSOC and Snyk
Snake Oilers: Tines, Code42 and Kroll
Risky Business #682 -- Starlink goes dark on Ukraine's front line
Risky Business #681 -- It's Exchangehog Day
Risky Biz Soap Box: Why Microsoft's Smart Application Control is very strange
Risky Business #680 -- Uber, Rockstar Games hacker arrested
The CyberWire
Rohit Dhamankar: Never close doors prematurely. [Vice President] [Career Notes]
Old malware returns in a new way. [Research Saturday]
Cuba ransomware pulls in $60 million. CISA releases three ICS advisories. Google announces new support for Ukraine. DDoSing the Vatican. Google supports Ukrainian startups in…
Cyberespionage, cybercrime, and patriotic hacktivism. The Heliconia framework described. Cyber risk for the telecom and healthcare sectors. Notes on the hybrid war. Predictions for 2023.
LockBit 3.0 and Punisher ransomware described. Leave that USB right in the parking lot where you found it. Killnet’s woofing. Lilac Wolverine’s big new BEC.…
DDoS as a holiday-season threat to e-commerce. TikTok challenge spreads malware. Meta's GDPR fine. US Cyber Command describes support for Ukraine's cyber defense.
Keeping pentesting tools out of criminal hands. Updates from an intensified cyber phase in Russia’s hybrid war. Fars reports sustaining a cyber attack. The most…
Laura Whitt-Winyard: Securing the world. [CISO] [Career Notes]
Encore: The secrets behind Docker.
Interview Select: Perry Carpenter on his new book "The Security Culture Playbook." [CW Pro]
Research Briefing: Emotet's return. LodaRAT improvements. Callback phishing leads to data theft extortion. [CW Pro]
Watch out for abuse of pentesting tools. Cyber attack on Guadeloupe. Ducktail’s evolution. Cybersecurity for ports. ICS security advisories. And stay safe shopping during the…
Cyber Security Interviews
ISC Daily Stormcast
ISC StormCast for Monday, December 5th, 2022 new
ISC StormCast for Friday, December 2nd, 2022
ISC StormCast for Thursday, December 1st, 2022
ISC StormCast for Wednesday, November 30th, 2022
ISC StormCast for Tuesday, November 29th, 2022
ISC StormCast for Monday, November 28th, 2022
Darknet Diaries
129: Gollumfun (Part 2)
128: Gollumfun (Part 1)
127: Maddie
126: REvil
125: Jeremiah
124: Synthetic Remittance

Threat Intel

Reddit - Onions
Company Financials new
Nobody Ever Has Links To Good DarkWeb Sites new
Safe Browsing Suggestions new
Should I always be connecting to Tor with a bridge? new
can someone give me free xonion account new
Error occurred when processing your request new
Any Bollywood hero active on wkr ? Czar is not replying new
Where to start? Clearly not here. new
Question about order I made on DNM (first bad experience need advice) new
Vendor PGP verification new
Music download new
Is there any alternatives for recon?
Reddit - Pwned
The Turkish Citizens Health Database (HSYS) (hsys.saglik.gov.tr) suffered a data breach that impacted 100 over million citizens
Suffolk Police apology over sex abuse victims data on website, including names, addresses, DOB, and details of offences, involving hundreds of people
Whoosh confirms data breach after hackers sell 7.2M user records, including partial user identification and payment card data
Cabinet-members of Greece’s Parliament infected with Predator spyware - 33 people in total known so far
DSB, Danish national rail company, hit by financially-motivated cyberattack, internal testing environment compromised. IR shut down servers resulting in trains being un-drivable for several hours
OakBend Medical Center (TX, USA) Confirms Data Breach, leaking data include SSN & DOB, of an estimated 497,000 people
Vodafone Italy discloses data breach after reseller hacked, compromising sensitive subscriber details
1 million+ Facebook users' credentials stolen by malicious third-party apps
Bed Bath & Beyond reviewing possible data breach [CTO heads for the exit immediately]
Dropbox discloses breach after hacker stole 130 GitHub repositories
Experian tool exposed partial Social Security numbers, putting customers at risk
Thomson Reuters collected and leaked at least 3TB of sensitive data, including plaintext passwords to third-party servers and email addresses
HaveIBeenPwned
Not Acxiom (unverified) - 51,730,831 breached accounts
GGCorp - 2,376,330 breached accounts
Lolzteam - 398,011 breached accounts
Doomworld - 34,478 breached accounts
E-Pal - 108,887 breached accounts
Wakanim - 6,706,951 breached accounts
Bhinneka - 1,274,340 breached accounts
TAP Air Portugal - 5,067,990 breached accounts
Brand New Tube - 349,627 breached accounts

Privacy/VPNs

Slashdot - Rights
Graduate Students Analyze, Crack, and Remove Under-Desk Surveillance Devices
What Happened After Matt Taibbi Revealed Twitter's Deliberations on Hunter Biden Tweets?
America's TSA Begins Quietly Testing Facial Recognition Tech at 16 Airports
Chess' $100 Million Showdown: Carlsen Moves To Dismiss Niemann Lawsuit Over Cheating Allegations
Australia Says Law Making Facebook and Google Pay For News Has Worked
FBI, CISA Say Cuba Ransomware Gang Extorted $60 Million From Victims This Year
Florida State Tax Website Bug Exposed Filers' Data
Hive Social Turns Off Servers After Researchers Warn Hackers Can Access All Data
Australia Will Now Fine Firms Up To $33.4 Million for Data Breaches
Judge Approves Apple's Massive MacBook Keyboard Lawsuit Payout
Telegram Shares Users Data in Copyright Violation Lawsuit
Torrent Site User Who Transferred 120TB of Pirated Content Avoids Prison
Reddit - Privacy
Does HUSHED app get WhatsApp verification codes? new
Privacy friendly web analytics tool? new
How are they finding my information? Am I in danger? new
Can Discord in browser spy on other tabs? new
Samsung Smartwatch new
Does amazon call you when you order something or when it is delivered? new
How do I mask my IP Address? new
Does Windows OS Have All Your Passwords? new
How Secure is Google Files' Secure Folder new
What is the best way to get throwaway Mail adresses for signing up? new
To get more privacy, should I leave Reddit? new
Gangstalking’s Real Meaning new
Reddit - VPN
I’m having a problem using vpn in China new
How to share my android phone's vpn as a hotspot? new
Install VPN on PC or phone when using hotspot? new
My employer has all internet traffic run through Sonicwall can they see my traffic when I use a VPN? new
Is there any way to use a proxy like a vpn to encrypt all system traffic on windows? new
Can I access a “Forbidden Access” Website using a VPN? (Read Desc) new
Can my IP address be tracked if I sign in to my Google account while using VPN? new
What are some vpn’s that don’t put users at risk new
How to make ShadowSocks proxy to tunnel all my traffic (like a VPN) on Windows new
Nekoray, GUI Proxy Manager for Linux (+Mac/Windows) - Great app new
Paramount+
Fresh installed Windows 10 and now no internet when connected to VPN
PrivacyTools.io
EFF
This Judge’s Investigation Of Patent Trolls Must Be Allowed to Move Forward
India Requires Internet Services to Collect and Store Vast Amount of Customer Data, Building a Path to Mass Surveillance
How to Make a Mastodon Account and Join the Fediverse
International Coalition of Rights Groups Call on Internet Infrastructure Providers to Avoid Content Policing
Let Data Breach Victims Sue Marriott
Let Them Know: San Francisco Shouldn’t Arm Robots
Coalition of Human Rights, LGBTQ+ Organizations Tell Congress to Oppose the Kids Online Safety Act
Power Up! Donations Get a 2X Match This Week
From Camera Towers to Spy Blimps, Border Researchers Now Can Use 65+ Open-licensed Images of Surveillance Tech from EFF
Red Alert: The SFPD want the power to kill with robots
Experts Condemn The UK Online Safety Bill As Harmful To Privacy And Encryption
Top Prosecutors in CA, NY and DC Are Speaking Up For End-to-End Encryption

Help Wanted

Reddit - AskNetSec
Cloud Penetration Testing prerequisites new
Which cyberseurity job for embedded software engineer ? new
Correct way to Disable PHP Execution
Python experience, how do I get into cybersecurity?
3 International Texts Sent from Phone on its Own
What scanners are you using that you'd recommend to an AppSec team for auditing?
Is this a hacking script? -- Strange file reappears in INetCacheIE folder (noob)
Is there a difference in the level of security of average networked cameras and those provided by security companies?
Regenerate session ID after password change?
What is the general security agreement on using Samsung Pass or Apple iCloud keychain?
Industry Standard 401K policy?
What is a pen testers day to day like?
Reddit - Netsec Students
social engineering for apk installation new
Humble Bundle Become A Cybersecurity Expert
Looking to transition from SOC analyst to pen tester
Question regarding my internship
Is this an example of cache poisoning? (Top domain rewritten with an unknown address)
Think I found my first XSS, need help proceeding
Why is active mode problematic for firewalls?
Emotet Strikes Again - LNK File Leads to Domain Wide Ransomware - The DFIR Report
Stackoverflow - Security
How to find an hidden commit using the ID new
Can a web server be compromised, if a hacker decides to upload malware using functionalities for users? new
password manager with 2fa (external) new
Is there more than one way of getting the stack canary output to print? new
Does stack smashing occur or would this be a format string vulnerability? new
PowerBI Secure Access Blob Storage new
Why do I get this error when testing if Nitrokey HSM works? new
Security for R Shiny App secrets on shinyapps.io new
Server Side Request Forgery demonstration exercice new
How to open wapiti report? new
I keep having a TabError while trying to run MITMf in Kali Linux? [closed]
Checking a Systems32 Virus?
Stack Exchange
block whatsapp web file transfer but not chating [duplicate] new
XSS in location.hash.match() function new
what is the difference between "multiple set of credentials" and "single set of credentials" [closed] new
Does Protonmail save MAC addresses? [closed] new
CCTV Footage analysis programs? [closed]
Prevent any batch file from closing automatically [migrated]
Does anyone know what algorithm generated these hashes? [closed]
What is the better tunnel endpoint?
Cuckoo dump a PE file from a memory dump?
How to build a PSK website
Can an SSH server in password mode be impersonated if I ignore the fingerprint warning?
A DNS that has been eliminated is still resulting in X.509 Certificate Subject CN Does Not Match the Entity Name

Locks/Social Engineering

Reddit - Lockpicking
I don't understand what I am doing wrong? new
Do bump keys work on spools? new
My contribution to the LPU raffle. Handle is chechen and ebony. new
Flying Red Buddha is beautiful! new
lock pinning tweezers new
FAB 3000HD pick and gut new
This afternoons Lishi practice. Stupid me re-set them before taking a photo. I'm still struggling with getting euro's open. Locks are available for swaps if… new
Multipick dimple pick, which profile? new
Hi all, can anyone recommend a fair beginner lock pick set? I got one years ago but they’re a bit bent up and I’d like… new
second video new
Some remedial stress picking 😂 new
Giveaway for December 4th 2022 #giveaways #giveaway new
Reddit - Social Engineering
Looking to be more social new
Does associating certain gestures you make with emotions work on other people? new
What would some decent advice be for someone with bad morals who is also socially weak?
How to keep up with never ending change
How to talk about the hard things with confidence
when telling vulnerable stories what emotion should you end the story on?
How to be a great listener
Beliefs about humanity, not higher power, predict extraordinary altruism
What question reveals someone's sensory preferences?
Call of Duty is a Government Psyop: These Documents Prove It
maximising unwilling engagement
What're small confessions you can make to strangers for building trust?

Hak5

Security Blogs

Naked Security
Number Nine! Chrome fixes another 2022 zero-day, Edge not patched yet new
Apple pushes out iOS security update that’s more tight-lipped than ever
LastPass admits to customer data breach caused by previous breach
S3 Ep111: The business risk of a sleazy “nudity unfilter” [Audio + Text]
The CHRISTMA EXEC network worm – 35 years and counting!
Serious Security: MD5 considered harmful – to the tune of $600,000
TikTok “Invisible Challenge” porn malware puts us all at risk
Chrome fixes 8th zero-day of 2022 – check your version now (Edge too!)
Voice-scamming site “iSpoof” seized, 100s arrested in massive crackdown
S3 Ep110: Spotlight on cyberthreats – an expert speaks [Audio + Text]
Multimillion dollar CryptoRom scam sites seized, suspects arrested in US
How to hack an unpatched Exchange server with rogue PowerShell code
Schneier on Security
Friday Squid Blogging: Legend of the Indiana Oil-Pit Squid
Existential Risk and the Fermi Paradox
LastPass Security Breach
Sirius XM Software Vulnerability
Facebook Fined $276M under GDPR
Charles V of Spain Secret Code Cracked
Computer Repair Technicians Are Stealing Your Data
The US Has a Shortage of Bomb-Sniffing Dogs
Apple’s Device Analytics Can Identify iCloud Users
Breaking the Zeppelin Ransomware Encryption Scheme
Friday Squid Blogging: Squid Brains
First Review of A Hacker’s Mind
Linux Security
More CXL Work On The Way For Linux 6.2 (Compute Express Link) new
A New Linux Flaw Can Be Chained with Other Two Bugs to Gain Full Root Privileges new
Government Issues High Severity Security Alert for THESE Google Users
NVIDIA Releases GPU Driver Update to Fix 29 Security Flaws
NixOS 22.11 Raccoon Released with GNOME 43, KDE Plasma 5.26, and OpenSSL 3
Red Hat Expands Expansion of its Open Solutions on AWS
What Is Linux Patching?
An Enterprises Guide To Strengthening Linux Cloud Security
Orange Pi Maker Plans to Release an Arch-based Linux Distro Soon
Microsoft Defender for Business Adds Server Protections for SMBs
5 Practical Uses of Docker Containers
Introducing Shufflecake: Plausible Deniability For Multiple Hidden Filesystems on Linux
Dark Reading
Concern Over DDoS Attacks Falls Despite Rise in Incidents
SiriusXM, MyHyundai Car Apps Showcase Next-Gen Car Hacking
Newsroom Sues NSO Group for Pegasus Spyware Compromise
Where Advanced Cyberttackers Are Heading Next: Disruptive Hits, New Tech
SOC Turns to Homegrown Machine Learning to Catch Cyber-Intruders
A Risky Business: Choosing the Right Methodology
AWS Unveils Amazon Security Lake at re:Invent 2022
LastPass Discloses Second Breach in Three Months
Artifact Poisoning in GitHub Actions Imports Malware via Software Pipelines
One Year After Log4Shell, Most Firms Are Still Exposed to Attack
IBM Cloud Supply Chain Vulnerability Showcases New Threat Class
Data Security Concerns Are Driving Changes in US Consumer Behavior and Demands
Securelist
Indicators of compromise (IOCs): how we collect and use them
Kaspersky Security Bulletin 2022. Statistics
Whitehat Security Blog
HITB News
OpenAI invites everyone to test new AI-powered chatbot—with amusing results
All the Actually Important Stuff Neuralink Just Announced
Apple releases patch for iPhone and iPad 0-day reported by anonymous source
Over a year later, Musk’s Neuralink still 6 months from human trials
Chrome, Defender, and Firefox 0-days linked to commercial IT firm in Spain
First M2 Max benchmark scores appear to leak on Geekbench
Why China Is Still Stuck in a Zero-Covid Nightmare
GPT-4 Rumors From Silicon Valley
OpenAI upgrades GPT-3, stunning with rhyming poetry and lyrics
Influencers were paid by Google to promote a Pixel phone they never used
How secure a Twitter replacement is Mastodon? Let us count the ways
Elon Musk Confirms Twitter 2.0 will Bring End-to-End Encryption to Direct Messages
The RISKS Digest
Re: Elon, Twitter, China, and human lives -- and more
Network-Crashing Leap Seconds to Be Abandoned by 2035, for at Least a Century
Re: The World Generates So Much Data, New Unit Measurements Were Created to Keep Up
Golf Robot Putts Like a Pro
Programming Tool Turns Handwriting into Computer Code
We Need to Change the System That Keeps Pilots from Seeking Mental Health Care
Going great in Texas: Entire City of Houston placed under boil-water notice after system outage
San Francisco Considers Allowing Use of Deadly Robots by Police
El Salvador's Chivo Wallet: a slapstick saga of software disaster: Attack of the 50-Foot Blockchain
Blockchains, What Are They Good For?
Scientists are using facial recognition software to track and protect seals
Alexa, is the voice-assistant industry doomed?
Kaspersky Blog
Transatlantic Cable podcast 278 | Kaspersky official blog
CryWiper disguised as ransomware | Kaspersky official blog
Safely upgrading OT Infrastructure | Kaspersky official blog
FIFA World Cup 2022: Soccer Cyberthreats | Kaspersky official blog
How safe are robots? | Kaspersky official blog
Crypto, really. Part III: cryptocurrency politics, and the future | Kaspersky official blog
Transatlantic Cable podcast 277 | Kaspersky official blog
Link to Google Translate in phishing email | Kaspersky official blog
What is a cyber immune system? | Kaspersky official blog
How to shop safely online | Kaspersky official blog
Transatlantic Cable podcast, episode 276 | Kaspersky official blog
Miners as a threat to cloud infrastructure | Kaspersky official blog
Adam Shostack & friends
Security Bloggers Network
Browser Extensions: Will They Boost My Online Experience? new
Themes from Bosch Connected World 2022: The Role of Cybersecurity in Software-Defined Vehicles and the IIoT new
Is Social Media at a Tipping Point, The TikTok Invisible Challenge, San Francisco Police Can Use Killer Robots new
7 Cheap Extended Validated (EV) SSL Certificates of 2023 new
A Complete Guide to SSL Cipher Suites new
Everything About Software Publisher Certificates new
Skills Shortage and Integration Challenges Halt Cybersecurity Adoption new
Examples of custom roles in Oracle ERP Cloud new
Why you should customize roles for Oracle ERP new
OT Security Challenges and Solutions new
USENIX Security ’22 – Christine Geeng, Mike Harris, Elissa Redmiles, Franziska Roesner ‘Like Lesbians Walking the Perimeter’ new
“Vandalism” Suspected in NC Utility Outage, Foreign Influence Not Ruled Out new
Graham Cluley
Whoops! Researchers accidentally crash botnet used to launch DDoS and cryptomining campaigns
Kolide, endpoint security for teams that want to meet SOC 2 compliance goals without sacrificing privacy
Smashing Security podcast #300: Interplanetary file systems, iSpoof, and don’t delete Twitter
Twitter isn’t going to stop people posting COVID-19 misinformation anymore
Flaw allowed man to access private information of other Brinks Home Security customers
Operation Elaborate – UK police text 70,000 people thought to have fallen victim to iSpoof bank fraudsters
Kolide gives you real-time fleet visibility across Mac, Windows, and Linux, answering questions MDMs can’t
Smashing Security podcast #299: EV charging risks, FTX, and an ancient apocalypse
Hive ransomware has extorted $100 million in 18 months, FBI warns
For two years security experts have been secretly decrypting systems for Zeppelin ransomware victims
Ouch! Ransomware gang says it won’t attack AirAsia again due to the “chaotic organisation” and sloppy security of hacked airline’s network
Police force published sexual assault victims’ names and addresses on its website
ThreatPost
Rapid7
Leaked Android Platform Certificates Create Risks for Users
Velociraptor Version 0.6.7: Better Offline Collection, Encryption, and an Improved NTFS Parser Dig Deeper Than Ever
Powerlifting in the Cybersecurity Skills Gap
Can Cloud Security Be Easier Than Complex?
Rapid7 Integration For AWS Verified Access
InsightIDR Launches Integration With New AWS Security Data Lake Service
Unifying Threat Findings to Elevate Your Runtime Cloud Security
Reducing Risk In The Cloud with Agentless Vulnerability Management
Aligning to AWS Foundational Security Best Practices With InsightCloudSec
Search Made Easy: InsightIDR’s Secret Weapon for Efficiency and Efficacy
Better Cloud Security Shouldn’t Require Bigger Budgets
Rapid7 and HashiCorp Partner to Secure Terraform-based Cloud Infrastructure Deployments
digitalmunition
Hacker News (YCombinator) - Security
Memory Leaks Detection Paper Co-Authored by Netflix CEO Reed Hastings in 1992 [pdf] new
Memory leaks detection paper co-authored by Netflix CEO Reed Hastings in 1992 [pdf] new
My secret life as an 11-year-old BBS sysop new
A new AI game: Give me ideas for crimes to do new
Samsung’s Android app-signing key has leaked, is being used to sign malware new
Iran abolishes controversial morality police
Iran abolishes morality police
Rackspace Cloud Office suffers security breach
Anker’s Eufy lied to us about the security of its security cameras
Judge finds no rights violations in FBI seizure Beverly Hills safe-deposit boxes
Show HN: This Hacker News Does Not Exist
Britain is sleepwalking into censorship and we’re running out of time to stop it
eHacking News
Hacker Noon #Security
Wired - Security
China’s Police State Targets Zero-Covid Protesters
Android Phone Makers’ Encryption Keys Stolen and Used in Malware
Iran’s Protests Reveal What’s Lost If Twitter Crumbles
Google Moves to Block Invasive Spanish Spyware Framework
Drop What You're Doing and Update iOS, Android, and Windows
The Hunt for the Kingpin Behind AlphaBay, Part 6: Endgame
A Peek Inside the FBI's Unprecedented January 6 Geofence Dragnet
Apple Tracks You More Than You Think
Redacted Documents Are Not as Secure as You Think
I Lost $17,000 in Crypto. Here’s How to Avoid My Mistake
How to Avoid Black Friday Scams Online
The US Has a Bomb-Sniffing Dog Shortage
Krebs on Security
ConnectWise Quietly Patches Flaw That Helps Phishers
U.S. Govt. Apps Bundled Russian Code With Ties to Mobile Malware Developer
Disneyland Malware Team: It’s a Puny World After All
Top Zeus Botnet Suspect “Tank” Arrested in Geneva
Lawsuit Seeks Food Benefits Stolen By Skimmers
Patch Tuesday, November 2022 Election Edition
LinkedIn Adds Verified Emails, Profile Creation Dates
Hacker Charged With Extorting Online Psychotherapy Service
Accused ‘Raccoon’ Malware Developer Fled Ukraine After Russian Invasion
Battle with Bots Prompts Mass Purge of Amazon, Apple Employee Accounts on LinkedIn
How Card Skimming Disproportionally Affects Those Most In Need
Anti-Money Laundering Service AMLBot Cleans House

Security in Mainstream Media

Google News Hacking
Most UAE residents worried about hacking as cyberattack threat looms, survey reveals - Arabian Business new
UNITED STATES/INDIA/ISRAEL/UNITED KINGDOM : As hacking accusations against it mount up, CyberRoot strikes back in Indian courts - Intelligence Online new
Britney Spears fans think her account is hacked after she praises sister - Geo News new
Dirty TRS-80 Has A Surprise Hack - Hackaday new
A Recruiter Talked Why “White Wording” Isn't the Resume Hack That People Think It Is - Twisted Sifter new
Remote workers losing laptops are bigger threat to companies than hackers - The Telegraph new
Martin Lewis shares hack on how pensioners can turn £800 into £5,500 - Daily Mail
AIIMS server hacking plotted in Hong Kong - The Tribune India
'We're back': Ann Arbor's Zingerman's Delicatessen regains control of hacked account - WDIV ClickOnDetroit
[RD/SJMP] Hacking Dragon - YGOrganization
Google Cyber Security
42% of UK industry suffered cyber-attacks in the past year - Drives & Controls new
24 Hours of DOCA: NVIDIA Cyber Hackathon Winners Announced - Geektime new
Lessons from critical cyber security incidents - Express Computer new
How to take on the ever growing cyber security threat - DATAQUEST new
Make UK/BlackBerry report sees cyber attacks on nearly half of UK manufacturers - with losses up to £250,000 - Politics.co.uk new
Smart Grid Cyber Security Market Analysis 2023 With Top Leaders, Size, Growing CAGR Value, Share, Growth, Technical Industry Vision Throughout the World till 2028 -… new