Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

PacketStorm
Johnson Controls Hit By Ransomware new
The NSA Is Starting An Artificial Intelligence Security Center new
Chinese Snoops Stole 60,000 State Department Emails new
Russian State Hackers Attempted To Block Ukrainians From Opening US Bank Accounts new
Right Wing Elon Scraps Tool To Report Electoral Fake News
After Failing At Privacy Again, Google Is Working To Keep Bard Chats Out Of Search
Cisco Warns Of IOS Software Zero-Day Exploitation Attempts
Chinese Hackers Stole Emails From US State Dept In MS Breach
Fake Bitwarden Site Distributes Novel RAT Malware
Google Rushes To Patch New Zero-Day Exploited By Spyware Vendor
Firefox 118 Patches High Severity Vulnerabilities
Misconfigured TeslaMate Instances Put Tesla Car Owners At Risk
The Register
PhD student guilty of 3D-printing 'kamikaze' drone for Islamic State terrorists new
Norway wants Facebook behavioral advertising banned across Europe new
Chinese snoops stole 60K State Department emails in that Microsoft email heist new
Feds' privacy panel backs renewing Feds' S. 702 spying powers — but with limits new
DARPA takes its long-duration Manta undersea drone for a test-dip
After failing at privacy, again, Google is working to keep Bard chats out of Search
China's national security minister rates fake news among most pressing cyber threats
NYC rights groups say no to grocery store spycams and snooping landlords
ROBOT crypto attack on RSA is back as Marvin arrives
MOVEit breach delivers bundle of 3.4 million baby records
Ukraine accuses Russian spies of hunting for war-crime info on its servers
Mixin suspends deposits and withdrawals after $200m cryptocurrency heist
Reddit - NetSec
3AM Ransomware: A Modern Threat with a Vintage Twist new
Fireblocks OSS MPC Lib new
A Practical Approach to SBOM in CI/CD Part II — Deploying Dependency-Track
Input Validation, a go-to solution for fixing most security vulnerabilities does not really address the root cause
Cisco advisory: Reports about bad Actors Hiding in Router Firmware
Chalk - Total visibility of your software engineering lifecycle
How to get persistent reverse shell from Android app without visible permissions to DoS device
NoSQL injection techniques & labs
Survive Access Key Deletion with sts:GetFederationToken - Hacking The Cloud
Guide to hacking htmx applications
Malicious npm Packages Strike Again: Exfiltrating Kubernetes Configurations and SSH Keys
Exploiting ASP.NET TemplateParser — Part I: Sitecore (CVE-2023-35813)
Bleeping Computer
The Hacker News
Cybercriminals Using New ASMCrypt Malware Loader Flying Under the Radar new
Lazarus Group Impersonates Recruiter from Meta to Target Spanish Aerospace Firm new
Post-Quantum Cryptography: Finally Real in Consumer Apps? new
Microsoft's AI-Powered Bing Chat Ads May Lead Users to Malware-Distributing Sites new
Progress Software Releases Urgent Hotfixes for Multiple Security Flaws in WS_FTP Server new
Cisco Warns of Vulnerability in IOS and IOS XE Software After Exploitation Attempts new
GitHub Repositories Hit by Password-Stealing Commits Disguised as Dependabot Contributions
China's BlackTech Hacking Group Exploited Routers to Target U.S. and Japanese Companies
The Dark Side of Browser Isolation – and the Next Generation Browser Security Technologies
China-Linked Budworm Targeting Middle Eastern Telco and Asian Government Agencies
Update Chrome Now: Google Releases Patch for Actively Exploited Zero-Day Vulnerability
Red Cross-Themed Phishing Attacks Distributing DangerAds and AtlasAgent Backdoors

Threat Wire

Exploits

Packet Storm Exploits
JetBrains TeamCity Unauthenticated Remote Code Execution new
Microsoft Windows Kernel Refcount Overflow / Use-After-Free new
Microsoft Error Reporting Local Privilege Elevation
RoyalTSX 6.0.1 RTSZ File Handling Heap Memory Corruption
OPNsense 23.1.11_1 / 23.7.3 / 23.7.4 Cross Site Scripting / Privilege Escalation
LogoBee CMS 0.2 Cross Site Scripting
Lamano LMS 0.1 Insecure Settings
Elasticsearch 8.5.3 Stack Overflow
Taskhub 2.8.8 Cross Site Scripting
TOTOLINK Wireless Routers Remote Command Execution
Luxcal Event Calendar 3.2.3 Cross Site Request Forgery
Lamano CMS 2.0 Cross Site Request Forgery
Exploit-DB Webapps
[webapps] Wp2Fac - OS Command Injection
[webapps] soosyze 2.0.0 - File Upload
[webapps] Axigen < 10.3.3.47, 10.2.3.12 - Reflected XSS
[webapps] Drupal 10.1.2 - web-cache-poisoning-External-service-interaction
[webapps] SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection
[webapps] Jorani v1.0.3-(c)2014-2023 - XSS Reflected & Information Disclosure
[webapps] Wordpress Plugin Elementor 3.5.5 - Iframe Injection
[webapps] AdminLTE PiHole 5.18 - Broken Access Control
[webapps] DLINK DPH-400SE - Exposure of Sensitive Information
[webapps] FileMage Gateway 1.10.9 - Local File Inclusion
[webapps] Member Login Script 3.3 - Client-side desync
[webapps] WP Statistics Plugin 13.1.5 current_page_id - Time based SQL injection (Unauthenticated)
Exploit-DB Local and Privilege Escalation
[local] GOM Player 2.3.90.5360 - Buffer Overflow (PoC)
[local] Kingo ROOT 1.5.8 - Unquoted Service Path
[local] NVClient v5.0 - Stack Buffer Overflow (DoS)
[local] Freefloat FTP Server 1.0 - 'PWD' Remote Buffer Overflow
[local] Inosoft VisiWin 7 2022-2.1 - Insecure Folders Permissions
[local] systemd 246 - Local Privilege Escalation
[local] OutSystems Service Studio 11.53.30 - DLL Hijacking
[local] General Device Manager 2.5.2.2 - Buffer Overflow (SEH)
[local] Keeper Security desktop 16.10.2 & Browser Extension 16.5.4 - Password Dumping
[local] GreenShot 1.2.10 - Insecure Deserialization Arbitrary Code Execution
[local] mRemoteNG v1.77.3.1784-NB - Cleartext Storage of Sensitive Information in Memory
[local] RaidenFTPD 2.4.4005 - Buffer Overflow (SEH)
Exploit-DB DoS
[dos] SyncBreeze 15.2.24 - 'login' Denial of Service
[dos] Xlight FTP Server 3.9.3.6 - 'Stack Buffer Overflow' (DOS)
[dos] TP-Link TL-WR940N V4 - Buffer OverFlow
Exploit-DB Shellcode
Exploit-DB Papers
Exploit-DB Remote
[remote] GOM Player 2.3.90.5360 - Remote Code Execution (RCE)
[remote] Techview LA-5570 Wireless Gateway Home Automation Controller - Multiple Vulnerabilities
[remote] Ivanti Avalanche <v6.4.0.0 - Remote Code Execution
[remote] TSplus 16.0.2.14 - Remote Access Insecure Files and Folders Permissions
[remote] TSplus 16.0.0.0 - Remote Work Insecure Files and Folders
[remote] TSPlus 16.0.0.0 - Remote Work Insecure Credential storage
[remote] EuroTel ETL3100 - Transmitter Unauthenticated Config/Log Download
[remote] EuroTel ETL3100 - Transmitter Default Credentials
[remote] EuroTel ETL3100 - Transmitter Authorization Bypass (IDOR)
[remote] TP-Link Archer AX21 - Unauthenticated Command Injection
[remote] ReyeeOS 1.204.1614 - MITM Remote Code Execution (RCE)
[remote] Shelly PRO 4PM v0.11.0 - Authentication Bypass

LiveOverflow

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Reddit - Reverse Engineering
Ghidra 10.4 released new
Windows Internals Book Book Online Website new
Exploring ScamClub Payloads via Deobfuscation Using Abstract Syntax Trees
Extract system calls from user-defined functions, using eBPF
GPU.zip: Hackers can now steal your passwords through your GPU (pixel-by-pixel)
A Deep Dive into Brute Ratel C4 payloads – Part 2
Tip: Open with IDA Pro context menu
Release BinDiff 8 Open Source
We're Hiring! Software Reverse Engineer Position at Caesar Creek Software. 4 Locations: Miamisburg (OH), Atlanta (GA), Woburn (MA) and Fredericksburg (VA).
/r/ReverseEngineering's Weekly Questions Thread
ImHex v1.31.0 has been released! Including a full command line interface, a .NET Script loader and a built-in tutorial in the form of Achievements
Reverse-engineering the classic MK4116 16-kilobit DRAM chip
Reddit - Game Hacks
Klar DayZ Cheat! best on the market, safe and works wonders! new
CHEAT WAR THUNDER EAC STERN🔥 | ESP | AIR PREDICTION | AIM PREDICTION | ✅ UNDETECTED👑 new
AimAce Warthunder cheat! Safe, Reliable and affordable software! 0 bans ever undetected since release! Shop at https://www.ownagesoftware.com/
Klar DayZ cheat! looking for something to make DayZ fun? Klar DayZ is for you! Dominate like no one else!
ESCAPE FROM TARKOV UNDETECTED CHEATS/HACK
Struggling in WarThunder? AimAce is the perfect tool for you! cheap and Reliable! Shop at https://www.ownagesoftware.com/ Good Luck!
Ebay DMA Buying.
AimAce And Aboslute Warthunder cheat! Best 2 on the market! Dominate like no one else! almost 3 Years Undetected 0 Bans
Help finding hacks for a game
PAYDAY3 CHEATS x STERN
Removing a HWID Ban on Rust - HyperThread
Escape From Tarkov CHEAT!, best on the market by far, best for closet cheating! Shop at https://www.ownagesoftware.com/
Reddit - REGames
How can I find bones and clothing layers in memory?
Decrypt a mobile game file
How to go about setting up a private server for monster hunter explore
Assetstudio is not working for the same _data file.
Repacking LZMA compressed files?
Unlocking the developer console in Call of Duty: Modern Warfare 2 (2009)
Cracking an old DOS game
Can't see methods when opening Csharp-assembly.dll (32-bit IOS game)
Best practice to create a GitHub repo for Ghidra Metadata for a PSX game?
A Compact Linux & Windows Detours Library (x86_64)
how can i make a minecraft cube in Chivalry1 SDK
Beginner's Guide to Disassembling 6502 Binaries -- Commodore PET Space Invaders
StackExchange - ReverseEngineering
How can I prevent NDIS in Windows 10 from turning off the NIC in Fast Startup Mode? new
Is there an effective way to reverse engineer the way this plagiarized thesis was constructed? new
MachO chained fixups parsing new
Disable follow on click in dnSpy decompilation view
How to detect methods and types from C++ STD in disassembly of Nintendo Switch executable
APK Reversing. Some code is hidden?
X64dbg question
Can anyone help me to decrypting my router configuration file
Finding CRC for a pocket of data
Reverse Android native lib
Extracting obj-c class list from a machO
Want to Install Google TV Home Android 10 App in Android 9

Guided Hacking

Malware/APT

Reddit - Malware
what kind of malware was in this link? It infects every device on LAN and changes root privileges, supposedly trains some kind of neural network? new
A malware curation tool that allows you to query, download and investigate fresh samples from threat intelligence platform(s)
Good free antivirus for Android that doesn't drain battery
Wasn’t expecting that last part…
malware identification issue
Samples come as clean by AV but have hundreds of malicious & suspicious indicators
Malware opening Powershell every minute. Can any one please decode and analyse this
False positive or not
HijackLoader Targets Hotels: A Technical Analysis
I've started making Malware review videos, to follow in danooct1's footsteps since he only records twice a year now.
Windows shadowcopy tool used in malware
Malvare that opens everything in Temp files
Unit42
CL0P Seeds ^_- Gotta Catch Em All! new
Rare Backdoors Suspected to be Tied to Gelsemium APT Found in Targeted Attack in Southeast Asian Government
Cyberespionage Attacks Against Southeast Asian Government Linked to Stately Taurus, Aka Mustang Panda
Persistent Attempts at Cyberespionage Against Southeast Asian Government Target Have Links to Alloy Taurus
Unit 42 Researchers Discover Multiple Espionage Operations Targeting Southeast Asian Government
Fake CVE-2023-40477 Proof of Concept Leads to VenomRAT
Threat Group Assessment: Turla (aka Pensive Ursa)
Threat Group Assessment: Muddled Libra (Updated)
Unit 42 Attack Surface Threat Research: Constant Change in Cloud Contributes to 45% of New High/Critical Exposures Per Month
Wireshark Tutorial: Display Filter Expressions
RedLine Stealer: Answers to Unit Wireshark Quiz
Wireshark Tutorial: Changing Your Column Display

Crypto

Seytonic

Podcasts

Security Weekly
The Right Skills For The Job - Kayla Williams - PSW #800 new
AI Attacks and LLM Security Matters - Nathan Hamiel - PSW #799
Ransomware Infection Vectors - Ryan Chapman - PSW #798
Interview with Dr. Gene Spafford - Eugene Spafford - PSW Vault
Incident Response: Clouds, SMBs, & More! - Amanda Berlin - PSW #797
Managing Bug Bounty Programs At Scale - Dr. Jared DeMott - PSW #796
Defending Public Infrastructure While At War - Antranig Vartanian - PSW #795
Incident Response Readiness - Gerard Johansen - PSW #794
Incident Response Stories - Bill Swearingen - PSW #793
Post-Breach: The Hardening Continues - Sean Metcalf - PSW #792
Post-Breach: The Hardening Continues - Sean Metcalf - PSW #792
Security Certification - Rohit Misuriya, Sumit Siddharth - PSW #791
Risky.Biz
Risky Business #723 -- MGM and Caesars: Western youths are working with ransomware gangs
Snake Oilers: Sublime Security, Vulncheck and Devicie
Risky Business #722 -- Microsoft embraces Zero Trust... Authentication?
Risky Business #721 -- Why Storm-0558's Microsoft hack should have failed
Snake Oilers: ConductorOne, Bloodhound Enterprise and Zero Networks
Risky Business #720 -- How cloud identity provider federation features can get you mega-owned
Risky Business #719 -- FBI vapes 700,000 Qakbot infections
Risky Business #718 -- Chaos and carnage, business as usual
Feature Interview: How Sandworm prepared Ukraine for a cyber war
Risky Business #717 -- The kids are okay. At ripping your face off.
Risky Business #716 -- This ain't your grandma's cloud
Risky Business #715 -- Pressure mounts on Microsoft to explain itself
The CyberWire
Malicious ads in a chatbot. A vulnerability gets some clarification. Cl0p switches from Tor to torrents. Influence operations as an adjunct to WMD. And NSA’s… new
Buckworm APT’s specialized tools. Cyberattack against Johnson Controls. Oversight panel reports on Section 702. Cyber in election security, and in the US industrial base. Hacktivism…
What up in the underworld’s C2C markets. An update on the Sony hack claims. Notes on cyberespionage, from Russia, China, and parts unknown. And there’s…
Crooks phish for guests; spies phish for drone operators. ZenRAT is used in an info-stealing campaign. More MOVEit-related incidents (some involving Cl0p). DeFi platforms hit.…
Cyberespionage in East and Southeast Asia, for both intelligence collection and domestic security, Spyware tools tracked. Shifting cyber targets in Russia’s hybrid war. Securing the…
Threat intelligence discussion with Chris Krebs. [Special Edition]
Merritt Baer: No one has to go down for you to go up. [CISO] [Career Notes]
Behind the Google shopping ad masks. [Research Saturday]
Enter the Sandman. A look at an initial access broker. Iran’s OilRig hits Israeli targets. Cyber ops and soft power. Update on casino ransomware attacks.…
Don’t get snatched. Trends in phishing, cyber insurance claims, and threats to academic institutions. Hacktivism in the hybrid war. Updates on the ICC attack. MGM…
Hacking the ICC. ShroudedSnooper active, simple, and novel. New criminal malware used against Chinese-speakers. More on the materiality of cyberattacks.
Ransomware in Colombia. An accidental data exposure. Cyberespionage hits unpatched systems. An attack on IT systems disrupts industrial production. Bots and bad actors.
Cyber Security Interviews
#127 – Douglas Brush (Part 5): Analysis Paralysis
ISC Daily Stormcast
ISC StormCast for Friday, September 29th, 2023 new
ISC StormCast for Thursday, September 28th, 2023
ISC StormCast for Wednesday, September 27th, 2023
ISC StormCast for Tuesday, September 26th, 2023
ISC StormCast for Monday, September 25th, 2023
ISC StormCast for Friday, September 22nd, 2023
ISC StormCast for Thursday, September 21st, 2023
ISC StormCast for Wednesday, September 20th, 2023
ISC StormCast for Tuesday, September 19th, 2023
ISC StormCast for Monday, September 18th, 2023
Darknet Diaries
137: Predator
136: Team Xecuter
135: The D.R. Incident

Threat Intel

Privacy/VPNs

Slashdot - Rights
A Test of iPhone-to-HDMI Adapter That Demands Location/Browsing Data new
Three Arrows Capital Co-Founder Zhu Apprehended, Liquidator Says new
New York Bans Facial Recognition In Schools new
Freelancers Aren't Happy With Japan's New Invoice System new
Food Delivery Robots Are Feeding Camera Footage to the LAPD, Internal Emails Show
Apple Asks Supreme Court To Reverse App Store Ruling Won by Epic
US Sues eBay Over Sale of Harmful Products
GPUs From All Major Suppliers Are Vulnerable To New Pixel-Stealing Attack
FCC To Reintroduce Rules Protecting Net Neutrality
Getting Data From NSA Takes 'Days' So Federal Counterintelligence Agency Turned To Private Company, Documents Show
FBI Agents Are Using Face Recognition Without Proper Training
Facebook Can Be Sued Over Biased Ad Algorithm, Says Court
Reddit - Privacy
Free Burner phone number that can respond for discounts new
Illinois BIPA question new
Apartment uses onfido for verification, should I look elsewhere? new
Wedding and Baby Registries new
I want to delete EVERYTHING I've ever posted anywhere on Facebook more than say 30 days ago... options? new
In regards to Zoom’s AI policy new
Encrypted Client Hello - the last puzzle piece to privacy new
Working towards private life? new
Is there a way to find out whether a keyboard or a mouse have some kind of a spyware, inserted by the company that produces… new
Reddit - VPN
Watching Rugby World Cup new
"Specific" VPN not working in China
PrivacyTools.io
EFF
The Growing Threat of Cybercrime Law Abuse: LGBTQ+ Rights in MENA and the UN Cybercrime Draft Convention new
Watch EFF's Talks from DEF CON 31 new
Get Real, Congress: Censoring Search Results or Recommendations Is Still Censorship new
The Federal Government’s Privacy Watchdog Concedes: 702 Must Change new
EFF to D.C. Circuit: Animal Rights Activists Shouldn’t Be Censored on Government Social Media Pages Because Agency Disagrees With Their Viewpoint
How To Turn Off Google’s “Privacy Sandbox” Ad Tracking—and Why You Should
EFF's Comment to the Meta Oversight Board on Polish Anti-Trans Facebook Post
EFF, ACLU and 59 Other Organizations Demand Congress Protect Digital Privacy and Free Speech
EFF at FIFAfrica 2023
Digital Rights Updates with EFFector 35.12
The U.S. Government’s Database of Immigrant DNA Has Hit Scary, Astronomical Proportions
Don’t Fall for the Intelligence Community’s Monster of the Week Justifications

Help Wanted

Reddit - AskNetSec
Where are some go-to places for CVE threat intelligence? new
Your cloud security practices pls
PowerShell evasion
Reddit - Netsec Students
WGU Masters v.s. SANS Bachelors new
Looking for an Dradis alternative - custom templates
Find & exploit NoSQL Injection, with labs
Need help looking for Comptia A+ courses
GCP Network Security Cert. New Book
Looking Web App Pen Tester resources
Top 3 Data Breaches This Week
Should I take the minor degree?
Past week in brief - Microsoft's 38TB Data Leak, Cisco's Splunk Acquisition, Apple's Triple Zero-Days, LastPass Security Update, and OpenAI's Red Teaming Initiative
Trying to generate TLS 1.3 Alert
Should I switch majors from cyber security to computer science?
Microsoft Azure Sentinel: Adding TLPs (Traffic Light Patterns) to Incidents, Alerts and Analytics Rules
Stackoverflow - Security
React Native - security issue sensitive information in memory dump new
What is the point of a Tautology in an in-Band SQL Injection? new
Encryption using L2CAP Connections over channels new
What is the difference between session hijacking and session spoofing? new
Gaining root access exploiting samba 2.2 vulnerability (Kyoptrix 1) new
Java security status 403 new
Unable to Use -json Flag with Nuclei for JSONL Output new
Are the Ciphers ECDHE-RSA-AES128-SHA256 and ECDHE-RSA-AES256-SHA384 strong? new
External commands through os/exec without write access new
React Native - security issue sensitive information in memory dump - Frida and Fridump new
Shared internet behind firewall [closed]
Spring Security filter with a second-order priority is not running
Stack Exchange
Is there any benefit to use different salt for different encryption algorithms for same user new
Measures to safeguard against zero font phishing attack new
What does it mean to store secret keys as an "environment variable" as opposed to hardcoded in the source code? new
PGP keys as a hashing method new
What to do if i have no salt? new
alternatives for OAuth, SAML, OpenID Connect, and WebAuthn [closed] new
WhatsApp channel [closed] new
Why is TLS communication within a VPC important? [duplicate] new
Why don't bank verification services use OAuth new
Metasploit Client-Side Exploit on Firefox 26 new
Nmap Scan 3 different private IP 1 target [closed] new
What is the point of required user verification in WebAuthn?

Locks/Social Engineering

Hak5

Security Blogs

Dark Reading
Spyware Vendor Targets Egyptian Orgs With Rare iOS Exploit Chain new
DHS Calls Into Question Physical Security in Johnson Controls Cyberattack new
Cybersecurity Gaps Plague US State Department, GAO Report Warns new
Move Over, MOVEit: Critical Progress Bug Infests WS_FTP Software new
QR Code 101: What the Threats Look Like new
Government Shutdown Poised to Stress Nation's Cybersecurity Supply Chain new
Novel ZenRAT Scurries Onto Systems via Fake Password Manager Tool
Looking Beyond the Hype Cycle of AI/ML in Cybersecurity
7 Ways SMBs Can Secure Their WordPress Sites
CAPTCHAs Easy for Humans, Hard for Bots
Will Government Secure Open Source or Muck It Up?
Microsoft Adds Passkeys to Windows 11
Securelist
A cryptor, a stealer and a banking trojan
QR codes in email phishing
Whitehat Security Blog
HITB News
Incomplete disclosures by Apple and Google create “huge blindspot” for 0-day hunters
'Power, influence, notoriety': The hackers who struck MGM, Caesars
Your Fingerprints Might Change the Color of Your iPhone 15 Pro
3 iOS 0-days, a cellular network compromise, and HTTP used to infect an iPhone
Worm that jumps from rats to slugs to human brains has invaded Southeast US
Middle East telcos targeted by new malware with suspected nation-state backing
DeepMind’s New AI Can Predict Genetic Diseases
Chinese hackers have unleashed a never-before-seen Linux backdoor
Archaeologists find 500-year-old board game carved in ruins of Polish castle
Millions of cheap Android TV boxes come pre-infected with botnet malware
FDA approves and authorizes updated COVID boosters for everyone 6 months and up
Yes, There’s a New Covid Variant. No, You Shouldn’t Panic
The RISKS Digest
Driverless Car Company Using Chatbots to Make Its Vehicles Smarter
Egyptian presidential hopeful targeted by Predator spyware
Bitcoin conspiracy theory
Google accused of directing motorist to drive off collapsed bridge
Typeface trolls shaking down users of Adobe's font platform
It's 2030, and digital wallets have replaced every card in our purses and pockets
Misinformation research is buckling under GOP legal attacks
Google Search first result for "Tank Man" is e fake AI image rather than actual image from China
Missing Author
ChatGPT Can Now Generate Images
Cryptocurrency Startup Loses Encryption Key for Electronice Wallet
Bots are Better than Humans at CAPCHAS
Kaspersky Blog
Beware of scammers! Dangerous apps in the App Store | Kaspersky official blog new
Transatlantic Cable podcast, episode 317 | Kaspersky official blog
Where Linux is in your home, and how to protect Linux devices from hacking | Kaspersky official blog
How to properly store your user passwords | Kaspersky official blog
How to protect your child's privacy when using social networks and IMs | Kaspersky official blog
Are Electron-based desktop applications secure? | Kaspersky official blog
What is the Fediverse, and how does it work? | Kaspersky official blog
Transatlantic Cable podcast, episode 316 | Kaspersky official blog
HR phishing: self-evaluation questionnaire | Kaspersky official blog
How to boost the performance of the whole infosec team | Kaspersky official blog
Top apps for encrypted, private videocalls | Kaspersky official blog
Transatlantic Cable podcast, episode 315 | Kaspersky official blog
Adam Shostack & friends
Graham Cluley
Three men found guilty of laundering $2.5 million in Target gift card tech support scam new
ZeroFont trick makes users think that message has been scanned for threats new
Ransomware group demands $51 million from Johnson Controls after cyber attack
Smashing Security podcast #341: Another T-Mobile breach, ThemeBleed, and farewell Naked Security
British charities warn supporters their personal data has been breached
Exiled Russian journalist claims “European state” hacked her iPhone with Pegasus spyware
“The good and the bad that comes with the growth of AI” – watch this series of webinars with Abnormal, OpenAI, and others
iOS 17 update secretly changed your privacy settings; here’s how to set them back
Snatch ransomware – what you need to know
Donald Trump Jr’s hacked Twitter account announces his father has died
Smashing Security podcast #340: Heated seats, car privacy, and Graham’s porn video
What a mess! Clorox warns of “material impact” to its financial results following cyberattack
Security Bloggers Network
CISA Rolls Out a HBOM Framework to Secure Hardware Components new
Randall Munroe’s XKCD ‘Book Podcasts’ new
Cyber Week 2023 & The Israel National Cyber Directorate Presents – Academic Perspectives on Cybersecurity Challenges new
Beyond Risk Mitigation: The Business Benefits of Strong Cybersecurity new
Your Polaris Questions: Open Source Configuration Validation for K8s new
Q3 2023 Analytic Co-Pilot Use Cases new
Federal Shutdown Raises Cybersecurity Risks, Experts Warn new
Protecting Your Software Supply Chain: Understanding Typosquatting and Dependency Confusion Attacks new
Cryptomining Attacks: The Stealth Threat to Your Cloud Security new
National Cybersecurity Infrastructure Efforts Bearing Fruit new
What Is mTLS? The Essential Guide You Can’t Afford to Miss new
Methods To Protect Yourself From Identity Theft new
Rapid7
Introducing Active Risk
CVE-2023-42793: Critical Authentication Bypass in JetBrains TeamCity CI/CD Servers
Rapid7 Delivers Visibility Across All 19 Steps of Attack in 2023 MITRE Engenuity ATT&CK® Evaluations: Enterprise
Rapid7 doubles down on a platform approach for Vulnerability Risk Management
Patch Tuesday - September 2023
A Look at Our Development Process of the Cloud Resource Enrichment API
CVE-2023-4528: Java Deserialization Vulnerability in JSCAPE MFT (Fixed)
Metasploit Weekly Wrap-Up
Fake Update Utilizes New IDAT Loader To Execute StealC and Lumma Infostealers
Exploitation of Juniper Networks SRX Series and EX Series Devices
PenTales: What It’s Like on the Red Team
Velociraptor 0.7.0 Release: Dig Deeper With Enhanced Client Search, Server Improvements and Expanded VQL Library
ThreatPost
Hacker News (YCombinator) - Security
Show HN: Insomnium – 100% local and privacy-focus fork of Insomnia API client new
Insomnium – Local, privacy-focused fork of Insomnia API client new
Facebook/Meta blocks accounts for posting link to EFF privacy tips new
Privacy washing: Google claims to support privacy while lobbying against it new
A new Chrome 0-day is sending the Internet into a new chapter of Groundhog Day new
Show HN: RISC-V assembly tabletop board game (hack your opponent) new
Encrypted Client Hello – the last puzzle piece to privacy new
Leaked screenshot shows Amazon now tracking individual employee attendance new
Things Every Hacker Once Knew new
Disclosure of Pirates’ Identities “Compatible with EU Privacy Laws” new
Richard Stallman reveals he has cancer in the GNU 40 Hacker Meeting talk new
Richard Stallman reveals he has cancer in the GNU 40 Hacker Meeting talk [video] new
digitalmunition
Hacker Noon #Security
Wired - Security
US Justice Department Urged to Investigate Gunshot Detector Purchases
SoundThinking, Maker of ShotSpotter, Is Buying Parts of PredPol Creator Geolitica
Risk of a US Government Shutdown Is Fueled by Very Online Republicans
Satellite Images Show the Devastating Cost of Sudan’s Aerial War
Your Boss’s Spyware Could Train AI to Replace You
A Tricky New Way to Sneak Past Repressive Internet Censorship
The Shocking Data on Kia and Hyundai Thefts in the US
Chinese Spies Infected Dozens of Networks With Thumb Drive Malware
You Need to Update Google Chrome or Whatever Browser You Use
Massive MGM and Caesars Hacks Epitomize a Vicious Ransomware Cycle
The US Congress Has Trust Issues. Generative AI Is Making It Worse
The Twisted Eye in the Sky Over Buenos Aires
Control C
Convert plaintext to QR code on Linux
Krebs on Security
‘Snatch’ Ransom Group Exposes Visitor IP Addresses
Who’s Behind the 8Base Ransomware Website?
Adobe, Apple, Google & Microsoft Patch 0-Day Bugs
U.S. Hacks QakBot, Quietly Removes Botnet Infections
Kroll Employee SIM-Swapped for Crypto Investor Data
Tourists Give Themselves Away by Looking Up. So Do Most Network Intruders.
Karma Catches Up to Global Phishing Service 16Shop
Diligere, Equity-Invest Are New Firms of U.K. Con Man
Microsoft Patch Tuesday, August 2023 Edition
Meet the Brains Behind the Malware-Friendly AI Chat Service ‘WormGPT’
Teach a Man to Phish and He’s Set for Life
How Malicious Android Apps Slip Into Disguise
Elttam
Abusing Amazon VPC CNI plugin for Kubernetes
PwnAssistant - Controlling /home’s via a Home Assistant RCE
Naked Security
Update on Naked Security
Schneier on Security
Critical Vulnerability in libwebp Library
Signal Will Leave the UK Rather Than Add a Backdoor
Friday Squid Blogging: New Squid Species
New Revelations from the Snowden Documents
On the Cybersecurity Jobs Shortage
Detecting AI-Generated Text
Using Hacked LastPass Keys to Steal Cryptocurrency
Friday Squid Blogging: Cleaning Squid
LLM Summary of My Book Beyond Fear
On Technologies for Automatic Facial Recognition
Upcoming Speaking Engagements
Fake Signal and Telegram Apps in the Google Play Store
Linux Security
LinuxSecurity.com Migrates to Joomla 4 and PHP 8: Our Experience & Key Takeaways
Mitigations for Critical c-ares DoS, Code Execution Bug Released
Harden Ubuntu Server to Secure Your Container and Other Deployments
Ubuntu 23.04 & 22.04.3 Installs Haven't Been Following Their Own Security Best Practices
APT36 Using Customized Malware to Attack Indian Government Linux and Windows Servers
Critical OpenDMARC DoS Bug Fixed
Linux Malware! Read This If You Use Free Download Manager
TCP Authentication Option "TCP-AO" Support Nears For The Linux Kernel
RISC-V With Linux 6.6 Offers Better Kernel Security With KASLR
Expanded Platform Support For AMD Dynamic Boost Control Being Worked On For Linux
The Great CentOS Linux Migration: How We Got Here and Whats Next
Hackers Using BlueShell Malware to Attack Windows, Linux, and Mac Systems

Security in Mainstream Media

Google News Hacking
Michigan thief used Bluetooth to steal 800 gallons of gas by hacking ... - Fox Business new
Hackers Exploit Interest in Criminal Version of ChatGPT to Scam ... - PCMag Middle East new
Shutdown is a hacker's delight - POLITICO - POLITICO new
ZeroFont Phishing: Hackers Manipulating Font Size to Bypass Office 365 Security - GBHackers new
Cannibalism, guns, drugs, lessons in hacking and heart transplants – inside the Dark Web - Daily Star new
"Phantom Hacker" Scams Target Senior Citizens and Result in ... - Internet Crime Complaint Center(IC3) new
Hackers Set Sights on Apache NiFi Flaw That Exposes Many Organizations to Attacks - SecurityWeek new
UAW strike update coming • Oxford High School shooter to learn fate • Hacker steals 800 gallons of gas - FOX 2 Detroit new
Government contractor hacked, DHS says - WSAZ new
Government contractor hacked, DHS says - KBTX new
Iranian hackers hijacked websites to target Israelis in new attacks - The Jerusalem Post new
Netflix Taken Down by Hackers Over LGBTQ+ Content - Newsweek new
Google Cyber Security
A new way for organizations to launch cyber attacks against ... - Federal News Network new
CSA Establishes CyberSG R&D Programme Office with Four Year ... - Cyber Security Agency of Singapore new
Cyber Security Today, Week in Review for the week ending Friday, Sept. 29, 2023 - IT World Canada new
Local hospitals affected by cyber security incident - The Recorder and Times new
CSA launches Cybersecurity Industry Call for Innovation 2023 with ... - Cyber Security Agency of Singapore new
DHS Calls Into Question Physical Security in Johnson Controls Cyberattack - Dark Reading new
A Proclamation on Cybersecurity Awareness Month, 2023 - The White House new
CSA to Invest 50 million to Uplift Talent Innovation and Growth in ... - Cyber Security Agency of Singapore new
Cyber Awareness Day | City of San José - City of San Jose, CA new
How Cybersecurity Firm Zscaler Is Expanding Cloud Platform - Investor's Business Daily new
Space Force Awards Cybersecurity Contract To Protect Space ... - Via Satellite new
Unlocking Cyber Security Career Success: Here is How Specialized Cyber Security Certifications Play a Major Role - The Tribune India new

Thirsty for more