Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Tools

Vulnerabilities

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

PacketStorm
Ten-Year Hacktivisit Fugitive Commander X Arrested In Mexico
Sideloading Apps Would Destroy iOS Security And Privacy
Why Cyber Gangs Won't Worry About US-Russia Talks
Peloton Bike+ Was Vulnerable To Remote Hacking, Researchers Find
Nasty Linux systemd Root Level Security Bug Revealed And Patched
Facebook Awards $30,000 Bounty For Exploit Exposing Private Instagram Content
Digital Artists Targeted In RedLine Infostealer Campaign
Utilities Concerningly At Risk From Active Exploits
Apple Hurries Patches For Safari Bugs Under Active Attack
Critical Remote Code Execution Flaw In Thousands Of VMWare vCenter Servers Remains Unpatched
TimeCache Aims To Block Side-Channel Cache Attacks
Volkswagen, Audi Disclose Data Breach Impacting Over 3.3 Million Customers, Interested Buyers
The Register
Sharpen your cybersecurity skills, however and wherever works for you, with these SANS Institute courses new
South Korea’s nuclear research agency breached by North Korea-affiliated cyberattackers, says malware analyst group new
Racist malware blocks The Pirate Bay by tampering with victims' Windows hosts file
CREST president Ian Glover to retire after 13 years – but where's the transparency, bossman?
Poltergeist attack could leave autonomous vehicles blind to obstacles – or haunt them with new ones
Google dishes out homemade SLSA, a recipe to thwart software supply-chain attacks
Ex-Brave staffer launches GDPR sueball in Germany over tech giants' real-time bidding for ad inventory
Tim Cook: Sideloading is a disaster and proposed App Store reforms would harm user privacy and security
Biden to Putin: Get your ransomware gangs under control and don’t you dare cyber-attack our infrastructure
South Korea has a huge problem with digital sex crimes against women says Human Rights Watch
GPRS-era mobile data encryption algorithm GEA/1 was 'weak by design', still lingers in today's phones
School teacher accused of pocketing $1m+ in insider trading using tips from Silicon Valley pal
Reddit - NetSec
CVE-2021–20226 a reference counting bug which leads to local privilege escalation in io_uring. new
Knock! Knock! The postman is here! (abusing Mailslots and PortKnocking for connectionless shells) new
Phant0m | Windows Event Log Killer new
"Sloth - Tool to Fuzz Android Native libraries with libFuzzer + QEMU" blogpost by @ant4g0nist new
Certified Red Team Professional (CRTP) Reflections new
Why mimicking a device is becoming almost impossible - Multilogin new
Firewalls Gold vs Ubiquiti Dream Machine Pro new
An Introduction to Automating Open Source Intelligence Using SpiderFoot new
Quick Analysis for the SSID Format String Bug
Sale out your old cars and buy new one ,
How I Found A Vulnerability To Hack iCloud Accounts and How Apple Reacted To It
New Klingon RAT, Written in GO, Holding on for Dear Life
Bleeping Computer
New Windows 11 registry hacks to customize your device new
Hands on with Windows 11: A look at the new Start Menu, taskbar and more
Fertility clinic discloses data breach exposing patient info
Google force installs Massachusetts COVID-19 app on residents' phones
Google force installs Massachusetts MassNotify Android COVID app
South Korea's Nuclear Research agency breached using VPN flaw
South Korea's Nuclear Research agency hacked using VPN flaw
Your iPhone's WiFi will break after you join this hotspot
iPhone bug breaks WiFi when you join hotspot with unusual name
Tinder spam campaign hides "handwritten" links in profile images
The Week in Ransomware - June 18th 2021 - Law enforcement strikes back
Three UK telco bug has customers receiving and making random calls
The Hacker News
5 Critical Steps to Recovering From a Ransomware Attack new
DroidMorph Shows Popular Android Antivirus Fail to Detect Cloned Malicious Apps new
Beware! Connecting to This Wireless Network Can Break Your iPhone's Wi-Fi Feature new
North Korea Exploited VPN Flaw to Hack South's Nuclear Research Institute
Cyber espionage by Chinese hackers in neighbouring nations is on the rise
Russia bans VyprVPN, Opera VPN services for not complying with blacklist request
Google Releases New Framework to Prevent Software Supply Chain Attacks
[eBook] 7 Signs You Might Need a New Detection and Response Tool
Update‌ ‌Your Chrome Browser to Patch Yet Another 0-Day Exploit‌ed ‌in‌-the‌-Wild
Molerats Hackers Return With New Attacks Targeting Middle Eastern Governments
A New Spyware is Targeting Telegram and Psiphon VPN Users in Iran
Strengthen Your Password Policy With GDPR Compliance

Threat Wire

Exploits

Packet Storm Exploits
Windows Kerberos AppContainer Enterprise Authentication Capability Bypass
Microsoft SharePoint Unsafe Control And ViewState Remote Code Execution
Cisco HyperFlex HX Data Platform File Upload / Remote Code Execution
Dup Scout 13.5.28 Unquoted Service Path
Trojan.Win32.Alien.erf Buffer Overflow
Unified Office Total Connect Now 1.0 SQL Injection
Samsung NPU npu_session_format Out-Of-Bounds Write
VeryFitPro 3.2.8 Insecure Transit
VX Search 13.5.28 Unquoted Service Path
Zoho ManageEngine ServiceDesk Plus 9.4 User Enumeration
Trojan.Win32.Alien.erf Denial Of Service
Workspace ONE Intelligent Hub 20.3.8.0 Unquoted Service Path
Exploit-DB Webapps
[webapps] OpenEMR 5.0.1.7 - 'fileName' Path Traversal (Authenticated) new
[webapps] Websvn 2.6.0 - Remote Code Execution (Unauthenticated) new
[webapps] Simple CRM 3.0 - 'Change user information' Cross-Site Request Forgery (CSRF) new
[webapps] Simple CRM 3.0 - 'name' Stored Cross site scripting (XSS) new
[webapps] Customer Relationship Management System (CRM) 1.0 - Remote Code Execution new
[webapps] ICE Hrm 29.0.0.OS - 'Account Takeover' Cross-Site Scripting and Session Fixation
[webapps] ICE Hrm 29.0.0.OS - 'Account Takeover' Cross-Site Request Forgery (CSRF)
[webapps] ICE Hrm 29.0.0.OS - 'xml upload' Stored Cross-Site Scripting (XSS)
[webapps] Node.JS - 'node-serialize' Remote Code Execution (3)
[webapps] Unified Office Total Connect Now 1.0 - 'data' SQL Injection
[webapps] Zoho ManageEngine ServiceDesk Plus MSP 9.4 - User Enumeration
[webapps] Online Shopping Portal 3.1 - Remote Code Execution (Unauthenticated)
Exploit-DB Local and Privilege Escalation
[local] Wise Care 365 5.6.7.568 - 'WiseBootAssistant' Unquoted Service Path new
[local] iFunbox 4.2 - 'Apple Mobile Device Service' Unquoted Service Path new
[local] Lexmark Printer Software G2 Installation Package 1.8.0.0 - 'LM__bdsvc' Unquoted Service Path new
[local] Remote Mouse GUI 3.008 - Local Privilege Escalation new
[local] Sync Breeze 13.6.18 - 'Multiple' Unquoted Service Path
[local] Disk Savvy 13.6.14 - 'Multiple' Unquoted Service Path
[local] Dup Scout 13.5.28 - 'Multiple' Unquoted Service Path
[local] VX Search 13.5.28 - 'Multiple' Unquoted Service Path
[local] Workspace ONE Intelligent Hub 20.3.8.0 - 'VMware Hub Health Monitoring Service' Unquoted Service Path
[local] DiskPulse 13.6.14 - 'Multiple' Unquoted Service Path
[local] Disk Sorter Server 13.6.12 - 'Disk Sorter Server' Unquoted Service Path
[local] Brother BRPrint Auditor - 'Multiple' Unquoted Service Path
Exploit-DB DoS
[dos] Secure Notepad Private Notes 3.0.3 - Denial of Service (PoC)
[dos] Notex the best notes 6.4 - Denial of Service (PoC)
[dos] Post-it 5.0.1 - Denial of Service (PoC)
[dos] Sticky Notes Widget Version 3.0.6 - Denial of Service (PoC)
[dos] n+otes 1.6.2 - Denial of Service (PoC)
[dos] NBMonitor 1.6.8 - Denial of Service (PoC)
[dos] Nsauditor 3.2.3 - Denial of Service (PoC)
[dos] Sticky Notes & Color Widgets 1.4.2 - Denial of Service (PoC)
[dos] Inkpad Notepad & To do list 4.3.61 - Denial of Service (PoC)
[dos] Color Notes 1.4 - Denial of Service (PoC)
[dos] Macaron Notes great notebook 5.5 - Denial of Service (PoC)
[dos] My Notes Safe 5.3 - Denial of Service (PoC)
Exploit-DB Shellcode
Exploit-DB Papers
Exploit-DB Remote
[remote] Solaris SunSSH 11.0 x86 - libpam Remote Root (3) new
[remote] Dlink DSL2750U - 'Reboot' Command Injection
[remote] CHIYU IoT Devices - 'Telnet' Authentication Bypass
[remote] ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution (2)
[remote] Solaris SunSSH 11.0 x86 - libpam Remote Root (2)
[remote] GNU Wget < 1.18 - Arbitrary File Upload / Remote Code Execution (2)
[remote] Tenda D151 & D301 - Configuration Download (Unauthenticated)
[remote] vsftpd 2.3.4 - Backdoor Command Execution
[remote] Linux Kernel 5.4 - 'BleedingTooth' Bluetooth Zero-Click Remote Code Execution
[remote] Google Chrome 81.0.4044 V8 - Remote Code Execution
[remote] Google Chrome 86.0.4240 V8 - Remote Code Execution
[remote] vsftpd 3.0.3 - Remote Denial of Service

LiveOverflow

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Reddit - Reverse Engineering
O'Reilly eBooks bundle on web development and web design ends in 1 day, supports charity new
Reverse Engineering Bare-Metal Firmware - Part 3 | Analyzing ARM Assembly and Exploiting Vulnerabilities new
💘 💛 💙 Nude Chat
💓 💌 💙 Nude Chat
Malware Samples, Analysis Exercises and other interesting resources
Solving a virtual machine based Crack Me
LOKI: Hardening Code Obfuscation Against Automated Attacks
need help with x64dbg, whenever i try to debug an exe it says "use x32dbg to debug this!", but i cant find x32dbg download anywhere.
Extracting Shellcode with Ghidra
What you need to know about Process Ghosting, a new executable image tampering attack
An Information Disclosure Bug in the SPNEGO component of the ISC BIND server
Quick analysis of the supposed "Windows 11" leaks and where the string came from [Tweets]
Reddit - Game Hacks
WHERE TO GET WARZONE HACKS ✅ GET COD WARZONE AIMBOT ESP [UNDETECTED] new
Link to download in comments new
R6 cheat montage Ft. Phoenix new
Need Hacks for valorant new
Jurassic Boy 2 - A Bad Sonic Clone
Currently free (for testing) fortnite cheat 21 more downloads left
How would I go about hacking a game called Boxz.io?
anybody have mcpe stuff
NBA 2K21 GUCCI AND VLONE WITH BASKETBALL GODZ HAT FILE
Anyone know where to get a real R6s hack?
I MISS THE RAGE FILE WITH BLACK TATOOS AND BASKETBALL GODZ HAT&PANTS (FILE IN DESCRIPTION)
Found a free valorant cheat that actually works
Reddit - REGames
Complete Decompilation Projects with buildable PC Ports?
Total Distortion Decomp
Fixing Rendering Bugs in Dead Rising PC
Infernal Runner for Amstrad CPC reverse-engineering and JavaScript port by cyxx [title from creator of Another World, both games utilizing virtual machine architecture]
Minecraft Authentication and Session Server Emulator
Need help on Reversing Packets!
How to Hack Unity Games With il2cpp Scripting
Dos Games to RE
Reverse engineering a game trainer hack from 1998 [Live Hacking]
Rift MMORPG
The art of cracks and keygens – Nicolausi
Question Regarding Interpreting DWARF Structure Information (nested structs?)
StackExchange - ReverseEngineering
Inflate zlib Data Stream from Hex File new
How can I decode this Malicious php code? new
Attempting to understand non-XZ file signatures within PBZX chunks new
Decompiling dll file to extract a function(subroutine)
How can I get the correct offset from that instruction?
Changing a label's text on window
How should I go about reversing this USB crypto dongle?
Decrypting .PNG files from Chinese mobile game
Firmware RE (Beginner)
Reversing bit rotations
Display hex values the Python way in Ghidra
Function Arguments/Name on Radare and IDA

Guided Hacking

Malware/APT

Reddit - Malware
Similar to cuckoo sandbox
Step By Step Analysis Of A New Version Of Darkside Ransomware
Created a slack channel for malware researchers
Chacal Anti-VM framework in Golang
Living Hell Malware. Download link in desc
Ukrainian Police Nab Six Tied to CLOP Ransomware
BirdMiner Malware
Potential fraud and PDFs
Russian National Convicted of Charges Relating to Kelihos Botnet
Offensive Approach to Online Sandboxes #1 - ANY.RUN
Using Spotify Playlists as Malware CDN
Investigating Cerber Ransomware with Splunk | TryHackMe
Unit42
Conti Ransomware Gang: An Overview
Matanbuchus: Malware-as-a-Service with Demonic Intentions
Prometheus Ransomware Gang: A Group of REvil?
TeamTNT Using WatchDog TTPs to Expand Its Cryptojacking Footprint
Siloscape: First Known Malware Targeting Windows Containers to Compromise Cloud Environments
TeamTNT Actively Enumerating Cloud Environments to Infiltrate Organizations
Docker Honeypot Reveals Cryptojacking as Most Common Cloud Threat
What Can You Learn From a “Wiped” Computer with Digital Forensics?
Using AI to Detect Malicious C2 Traffic
Breaking Down Ransomware Attacks
BazarCall Method: Call Centers Help Spread BazarLoader Malware
DarkSide Ransomware Gang: An Overview
FireEye Threat Research
Smoking Out a DARKSIDE Affiliate’s Supply Chain Software Compromise
Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices
Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices
Crimes of Opportunity: Increasing Frequency of Low Sophistication Operational Technology Compromises
Crimes of Opportunity: Increasing Frequency of Low Sophistication Operational Technology Compromises
Purgalicious VBA: Macro Obfuscation With VBA Purging
Shining a Light on DARKSIDE Ransomware Operations
The UNC2529 Triple Double: A Trifecta Phishing Campaign
UNC2447 SOMBRAT and FIVEHANDS Ransomware: A Sophisticated Financial Threat
Ghostwriter Update: Cyber Espionage Group UNC1151 Likely Conducts Ghostwriter Influence Activity
Ghostwriter Update: Cyber Espionage Group UNC1151 Likely Conducts Ghostwriter Influence Activity
Abusing Replication: Stealing AD FS Secrets Over the Network

Bug Bounties

HackerOne
What is Vulnerability Scanning? [And How to Do It Right]
How HackerOne and GitHub Now Work Better Together
Citrix’s Hacker-Powered Security Growth Plan: Q&A with Abhijith Chandrashekar
What is Penetration Testing? How Does It Work Step-by-Step?
60 days of insights from the DoD’s Defense Industrial Base Vulnerability Disclosure Program Pilot
Announcing Hack the Army 3.0 Results: A Conversation with Defense Digital Service, U.S. Army, and Hack the Army 3.0’s Top Hacker
Build a Resilient Security Posture with Vulnerability Intelligence and Cybersecurity Ratings
Hack Hard. Have Fun. Increase Security
How Digital Transformation Changes An Organization's Security Challenges
Microsoft Says: Russian SolarWinds Hackers Hit U.S. Government Agencies Again
Spotlight on the Server-Side
Time to Issue Your Own Cyber Executive Order
Reddit - BugBounty
What is the Best Bughunting Checklist?
PicoCTF 2021: Transformation; The basic reverse engineering concept of a file hidden message.
Hidden parameters discovery suite - x8 v2.0.0
iOS App Testing Through Burp on Corellium
Any Way to exfiltrate data via dns lookup in xxe?
Trading up a small bug for a big impact : Stealing tokens, emails, files and more in Microsoft Teams through malicious tabs
Exploiting outdated Apache Airflow instances
Mentor Monday, June 14, 2021: Ask all your bug bounty questions!
Free Udemy course from NahamSec - Intro to Bug Bounty Hunting and Web Application Hacking
Portswigger Academy, TryHackMe or eLearnSec WAPT?
discord.gg/bugbounty - Bug Bounty Server
10 Most Common Security Issues Found in Login Functionalities
Pentester Land
Portswigger

Crypto

Reddit - Crypto
Me when my boss comes around the corner new
Proof of stake validation process new
What is enough to qualify for good plausible deniability? new
#FruitsAdventure new
Cryptsetup/luks: use custom iteration for os encryption? new
I have a 1TB HDD with 850 GB of files including personal data. How can I encrypt this existing data. new
de-CENTRALIZED new
Would you wear something like this
My OTP management and assessment command line tool ("er") and dynamic library ("libenoch") for Linux written in C.
After a phd in cryptography, is it difficult to land a cryptographer job, especially one requiring a Ph.D.?
Verkle trees
I have a son I will never get to meet, how can I get my message on the chain?
StackExchange - Crypto
Difference between a key value commitment and authenticated dictionary new
Is Email Signature between Two Users Secure? new
How to complete man in the middle with public key? [closed] new
Does this paper find cryptographic weakness of SHA-256? new
pseudorandom permutation PRP for fixed and variable MAC [closed]
What if inputs of OWF and PRG is non-uniform?
Decoding WebDrive password stored in registry [closed]
Domain Keys Identified Mail (DKIM)
How to generate keys from a 56 bit using DES
Why are finite fields so important in cryptography?
Crack AES encryption via passphrase dictionary attack?
How feasible is it to guess the private key of libsodium by taking into account generation time?

Podcasts

Security Weekly
Adrian Overlord - PSW #699
PCI Security Deathmatch - PSW #698
The Wrong Lawyer - PSW #697
Jingle the Keys - PSW #696
Jerry the Hedgehog - PSW #695
Very Exciting & Very Scary - PSW #694
Dusty Corners - PSW #693
Vulcan Mind Meld - PSW #692
Curmudgeon Pills - PSW #691
The Hunt for Red October - PSW #690
Short Term Memory Issues - PSW #689
You Want More Budweiser? - PSW #688
Risky.Biz
Risky Biz Soap Box: Banks to embrace Yubikeys for customers
Risky Business #627 -- USG claws back Colonial pipeline ransom money
Risky Business #626 -- Russian ransomware beef simmers
Risky Business #625 -- Iranians wipe some machines, Israelis kaboom some
Risky Biz Feature Podcast: The politics of cybersecurity
Risky Business #624 -- Ransomware farce continues
Risky Biz Snake Oilers: Google pitches BeyondCorp for Enterprise
Risky Business #623 -- Ransomware threatens US energy security
Risky Business #622 -- GitHub weighs exploit ban
Risky Business #621 -- Ultra professional criminal attackers ascendant
Snake Oilers: Greynoise! MergeBase! Votiro!
Risky Business #620 -- Project Zero burns Western counterterrorism operation
The CyberWire
Avi Shua: Try to do things by yourself. [CEO] [Career Notes]
Primitive Bear spearphishes for Ukrainian entities. [Research Saturday]
Notes from the underworld: phishing with hardware, DarkSide impersonation, and cyber vigilantes. Data incidents, and a conviction for a crypter.
The Russo-US summit ended in frank exchanges and the prospect of further discussions on cybersecurity. Ferocious Kitten tracked. Initial access brokers. Molerats return. Ransomware arrests.
Airline resolves IT issue. Paradise ransomware source code leaked. Unauthorized access to cameras possible. TSA pipeline cyber guidance under preparation. Russo-US summit. Anonymous extradition.
Disruption of a major BEC campaign. Scope of cyberespionage expands in Pulse Secure exploitation. What the Hades? Russo-US summitry. A more secure workforce. Reality Winner…
Third-party data breach at Volkswagen. An anti-monopoly agenda with Big Tech in its crosshairs. Recovery ransom. How EA was hacked. Avaddon gives up its keys.…
Margaret Cunningham: A people scientist with a technology focus. [Behavioral science} [Career Notes]
Taking a look behind the Science of Security. [Research Saturday]
Diplomatic Backdoor targets charities, embassies, and telcos in Europe, Africa, and Southwest Asia. Fancy Lazarus and DDoS extortion. Slilpp credential market takedown. A data gap?…
Deciding to pay ransom - the cases of JBS and Colonial Pipeline. Gangland branding. Constituent management system hit. Notes on the FBI’s partial recovery of…
Chinese cyberespionage in Russia? US Executive Order rescinds TikTok, WeChat bans. Operation Trojan Shield. Privateering. NATO’s Article 5 in cyberspace. Patch Tuesday notes.
Cyber Security Interviews
#119 – Jenna Waters: This Is My Team
#118 – Nato Riley: Reinvent Reality and Reinvent the World
ISC Daily Stormcast
ISC StormCast for Monday, June 21st, 2021 new
ISC StormCast for Friday, June 18th, 2021
ISC StormCast for Thursday, June 17th, 2021
ISC StormCast for Wednesday, June 16th, 2021
ISC StormCast for Tuesday, June 15th, 2021
ISC StormCast for Monday, June 14th, 2021
ISC StormCast for Friday, June 11th, 2021
ISC StormCast for Thursday, June 10th, 2021
ISC StormCast for Wednesday, June 9th, 2021
ISC StormCast for Tuesday, June 8th, 2021
Darknet Diaries
Introducing: World's Greatest Con
94: Mariposa
93: Kik
92: The Pirate Bay
91: webjedi
90: Jenny
89: Cybereason - Molerats in the Cloud
88: Victor

Threat Intel

Privacy/VPNs

Slashdot - Rights
How Cybercriminals Almost Stole $1 Billion From Bangladesh's National Bank new
A Rural County's New Universal Basic Income Experiment - and the Case Against It new
Report: Hackers Breached More US Water Treatment Plants new
Ring Once Gave Free Cameras to 100 Los Angeles Police Officers new
Twitter Accused of 'Deliberately' Defying Indian Government's New Social Media Rules
California Defies Expectations of Doom, Promises Massive Tax Rebate
How a Murderer's Lies Were Exposed by His Cellphone and a Smartwatch
Report Finds Phone Network Encryption Was Deliberately Weakened
Hackers Are Selling Data Stolen From Audi and Volkswagen
Apple Pre-Installed Apps Would Be Banned Under Antitrust Package
Amazon is Blocking Google's FLoC
Microsoft's Smith Says Secret Subpoenas Hurt US Tech Companies
Reddit - Privacy
What are the good tools for private browsing for someone with no technical knowledge ? new
Can i use YubiKey 5 NFC with an OTG device for non-NFC smartphones? new
Fire tablet? new
Question about RCS (SMS replacement) new
How come Browsers don’t tag individual instances, or do they? new
What question seems mundane, yet quite revealing? new
Phone forwarding that completely hides real phone? Works with SMS short codes, in and out, and outbound calls? new
Best encrypted phones? new
Why mimicking a device is becoming almost impossible new
Probabilistic vs Deterministic: Which should be used for identity resolution in 2021 new
How can the FBI seize a website they already own? This dystopian meme like approach is just weird for a publicly funded organisation to undertake. new
How Safe Is Passwordless Authentication as Compared to Other Login Methods? new
Reddit - VPN
Cisco AnyConnect VPN - via work laptop new
How easy is it to know if you are using a vpn? new
VPN killswitch new
quick question new
New User new
I have a VPN setup on my router, but when I search "what is my IP" the first website shows my city lol, whats going… new
New To Vpn, Freshman In Cybersecurity Major, Do I Need A VPN? new
can use a vpn due to country restrictions? new
VPN within VPN possible? new
Why would you......
How come Facebook knows your real location after you’ve turned on VPN?
a VPN with residential IP for android
PrivacyTools.io
Hardened Firefox on Ubuntu new
Dual boot clarifications, help needed new
Can i use YubiKey 5 NFC on a non-NFC smartphone using an OTG device? new
Session Chat download Links new
Is it possible 2 get an anonymous PayPal account if you stay under 500$? new
how to bypass youtube age verification? new
What ad blockers do you recommend for iOS, iPadOS and Mac Catalina ? new
Starting using NetGuard but It won't Allow Private DNS? new
Imgur is being blocked in my country. Changing DNS resolvers doesn't seem to fix it. Any ideas? new
Website Admin Browser Information new
Is Google Photos secure and not bad for privacy ? A free alternative exist ? new
DNS help new
EFF
Changing Section 230 Won’t Make the Internet a Kinder, Gentler Place
Emails from 2016 Show Amazon Ring's Hold on the LAPD Through Camera Giveaways
22 Rights Groups Tell PayPal and Venmo to Shape Up Policies on Account Closures
Unconstitutional Florida Law Barring Platforms from Suspending Politicians Should be Blocked, EFF Tells Court
Hearing Tuesday: EFF Testifies Against SFPD for Violating Transparency Policies
The ACCESS ACT Takes a Step Towards a More Interoperable Future
1000 Californians Have Asked Their Representatives To Fix Our Broken Broadband System. Have You?
Victory! Dartmouth Ends Unfounded Cheating Investigation After Students, Rights Groups Speak Out
Big Data Profits If We Deregulate HIPAA
15 Universities Have Formed A Company That Looks A Lot Like A Patent Troll
Tracking Global Online Censorship: What EFF Is Doing Next
EFF Files Amicus Brief Defending the Right to Repair in Massachusetts

Help Wanted

Reddit - AskNetSec
Reddit - Netsec Students
Red Team Assessments | Setting up Phishing campaign and bypass MFA (LIVE demo) new
Can someone give me honest opinion on this Cyber Security Engineer degree curriculum?
Creating a security tool using advanced data structures
Just landed an internship in cybersecurity, love the experience, but feel kinda lost how to not screw up making the most out of it; being…
Good platforms and courses to pay for to improve security knowledge?
How it’s going to effect on security if incease or decease the block size of DES?
Vmware setup for pentesting
Potential for crossover?
What should I look for in a SIEM environment if I keep detecting attempts to log into non-existent accounts?
Issues with module import for python script
Unix & Linux System Administration book
API penetration testing / exploitation training/certs
Stackoverflow - Security
Multi-Tenant Data Masking/Obfuscation new
Which language is best to use with mysql between c# and PHP? [closed] new
What type of hash / encryption is this? new
Reverse a rule after remediation in openscap new
Is this way of generating a securerandom biginteger secure? new
IAM Policy for Sanbox Enviornment new
missing System.Web.Security in my project new
What is an NTP amplification attack? new
Wireless application protocol (WAP)
PHP: is the eval function safe enough when only alphanumeric characters and operators are allowed?
(Swift) JWE using RSAES-OAEP and AES GCM
Is there any offline safe method to prevent web-shell uploading in aspnet?
Stack Exchange
Requirements for privacy in terms of biosensors, video and smartphone signals new
What is the difference from DLP, EPP, and EDR? new
Block file and data transfer out of a device new
Should you set up firewall rules with a vpn? new
Share Bluetooth connection between device new
Kinsing Malware entering via compromised Dockerhub Images? new
Does disabling "Always display external images" in gmail remove the risk of spam senders getting my information and seeing that i opened the mail? new
Isolate Dual-Boot Windows OS's - Encryption Programs new
Where should vulnerabilities be fixed? Source or Sink? [closed] new
What programming language for pen tester in application security? [closed] new
How does SSH protocol encrypt the data in transit when using user and password for credentials? [closed] new
Use sfportscan preprocessor in snort 3 new

Locks/Social Engineering

Reddit - Lockpicking
Abus 45/40 soooo narrow new
Abus WLE12 picked. Weird key for a quite deceiving lock. new
It’s happening again… 🦥🇨🇦 new
In Memory of Pappa Lock - Happy Fathers Day - Abus CISA picked new
Excellent Pin Work - Challenge Lock #1 by li720il new
Episode 113: Lock Sportscast Clips #ShoutoutMonday new
Made myself a practice lock new
50mm Cisa padlock opened. new
More impressioning nonsense for your eyes. The first lock I impressioned with my prototype handle. A wilson bohannan, now with key. Impressioning is fun, do… new
My first real padlock - MasterLock Fortress (sorry for bad photo quality) new
Herculock #800 new
It's been a hot minute, but I am back. new
Reddit - Social Engineering
Speaking of Social Engineering, here's a timelapse of Facebook.com from 1998. (yup, 1998!) new
Was it me? Or social events with drinking mixed in them are a waste of time because I don't drink? new
Thought this guy did a pretty good job sounding like an authority figure new
Psychology of the Unconscious: What makes the Unconscious Mind so unique? new
This is how having false expectations can sabotage you socially new
How Edward Bernays Influenced Public Opinion
Social Engineering done right
August Vollmer: Father of Modern Police
I developed a mental health related app that may help to overcome social anxiety!
So if you want a favor done or want to keep around a person as an acquaintance for the future, what can you do?
Americans are being trained, not educated
I need anti Logorrhea tactics

Hak5

Security Blogs

Security Bloggers Network
Test new
How to Overcome Data Security Challenges in Hybrid Multi-Cloud Environment? new
Cybersecurity AI new
New Admin Portal for Akamai Enterprise Application Access new
Ten years, how time flies. new
Security vs. Compliance: What’s the difference? new
The role of endpoints in the security of your network new
Business Email Compromise Attacks | Avast new
Five Lessons from the JBS Attack for Securing the Manufacturing Supply Chain new
Krebs on Ransomware new
RedFoxtrot Targets Indian Organizations new
Survey: Nearly Half of Manufacturers Suffered a Digital Attack in the Last Year new
ThreatPost
What’s Making Your Company a Ransomware Sitting Duck
Carnival Cruise Cyber-Torpedoed by Cyberattack
Insider Versus Outsider: Navigating Top Data Loss Threats
‘Oddball’ Malware Blocks Access to Pirated Software
Faux ‘DarkSide’ Gang Takes Aim at Global Energy, Food Sectors
Clop Raid: A Big Win in the War on Ransomware?
Cisco Smart Switches Riddled with Severe Security Holes
Geek Squad Vishing Attack Bypasses Email Security to Hit 25K Mailboxes
CVS Health Records for 1.1 Billion Customers Exposed
Threat Actors Use Google Docs to Host Phishing Attacks
Hiccup in Akamai’s DDoS Mitigation Service Triggers Massive String of Outages
IKEA Fined $1.2M for Elaborate ‘Spying System’
digitalmunition
Ask the Experts: How to Create a Culture of Diversity and Inclusion – Infosecurity Magazine new
Award-Winning Information Technology Firm Opens Office in Cape Coral, Florida new
Solaris SunSSH 11.0 x86 – libpam Remote Root (3) new
Reltio CISO on Shifting Left 2.0 Fireside Chat About API Security new
iFunbox 4.2 – ‘Apple Mobile Device Service’ Unquoted Service Path new
HqO Meets Rigorous Data Privacy and Security Standards to Provide Highest Level of Service to Global CRE Market new
HqO Meets Rigorous Data Privacy and Security Standards to new
The rise of the token CISO new
Lexmark Printer Software G2 Installation Package 1.8.0.0 – ‘LM__bdsvc’ Unquoted Service Path new
Wise Care 365 5.6.7.568 – ‘WiseBootAssistant’ Unquoted Service Path new
IntoSecurity Chats Episode 4 – Wendy Nather, brought to you by Darktrace new
OpenEMR 5.0.1.7 – ‘fileName’ Path Traversal (Authenticated) new
eHacking News
Latest Campaign by Molerats Hackers Target Middle Eastern Governments new
Audi And Volkswagen's Data Breach Affected 3.3 Million Customers new
Stolen Card Validation Service Illuminated A New Corner of the Skimming Ecosystem new
Every fifth child faced with malware and adult content new
Chinese Military Unit Linked to Cyber Espionage Campaign Targeting India
The Russian government plans to create a unified video surveillance system
Cisco Smart Switches Detected with Vulnerabilities
Joker Malware Targeting Android Users Again
Phishing Campaign that Imitates Legitimate WeTransfer Applications
'Vigilante Malware' Blocks Users From Downloading Pirated Software
Carnival Cruise Line Unveiled a New Data Breach
Operations of the LockBit Ransomware Group: A Quick Look
Wired - Security
A Bug in the Android Google App Put Privacy at Risk
A New Tool Wants to Save Open Source from Supply Chain Hacks
The Cl0p Bust Shows Exactly Why Ransomware Isn’t Going Away
DuckDuckGo’s Quest to Prove Online Privacy Is Possible
Apple Says It's Time to Digitize Your ID, Ready or Not
All the New Privacy Features Coming to iOS and macOS
Google Won't Kill the URL After All
What You Should Know About Voilà, the Latest Viral Selfie App
As Ransomware Demands Boom, Insurance Keeps Paying Out
The FBI's Anom Stunt Rattles the Encryption Debate
A Mystery Malware Stole 26 Million Passwords From Windows PCs
Hackers Stole a Ton of EA Data—Including Valuable Source Code
Krebs on Security
First American Financial Pays Farcical $500K Fine
How Does One Get Hired by a Top Cybercrime Gang?
Justice Dept. Claws Back $2.3M Paid by Colonial Pipeline to Ransomware Gang
Adventures in Contacting the Russian FSB
Boss of ATM Skimming Syndicate Arrested in Mexico
How to Tell a Job Offer from an ID Theft Trap
Recycle Your Phone, Sure, But Maybe Not Your Number
Try This One Weird Trick Russian Hackers Hate
DarkSide Ransomware Gang Quits After Servers, Bitcoin Stash Seized
Microsoft Patch Tuesday, May 2021 Edition
A Closer Look at the DarkSide Ransomware Gang
Fintech Startup Offers $500 for Payroll Passwords
Naked Security
Can *YOU* blow a PC speaker using only a Linux kernel driver?
S3 Ep37: Quantum crypto, refunding Bitcoins, and Alpaca problems [Podcast]
How to hack a bicycle – Peloton Bike+ rooting bug patched
Clop ransomware suspects busted in Ukraine, money and motors seized
“Face of Anonymous” suspect deported from Mexico to face US hacking charges
ALPACA – the wacky TLS security vulnerability with a funky name
S3 Ep36: Trickbot coder busted, passwords cracked, and breaches judged [Podcast]
Chrome zero-day, hot on the heels of Microsoft’s IE zero-day. Patch now!
How could the FBI recover BTC from Colonial’s ransomware payment?
Latvian woman charged with writing malware for the Trickbot Group
How to hack into 5500 accounts… just using “credential stuffing”
S3 Ep35: Apple chip flaw, Have I Been Pwned, and Covid tracker trouble [Podcast]
Schneier on Security
The Future of Machine Learning and Cybersecurity new
Friday Squid Blogging: Video of Giant Squid Hunting Prey
Peloton Vulnerability Found and Fixed
Intentional Flaw in GPRS Encryption Algorithm GEA-1
Paul van Oorschot’s Computer Security and the Internet
VPNs and Trust
Andrew Appel on New Hampshire’s Election Audit
Upcoming Speaking Engagements
TikTok Can Now Collect Biometric Data
Friday Squid Blogging: Fossil of Squid Eating and Being Eaten
FBI/AFP-Run Encrypted Phone
Detecting Deepfake Picture Editing
Linux Security
RHEL and CentOS 7 Users Get New Kernel Security Update to Fix Intel Graphics Flaws>
Firefox 89.0.1 Released to Improve WebRender Performance, Fix Scrollbars on GTK Themes>
Secure Linux Hosting for Businesses>
What Is Threat Intelligence?>
CloudLinux Simplifies & Enhances Linux Security with its TuxCare Unified Enterprise Support Services>
LinuxSecurity, Leading Provider of Linux Security News and Information, Unveils its New Website>
Biden’s New Executive Cybersecurity Order Highlights the Power of Open-Source Security>
Dark Reading
Are Ransomware Attacks the New Pandemic? new
Attackers Find New Way to Exploit Google Docs for Phishing
Accidental Insider Leaks Prove Major Source of Risk
This Week in Database Leaks: Cognyte, CVS, Wegmans
11 Security Certifications to Seek Out This Summer
4 Habits of Highly Effective Security Operators
Data Breaches Surge in Food & Beverage, Other Industries
One in Five Manufacturing Firms Targeted by Cyberattacks
Carnival Cruise Line Reports Security Breach
Google Launches SLSA, a New Framework for Supply Chain Integrity
Cyberattacks Are Tailored to Employees ... Why Isn't Security Training?
Mission Critical: What Really Matters in a Cybersecurity Incident
Securelist
Black Kingdom ransomware
Ferocious Kitten: 6 years of covert surveillance in Iran
Andariel evolves to target South Korea with ransomware
Whitehat Security Blog
HITB News
S'pore woman loses S$10,000 in DBS credit card fraud which allegedly bypassed OTP SMS new
The efforts to make text-based AI less racist and terrible new
Pornhub sued for allegedly serving “under-age, non-consensual” videos new
Microsoft’s Linux repositories were down for 18+ hours new
Fallout of EA source code breach could be severe, cybersecurity experts say new
Facial recognition software used to verify unemployment recipients reportedly doesn’t work well new
Google enables end-to-end encryption for Android’s default SMS/RCS app
Experts “extremely worried” about Delta variant as US death toll hits 600,000
Apple’s and Google’s New AI Wizardry Promises Privacy—at a Cost
'Blankos Block Party' is an NFT Trojan Horse for the video game industry
Almost half of all ransomware victims are hit again by the same attacker
IKEA Fined $1.2M for Elaborate ‘Spying System’
The RISKS Digest
Re: How do you know this isn't a fake posting?
Book review - "Soap and Water and Common Sense"
Re: A "lethal" weaponized drone "hunted down a human target"
Pipeline Investigation Upends Idea That Bitcoin Is Untraceable
Replacement with non-allergenic joints can provide relief
New York Times posts, then removes, article announcing discovery of watermelons on Mars
Fastly CDN screws up internal configuration, takes down major sites around the world
Clueless or clickbait? You decide...
Encrypted Messaging App Run by the FBI Leads to Arrest of Over 100 Organized Crime Members
Apple driver's licenses
Apple Wallet for ID
Amazon's Sidewalk Network Is Turned On by Default. Here's How to Turn It Off
Kaspersky Blog
Transatlantic Cable podcast, episode 206 | Kaspersky official blog
How to make your passwords stronger with Kaspersky Password Manager | Kaspersky official blog
Scammers use WeakAuras to steal gold in World of Warcraft | Kaspersky official blog
Images for phishing | Kaspersky official blog
Fake Kaspersky Internet Security for Android | Kaspersky official blog
Transatlantic Cable podcast, episode 205 | Kaspersky official blog
Malware disguised as Minecraft mods on Google Play, continued | Kaspersky official blog
Zero-day exploits in PuzzleMaker attacks
How to turn off notifications in macOS | Kaspersky official blog
Cryptoscammers target ICO investors in Discord | Kaspersky official blog
IoT as a corporate security threat | Kaspersky official blog
Transatlantic Cable podcast, episode 204 | Kaspersky official blog
Adam Shostack & friends
Juneteenth: A New Federal Holiday
Fast threat modeling videos
“Not in my threat model”?
Ransomware is Not the Problem
Thoughts on the Executive Order
Van Buren
Recording Lectures
Review: Practical Security Architecture
NSF Wants Data on Your Data Needs
Using Threat Modeling to Improve Compliance (TM Thursday)
Colonial Pipeline, Darkside and Models
Pacific Northwest Appsec Conference
Graham Cluley
North Korean hackers exploit VPN bug to gain access to South Korean Atomic Energy Research Institute new
Repairmen suspected of installing ransomware on customers’ PCs. Arrests in South Korea
It’s time to get serious about enterprise password management – download this 1Password white paper now
Fake Ledger devices mailed out in attempt to steal from cryptocurrency fans
CLOP ransomware suspects charged by police in Ukraine
Smashing Security podcast #232: Zoomolympics and language matters
Ransomware is the biggest threat, says GCHQ cybersecurity chief
Meat supplier JBS probed after paying $11 million ransom to attackers
Smashing Security podcast #231: Sexy snaps and encrypted chat traps
Criminal networks smashed after using “secure” chat app secretly run by cops
Cryptocurrency hacks wanted – $100,000 prize fund offered in contest run by cybercrime forum
Backup appliance firm pays out $2.6 million ransom to attackers
Rapid7
Rapid7 Releases New Industry Cyber-Exposure Report (ICER): Deutsche Börse Prime Standard
Attack Surface Analysis Part 2: Penetration Testing
Automated remediation level 1: Lock down fundamentals
Attack Surface Analysis Part 1: Vulnerability Scanning
[Security Nation] Jeff Man on Mapping the MITRE ATT&CK Framework Against PCI
Akkadian Provisioning Manager Multiple Vulnerabilities Disclosure (Fixed)
Patch Tuesday - June 2021
Action! Start putting automation into practice.
Kill chains: Part 2→Strategic and tactical use cases
All about the boundaries: The cloud IAM lifecycle approach
Proposed security researcher protection under CFAA
Supreme Court narrows CFAA
Hacker News (YCombinator) - Security
Turn Your Old, Cracked Android Phone into a Backup Server new
Turn your old, cracked Android phone into a backup server new
The Lazarus heist: How North Korea almost pulled off a billion-dollar hack new
USC professor’s DIY online teaching hack to engage students goes viral new
USC professor’s DIY online teaching hack to engage students goes viral (2020) new
SLSA, an End-to-End Framework for Supply Chain Integrity new
Cyber-heists: The methods and menace of the new bank robbers
Show HN: Find Your Hacker News Doppelgänger
How I Found a Vulnerability to Hack iCloud Accounts and How Apple Reacted to It
Newly discovered Vigilante malware outs software pirates and blocks them
Adafruit interviews Siemens SupplyFrame, the future of Hackaday, Tindie and more
Adafruit interviews Siemens re SupplyFrame, the future of Hackaday, Tindie
Hacker Noon #Security
Deconstructing Arm Server CPU Architecture
Securing Microsoft Active Directory
How We're Building an Open-Source Google Photos Alternative with React Native
YARA Rules in a Nutshell
It's Raining Cyber Attacks: Cybersecurity in the Cloud
How To Protect Your Data Against Credit Card Breaches
Improving Open-source Software Security for Java Developers
Why Your Location Privacy Matters
Using AWS Macie To Classify Databases
Secure Enclaves and ML using MC²
Top 5 Age Verification Trends to Keep an Eye on in 2021
Anonymity and Safety: How to Protect Information from Hackers

Security in Mainstream Media

Google News Hacking
SONIC Challenges TikTok Food Hackers to Recreate Iconic Menu Items Using Competitors' Ingredients - Business Wire new
Here's why paying ransomware hackers might actually not be that bad - TechRadar new
A Pragmatic Approach Is The Key To Successful Growth Hacking - Forbes new
Probe under way into hacking attempts against Daewoo Shipbuilding: govt. - The Korea Herald new
North Korean hacking group allegedly behind breach of South Korean nuclear institute - ZDNet new
The Lazarus heist: How North Korea almost pulled off a billion-dollar hack - BBC News new
Police investigating after Fredericton Tourism Instagram page hacked - CBC.ca new
Analyst shares tips on hacking prevention – Borneo Bulletin Online - Borneo Bulletin Online new
A hacker gained access to a Bay Area drinking water facility - SFGate
Norway says China was behind major hacker attack - ScandAsia.com
This massive 130-hour training collection can turn you into a skilled ethical hacker - TNW
Hacking Adventure will appear in August - Broadway.me
Google Cyber Security
Public officials struggle to put an end to ransom payments toward cybercriminals - Fortune new
New Report Charts Path Forward for FAA's Cybersecurity Workforce - National Academies of Sciences, Engineering, and Medicine new
Biden’s executive order on cybersecurity should include behavior transparency - TechCrunch new
Digital Forensics Student on Pace to be on 1st U.S. Cyber Team - UCF new
SUNY Poly Ranked #4 in Nation for Best Bachelor’s in Cybersecurity - WUTR/WFXV - CNYhomepage.com new
Helping charities tackle cybersecurity - TechRadar new
'Able to learn hands-on' | UMaine system addresses need for cybersecurity workers - NewsCenterMaine.com WCSH-WLBZ new
New cybersecurity concentration gives App State students the skills to combat hackers | Appalachian Today - Appalachian State University new
ResultsCX to Host Educational Webinar on June 30th Discussing Cyber Security Threat Trends and How They Impact Your Organization - GlobeNewswire new
ResultsCX to Host Educational Webinar on June 30th Discussing Cyber Security Threat Trends and ... - The Bakersfield Californian new
August Equity invests in cyber security specialist Integrity360 - Private Equity Wire new
CISA, Cyber Experts Tell How to Meet Cyber EO Requirements on June 22 - MeriTalk new

Thirsty for more