Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

PacketStorm
Ukrainian Malware Operator Pleads Guilty In US Court new
Okta Classic Customers Told To Check Logs For Sign-On Bypass new
American Water Shuts Down Customer Portal Amid Cybersecurty Incident new
You Might Have The Skills That Cyber-Security Wants new
Healthcare Orgs Warned Of Trinity Ransomware Attacks new
Apple Couldn't Tell Fake iPhones From Real Ones, Lost $2.5M In Scam
Hacker Attack Disrupts Russian State Media On Putin's Birthday
MITRE Announces AI Incident Sharing Project
China's Salt Typhoon Hacked Multiple Telcos
Antimatter Could Be The Key To Solving The Universe's Biggest Mysteries
LLM Hijacking Of Cloud Infrastructure Uncovered By Researchers
Ransomware Hits Critical Infrastructure Hard, Costs Adding Up
The Register
Qualcomm urges device makers to push patches after 'targeted' exploitation new
Using iPhone Mirroring at work? You might have just overshared to your boss new
Happy birthday, Putin – you've been pwned new
Google brings better bricking to Androids, to curtail crims new
Feds reach for sliver of crypto-cash nicked by North Korea's notorious Lazarus Group new
American Water rinsed in cyberattack, turns off app
Cops love facial recognition, and withholding info on its use from the courts
Chinese cyberspies reportedly breached Verizon, AT&T, Lumen
Embattled users worn down by privacy options? Let them eat code
Ryanair faces GDPR turbulence over customer ID checks
UK's Sellafield nuke waste processing plant fined £333K for infosec blunders
About a quarter million Comcast subscribers had their data stolen from debt collector
Reddit - NetSec
How to turn a file write vulnerability in a Node.js application into RCE – even though the target's file system is read-only new
EKUwu: Not just another AD CS ESC new
Ivanti Connect Secure - Authenticated RCE via OpenSSL CRLF Injection (CVE-2024-37404) new
Built your portable pentesting lab with Pi-Tail that is controlled only by your smartphone
/r/netsec's Q4 2024 Information Security Hiring Thread
Reverse Engineering and Dismantling Kekz Headphones
Class Pollution in Ruby: A Deep Dive into Exploiting Recursive Merges
Bleeping Computer
The Hacker News
Zero-Day Alert: Three Critical Ivanti CSA Vulnerabilities Actively Exploited new
Gamers Tricked Into Downloading Lua-Based Malware via Fake Cheating Script Engines new
Cyberattack Group 'Awaken Likho' Targets Russian Government with Advanced Tools new
New Case Study: The Evil Twin Checkout Page new
The Value of AI-Powered Identity new
GoldenJackal Target Embassies and Air-Gapped Systems Using Malware Toolsets new
Pro-Ukrainian Hackers Strike Russian State TV on Putin's Birthday new
Qualcomm Urges OEMs to Patch Critical DSP and WLAN Flaws Amid Active Exploits new
Vulnerable APIs and Bot Attacks Costing Businesses Up to $186 Billion Annually
Modernization of Authentication: Webinar on MFA, Passwords, and the Shift to Passwordless
New Gorilla Botnet Launches Over 300,000 DDoS Attacks Across 100 Countries
Critical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications

Threat Wire

Exploits

LiveOverflow

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Reddit - Reverse Engineering
Reversing Tips: (Almost) Automatically renaming functions with Ghidra new
Can You Get Root With Only a Cigarette Lighter? | Blog
Working on an EdTech web platform to teach cybersecurity/reverse engineering
Broadcom Firmware Update Image Unpacker (Bash script created while learning firmware analysis.)
Low-Level Development on Retail Android Hardware - Reconnaissance and Prototyping a Bootloader
Reverse Engineering and Instrumenting React Native Apps
I created a wine wrapper to easily select the DEBUG_CHANNEL to output VERY helpful windows calls. 639 are available...
I need responses for senior engineering project
IDA PRO Got Leaked...Again, this time the full version RC-1
Anyone doing the flareon 2024 challange ?
How to download ida free on the new website without creating an account?
Exploiting AMD atdcm64a.sys arbitrary pointer dereference - Part 2
Reddit - Game Hacks
PROOFCORE.IO | UNDETECTED FORTNITE CHEAT | PLAYER ESP | LOOT ESP | ADVANCED AIMBOT | RADAR | STREAMPROOF | SPOOFER + CLEANER | TOURNAMENT SAFE
Remnant 2
AnToNiOmVp69 SCAMMER ALERT!!!!!
BEST EA FC 25 Cheats, Hacks & Expoits — Zhexcheats.com
FC 25 Cheats, Hacks & Expoits — Zhexcheats.com
AIMEX CHEATS COD MW3 & WARZONE CHEATS- HACKS / UNDETECTED AND LOW USERBASE
need carry in escape from tarkov
asphalt 8 hacking
All camo services MWIII
LF fc25 cheat dev
Hacking an online browser game
WhoYouCalling - Tool for seeing all game telemetry and much more
Reddit - REGames
StackExchange - ReverseEngineering
Modifing pyinstaller executable strings new
Help me find how the RFID copier writes the values in the tag
Register flags abbreviations in Windbg
How to debug in-memory modules in dnspy
Find out function address in the disassembled binary using MDMP
I can't access the admin page in my router, is there a way to install a new firmware? router model : ZTE ZXHM F6600P
Restoring the file structure from a cocos2d-x JS Android APK, post decryption?
how to ignore get level in priority command
What is this 2D vector image (file) format?
How to create ram and rom section IDA?
Is there anyone who can help me with Kakao Page? I am willing to pay if needed
Seeking Advice on Implementing a Secure Data Scraping Solution for Healthcare Portal

Guided Hacking

Malware/APT

Reddit - Malware
Building an EDR From Scratch Part 2 - Hooking DLL (Endpoint Detection and Response)
Hackers use generative AI for malware
Ransomware forces Texas hospital to turn away ambulances
Malware Analysis
Video: BBTok loader - ConfuserEx 2 deobfuscation with Python and dnlib
Building an EDR From Scratch Part 1 - Intro (Endpoint Detection and Response)
PDF & Office Documents Malware Analysis | TryHackMe MalDoc: Static Analysis
New Octo2 Malware Variant Impersonates NordVPN in European Attacks
DeerStealer Malware
Anybody got any good informational videos about malware that I can watch on yt
how the hell do you bypass heuristic detection for Windows Defender
ransomhub malware
Unit42
No Way to Hide: Uncovering New Campaigns from Daily Tunneling Detection
Detecting Vulnerability Scanning Traffic From Underground Tools Using Machine Learning
Unraveling Sparkling Pisces’s Tool Set: KLogEXE and FPSpy
Investigating Infrastructure and Tactics of Phishing-as-a-Service Platform Sniper Dz
Inside SnipBot: The Latest RomCom Malware Variant
Discovering Splinter: A First Look at a New Post-Exploitation Red Team Tool
Gleaming Pisces Poisoned Python Packages Campaign Delivers PondRAT Linux and MacOS Backdoors
Phishing Pages Delivered Through Refresh HTTP Response Header
Threat Assessment: Repellent Scorpius, Distributors of Cicada3301 Ransomware
Threat Assessment: North Korean Threat Groups
Chinese APT Abuses VSCode to Target Government in Asia
Spoofed GlobalProtect Used to Deliver Unique WikiLoader Variant

Crypto

Reddit - Crypto
SumatraDigest: A Secure Way of Hashing Files Using Rust, Zeroize, and Multiple Hash Functions Including a Checksum. new
Weekly cryptography community and meta thread
Proposed New OpenPGP Cipher Block Modes Could Cause an Interoperability Disaster
StackExchange - Crypto
Why Isn't My Ring-LWE Decryption Working with Noise? new
Is there any way of point square in elliptic curve cryptography? new
Signal's X3DH Protocol - what is Alice's ephemeral key? Is the previous ephemeral key used in the next message's run? Are one-time prekeys signed? new
Should RSA Accumulators Be Preferred Over Merkle Trees in zk-Rollups? new
Computation Cost of Automorphism Operation in RLWE-based homomorphic encryption new
AES key wrapping (rfc3394) block size new
Does changing my IV for every encryption make it secure? (AES CBC) new
AES CTR challenge problem [closed] new
Could the "100 Prisoners Problem" strategy help find a private key from a public key in elliptic curve cryptography?
Security of AES-128 encryption compared to wrapping
Increasing the probability of membership in an elliptic curve
using scrypt + gpg --symmetric to encrypt files, is this configuration correct?

Seytonic

Podcasts

Darknet Diaries
150: mobman 2
149: Mini-Stories: Vol 3
148: Dubsnatch
Security Weekly
AI in Cyber & Addressing Analyst Burnout - Kayla Williams - PSW #844
Exploding Pagers - Tod Beardsley - PSW #843
Recent Cyber Security Laws & Regulations - Lee Kim - PSW #842
Hacker Heroes - Mark Loveless - PSW Vault
Building AI BOMs - Helen Oakley - PSW #841
How do we patch the right things? - Josh Bressers - PSW #840
Cybersecurity Myths - Eugene Spafford - PSW #839
Downgrades and Attacking Security Things & Things Not to Miss at BH/DC - Trent Lo - PSW #838
PK Fail - John Loucaides - PSW #837
MS Patch Tuesday: Which Vulnerabilities Really Need Prioritizing. - Douglas McKee - PSW #836
3D Printing For Hackers - David Johnson - PSW #835
RFID hacking & More Vulnerability Shenanigans - Iceman - PSW #834
Risky.Biz
Snake Oilers: Sandfly Security, Permiso and Wiz
Risky Business #765 -- The Kaspersky switcheroo
Risky Business #764 -- Mossad expands into telecommunications services
Risky Business #763 – Microsoft un-patches critical bug
Snake Oilers: Authentik, Dropzone and SlashID
Risky Business #762 -- Brazil nukes X, Iranian APTs deploy ransomware
Risky Business #761 – Telegram v frogs. Fight!
Feature interview: ASIO Director General Mike Burgess on encryption and access
Risky Business #760 – Microsoft to make MFA mandatory
Wide World of Cyber: 2024 election interference, the media and Iran's hack and leak
Risky Business #759 – Why Iran's hack and leak will amount to naught
Soap Box: Making security tech more people friendly
The CyberWire
Key player unmasked in global ransomware takedown. new
Tapped and trapped.
Making security decisions around AI use. [CSO Perspectives]
Dr. Jessica Barker: Cybersecurity has a huge people element to it. [Socio-technical] [Career Notes]
Podcast bait, malware switch. [Research Saturday]
Caught red-handed.
The Global Race for the 21st Century
Election Propaganda Part 1: How does election propaganda work?
Breaking news blocked.
Escape from GPU island.
Security remediation automation. [CSO Perspectives]
Steve Blank, national security, and the dilemma of technology disruption. (Part 2 of 2) [Special Edition]
Cyber Security Interviews
ISC Daily Stormcast
ISC StormCast for Tuesday, October 8th, 2024 new
ISC StormCast for Monday, October 7th, 2024
ISC StormCast for Friday, October 4th, 2024
ISC StormCast for Thursday, October 3rd, 2024
ISC StormCast for Wednesday, October 2nd, 2024
ISC StormCast for Tuesday, October 1st, 2024
ISC StormCast for Monday, September 30th, 2024
ISC StormCast for Friday, September 27th, 2024
ISC StormCast for Thursday, September 26th, 2024
ISC StormCast for Wednesday, September 25th, 2024

Threat Intel

Privacy/VPNs

Slashdot - Rights
MoneyGram Says Hackers Stole Customers' Personal Information, Transaction Data new
Nintendo Switch Modder Faces Tech Giant in Court Without Lawyer new
Smart TVs Are Like 'a Digital Trojan Horse' in People's Homes
US Antitrust Case Against Amazon To Move Forward
EFF and ACLU Urge Court to Maintain Block on Mississippi's 'Age Verification' Law
Insecure Robot Vacuums From Chinese Company Deebot Collect Photos and Audio to Train Their AI
US Police Seldom Disclose Use of AI-Powered Facial Recognition, Investigation Finds
UK Post Office Executive Suspended Over Allegations of Destroying Software Scandal Evidence
iOS and Android Security Scare: Two Apps Found Supporting 'Pig Butchering' Scheme
License Plate Readers Are Creating a US-Wide Database of More Than Just Cars
Criminal Charges Announced Over Multi-Year Fraud Scheme in a Carbon Credits Market
America's FCC Orders T-Mobile To Deliver Better Cybersecurity
Reddit - Privacy
Link sharing best practices? new
Which tools or strategies should I use for overall better security and privacy? new
Does password structure really make a difference? new
I wanna create new emails for better privacy, but what do I do with my old one? new
Privacy Concerns on new Android 14 device. new
MoneyGram confirms hack: Social Security numbers, driver’s licenses, and other customer data have leaked new
IDI Data allows you to opt out only if "you are at risk of serious harm" new
ADT discloses second breach in 2 months, hacked via stolen credentials new
PimEyes says Meta glasses integration could have ‘irreversible consequences’ new
Any email account that doesn't get closed after inactive time? new
Trustworthy spots for my passwords? new
Ubisoft Facing Lawsuit Over Allegations Online Store & Ubisoft+ Shared Customer Info With Meta new
Reddit - VPN
If I got a VPN right now, would someone be able to see my search history via the network im on?
vpn worked on nintendo switch until it didn't?
Does connecting with a VPN server outside your own country result in roaming costs?
PrivacyTools.io
EFF
FTC Findings on Commercial Surveillance Can Lead to Better Alternatives new
The X Corp. Shutdown in Brazil: What We Can Learn new
Germany Rushes to Expand Biometric Surveillance
EFF to Fifth Circuit: Age Verification Laws Will Hurt More Than They Help
Digital Inclusion Week, Highlighting CCTV Cambridge's Digital Equity Work
Join the Movement for Public Broadband in PDX
Vote for EFF’s 'How to Fix the Internet’ podcast in the Signal Awards!
Digital ID Isn't for Everybody, and That's Okay | EFFector 36.13
How to Stop Advertisers From Tracking Your Teen Across the Internet
EFF Awards Night: Celebrating Digital Rights Founders Advancing Free Speech and Access to Information Around the World
New Email Scam Includes Pictures of Your House. Don’t Fall For It.
FTC Report Confirms: Commercial Surveillance is Out of Control

Help Wanted

Reddit - AskNetSec
Suspicious Process Listening on My System - Need Help Investigating
Accidentally clicked suspicious link - Need help checking for malware
Is peer to peer gaming a security hazard?
Block vs Redirect for Admin Portal of Webpage
People who got a degree in cybersecurity, where are you now?
Research about hacktivism
Reddit - Netsec Students
Free Certified Ethical Hacker (CEH) v13 Practice Tests at Udemy new
Any good site or resources that have a list of acronyms and the acronyms definitions?
How to Approach The Web Application Hacker's Handbook and Web pentesting??
Need help with coding for student innovation project
should i get the OSCP?
Stackoverflow - Security
How to prevent terraform developers from viewing secrets with the nonsensitive function new
DAST API scan now taking more than 90 minutes to complete new
Issue with IP Blocking and Allowing in Ocelot Configuration [closed]
Security with microservices, Spring boot
Why is my Apache require by IP not working for a subdirectory? [closed]
Rstudio can access restricted folders that even I as user can't access [closed]
Is running a docker container for a single ephemeral process with root user really a security risk in production? [closed]
How can I detect azure cloud defender recommendations early?
What are the basic and advance things to make good security to WordPress site? [closed]
Prevent/detect terraform changes to Azure infrastructure that leads to Azure Cloud Defender warnings [closed]
Avoid not private connection via PowerShell [duplicate]
What are the key advantages of using multi-cloud strategies for businesses, and how can they effectively manage the associated challenges?
Stack Exchange
putting database mongod.conf under $HOME/web-server/. instead of /etc/ new
Can a wildcard certificate act as CA for subdomains? [duplicate] new
commands to setup Ubuntu firewall rules from the terminal for T-Pot new
Creating custom threats with Microsoft Threat Modeling Tool? new
Is using pirated accounts but genuine softwares safe to be used for my data and operating system? new
Do passkeys work across browsers on the same device? [closed] new
Can you plz donate to my fundraiser? It is for my school and you don't have to give much new
What are some mistakes that you can make on an iPhone wifi page that can compromise your security [migrated] new
Was Unpriviledged User Namespaces exploited since it started to default to YES? new
Why aren’t persistence cookies locally stored in an encrypted state? new
Why experience cancels fresh answers in this field? [closed]
How does one gets better at computer security?

Locks/Social Engineering

Reddit - Lockpicking
Amazon prime days new
Assa 600 first open new
kryptonite krypolok reset new
Nice practice with the reaper set new
Best Tip to determine tension for a lock new
Feel very comfortable picking orange belt locks at this point new
Little help with identification on this one. new
First Challenge Lock finished new
I was able to get this guy picked after about 20 minutes! ! new
Anyone want a cat fishing weight? new
Picked Master Lock #5 🔓 new
Finally carved out a little corner of my office to pick at. new
Reddit - Social Engineering
When are bad times to use humor during a conversation?
Dealing with toxic coworkers
Quick Ways To Discover Someone's Strengths and Weaknesses?
Good ways to avoid drinking in early twenties
Help me Please
What's The Best Time To Talk Business?
People sharing/venting to me getting on my nerves
How to appear as "normal" while being having a business and being schizo ?
The Invisible Barriers to Our Thoughts: How Our Environment Shapes Our Minds
How to be more confident - writing by Daniel Katana
How do I make myself off putting ?
The FBI Method to make anyone spill their secrets (without them knowing)

Hak5

Security Blogs

Naked Security
Sophos Firewall: New XGS Series Desktop Firewalls and SFOS v21 new
Cybersecurity Awareness Month: A timely reminder to review your security posture
Sophos Firewall v21: Streamlined management
Political Manipulation with Massive AI Model-driven Misinformation and Microtargeting
SophosAI at Virus Bulletin ’24: Using multimodal AI as a “sixth sense” for cyber defense
Sophos announced as inaugural sponsor of The Hacking Games
The power of the platform: Sophos is uniquely recognized in the G2 Fall 2024 Reports
Sophos named a Leader in the 2024 IDC MarketScape for European MDR Services
Sophos Firewall v21: VPN and routing enhancements
Sophos named a Leader in the 2024 Gartner®️ Magic Quadrant™️ for Endpoint Protection Platforms
Sophos Firewall v21: Let’s Encrypt certificates
Standing on the Windows platform, waiting for change
Schneier on Security
China Possibly Hacking US “Lawful Access” Backdoor new
Largest Recorded DDoS Attack is 3.8 Tbps
Friday Squid Blogging: Map of All Colossal Squid Sightings
Weird Zimbra Vulnerability
California AI Safety Bill Vetoed
Hacking ChatGPT by Planting False Memories into Its Data
AI and the 2024 US Elections
Squid Fishing in Japan
NIST Recommends Some Common-Sense Password Rules
An Analysis of the EU’s Cyber Resilience Act
New Windows Malware Locks Computer in Kiosk Mode
Israel’s Pager Attacks and Supply Chain Vulnerabilities
Linux Security
Everything You Need to Know About Linux Proxy Servers new
Understanding the Critical Oath-Toolkit Vulnerability and Its Implications for Admins new
Understanding Linux Vulnerabilities: Facts, Figures, and Mitigation Strategies
Perfctl Unveiled: Risks, Detection, and Proactive Defense Measures
Protecting Apache2: Insights into a New Linux Malware Threat
Open Source Vulnerability Assessment Tools & Scanners
Understanding Vulnerability Basics: A Comprehensive Guide to Web Application Security
Ensuring Linux Server Security: A Comprehensive Guide
The Fundamentals of Vulnerability Analysis Tools in Kali Linux
Enhancing Network Security with Linux Proxy Servers
Critical CUPS Vulnerability Exposes Linux Systems to Remote Hijacking
Essential Server Security Security Strategies for Administrators
Dark Reading
Ex-Uber CISO Requests a New, 'Fair' Trial new
5 CVEs in Microsoft's October Update to Patch Immediately new
Your IT Systems Are Being Attacked. Are You Prepared? new
American Water Suffers Network Disruptions After Cyberattack new
GorillaBot Goes Ape With 300K Cyberattacks Worldwide
Salt Typhoon APT Subverts Law Enforcement Wiretapping: Report
CISO Paychecks: Worth the Growing Security Headaches?
What the White House Should Do Next for Cyber Regulation
Name That Edge Toon: And For My Next Trick ...
Single HTTP Request Can Exploit 6M WordPress Sites
MITRE Launches AI Incident Sharing Initiative
iPhone 'VoiceOver' Feature Could Read Passwords Aloud
Securelist
Awaken Likho is awake: new techniques of an APT group
Scam Information and Event Management
Finding a needle in a haystack: Machine learning at the forefront of threat hunting research
Whitehat Security Blog
HITB News
The RISKS Digest
Kaspersky Blog
Kaspersky apps are no longer available on Google Play: what to do? | Kaspersky official blog
Transatlantic Cable podcast episode 365 | Kaspersky official blog
How to snoop on what an Apple Vision Pro user is typing | Kaspersky official blog
Is technology increasing potential threats in relationships? | Kaspersky official blog
Kaspersky Expertise Centers | Kaspersky official blog
Kaspersky AI Technology Research Center | Kaspersky official blog
Transatlantic Cable podcast episode 363 | Kaspersky official blog
Transatlantic Cable podcast episode 359 | Kaspersky official blog
Kaspersky’s Safe Travel Guide | Kaspersky official blog
Phishing-as-a-Service through Telegram bot
How to protect yourself from surveillance that uses AirTag beacons or similar devices (on either Android or iOS) | Kaspersky official blog
New LianSpy spyware targets Android smartphones | Kaspersky official blog
Adam Shostack & friends
Graham Cluley
The AI Fix #19: AI spy specs, robot dogs with ladders, and is it AI or the climate? new
Your robot vacuum cleaner might be spying on you
Sellafield nuclear site hit with £332,500 fine after “significant cybersecurity shortfalls”
Cybersecurity and compliance: The dynamic duo of 2024
Tick tock.. Operation Cronos arrests more LockBit ransomware gang suspects
Smashing Security podcast #387: Breaches in your genes, and Kaspersky switcheroo raises a red flag
The AI Fix #18: ChatGPT’s false memories, and would an inner critic stop AI hallucinations?
British man used genealogy websites to fuel alleged hacking and insider trading scheme
Deepfake Ukrainian diplomat targeted US senator on Zoom call
When UK rail stations’ Wi-Fi was defaced by hackers the only casualty was the truth
CISA warns hackers targeting industrial systems with “unsophisticated methods” as claims made of Lebanon water hack
Smashing Security podcast #386: The $230 million crypto handbag heist, and misinformation on social media
Security Bloggers Network
Best practices for authentication and authorization: Yoshiyuki Tabata’s keynote at ADDO new
Transforming enterprises with generative AI: Pallavi Nargund’s keynote at ADDO new
Unveiling the trillion dollar engine of innovation: Manuel Hoffmann’s keynote at ADDO new
A decade of transformation: ADDO and the State of the Software Supply Chain new
GoldenJackal Targets Embassies, Steals Data from Air-Gapped Systems new
Revolutionizing software development: Frank Roe’s keynote at ADDO new
Unmasking the invisible threat: Ilkka Turunen’s keynote at ADDO new
USENIX NSDI ’24 – Multitenant In-Network Acceleration with SwitchVM new
BTS #39 – The Art of Firmware Scraping – Edwin Shuttleworth new
Randall Munroe’s XKCD ‘University Commas’ new
IBM X-Force Threat Report Still Indicates the Biggest Threat Is You new
USENIX NSDI ’24 – Precise Data Center Traffic Engineering with Constrained Hardware Resources new
Rapid7
Patch Tuesday - October 2024 new
Metasploit Weekly Wrap-Up 10/04/2024
The Main Components of an Attack Surface Management (ASM) Strategy
Ransomware Groups Demystified: CyberVolk Ransomware
Modernizing Your VM Program with Rapid7 Exposure Command: A Path to Effective Continuous Threat Exposure Management
What’s New in Rapid7 Products & Services: Q3 2024 in Review
Proactive Visibility Is Foundational to Strong Cybersecurity
Metasploit Weekly Wrap-Up 09/27/2024
Multiple Vulnerabilities in Common Unix Printing System (CUPS)
Proactively Securing Cloud Workloads in the CI/CD Pipeline with Rapid7 and Azure DevOps
Rapid7 Recognized in Forrester’s 2024 Attack Surface Management (ASM) Wave Report
Three Recommendations for Creating a Risk-Based Detection and Response Program
ThreatPost
Hacker News (YCombinator) - Security
Boeing at Risk of Junk Rating with S&P Amid Strike new
How to delete your 23andMe data amid the company's turmoil new
How to Delete Your 23andMe Data Amid the Company's Turmoil new
European govt air-gapped systems breached using custom malware new
PSA: Don't use iPhone Mirroring on your work computer new
iPhone Mirroring at work may expose employees’ personal information new
Want Growth? Kill Small Businesses new
The missing middle: firms in developing countries new
Video Surveillance with YOLO+llava new
MoneyGram says hacker stole customers' personal information and transaction data new
How private intelligence companies became the new spymasters
Do not use secrets in environment variables
digitalmunition
Hacker Noon #Security
XSGD, Singapore’s First Dollar-Backed Stablecoin, Launches On Bitstamp To Power Global Cross-Border new
The (Digital) Identity Paradox: Convenience or Privacy? new
The TechBeat: Lumoz's Quidditch Testnet Ends Successfully—Mainnet Launch Expected in Q4! (10/8/2024) new
Future Directions for Proof of Solvency in Digital Assets
Ever Wonder How Crypto Platforms Show They're Solvent?
How UTXOs Keep Your Coins Safe and Sound
Navigating Ethereum's World State: The Role of Merkle Patricia Tries in Proof of Reserve
Governance in decentralized systems
Miracle Cash And More Launches Novel Liquidity Pool On The Popular Avalanche Blockchain
What Could the Future of Weather Forecasting Look Like?
20 Crazy Stories On Cyber Reputation
When Coding Determines the Survival of The City
Wired - Security
What Google's U-Turn on Third-Party Cookies Means for Chrome Privacy new
Stealthy Malware Has Infected Thousands of Linux Systems for Years
The FBI Still Hasn’t Cracked NYC Mayor Eric Adams’ Phone
This Video Game Controller Has Become the US Military’s Weapon of Choice
License Plate Readers Are Creating a US-Wide Database of More Than Just Cars
ICE Signs $2 Million Contract With Spyware Maker Paragon Solutions
Notorious Evil Corp Hackers Targeted NATO Allies for Russian Intelligence
The Pig Butchering Invasion Has Begun
The US Could Finally Ban Inane Forced Password Changes
Tesla’s Cybertruck Goes, Inevitably, to War
Amid Air Strikes and Rockets, an SMS From the Enemy
Millions of Vehicles Could Be Hacked and Tracked Thanks to a Simple Website Bug
Control C
Krebs on Security
Patch Tuesday, October 2024 Edition new
A Single Cloud Compromise Can Feed an Army of AI Sex Bots
Crooked Cops, Stolen Laptops & the Ghost of UGNazi
U.S. Indicts 2 Top Russian Hackers, Sanctions Cryptex
This Windows PowerShell Phish Has Scary Potential
Scam ‘Funeral Streaming’ Groups Thrive on Facebook
The Dark Nexus Between Harm Groups and ‘The Com’
Bug Left Some Windows PCs Dangerously Unpatched
Sextortion Scams Now Include Photos of Your Home
Owners of 1-Time Passcode Theft Service Plead Guilty
When Get-Out-The-Vote Efforts Look Like Phishing
New 0-Day Attacks Linked to China’s ‘Volt Typhoon’
Elttam
Abusing Amazon VPC CNI plugin for Kubernetes
PwnAssistant - Controlling /home’s via a Home Assistant RCE

Security in Mainstream Media

Google News Hacking
The Chinese Hackers Spying on U.S. Internet Traffic - Reply All | Gimlet new
Why Tho? Is my friend really hawking Bitcoin on Facebook, or has she been hacked? - OregonLive new
For a second day, Ukrainian hackers hit Russian institutions - The Washington Post new
Scarlett Johansson tops McAfee 2024 Celebrity Hacker Hotlist - BetaNews new
P-Hacking: The Perils of Presidential Election Models - Walter Bradley Center for Natural and Artificial Intelligence new
China-backed hackers broke into US telecom wiretap portals that law enforcement uses - AppleInsider new
Credit monitoring and supply chain risk company hacked - CyberScoop new
Verizon, AT&T, Lumen among telcos hacked by Chinese group: Reports - RCR Wireless News new
Catastrophic hack of AT&T and Verizon is proof Apple is right about iPhone encryption - BGR new
Hacker attack disrupts Russian state media on Putin's birthday - Reuters new
U.S. investigating whether Chinese hackers breached its telecoms - The Japan Times new
DeFi Is Catnip For Hackers — It’s Time The Industry Strikes Back - Forbes new
Google Cyber Security
Patch Tuesday round-up, October 2024 - Cyber Daily new
Government opens new competition to find next generation of cybersecurity talent - The Independent new
Search begins for next generation of cyber security talent - GOV.UK new
Former Uber Security Chief Appeals Conviction in ‘Bug-Bounty’ Case - The Wall Street Journal new
‘Infrastructure has been targeted by cyber security thieves for a long time': Expert weighs in amid American Water cyberattack - 69News WFMZ-TV new
October 2024 Patch Tuesday: 5 Zero-Days, 3 Critical Addressed - Spiceworks News and Insights new
Tech Valley event highlights vulnerability of businesses to cyberattacks - WRGB new
BBB: Avoid cyber attacks with these business tips - Tyler Morning Telegraph new
SecurityScorecard expands from security ratings to supply chain detection and response - SecurityInfoWatch new
The Internet of Things: Friend or Foe? - The National Interest Online new
NHS: Most Patient Services Online Following Synnovis Attack - GovInfoSecurity.com new
MI5 Chief Warns of Cyberthreats to the UK - BankInfoSecurity.com new

Thirsty for more

Hackaday
A Flip Digit Clock, Binary Style new
Mechanical Tool Changing 3D Printing Prototype new
3D Printering: Listen to Klipper new
Running Game Boy Games On STM32 MCUs is Peanuts new
Recycling Tough Plastics Into Precursors With Some Smart Catalyst Chemistry new
Printed Rack Holds Pair of LattePandas In Style new
Barbie’s Video Has Never Looked So Good new
GPS Tracking in the Trackless Land new
Using Donor Immune Cells to Mass-Produce CAR-T Autoimmune Therapies new
The Piezoelectric Glitching Attack
The Turing Machine Made Real, In Lego
JawnCon 0x1 Kicks off Friday, Tickets Almost Gone
Ars Technica
The New Glenn rocket’s second stage set to roll to the launch pad on Monday
The New Glenn rocket’s second stage set to roll to the launch pad on Monday
Audi replaces its bestseller—here’s the next Q5 SUV
Audi replaces its bestseller—here’s the next Q5 SUV
The Starliner spacecraft has started to emit strange noises
The Starliner spacecraft has started to emit strange noises
Agatha All Along’s latest teaser hints at one character’s true identity
Agatha All Along’s latest teaser hints at one character’s true identity
City of Columbus sues man after he discloses severity of ransomware attack
City of Columbus sues man after he discloses severity of ransomware attack
Harmful “nudify” websites used Google, Apple, and Discord sign-on systems
Harmful “nudify” websites used Google, Apple, and Discord sign-on systems
Wired
10 Best Prime Day Kindle Deals and Accessories (2024) new
Best Prime Day Apple Deals on MacBooks, iPads, More (2024) new
293 Best Prime Day Deals, Vetted By Our Amazon Experts (Oct 2024) new
Best Prime Day Mattress Deals Plus Epic Bedding Sales (2024) new
We’re Tracking the Best October Prime Day 2024 Deals Live new
16 Best Prime Day Laptop Deals (2024) new
‘Metaphor: ReFantazio’ Is the Future of RPGs new
Right-Wing Influencers Claim ‘They’ Defeated Physics, Geoengineered Hurricane Milton new
Prime Day Toy Deals On Stuff Our Kids Love (2024) new
20 Best Amazon Prime Day Hair Tool Deals to Shop Right Now (2024) new
The 40 Best Shows on Hulu Right Now (October 2024) new
Six-Word Sci-Fi: Stories Written by You new