Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

The Hacker News
Agent Racoon Backdoor Targets Organizations in Middle East, Africa, and U.S. new
Russian Hacker Vladimir Dunaev Convicted for Creating TrickBot Malware new
New FjordPhantom Android Malware Targets Banking Apps in Southeast Asia
Qakbot Takedown Aftermath: Mitigations and Protecting Against Future Threats
Chinese Hackers Using SugarGh0st RAT to Target South Korea and Uzbekistan
Discover How Gcore Thwarted Powerful 1.1Tbps and 1.6Tbps DDoS Attacks
WhatsApp's New Secret Code Feature Lets Users Protect Private Chats with Password
U.S. Treasury Sanctions North Korean Kimsuky Hackers and 8 Foreign-Based Agents
Zyxel Releases Patches to Fix 15 Flaws in NAS, Firewall, and AP Devices
Zero-Day Alert: Apple Rolls Out iOS, macOS, and Safari Patches for 2 Actively Exploited Flaws
Google Unveils RETVec - Gmail's New Defense Against Spam and Malicious Emails
North Korea's Lazarus Group Rakes in $3 Billion from Cryptocurrency Hacks
PacketStorm
Qlik Sense Vulnerabilities Exploited In Ransomware Attacks
Black Basta's Ransom Haul Tops $100M In Less Than 2 Years
Zoom Flaw Enabled Hijacking Of Accounts With Access To Meetings, Team Chat
Apple Patches WebKit Flaws Exploited On Older iPhones
Google 0-Day Browser Bug Under Attack, Patch Available
Critical ownCloud Bug Actively Exploited After Disclosure
US Lawmakers Have Chinese LiDAR On Their Threat Detection Radar
Dollar Tree Impacted By Data Breach Affecting 2 Million
2 Municipal Water Facilities Report Falling To Hackers In Separate Breaches
Film To Tell Story Of Gary McKinnon's Fight Against US Extradition
Japan's Space Agency Suffers Cyber Attack, Points Finger At Active Directory
Google Cloud Environment Flaw Lets Attackers Access Critical Data, Systems
The Register
Scores of US credit unions offline after ransomware infects backend cloud outfit
Apple slaps patch on WebKit holes in iPhones and Macs amid fears of active attacks
UEFI flaws allow bootkits to pwn potentially hundreds of devices using images
US readies prison cell for another Russian Trickbot developer
Regulator says stranger entered hospital, treated a patient, took a document ... then vanished
Interpol makes first border arrest using Biometric Hub to ID suspect
Today's 'China is misbehaving online' allegations come from Google, Meta
Uh-oh, update Google Chrome – exploit already out there for one of these 6 security holes
Admin of $19M marketplace that sold social security numbers gets 8 years in jail
Black Basta ransomware operation nets over $100M from victims in less than two years
Locking down Industrial Control Systems
Weak session keys let snoops take a byte out of your Bluetooth traffic
Reddit - NetSec
I made a tool to analyze incoming HTTP/DNS requests. Let me know how it is
Fuzzer-V: New project for Fuzzing Hyper-V VSP's using Intel Processor Trace (IPT) for code coverage guided fuzzing, built upon WinAFL, winipt, HAFL1, and Microsoft’s IPT.sys.
Information Rights Management VS Traditional Digital Rights Management
Unmasking the Dark Art of Vectored Exception Handling: Bypassing XDR and EDR in the Evolving CyberThreat Landscape - Donato Onofri
Big update to my Semgrep C/C++ ruleset
Have I Been Squatted? — Check if your domain has been typosquatted
EvilSlackbot: A Slack Attack Framework
Open Source Security Assessment Collaboration Platform
Bleeping Computer

Threat Wire

Exploits

Exploit-DB Shellcode
Exploit-DB Papers
Exploit-DB Remote
[remote] Tinycontrol LAN Controller v3 (LK3) 1.58a - Remote Credentials Extraction
[remote] Tinycontrol LAN Controller v3 (LK3) 1.58a - Remote Admin Password Change
[remote] Atcom 2.7.x.x - Authenticated Command Injection
[remote] Ruijie Reyee Mesh Router - MITM Remote Code Execution (RCE)
[remote] GOM Player 2.3.90.5360 - Remote Code Execution (RCE)
[remote] Techview LA-5570 Wireless Gateway Home Automation Controller - Multiple Vulnerabilities
Packet Storm Exploits
Packet Storm New Exploits For November, 2023
Kopage Website Builder 4.4.15 Cross Site Scripting
WBCE CMS 1.6.1 Shell Upload
CE Phoenix 1.0.8.20 Remote Code Execution
Online Student Clearance System 1.0 Shell Upload
WordPress Royal Elementor Addons And Templates Remote Shell Upload
Fortra Digital Guardian Agent Uninstaller Cross Site Scripting / UninstallKey Cached
etcd-browser 87ae63d75260 Directory Traversal
Loytec L-INX Automation Servers Information Disclosure / Cleartext Secrets
Loytec LINX Configurator 7.4.10 Insecure Transit / Cleartext Secrets
WebRTC PacketRouter Dangling Entry
m-privacy TightGate-Pro Code Execution / Insecure Permissions
Exploit-DB Webapps
Exploit-DB Local and Privilege Escalation
[local] Microsoft Windows 11 - 'apds.dll' DLL hijacking (Forced)
[local] GOM Player 2.3.90.5360 - Buffer Overflow (PoC)
Exploit-DB DoS
[dos] OpenPLC WebServer 3 - Denial of Service
[dos] Tinycontrol LAN Controller v3 (LK3) 1.58a - Remote Denial Of Service
[dos] SyncBreeze 15.2.24 - 'login' Denial of Service

LiveOverflow

Bug Bounties

HackerOne Hacktivity
HackerOne Blog
Mercado Libre’s Journey to a Public Bug Bounty Program
Inaugural Glass Firewall Conference Invites Women to Learn About Cybersecurity
How VDP Aligns With Zero Trust
Fortifying Assets for SEC Compliance with HackerOne
Meet the Talent Strategy Team
Vulnerability Prioritization: Severity Does Not Mean Priority
2024 Budget Planning: Preparing For U.S. Mandates to Implement Vulnerability Disclosure Policies (VDPs)
What Is the Difference Between Pentesting and Bug Bounty?
An Emerging Playbook for AI Red Teaming With HackerOne
Reddit - BugBounty
Exploring the Potential of JavaScript Files in Bug Bounty Hunting
Help with a bounty
Help with exploiting s3 file upload
Found host header don't know how to escalate
Pentest Muse: an Open Source AI-Powered Tool for Ethical Hacking
Step to disclose a bug
Offering Chromebook with pre-loaded persistent malware to bug bounty researcher
You can richer selling Bug Bounty content than actually doing the bug hunting. E.g. BBRE, Nahamsec course, Jhaddix courses
Starting my appsec/bounty hunting journey, general maybe faqs?
Any good sources for Walk-through vids?
Bug Bounty Hunting
If I have a bug to exploit which can cause millions of losses of losses to company like Google,YouTube or Apple.How much bounty will they…
Pentester Land
Portswigger
Introducing Bambdas
DOM Invader and the case of direct eval vs indirect eval
New learning paths, from the Web Security Academy
Supporting Sprocket Security's offensive security testing with BChecks, from Burp Suite

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Reddit - Reverse Engineering
Crack Master R0-x64 v1.6.00 - procmem cmd added (User mode memory edit/dump) - ‘kpcr p’ now displays EPROCESS address too. - ‘w’ option added for…
Deobfuscating Geetest CAPTCHA: A Practical Guide to Control Flow Flattening
GitHub - echo-devim/memeditor: Small Windows C Debugger to patch processes' executable code
Decompilation Debugging - Pretending All Binaries Come With Source Code
Why does the Windows Portable Executable (PE) format have separate tables for import names and import addresses?, part 1 - The Old New Thing
Is Zelix Good For Java In 2023?
Modding RollerCoaster Tycoon into a Peele Horror Film (Reverse Engineering Tutorial)
Is there a website that i can hire people to reverse engineer a exe and crack it?
Malware Unpacking With Hardware Breakpoints - Cobalt Strike Shellcode Loader
How to recharge arcade cards
PG-complaint SYSCALL Hook for Windows 10 & 11
Portable executable explained throught rust code
Reddit - Game Hacks
Absolute The Goat of WarThunder Cheats🔥 AimBot 🔥 Esp 🔥 and much more🤑 Learn more at: ownagesoftware.com new
ABS EFT the prime jewel of cheating In Tarkov! ESP, AIM BOT, and much much more!!🤩🤩 Learn more at: ownagesoftware.com new
FREE FORTNITE CHEAT AND SPOOFER | WORKING 2023 | ONLY LIMITED new
2 Software Options for Sea of Thieves ! new
Join Discord Over 200 members and counting!! new
3 Different Software to choose from for Rainbow Six Siege! new
BEST Chapter 5 Fortntie Cheat
Im looking for aim hack in fortnite, paid only ,which ones are the best??
Absolute The Goat of WarThunder Cheats🔥 AimBot 🔥 Esp 🔥 and much more🤑 Learn more at: ownagesoftware.com
ABS EFT the prime jewel of cheating In Tarkov! ESP, AIM BOT, and much much more!!🤩🤩 Learn more at: ownagesoftware.com
Rust Anti Recoil Script (Undetected since release 2 years ago) 30 USD lifetime
ABS EFT the top dog of cheating In Tarkov! ESP, AIM BOT, and much more!!🤩🤩 3 years undetected! Learn more at: https://www.ownagesoftware.com/
Reddit - REGames
Creating a Server for a dead game new
How Do I Start? (Rumbleverse UE4) new
Memory scanners other than Cheat Engine? new
extracting animations from old game (.dat file)
IL2CPP games logic extraction
Best strategy to avoid being banned?
How do I extract Payday 3's audio files and 3D models?
Modding a game questions (Sleeping Dogs)
PS4 emulation
Tonka Construction 2 rip sound effects help please
Attempting to extract media files from mobile gacha game but all assets are in a weird .aab format.
In Metal Gear Solid 1 during the Revolver Ocelot boss fight, how does the game figure out the trick shots?
StackExchange - ReverseEngineering
What does this string mean? new
Hexrays - Enhance decompilation of "pre-multiplied" array indices?
Extracting pwsafe.key from memory dump
Is game hacking all about memory manipulation?
Microchip ATSAME70Q21-CN unable to connect with JTAG or SWD
How to make a plugin python function available to IDA's console?
Extracting Audio from a Game
How does Play integrity api assures Genuine app binary
Analyse a statically linked binary and extract syscall from it using angr
decode lua files cocos2dx and protected from Frida and IDA64 for hooking
Frida: how to hook a synthetic class
Scylla error on FThunk import (manually unpacking UPX)

Guided Hacking

Malware/APT

Crypto

Reddit - Crypto
Using hash generated from other hashes as key?
cr.yp.to: 2023.11.25: Another way to botch the security analysis of Kyber-512
StackExchange - Crypto
Prove that if $e.d equiv 1 text{ mod } pq$ then it's impossible to have $e.d equiv 1 text{ mod } (p-1)(q-1)$ new
Achieving sub-block non-malleability new
which DH protocol is safer in communication with given condition? new
finding corresponding ASCII values new
Integrating Elligator mapping with libsodium Curve25519 implementation new
Short-input (<= 128 bit), short-output (<= 10 bit) MAC new
Dealing with MITM attack in e-voting systems new
What scheme is the best for combining two shared secrets? new
Cannot protect GPG key using TPM2 on Ubuntu 22.04 new
Example of an identification protocol that 1. With a private key 2. Resistant to attack with a fake ATM 3. Not resistant to eavesdropping attacks? new
Which cipher is used in this UDP stream? new
What happens if we know that for an RSA key pair, the equation $d^e equiv c pmod{n}$ holds? new

Seytonic

Podcasts

ISC Daily Stormcast
ISC StormCast for Friday, December 1st, 2023
ISC StormCast for Thursday, November 30th, 2023
ISC StormCast for Wednesday, November 29th, 2023
ISC StormCast for Tuesday, November 28th, 2023
ISC StormCast for Monday, November 27th, 2023
Darknet Diaries
139: D3f4ult
138: The Mimics of Punjab
137: Predator
Security Weekly
AI & LLMs - Josh More, Matthew Carpenter - PSW #808
Interview with Brian Snow - PSW Vault
3 Layers of App Security to Keep Hackers Out, Let Customers In - Aviad Mizrachi - PSW #807
Testing AI Before It Comes To Get You - Austin Carson - PSW #806
Trustworthy AI for National Security - Kathleen Fisher - PSW #805
VSCode Vulnerabilities - Thomas Chauchefoin, Paul Gerste - PSW #804
Meet the Cyber Mercenary Who Can Overthrow a Government - Chris Rock - PSW #803
Getting Started With Reverse Engineering Hardware - PSW #802
Malware Trends - Anuj Soni - PSW #801
The Right Skills For The Job - Kayla Williams - PSW #800
AI Attacks and LLM Security Matters - Nathan Hamiel - PSW #799
Ransomware Infection Vectors - Ryan Chapman - PSW #798
Risky.Biz
Risky Business #728 -- The Citrixbleed ransomware disaster
Risky Biz Soap Box: Why o365 and Google Workspace are a security liability
Risky Business #727 -- Mr Gray goes to Washington
Risky Biz Soap Box: Stairwell will offer platform to researchers
Risky Business #726 -- Okta owned while Cisco takes a massive L
Risky Biz Soap Box: Preventing MFA reset attacks
Risky Business #725 -- Microsoft knifes VBScript, passkeys the new default for Google accounts
Risky Business #724 -- Exploitation moves away from Microsoft, Google and Apple products
Risky Business #723 -- MGM and Caesars: Western youths are working with ransomware gangs
Snake Oilers: Sublime Security, Vulncheck and Devicie
Risky Business #722 -- Microsoft embraces Zero Trust... Authentication?
Risky Business #721 -- Why Storm-0558's Microsoft hack should have failed
The CyberWire
Exploits and vulnerabilities. [Research Saturday] new
Wyden blocks the senate vote.
Widespread exploitation of severe vulnerability in ownCloud.
Major crackdown on international cybersecurity.
Hospitals on the hotplate after ransomware attacks.
Hacktivists assemble to attack Pennsylvania water utility.
Chris Hare: Find just three people. [Development] [Career Notes]
Encore: Another infection with new malware. [Research Saturday]
Solution Spotlight: Simone Petrella is speaking with Tatyana Bolton from Google about ways to tackle the cyber talent gap. [Interview Selects]
Cops in the catfish game. [Hacking Humans Goes to the Movies]
On the eve of the holiday season, officials in many countries issue warnings and take action against cybercrime.
Threat actors with mixed motives: from the political to the financial.
Cyber Security Interviews
#127 – Douglas Brush (Part 5): Analysis Paralysis

Threat Intel

Privacy/VPNs

EFF
Victory! Montana’s Unprecedented TikTok Ban is Unconstitutional
U.S. Senator: What Do Our Cars Know? And Who Do They Share that Information With?
Latest Draft of UN Cybercrime Treaty Is A Big Step Backward
The Intelligence Committees’ Proposals for a 702 Reauthorization Bill are Beyond Bad
The Government Shouldn’t Prosecute People With Unreliable “Black Box” Technology
Speaking Freely: Ron Deibert
Let Them Know It’s Time to Power Up
Digital Rights Updates with EFFector 35.15
How We Fundraise
Alaa Abd El-Fattah: Letter to the United Nations Working Group on Arbitrary Detention
The Eyes on the Board Act Is Yet Another Misguided Attempt to Limit Social Media for Teens
Protecting Kids on Social Media Act: Amended and Still Problematic
Slashdot - Rights
US Announces AI Hackathons to Strengthen Critical Mineral Supply Chains new
Amazon's Q Has 'Severe Hallucinations' and Leaks Confidential Data in Public Preview, Employees Warn new
Brazilian City Enacts an Ordinance That Was Secretly Written By ChatGPT
US Judge Blocks Montana From Banning TikTok Use In State
Google Researchers' Attack Prompts ChatGPT To Reveal Its Training Data
Dollar Tree Hit By Third-Party Data Breach Impacting 2 Million People
Canadian Government Reaches Deal With Google On Online News Act
Tata Consultancy Services Ordered To Cough Up $210 Million In Code Theft Trial
Meta Designed Platforms To Get Children Addicted, Court Documents Allege
Several Piracy-Related Arrests Spark Fears of High-Level Crackdown In Nordic Region
Plex Users Fear New Feature Will Leak Porn Habits To Their Friends and Family
Startup Suggests Fighting Porch Piracy with AI-Enhanced Shipment Insurance
Reddit - Privacy
Intrigue! new
I have created multiple Linkedin accounts, but they some how keep finding and taking them down new
Other than Credit Bureaus, LexisNexis, and WorkNumber, what other companies can I request reports about my information from? new
Question about qfind.net new
Is there a reasonable equivalent? new
Employee Background Check w Lullar new
Wi-Fi calling question new
Ditching BigTech new
Chrome Windows new
what is the best way to prevent fingerprints in Firefox? new
ChatGPT concerns new
RFID in shipping stickers (UPS/Amazon) range?
Reddit - VPN
I have created multiple Linkedin accounts, but they somehow keep finding and removing them new
VPN and streaming and net share.... new
An iphone VPN to change geolocation so my parents can’t track me? new
Using VPN to create a "proxy" server for multiple consoles in game to get in the same lobby new
Am I the only one struggling with Google's captchas?
Spotify wrapped
GL.iNet good enough?
Linux help:
pivpn and wireguard randomly stopped working on my phone
wireshark shows traffic unencrypted, what am i missing?
Double VPN to mask location
Router lags 1-3s
PrivacyTools.io

Help Wanted

Reddit - AskNetSec
Flipper Zero Users, What's Your Take? new
App for iOS and Android that monitors text messages
One of my accounts was hacked today, transitioning to a PW manager as I write this. Looking for advice.
How cookies are working with websites like *.github.io work?
Best practice for a non-domain joined MS CA
Learning or certification for becoming a Network Security Consultant
Available Books
Router DNS vs Device DNS.
What is HASH FILE CHECK? and is it safe to download from HTTP?
iOS App Reverse Engineering
Lsass access lsass
Is this a spam/malicious email or a legitimate amazon email address
Reddit - Netsec Students
Roadmap to cybersecurity for a truck driver who studied till high school?
Comptia
The SecOps Group's Certified Network Pentester (CNPen) Certification Exam
Stackoverflow - Security
Struggling with Fiddler and Security Challenges: Seeking Help in Java Replication new
Assign a username to one of many PostgesSQL databases new
Fix Insecure DOR vulnerability in PHP code new
Beef can only hook a page with script but when I close the tab browser goes to offline new
How to protect a web commerce of a game? new
TSL/SSL error when using the kvk service endpoint
How can I verify if my implementation about SSL Pining using Retrofit is all right?
Locking down a docker container
How to Improve a Password Validation Function in PHP: Ensuring Strong Security and Proper Function Typing
How to store jwt bearer token in react application according to my story
What should I use `WWW-Authenticate: Negotiate <value>` for, when authenticating using Kerberos?
How to create a docker container with openvswitch installed inside on Raspberry pi4? [closed]
Stack Exchange
Server Side Request Forgery Vulnerability Question new
How to mitigate a illegal stingray2 use [closed] new
which DH protocol is safer in communication with given condition? [migrated] new
What can be practical vulnerabilities in an email setup? [closed] new
Can Cellebrite be used to access any phone by the government? What is the point of encryption if they can get into any phone?
Can an email trace be maliciously removed by an admin on a default Outlook setup?
Which server & client options are needed to create an OpenVPN "Remote Access" i.e. "Client-to-Site" VPN, without routing all traffic through the VPN?
Secure boot disabled for Potential BIOS compromise on Tails OS machine
Is it safe to keep a JDBC SQLite URI in source code?
should I redirect user to login screen after validate email and set password?
Potential XSS bug in email form?
Documentation on mobile-webview.gmail.com link masking?

Locks/Social Engineering

Reddit - Lockpicking
Pins Not Completely Resetting? new
Abus 55/40 new
Finally beat the 570 new
Quick pick at the holiday festival new
Father/Daughter experience new
Day 1. Also picked an American 1100 but I'm pretty sure that was luck. Is this bitting "easy"? new
Abloy classic camlock Picking and Gutting new
My CI package came in this morning and I've been happily picking locks since. new
Pick Sizes new
What is this? new
CI Practice Lock new
Wilka 1400 picked new
Reddit - Social Engineering
The Complete Guide to Phishing Attacks | TryHackMe
Cold calling for employment opportunities
Is it true that partner will respect you less for having bad exes
Talking to neighbour about traumatic event
Why do people freeze after making them a question
How should apply my socialengineering learning in to my life
Someone recommended I take the Dale Carnegie course. Has anyone here done it? How effective is it for SE? I may actually have enough money…
I have a party tomorrow night and I’m gonna try to get a bunch of people’s contact information. What are some good social engineering assignments…
SE my Office Staff to be more cohesive
Have anyone initiate a conversation with someone you find attractive by "thinking they're a person you know"?
Banks with multiple virtual cards
What IS social engineering?

Hak5

Security Blogs

Krebs on Security
Okta: Breach Affected All Customer Support Users
ID Theft Service Resold Access to USInfoSearch Data
Alleged Extortioner of Psychotherapy Patients Faces Trial
Microsoft Patch Tuesday, November 2023 Edition
It’s Still Easy for Anyone to Become You at Experian
Who’s Behind the SWAT USA Reshipping Service?
Russian Reshipping Service ‘SWAT USA Drop’ Exposed
.US Harbors Prolific Malicious Link Shortening Service
NJ Man Hired Online to Firebomb, Shoot at Homes Gets 13 Years in Prison
Hackers Stole Access Tokens from Okta’s Support Unit
The Fake Browser Update Scam Gets a Makeover
Tech CEO Sentenced to 5 Years in IP Address Scheme
Elttam
Abusing Amazon VPC CNI plugin for Kubernetes
PwnAssistant - Controlling /home’s via a Home Assistant RCE
Naked Security
Cybercriminals can’t agree on GPTs
The Dark Side of AI: Large-Scale Scam Campaigns Made Possible by Generative AI
Introducing Sophos DNS Protection
Top 10 tips to protect your privacy and safety during the online shopping season and beyond
Sophos XDR: Extending Sophos Endpoint protection with threat detection and response
Sophos XDR: Major solution enhancements now available
A November rain of patches from Microsoft
The Song Remains the Same: The 2023 Active Adversary Report for Security Practitioners
New Active Adversary Defense capabilities with Sophos Firewall, Sophos XDR, and Sophos NDR
Same threats, different ransomware
Memory scanning leaves attackers nowhere to hide
Identifying Group Policy attacks
Schneier on Security
Friday Squid Blogging: Strawberry Squid in the Galápagos
Extracting GPT’s Training Data
Breaking Laptop Fingerprint Sensors
Digital Car Keys Are Coming
Secret White House Warrantless Surveillance Program
Friday Squid Blogging: Squid Nebula
Chocolate Swiss Army Knife
LitterDrifter USB Worm
Apple to Add Manual Authentication to iMessage
Email Security Flaw Found in the Wild
Using Generative AI for Surveillance
Friday Squid Blogging: Unpatched Vulnerabilities in the Squid Caching Proxy
Linux Security
Dark Reading
Flow Security Launches GenAI DLP
North Korea APT Slapped With Cyber Sanctions After Satellite Launch
Critical 'LogoFAIL' Bugs Offer Secure Boot Bypass for Millions of PCs
Saudi Companies Outsource Cybersecurity Amid 'Serious' Incidents
The US Needs to Follow Germany's Attack-Detection Mandate
Simple Hacking Technique Can Extract ChatGPT Training Data
A New, Spookier Gh0st RAT Malware Haunts Global Cyber Targets
Deluge of Nearly 300 Fake Apps Floods Iranian Banking Sector
8 Tips on Leveraging AI Tools Without Compromising Security
10 Holiday Gifts For Stressed-Out Security Pros
Wiz-Securonix Partnership Promises Unified Threat Detection
Google Patches Another Chrome Zero-Day as Browser Attacks Mount
Securelist
IT threat evolution in Q3 2023. Mobile statistics
IT threat evolution Q3 2023
IT threat evolution in Q3 2023. Non-mobile statistics
Whitehat Security Blog
HITB News
Nvidia’s GeForce GPUs are selling well, but its AI GPU sales are ridiculous
Thousands of routers and cameras vulnerable to new 0-day attacks by hostile botnet
Sam Altman’s Second Coming Sparks New Fears of the AI Apocalypse
A Spy Agency Leaked People's Data Online—Then the Data Was Stolen
The reincarnation of totaled Teslas—in Ukraine
Cities: Skylines 2’s troubled launch, and why simulation games are freaking hard
OpenAI board attempts to hit “Ctrl-Z” in talks with Altman to return as CEO
280 million e-bikes are slashing oil demand far more than electric vehicles
AI outperforms conventional weather forecasting for the first time
Intel fixes high-severity CPU bug that causes “very strange behavior”
The Mirai Confessions: Three Young Hackers Who Built a Web-Killing Monster Finally Tell Their Story
Ethereum hacked to steal millions from users across the world
The RISKS Digest
Developers can't seem to stop exposing credentials in publicly accessible code
Re: Toyota has built an EV with a fake transmission
Admission of the state of software
Re: Industrial Robot Crushes Worker to Death
Hikers Rescued After Following Nonexistent Trail on Google Maps
It's Still Easy for Anyone to Become You at Experian
Social media gets teens hooked while feeding aggression and impulsivity, and researchers think they know why
Using your iPhone to start your car is about to get a lot easier
OpenAI co-founder & president Greg Brockmane quits after firing of CEO Altman
Re: Data on 267,000 Sarnia patients going back 3 decades among cyberattack thefts at 5 Ontario hospitals Digest
A Coder Considers the Waning Days of the Craft
Paying ransom for data stolen in cyberattack bankrolls further crime, experts caution
Kaspersky Blog
How to stop, disable, and remove any Android apps — even system ones | Kaspersky official blog
What security issues does WordPress have? | Kaspersky official blog
Transatlantic Cable podcast, episode 326 | Kaspersky official blog
Vulnerability in crypto wallets created online in the early 2010s | Kaspersky official blog
How to protect corporate routers and firewalls against hacking | Kaspersky official blog
Reptar: a vulnerability in Intel processors | Kaspersky official blog
Why Nothing Chats is unsafe | Kaspersky official blog
How to update Android without bugs, data loss, security risks or other nuisances | Kaspersky official blog
Transatlantic Cable podcast, episode 325 | Kaspersky official blog
How Ducktail steals Facebook accounts | Kaspersky official blog
Transatlantic Cable podcast, episode 324 | Kaspersky official blog
WhatsApp spyware modifications in Telegram | Kaspersky official blog
Adam Shostack & friends
Graham Cluley
Not all cybercriminals are evil geniuses
Ex-Motorola worker phished former employer to illegally hack network and steal data
Smashing Security podcast #350: Think before you shrink! And our guest is faked
iOS 17 NameDrop privacy scare: What you need to know
Securing the software supply chain webinar
The crazy world of ransomware
Why IT teams should champion AI in the workplace, and deploy secure AI tools safely to their teams
Ethyrial: Echoes of Yore hacked! 17,000 game accounts “lost”
$9 million seized from “pig butchering” scammers who preyed on lonely hearts
Smashing Security podcast #349: Ransomware gang reports its own crime, and what happened at OpenAI?
Hackers pose as officials to steal secrets and cryptocurrency for North Korea
Smashing Security podcast #348: Hacking for chimp change, and AI chatbot birthday
Security Bloggers Network
China continues Pig-Butchering Crack-down new
How Kasada Counters Toll Fraud and Fake Account Creation for Enterprises
How to Build a Phishing Playbook Part 1: Preparation
Cooking Intelligent Detections from Threat Intelligence (Part 6)
DEF CON 31 – Renderman’s, Tom Dang’’s ‘War Stories – The Risks Of Pointing Out The Emperor Is Buck Naked’
The Qlik Cyber Attack: Why SSPM Is a Must Have for CISOs
8 Essential Security Awareness Training Topics
Accelerating Cloud-Native Data Security Deployments at Scale with Imperva’s eDSF Kit
Randall Munroe’s XKCD ‘X Value’
Discovering MLflow Framework Zero-day Vulnerability | Machine Language Model Security | Contrast Security
TikTok Ban Banned — Montana Loses in US Court
Apache ActiveMQ RCE Leads to Domain Compromise
Rapid7
CVE-2023-49103 - Critical Information Disclosure in ownCloud Graph API
Attackers are Working Around The Clock. Luckily, So Are We.
Rapid7 Takes Next Step in AI Innovation with New AI-Powered Threat Detections
Updates to Layered Context Enable Teams to Quickly Understand Which Risk Signals Are Most Pressing
Building our Team in Prague: Meet Martin Votruba
Metasploit Wrap-up
When Maximum Effort Doesn't Equate to Maximum Results
Rapid7 Introduces AI-driven Cloud Anomaly Detection
Metasploit Weekly Wrap-Up
Manage Enterprise Risk at Scale with a Unified, Holistic Approach
Patch Tuesday - November 2023
CVE-2023-5950 Rapid7 Velociraptor Reflected XSS
ThreatPost
Hacker News (YCombinator) - Security
Child abduction case: How Tom and Jerry cartoons helped police identify suspects new
Ukraine aid's best-kept secret: Most of the money stays in the USA new
Researchers create humanitarian law digital emblem for the Red Cross
A medieval Gothic monastery built using CAD / CAM
Seraph Secure: anti-scam software co-founded by Kitboga
Star neuroscientist may have manipulated data to support a major stroke trial
10 Weird HTML Hacks That Shaped the Internet
HTML hacks that shaped the Internet
Booking.com hackers increase attacks on customers
Tesla Cybertruck Pricing and Specs
Firefox Developer Edition and Beta: Try Out Mozilla's .deb Package
How I made Bomb Rush Cyberfunk multiplayer
digitalmunition
Hacker Noon #Security
Wired - Security
ChatGPT Spit Out Sensitive Data When Told to Repeat ‘Poem’ Forever new
When It Comes to January 6 Lawsuits, a Court Splits Donald Trump in Two
Anduril’s New Drone Killer Is Locked on to AI-Powered Warfare
Google Fixes a Seventh Zero-Day Flaw in Chrome—Update Now
The CDC's Gun Violence Research Is in Danger
Okta Breach Impacted All Customer Support Users—Not 1 Percent
OpenAI’s Custom Chatbots Are Leaking Their Secrets
A Civil Rights Firestorm Erupts Around a Looming Surveillance Power Grab
Elon Musk Is Giving QAnon Believers Hope Just in Time for the 2024 Elections
The Hundred-Year Battle for India’s Radio Airwaves
Telegram’s Bans on Extremist Channels Aren't Really Bans
Section 702 Surveillance Reauthorization May Get Slipped Into ‘Must-Pass’ NDAA
Control C
Visual Studio's built-in malware execution functionality (EvilSln)
Convert plaintext to QR code on Linux

Security in Mainstream Media

Google News Hacking
Hackers who targeted the private hospital that treated Kate Middleton are threatening to release the Royal Fam - Daily Mail new
Ghost-hacking: How to protect yourself from scams from beyond the grave of those you knew - CyberGuy Report new
Quick tip on how to best protect smart devices, technology from hackers - WLS-TV new
Breaches by Iran-affiliated hackers spanned multiple U.S. states ... - ABC News new
Ukraine marines hacked a Russian drone to find its base and then shelled it - Business Insider new
I'm a professional hacker - and these are the 5 things that would allow me to crack into your smartphone withi - Daily Mail new
The Flipper Zero has gotten a bad rap — why I love this little hacking tool - Tom's Guide new
Police to tie up with telcos to detect mobile hacking, stop money transfers - Times of India
23andMe says hackers accessed ‘significant number’ of files about users’ ancestry - TechCrunch
DEF CON 31 – Will Kay’s’ Packet Hacking Village – Death By 1000 Likes’ - Security Boulevard
Chinese hacking groups intensify attacks on Taiwan - Taiwan News
Ghost hacking: How to protect yourself from scams from beyond the grave of those you knew - Fox News
Google Cyber Security
Iranian cyber attack targets Israeli tech used by several US bodies - The Times of Israel new
Ransomware attack in US: Dozens of credit unions experience outrages due to cyberattack on Trellance, federal agency says - WLS-TV new
Ransomware attack in US: Dozens of credit unions experience outrages due to cyberattack on Trellance, federal ... - WABC-TV new
Ransomware attack in US: Dozens of credit unions experience outrages due to cyberattack on Trellance, federal agency says - WABC-TV new
Telecom news roundup: Spectrum auction results and Ericsson ... - MobileSyrup new
Cybersecurity Spending Is Slowing: 2 Top Stocks That Can Weather the Storm - The Motley Fool new
Iran-linked cyberattacks threaten U.S. water, heath care and energy sectors - NPR new
Breaches by Iran-affiliated hackers spanned multiple U.S. states, federal agencies say - ABC News new
Breaches by Iran-affiliated hackers spanned multiple U.S. states, federal agencies say - The Independent new
Securing the Digital Thread: Cybersecurity in Today's Supply Chains - Medium new
ChatGPT Spit Out Sensitive Data When Told to Repeat 'Poem' Forever - WIRED new
Active Attacks Targeting Google Chrome & ownCloud Flaws: CISA Warns - GBHackers new

Thirsty for more

Lobste.rs
Nix-snapshotter: Native understanding of Nix packages for containerd new
EdDSA, Ed25519, Ed25519-IETF, Ed25519ph, Ed25519ctx, HashEdDSA, PureEdDSA, WTF? new
Original Congruence Closure Paper in Python with Egglog new
Efficient Nix Derivations with File Sets new
Graphite keyboard layout new
Let’s learn how modern JavaScript frameworks work by building one new
Running Graylog on Windows new
All I want is to know what's different [re: validating metrics] new
Documentation unit tests new
Nerd Snipe: Small Integer Parsing new
Dotfile stewardship for the indolent new
Double it Like Dekker: A Remarkable Technique to Double Floating Point Precision new
Hackaday
Honey, I Ate The Camera new
Mozilla Lets Folks Turn AI LLMs Into Single-File Executables new
Build Yourself A Screw Propelled Robot To Tackle The Dirt new
Update on the BLUFFS Bluetooth Vulnerability new
The Physics Lesson I Keep Re-Learning new
Generating Motion Via Nitinol Wires new
LED Tester Also Calculates Resistor For Target Voltage new
Print Your Own Brain Lamp From MRI Data
Cat-o-Matic 3000 Serves Your Feline Masters
Robot Pianist Runs on Arduino Nano
Radio Emissions Over Sunspots Challenge Models of Stellar Magnetism
Wine is for Windows and Darling is for MacOS
Ars Technica
Tensions rise between Targaryens in first teaser for House of the Dragon S2 new
No further investments in Virgin Galactic, says Richard Branson new
New algorithm finds lots of gene-editing enzymes in environmental DNA new
Porsche summons old-school cool with the 2024 911 Sport Classic new
Roar of cicadas was so loud, it was picked up by fiber-optic cables new
Chrome’s next weapon in the War on Ad Blockers: Slower extension updates
A bitter pill: Amazon calls on rival SpaceX to launch Internet satellites
Reminder: Donate to win swag in our annual Charity Drive sweepstakes
25M homes will lose broadband discounts if Congress keeps stalling, FCC warns
1960s chatbot ELIZA beat OpenAI’s GPT-3.5 in a recent Turing test study
Broadcom cuts at least 2,800 VMware jobs following $69 billion acquisition
The Universe in a lab: Testing alternate cosmology using a cloud of atoms
Wired
ChatGPT Spit Out Sensitive Data When Told to Repeat ‘Poem’ Forever new
Best Ebook Subscription and Audiobook Services (2023) new
Climate Cookbooks Are Here to Change How You Eat new
Withings ScanWatch 2 Review: Attractive Smartwatch Hybrid, Pricey Subscription new
Ozempic Could Also Help You Drink Less Alcohol new
Was Bobi the World’s Oldest Dog—or a Fraud? new
15 Best Mattresses You Can Buy Online (2023)
The 25 Best Shows on Max (aka HBO Max) Right Now
When It Comes to January 6 Lawsuits, a Court Splits Donald Trump in Two
George Santos Was All Hot Air
Dungeons & Dragons Is a Household Name Again
The Cybertruck Must Be Huge—or It Will Dig Tesla’s Grave
Slashdot
Apple's Chip Lab: Now 15 Years Old With Thousands of Engineers new
OpenZFS Fixes Data Corruption Issue new
EV Owners Report 'Far More' Problems Than Conventional Car Owners, Says Consumer Reports new
Tiny Living Robots Made From Human Cells Surprise Scientists new
Java Tries a New Way to Use Multithreading: Structured Concurrency new
Why Mexico Wants You to Virtually Adopt an Axolotl Salamander new
Investing $30 Billion, the UAE Announces the World's Largest Climate-Focused Investment Fund new
US Announces AI Hackathons to Strengthen Critical Mineral Supply Chains new
Does TikTok Censor Content Critical of China? CNN Investigates new
Rust Foundation Plans Training/Certification Program. Security Initiative Funded Through 2024 new
Tesla's New Cybertruck Includes a 'Powershare' Bidirectional Charging Feature new
Amazon Taps SpaceX For Kuiper Launch new
DZone Security
IoT Cloud Computing in IoT: Benefits and Challenges Explained
Connecting the Dots: Unraveling IoT Standards and Protocols
The Importance of Monitoring in a Cloud Environment: Ensuring Performance and Security
The Role of Metadata in Data Management
Kubernetes Monitoring: Ensuring Performance and Stability in Containerized Environments