Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

The Register
International Criminal Court swats away 'sophisticated and targeted' cyberattack new
Canada orders Chinese CCTV biz Hikvision to quit the country ASAP
Cisco punts network-security integration as key for agentic AI
Aloha, you’ve been pwned: Hawaiian Airlines discloses ‘cybersecurity event’
FBI used bitcoin wallet records to peg notorious IntelBroker as UK national
What if Microsoft just turned you off? Security pro counts the cost of dependency
Cisco fixes two critical make-me-root bugs on Identity Services Engine components
Glasgow City Council online services crippled following cyberattack
Qilin ransomware attack on NHS supplier contributed to patient fatality
UK to buy nuclear-capable F-35As that can't be refueled from RAF tankers
Frozen foods supermarket chain deploys facial recognition tech
Amazon's Ring can now use AI to 'learn the routines of your residence'
Reddit - NetSec
Critical RCE in Anthropic MCP Inspector (CVE-2025-49596) Enables Browser-Based Exploits | Oligo Security new
Leveraging Google's Agent Development Kit for Automated Threat Analysis
When Backups Open Backdoors: Accessing Sensitive Cloud Data via "Synology Active Backup for Microsoft 365"
End-to-End Encryption: Architecturally Necessary
Ongoing Campaign Abuses Microsoft 365’s Direct Send to Deliver Phishing Emails
Scanning Beyond the Patch: A Public-Interest Hunt for Hidden Shells
Security Benchmarking Authorization Policy Engines
FileFix – New Alternative to ClickFix Attack
Remote code execution in CentOS Web Panel - CVE-2025-48703
Remote Code Execution on 40,000 WiFi alarm clocks
Bleeping Computer
The Hacker News
TA829 and UNK_GreenSec Share Tactics and Infrastructure in Ongoing Malware Campaigns new
New Flaw in IDEs Like Visual Studio Code Lets Malicious Extensions Bypass Verified Status new
A New Maturity Model for Browser Security: Closing the Last-Mile Risk new
Chrome Zero-Day CVE-2025-6554 Under Active Attack — Google Issues Security Update new
U.S. Arrests Facilitator in North Korean IT Worker Scheme; Seizes 29 Domains and Raids 21 Laptop Farms new
Microsoft Removes Password Management from Authenticator App Starting August 2025 new
U.S. Agencies Warn of Rising Iranian Cyber Attacks on Defense, OT Networks, and Critical Infrastructure
Europol Dismantles $540 Million Cryptocurrency Fraud Network, Arrests Five Suspects
Blind Eagle Uses Proton66 Hosting for Phishing, RAT Deployment on Colombian Banks
Leveraging Credentials As Unique Identifiers: A Pragmatic Approach To NHI Inventories
⚡ Weekly Recap: Airline Hacks, Citrix 0-Day, Outlook Malware, Banking Trojans and more
FBI Warns of Scattered Spider's Expanding Attacks on Airlines Using Social Engineering
PacketStorm

Threat Wire

Bug Bounties

Vulnerabilities

NIST National Vulnerability Database
NIST Small Business Cybersecurity Webinar: Protecting Your Small Business from Phishing Risks new
Iris Experts Group (IEG) Annual Meeting
NIST Offers 19 Ways to Build Zero Trust Architectures
0day Today
CXSecurity
Social Warfare WordPress Plugin 3.5.2 Remote Code Execution (RCE) new
PHP CGI Module 8.3.4 Remote Code Execution new
Grandstream GSD3710 1.0.11.13 Stack Overflow
Sitecore 10.4 Remote Code Execution (RCE)
Pitamaas - Sql Injection
Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability PoC (Conceptual Model)
Litespeed Cache WordPress Plugin 6.3.0.1 Privilege Escalation
Parrot and DJI variants Drone OSes Kernel Panic Exploit
macOS LaunchDaemon iOS 17.2 Privilege Escalation
Microsoft Excel LTSC Professional Pilus 2021 - Microsoft® Word LTSC MSO (16.0.14334.20090) 64-bit - Remote Code Execution Bypa
Windows File Explorer Windows 11 (23H2) NTLM Hash Disclosure
MOBOTIX IP cameras Unauthenticated access
Full Disclosure
iOS Activation Flaw Enables Pre-User Device Compromise and Identity Exposure (iOS 18.5) new
Remote DoS in httpx 1.7.0 – Out-of-Bounds Read via Malformed <title> Tag
CVE-2025-32978 - Quest KACE SMA Unauthenticated License Replacement
CVE-2025-32977 - Quest KACE Unauthenticated Backup Upload
CVE-2025-32976 - Quest KACE SMA 2FA Bypass
CVE-2025-32975 - Quest KACE SMA Authentication Bypass
Disclosure Yealink Cloud vulnerabilities
: "Glass Cage" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885)
SEC Consult SA-20250612-0 :: Reflected Cross-Site Scripting in ONLYOFFICE Docs (DocumentServer)
SEC Consult SA-20250611-0 :: Undocumented Root Shell Access on SIMCom SIM7600G Modem
Call for Applications: ERCIM STM WG 2025 Award for the Best Ph.D. Thesis on Security and Trust Management (July 31, 2025)
SEC Consult SA-20250604-0 :: Local Privilege Escalation and Default Credentials in INDAMED - MEDICAL OFFICE (Medical practice management) Demo version

LiveOverflow

Exploit Dev

Source Incite
Google Project Zero
The Windows Registry Adventure #7: Attack surface analysis
The Windows Registry Adventure #6: Kernel-mode objects
Security Researchers
BOF Linting for Accelerated Development
Type System and Modernization
Why is there no consistent single signon API flow?
My a11y journey
Same Sea, New Phish: Russian Government-Linked Social Engineering Targets App-Specific Passwords
Locally hosting an internet-connected server
Unspoken Implications: A Preliminary Analysis of Bill C-2 and Canada’s Potential Data-Sharing Obligations Towards the United States and Other Countries
Secure Enclaves for Offensive Operations (Part II)
Graphite Caught: First Forensic Confirmation of Paragon’s iOS Mercenary Spyware Finds Journalists Targeted
Streaming Zero-Fi Shells to Your Smart Speaker
Techno-Legal Internet Controls in Indonesia and Their Impact on Free Expression
How Twitter could (somewhat) fix their encrypted DMs
Reddit - Exploit Dev
What does Vulnerability Researcher at Defense Contractor do?
Whats your level of education?
GHOST: A Clean-Label Visual Backdoor Attack on Vision-Language Mobile Agents
What do you know as an exploit dev?
Metasploit module development - Chatterbox
Race conditions in Linux kernel perf events
Binder-Based Use-After-Free Leading to kASLR Bypass and Root Access on Android
What do you need to know to break a high-complex protection (like Denuvo)?
GhidraMCP on Claude for RE (setup)
Are my ressources good and enough?
Hijacking Execution: A Practical Guide to PT_LOAD Injection and ELF Entry Point Manipulation

Reversing/I like ASM

Reddit - Game Hacks
The weirdest game AI control idea I’ve seen—entropic shadows? new
Best eft hack desync. Escape from tarkov cheat DESYNC. No bans, чит на ефт десинк
Best arena breakout infinite hack Ancient. Cheat for ABI. Купить читы арена брейкаут
cum pot sa descarc un crack necesar pentru a functiona fs17 fara steam?
Hack PvZ goty to get ZenGardenPlants more often
Is this a false positive trojan? - Grim Client
Grenade preview with the best ABI DMA hack BBC. Arena Breakout hack. Аре...
Full game with the best cheat for arena breakout infinite. ABI hacks.
Most legit and cheapest cheat for Escape From Tarkov (EFT). Best hack without bans. Chams EFT
hack du jeu life is strange 2
Project MA
Full game with the best cheat for arena breakout infinite. ABI hacks.
Reddit - REGames
StackExchange - ReverseEngineering
Prevent WinDbg from switching process context while stepping through syscall
Help with editing some elements from a decompiled APK
Pronto Peel Bluetooth IR blaster
Reverse Engineering an IR Signal from a Remote
MCU processor name for MG5 instrument clustering
Reddit - Reverse Engineering
How to reverse engineer 'Rematch' game to access user statistics?
Type System and Modernization · x64dbg
Breaking Chrome’s AppBound Cookie Encryption Key
/r/ReverseEngineering's Weekly Questions Thread
help analyzing .net dll
find cipher key by reverse engineering
Action Camera or DIY Camera to mount on bike
Govee H6047 BLE control — does it require a handshake before accepting write commands?
Help Decompilate JPOG!
qualcomm hexagon qdsp6 for ghidra
Finding a 27-year-old easter egg in the Power Mac G3 ROM
Mobil App Reverse Engineering Where Can I Find Someone

Guided Hacking

Malware/APT

Crypto

Seytonic

Podcasts

Risky.Biz
Risky Business #797 -- Stuxnet vs Massive Ordnance Penetrators
Risky Business #796 -- With special guest co-host Chris Krebs
Soap Box: AI has entered the SOC, and it ain't going anywhere
Risky Business #795 -- How The Com is hacking Salesforce tenants
Risky Business #794 -- Psychic Panda outgunned by Fluffy Lizard and UNC56728242
Risky Business #793 -- Scattered Spider is hijacking MX records
Risky Business #792 -- Beware, Coinbase users. Crypto thieves are taking fingers now
Risky Biz Soap Box: Push Security's browser-first twist on identity security
Risky Business #791 -- Woof! Copilot for Sharepoint coughs up creds and keys
Wide World of Cyber: How state adversaries attack security vendors
Risky Business #790 -- Bye bye Signal-gate, hello TeleMessage-gate
BONUS INTERVIEW: Senator Mark Warner on Signalgate, Volt Typhoon and tariffs
The CyberWire
North Korea’s covert coders caught. new
U.S. braces for Iranian cyber intrusions.
Jamil Jaffer: You should run towards risk. [Strategy] [Career Notes]
A tale of two botnets. [Research Saturday]
Turbulence in the cloud.
No panic—just patch.
Open-source, open season.
Iran’s digital threat after U.S. strikes.
Iran’s digital retaliation looms.
Jadee Hanson: Cybersecurity is a team effort. [CISO] [Career Notes]
Signed, sealed, exploitable. [Research Saturday]
A blast from the breached past.
ISC Daily Stormcast
SANS Stormcast Monday June 30th, 2025: Scattered Spider; AMI BIOS Exploited; Secure Boot Certs Expiring; Microsoft Resliliency Initiative
SANS Stormcast Friday, June 27th, 2025: Open-VSX Flaw; Airoha Bluetooth Vulnerablity; Critical Cisco Identity Service Engine Vuln;
SANS Stormcast Thursday, June 26th, 2025: Another Netscaler Vuln; CentOS Web Panel Vuln; IP Based Certs
SANS Stormcast Tuesday, June 24th, 2025: Telnet/SSH Scan Evolution; Fake Sonicwall Software; File-Fix vs Click-Fix
SANS Stormcast Tuesday, June 24th, 2025: Ichano ATHome IP Camera Scans; Netscaler Vulnerability; WinRar Vulnerability
SANS Stormcast Monday, June 23rd, 2025: ADS and Python; More Secure Cloud PCs; Zend.to Path Traversal; Parser Differentials
SANS Stormcast Friday, June 20th, 2025: New Employee Phishing; Malicious Tech Support Links; Social Engineering App Sepecific Passwords
Darknet Diaries
160: Greg new
159: Vastaamo
158: MalwareTech
157: Grifter
156: Kill List
155: Kingpin
154: Hijacked Line
153: Bike Index
152: Stacc Attack
151: Chris Rock
150: mobman 2
149: Mini-Stories: Vol 3
Security Weekly

Threat Intel

Privacy/VPNs

Reddit - Privacy
Apple's Foundation Models framework is a genuine step toward local-first computing new
How to differentiate fake malicious wifi to real? new
I Tried, and Failed, to Disappear From the Internet new
Sinaloa cartel used phone data and surveillance cameras to find FBI informants, DOJ says
Reddit - VPN
I keep getting blocked form services with VPN on
Is my VPN Down or Blocked? Is there way to check?
Vpns on mobile devices not connecting
VPN Playstation
VPNs do not conceal location?
I have a computer in country x. I'm in country y. I want to route all traffic thru country x. How?
Network disconnects when using a vpn.
VPN for Fire Stick
Bimonthly VPN recommendations megathread: the only place for mentioning specific providers
EFF
EFFecting Change: EFF Turns 35! new
Flock Safety’s Feature Updates Cannot Make Automated License Plate Readers Safe
Today's Supreme Court Decision on Age Verification Tramples Free Speech and Undermines Privacy
How Cops Can Get Your Private Online Data
Why Are Hundreds of Data Brokers Not Registering with States?
Major Setback for Intermediary Liability in Brazil: How Did We Get Here?
A Token of Appreciation for Sustaining Donors 💞
Podcast Episode: Securing Journalism on the ‘Data-Greedy’ Internet
Betting on Your Digital Rights: EFF Benefit Poker Tournament at DEF CON 33
Connectivity is a Lifeline, Not a Luxury: Telecom Blackouts in Gaza Threaten Lives and Digital Rights
Google’s Advanced Protection Arrives on Android: Should You Use It?
EFF to NJ Supreme Court: Prosecutors Must Disclose Details Regarding FRT Used to Identify Defendant
Reddit - PrivacyGuides
Compartmentalize Your Life (and Your Privacy)
The Importance of Data Privacy For The Queer Community
Slashdot - Rights
Apple Accuses Former Engineer of Taking Vision Pro Secrets To Snap new
Tinder To Require Facial Recognition Check For New Users In California new
IT Worker Sentenced To Seven Months After Trashing Company Network new
US Government Takes Down Major North Korean 'Remote IT Workers' Operation new
Apple Loses Bid To Dismiss US Smartphone Monopoly Case
In Last-Minute Move, Canada Rescinds Digital Services Tax, Restarts Negotiations
After 45 Years, 74-Year-Old Spreadsheet Legend/EFF Cofounder Mitch Kapor Gets His MIT Degree
New NSA/CISA Report Again Urges the Use of Memory-Safe Programming Language
Sinaloa Cartel Used Phone Data and Surveillance Cameras To Find and Kill FBI Informants in 2018, DOJ Says
Canada Orders Chinese Firm Hikvision To Cease Canadian Operations Over National Security Concerns
Facebook Is Asking To Use Meta AI On Photos In Your Camera Roll You Haven't Yet Shared
Brother Printer Bug In 689 Models Exposes Millions To Hacking

Help Wanted

Reddit - Netsec Students
Hello new
about exams for Certiport Network Security
Launching Free AiCybr Practise Centre for CompTIA certs (A+, Net+, Sec+) and Linux commands
learning technology from prison @conversationsofconviction
🎓 Found a Free ParrotOS Linux Course – Anyone Tried It or Have Better Beginner Resources?
🔍 How do you approach reverse engineering on ParrotOS? Looking for tool/flow tips
CV Redux
How do you structure your workflow for web-app testing on ParrotOS? Looking to compare setups
Beginner wants to learn hacking
arcsight
Used our private intel scraper (WRAITH) + SØPHIA overlays to locate a buried data hub during passive recon — AMA
Stackoverflow - Security
Retrieve Vulnerabilities for an asset in tenable SC (Security Center)
Docker Alpine - Not a CIS compliance and hardening [closed]
User-specific data that persists across browser closures, on a single specific browser instance, such as Chrome
about the html injection and RCE by protocol handler abuse [closed]
Imagine Columbia still flew. How much $$ to abduct it? [closed]
Encrypted TCP Tunnel for Log Transfer in SIEM Federation [closed]
Best practices for centralized Kubernetes security monitoring across multiple development teams [closed]
Is file sharing between iPhone and windows via Phone Link safe? [closed]
Why does psycopg2 still allow SQL injection with dynamically constructed table names
What are the key technical criteria to evaluate a VAPT service provider's methodology? [closed]
How can I protect my Flutter app using Talsec FreeRASP, and what additional steps should I take? [closed]
Stack Exchange
Reddit - AskNetSec
What's your method for vetting new external services and their security? new
Our team struggles with the sheer volume of alerts, how do you prioritize? new
Can you exploit XSS when active file extensions are blocked?
How do you fix burp proxy interceptor here?
Blocking Typosquatting and Malicious npm Packages at Install-Time: Design Pattern Behind Package Manager Guard (PMG)
What are the best simple steps to improve personal cybersecurity?
TLS1.2 vs TLS1.3
Safety of third-party WiFi dongles?
Securing Clusters that run Payment Systems
Confusion about MDM

Locks/Social Engineering

Reddit - Social Engineering
Seeking for a social engineering advice new
Employee annoys his colleagues by being over polite, getting involved in conversations and over sharing personal information.
Suspected Russian hackers used new tactic against UK researcher
How do I change?
Friend not paying me?
Manipulative fenale classmate. What should i do?
Manipulation is not what you think.
Desperate for Help Getting Back Into My Google Account or Getting My Old Number Back Please, Any Advice?
Beginner
Social engineering attempts or am I overthinking?
response to caller asking: "Is this Sam"? (my name)
A hypothetical: How would one use social engineering to run a vigilante con operation on scammers and other predatory confidence tricksters from the internet?
Reddit - Lockpicking
Lock Mail new
Paclock 400a new
Before and after new
Finally gotten to the point where I can get this Abus 55/40 opened in under a minute. new
Gutting Help new
Is my Euro 140 evil? new
Today's green belt practice new
Today's green belts practice new
I think this is an appropriate time for a re-post of this gem new
Lock recommendations for progression with skills new
Poshmark Canada: Medeco listings (check it out!) new
Collecting these like infinity stones new

Hak5

Security Blogs

Security Bloggers Network
U.S. Target North Korean IT Worker Scams with Raids, Indictments new
Ghost in the Machine: A Spy’s Digital Lifeline new
DOJ Charges 324 in Sprawling $14.6 Billion Health Care Fraud Scams new
U.S. House Homeland Security Appropriations Bill Seeks to Modernize Border Infrastructure Security with Proactive OT/IT Security Measures new
Europe’s EUVD could shake up the vulnerability database ecosystem new
How OTP Works (Step-by-Step) — What Really Happens Behind Those One-Time Codes new
Top 6 Data Breaches in June 2025 That Made Headlines new
Etsy Stops Unwanted Traffic & Reduces Computing Costs with DataDome & Google new
What is Network Penetration Testing? new
Our pentest quote form saves you time new
CAPTCHAs 101: what they are, how they work, and where they fall short new
Artificial Unintelligence 2025: A Global Rally for the Builders, Not the Buzzwords
Control C
Bypassing file upload restrictions with extension truncation
ZAP: Grep extract in Fuzzer to detect username enumeration via subtly different responses
Wired - Security
Identities of More Than 80 Americans Stolen for North Korean IT Worker Scams
ICE Rolls Facial Recognition Tools Out to Officers' Phones
US Supreme Court Upholds Texas Porn ID Law
‘They're Not Breathing’: Inside the Chaos of ICE Detention Center 911 Calls
Telegram Purged Chinese Crypto Scam Markets—Then Watched as They Rebuilt
Taiwan Is Rushing to Make Its Own Drones Before It's Too Late
What Satellite Images Reveal About the US Bombing of Iran's Nuclear Sites
Truth Social Crashes as Trump Live-Posts Iran Bombing
Israel Says Iran Is Hacking Security Cameras for Spying
Iran’s Internet Blackout Adds New Dangers for Civilians Amid Israeli Bombings
Israel-Tied Predatory Sparrow Hackers Are Waging Cyberwar on Iran’s Financial System
Minnesota Shooting Suspect Allegedly Used Data Broker Sites to Find Targets’ Addresses
Elttam
Krebs on Security
Senator Chides FBI for Weak Advice on Mobile Security
Inside a Dark Adtech Empire Fed by Fake CAPTCHAs
Patch Tuesday, June 2025 Edition
Proxy Services Feast on Ukraine’s IP Address Exodus
U.S. Sanctions Cloud Provider ‘Funnull’ as Top Source of ‘Pig Butchering’ Scams
Pakistan Arrests 21 in ‘Heartsender’ Malware Service
Oops: DanaBot Malware Devs Infected Their Own PCs
KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS
Breachforums Boss to Pay $700k in Healthcare Breach
Patch Tuesday, May 2025 Edition
Pakistani Firm Shipped Fentanyl Analogs, Scams to US
xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs
Naked Security
Using AI to identify cybercrime masterminds
Taking the shine off BreachForums
The State of Ransomware 2025
June Patch Tuesday digs into 67 bugs
Sophos Emergency Incident Response is now available
The strange tale of ischhfd83: When cybercriminals eat their own
Sophos Named a 2025 Gartner® Peer Insights™ Customers’ Choice for both Endpoint Protection Platforms and Extended Detection and Response
An industry first: Sophos Firewall and NDR Essentials
Sophos Firewall v21.5 is now available
Schneier on Security
Iranian Blackout Affected Misinformation Campaigns new
How Cybersecurity Fears Affect Confidence in Voting Systems
Friday Squid Blogging: What to Do When You Find a Squid “Egg Mop”
The Age of Integrity
White House Bans WhatsApp
What LLMs Know About Their Users
Here’s a Subliminal Channel You Haven’t Considered Before
Largest DDoS Attack to Date
Friday Squid Blogging: Gonate Squid Video
Surveillance in the US
Self-Driving Car Video Footage
Ghostwriting Scam
Linux Security
Ubuntu 25.10 Brings Rust-Based Tools to Security-Conscious Admins new
IBM Donates CBOM Toolset to Linux Foundation
Dark Reading
Like SEO, LLMs May Soon Fall Prey to Phishing Scams new
'CitrixBleed 2' Shows Signs of Active Exploitation
Scattered Spider Taps CFO Credentials in 'Scorched Earth' Attack
Vulnerability Debt: How Do You Put a Price on What to Fix?
US Falling Behind China in Exploit Production
How Geopolitical Tensions Are Shaping Cyber Warfare
Cloud Repatriation Driven by AI, Cost, and Security
Taming Agentic AI Risks Requires Securing Non-Human Identities
Millions of Brother Printers Hit by Critical, Unpatchable Bug
CISA Is Shrinking: What Does It Mean for Cyber?
Generative AI Exacerbates Software Supply Chain Risks
XOR Marks the Flaw in SAP GUI
Securelist by Kaspersky
AI and collaboration tools: how cyberattackers are targeting SMBs in 2025
SparkKitty, SparkCat’s little brother: A new Trojan spy found in the App Store and Google Play
Toxic trend: Another malware threat targets DeepSeek
Sleep with one eye open: how Librarian Ghouls steal data by night
Analysis of the latest Mirai wave exploiting TBK DVR devices with CVE-2024-3721
IT threat evolution in Q1 2025. Non-mobile statistics
IT threat evolution in Q1 2025. Mobile statistics
Host-based logs, container-based threats: How to tell where an attack began
Exploits and vulnerabilities in Q1 2025
Zanubis in motion: Tracing the active evolution of the Android banking malware
Dero miner zombies biting through Docker APIs to build a cryptojacking horde
Threat landscape for industrial automation systems in Q1 2025
HITB News
The RISKS Digest
Experts Count Staggering Costs Incurred by UK Retail Amid Cyberattack Hell
Kaspersky Blog
Adam Shostack & friends
Google’s approach to AI Agents -- Threat Model Thursday
Publish your threat model!
The Essence and Beauty of Threat Modeling
Andor: Insider Threats
Appsec Roundup - May 2025
Free Threat Modeling Training for Displaced Federal Workers
Blackhat Earlybird Prices End Friday
Cyber Hard Problems Report
Andor: Think like a leader
Andor Threats: Information Disclosure
The Empire’s Threat Modeling
Appsec Roundup - April 2025
Graham Cluley
The AI Fix #57: AI is the best hacker in the USA, and self-learning AI new
50 customers of French bank hit after insider helped SIM swap scammers new
When hackers become hitmen
Hackers breach Norwegian dam
Apple Wallet just went full Bono (but with Brad Pitt this time)
Cybercrime is surging across Africa
The AI Fix #56: ChatGPT traps man in a cult of one, and AI is actually stupid
Krispy Kreme hack exposed sensitive data of over 160,000 people
Ransomware gang busted in Thailand hotel raid
The AI Fix #55: Atari beats ChatGPT at chess, and Apple says AI “thinking” is an illusion
Rapid7
Patch Tuesday - June 2025
BlackSuit Continues Social Engineering Attacks in Wake of Black Basta’s Internal Conflict
Key Takeaways from the Take Command Summit 2025: Demystifying Cloud Detection & Response – The Future of SOC and MDR
5 Things Security Leaders Need to Know About Agentic AI
Metasploit Wrap-up 06/06/25
Cultivating Growth and Development at Rapid7
India's cyber leaders prepare for AI-driven threats
Navigating AWS Migration: Achieving Clarity and Confidence
Rapid7 Q1 2025 Incident Response Findings
From Ideology to Financial Gain: Exploring the Convergence from Hacktivism to Cybercrime
Introducing AI Attack Coverage in Exposure Command: Secure what traditional AppSec Tools miss
Key Takeaways from the Take Command Summit 2025: Risk Revolution – Proactive Strategies for Exposure Management
Hacker News (YCombinator) - Security
All Good Editors Are Pirates: In Memory of Lewis H. Lapham
Hacker Noon #Security
$70M Committed To Boba Network As Foundation Concludes BOBA Token Agreement With FTX Recovery Trust new
Decentralized Public-Key Infrastructure: The Future of Supply Chain Security new
How Trusted Execution Environments Power Scalable, Private Smart Contracts new
Layer-One Confidential Smart Contracts: Architecture, Threats, and Tradeoffs new
What Most Blockchain Devs Get Wrong About TEE Security and Smart Contract Privacy new
Four Key Steps to Confidential Smart Contract Execution new
To Fix Smart Contracts, Start With Their Secrets new
Midas And 0G Partner To Bring Real-World Assets To AI-Native Blockchain Infrastructure new
Faster, More Accurate IoT Security: A Quantitative Analysis of the CUMAD Framework new
Redefining IoT Threat Detection: The Power of Cumulative Analysis in the CUMAD Framework new
Solving the IoT's "Boy Who Cried Wolf" Problem: From Individual Alerts to Cumulative Certainty new
How CUMAD Accumulates Evidence to Unmask Compromised IoT Devices new

Security in Mainstream Media

Google Cyber Security
Australia's Qantas says 6 million customer accounts exposed in cyber hack - Reuters new
EXPERT REACTION: Qantas cyberattack puts 6 million customers' data at risk - Scimex new
Op-Ed: Bad practices are increasing security risks within software development projects - Cyber Daily new
SSH Communications Security partners with Leonardo, backed by share issue - space & defense new
Qantas data breach to impact 6 million airline customers - BBC new
Qantas cyber attack: What we know about the 'significant' customer data breach - SBS Australia new
Qantas discloses cyberattack amid Scattered Spider aviation breaches - BleepingComputer new
Recommendation for Key Management | NIST Requests Public Comment - Australian Cyber Security Magazine new
Major Qantas cyber attack leaves 6 million customer details exposed - Yahoo new
The International Criminal Court (ICC) has confirmed that a “sophisticated” cyber security incident targeted its systems last week. https://tinyurl.com/ycmyjze2 | via ONE News - Facebook new
LevelBlue to acquire Trustwave, creating top global cyber giant - SecurityBrief Australia new
Qantas confirms cyber-attack exposed records of up to 6 million customers - The Guardian new
Google News Hacking
Columbia University Applicants’ Personal Data Stolen By Hacker - Bloomberg.com new
The Wiretap: A Mexican Cartel Hacker Spied On The FBI And Its Informants - Forbes new
Iranian Hackers Threaten To Leak Trove Of Emails Stolen From Trump Aides - 1490 WMRN new
Columbia University says its IT system was hacked - CBS News new
PFT PM Mailbag: Will NFL investigate Harbaugh? - NBC Sports new
US downplays Iran-linked hackers’ threat, calls it digital propaganda - ایران اینترنشنال new
Cartel Hacker Used Security Cameras, FBI Official’s Phone to Hunt Informants - VICE new
Iran-linked hackers threaten to leak Trump team emails - Straight Arrow News new
AI in the browser may be a hacker’s new favourite target: Here's how - Mint new
Iran-linked hackers threaten to release Trump aides’ emails: Report - The Hill new
Hacker detained for selling data to funeral firms - Taipei Times new
Iranian hackers threaten to leak large cache of White House emails - Latest news from Azerbaijan new

Thirsty for more

Reddit - Cyberpunk
"Hydrangea" by me new
Sharing a free sample from our cyberpunk setting collection new
A trailer for the new The Running Man movie new
What makes something “Cyberpunk”? new
I was looking for a more lighthearted/cartoony cyberpunk game out there and decided to make my own. new
[Right to Left] New chapter of "Remnants of Angels" available | Full chapter in comments new
Tech Billionaire Can’t Decide If He Wants Humans To Exist new
Police lured a hostage taker by delivering a Faygo with a drone in order to line up a shot through bank windows new
Creating a cyberpunk openworld game new
Tech companies going Orwellian, I'm shocked. new
Just another Cyberpunk Artworks new
My gf’s disposable vape is a TV. new
Reddit - Security CTF
Bandit0 not working ): new
Just Launched: GOAD v3 — Game of Active Directory on Parrot CTFs
🚩 CTF Cheatsheet – A Handy Resource I Put Together 🚩
Three new hacking labs just dropped on Parrot-CTFs - All free to play for 30 days.
i have a team and we’re looking for some skilled players for the google ctf competition if you’re interested let me know
help solve ctf
New Kerio Control Vulnerability
What skill should I learn for banglore market as a fresher
CTF team!
Whitebox CTF platform
CTF submitting platform
Shall we play a game?
Reddit - Sysadmin
Hybrid to full cloud new
Possible IT team re-org? new
Company hires IT without knowing where they belong in the budget...is this normal? new
Windows Server Core tips, plus a way to get a functional-ish "taskbar" (that also works in Win11!) without installing anything new
Is microsoft.com/devicelogin depreciated requiring manual logins or mfa? new
Monitoring software - alerts and notifications - easiest setup without alert fatigue? new
Why are my senior coworkers suddenly giving up? new
How to share user's data between PCs under a Domain (Active Directory) & tools for transfer data (files and softwares) between local and domain account new
Anyone deploying WPS Office or LibreOffice, OpenOffice across low use workstations? new
Help with Domain Controllers new
How do you handle the constant stress, moaning and frustration from users. new
Lobste.rs
clamp / median / range new
You MUST listen to RFC 2119 new
using Sun Ray thin clients in 2025 new
Animating Number Counters new
Stream per agent session new
How to Fix Your Context new
Software engineering with LLMs in 2025: reality check new
Parsing Layout, or: Haskell's Syntax is a Mess new
Types of Types: Common to Exotic new
Emoji Kitchen - Browse Google's unique emoji combinations new
Local LLM Tool Calling: Which LLM Should You Use? new
Exception handling in rustc_codegen_cranelift new
Hackaday
A Crypto Miner Takes the Straight and Narrow new
There Are Better Lego-Compatible Universal Joints Out There new
Are Service Loops a Good Idea? new
C++ Encounters of the Rusty Zig Kind new
DIY Book Lamp is a Different Take on the Illuminated Manuscript new
One Laptop Manufacturer Had To Stop Janet Jackson Crashing Laptops new
Move Over, Cybertruck: Series Hybrids from Edison Are on the Way new
In Vivo CAR T Cell Generation for Cancer and Auto-Immune Treatments new
Building the Marauder LowRacer from Bike Parts new
Super8 Camera Brought to the Modern World
Phone Keyboard Reverse Engineered
Break The Air Gap With Ultrasound
Ars Technica
RFK Jr.’s health department calls Nature “junk science,” cancels subscriptions new
Pentagon may put SpaceX at the center of a sensor-to-shooter targeting network new
FCC chair decides inmates and their families must keep paying high phone prices new
Moderna says mRNA flu vaccine sailed through trial, beating standard shot new
Nudify app’s plan to dominate deepfake porn hinges on Reddit, docs show new
Nothing Phone 3 arrives July 15 with a tiny dot matrix rear display new
US critical infrastructure exposed as feds warn of possible attacks from Iran new
Ted Cruz plan to punish states that regulate AI shot down in 99-1 vote new
GOP wants EV tax credit gone; it would be a disaster for Tesla new
GOP budget bill poised to crush renewable energy in the US new
Tuesday Telescope: A howling wolf in the night sky new
Pay up or stop scraping: Cloudflare program charges bots for each crawl new
Wired
A Pro-Russia Disinformation Campaign Is Using Free AI Tools to Fuel a ‘Content Explosion’ new
The 37 Best Shows on Apple TV+ Right Now (June 2025) new
Here’s What Mark Zuckerberg Is Offering Top AI Talent new
Sam Altman Slams Meta’s AI Talent-Poaching Spree: 'Missionaries Will Beat Mercenaries' new
AI Videos of Black Women Depicted as ‘Bigfoot’ Are Going Viral new
Nothing's New Phone (3) and Headphone (1) Look Nothing Like You've Seen Before new
Trump’s New Fragrance Doesn’t Smell Like Success new
The Senate Just Put Clean Energy for AI in the Crosshairs new
The Best Hot Dog Cookers for All-American Hot Dogging (2025) new
5 Best Food Dehydrators, Tested and Reviewed (2025) new
12 Best Cheap Laptops (2025), Tested and Reviewed new
10 Best Chromebooks of 2025, Tested and Reviewed new
Slashdot
Laptop Mag Is Shutting Down new
Apple Accuses Former Engineer of Taking Vision Pro Secrets To Snap new
Tinder To Require Facial Recognition Check For New Users In California new
Figma Files For IPO new
Xerox Buys Lexmark For $1.5 Billion As Print Industry Clings To Relevance new
AMC Warns Moviegoers To Expect '25-30 Minutes' of Ads and Trailers new
Amazon Deploys Its One Millionth Robot, Releases Generative AI Model new
Landmark EU Tech Rules Holding Back Innovation, Google Says new
Tech Hobbyist Destroys 51 MicroSD Cards To Build Ultimate Performance Database new
AT&amp;T Now Lets Customers Lock Down Account To Prevent SIM Swapping Attacks new
IT Worker Sentenced To Seven Months After Trashing Company Network new
AI is Now Screening Job Candidates Before Humans Ever See Them new
DZone Security
A Keycloak Example: Building My First MCP Server Tools With Quarkus new
Multi-Channel Notification Patterns for Security-Critical Events
Automating E2E Tests With MFA: Streamline Your Testing Workflow
Provider-Agnostic OIDC Auth Flow for Your Apps (PyJWT + FastAPI)
Unveiling Supply Chain Transformation: IIoT and Digital Twins
Your Kubernetes Survival Kit: Master Observability, Security, and Automation
Essential Cybersecurity Practices for Non-Profits
How to Master a DevSecOps Pipeline that Devs and AppSec Love
Secure DevOps in Serverless Architecture
How to Achieve SOC 2 Compliance in AWS Cloud Environments
DZone
Replacing Legacy Systems With Data Streaming: The Strangler Fig Approach new
Zero-Click CRM: The Future of Predictive Customer Management With Autonomous AI new
The Death of REST? Why gRPC and GraphQL Are Taking Over new
Microservices for Machine Learning new
CRITICAL_PROCESS_DIED: How to Fix This Windows Blue Screen Error new
Jakarta EE 11 and the Road Ahead With Jakarta EE 12 new
Docker Model Runner: Running AI Models Locally Made Simple new
Tableau Dashboard Development Best Practices
Streamlining DevOps: How Containers and Kubernetes Deliver
Rust: The Must-Adopt Language for Modern Software Development
DevOps Remediation Architecture for Azure CDN From Edgio
Maximizing Productivity: GitHub Copilot With Custom Instructions in VS Code
Hacker News (YCombinator)
RFK Jr.'s health department calls Nature "junk science," cancels subscriptions new
Hilbert's sixth problem: derivation of fluid equations via Boltzmann's theory new
Australians to face age checks from search engines new
We've Issued Our First IP Address Certificate new
Using Sun Ray thin clients in 2025 new
America's Hot Garbage Problem new
Building a Personal AI Factory new
Ask HN: Anyone is an "AI Engineer"? What does your job tasks include? new
Effectiveness of trees in reducing temperature, outdoor heat exposure in Vegas new
Effectiveness of trees in reducing temperature & outdoor heat exposure in Vegas new
The Roman Roads Research Association new
Fakespot shuts down today after 9 years of detecting fake product reviews new