Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

PacketStorm
Fighting VPN Criminalization Should Be Big Tech's Top Priority new
Go-Based HinataBot Latest Botnet To Focus On DDoS Attacks new
Chinese Warships Seem To Be Messing With Passenger Planes new
Inside The DEA Tool Hackers Allegedly Used To Extort Targets new
The FBI Warns SIM Swapping Attacks Are Rising. What's That? new
US Authorities Arrest Alleged BreachForums Owner And FBI Hacker Pompompurin new
Federal Agency Leaves Flaw Unpatched For 4 Years And Gets Hacked
18 Zero-Day Flaws Impact Samsung Android Handsets, Wearables And Telematics
Health Leaders Push Feds For Cybersecurity Requirements
Here's How Chinese Cyber Spies Exploited A Critical Fortinet Bug
Critical Microsoft Outlook Bug PoC Shows How Easy It Is To Exploit
Security Firm Rubrik Is Latest To Felled By GoAnywhere Vulnerability
The Register
BBC to staff: Uninstall TikTok from our corporate kit unless you can 'justify' having it new
Vessels claiming to be Chinese warships are messing with passenger planes new
Police pounce on 'pompompurin' – alleged mastermind of BreachForums new
TikTok cannot be considered a private company, says Australian report new
BianLian ransomware crew goes 100% extortion after free decryptor lands
You've been pwned, how much will each stolen customer SSN cost you? How about $7.5k?
Google: Turn off Wi-Fi calling, VoLTE to protect your Android from Samsung hijack bugs
Eufy security cams 'ignore cloud opt-out, store unique IDs' of anyone who walks by
Feds arrest and charge exiled Chinese billionaire over massive crypto fraud
Here's how Chinese cyber spies exploited a critical Fortinet bug
FTX inner circle helped itself to $3.2B, liquidators say
Got Conti? Here's the ransomware cure to avoid paying up
Reddit - NetSec
New tool to detect use of known secrets in web frameworks - Badsecrets new
KillNet and affiliate hacktivist groups targeting healthcare with DDoS attacks new
Persistence – Service Control Manager new
Attackers are starting to target .NET developers with malicious-code NuGet packages new
Bypassing CloudTrail in AWS Service Catalog, and Other Logging Research | Datadog Security Labs new
Obfuscating WebAssembly using Emscripten with an LLVM-based obfuscator new
Bitwarden PINs can be brute-forced, a how-to and reason for stronger master passwords.
Got my OSCP!
Large monthly list of popular websites, extracted from Chrome UX Reports
'Acropalypse' vulnerability recovers cropped screenshots on all Google Pixel phones
VBA: resolving exports in runtime without NtQueryInformationProcess or GetProcAddress
Undocumented behavior change in Android 10: mode "w" no longer truncates
Bleeping Computer
The Hacker News
New DotRunpeX Malware Delivers Multiple Malware Families via Malicious Ads new
Mispadu Banking Trojan Targets Latin America: 90,000+ Credentials Stolen new
New Cyber Platform Lab 1 Decodes Dark Web Data to Uncover Hidden Supply Chain Breaches new
Researchers Shed Light on CatB Ransomware's Evasion Techniques new
Emotet Rises Again: Evades Macro Security via OneNote Attachments new
Chinese Hackers Exploit Fortinet Zero-Day Flaw for Cyber Espionage Attack
Pompompurin Unmasked: Infamous BreachForums Mastermind Arrested in New York
LockBit 3.0 Ransomware: Inside the Cyberthreat That's Costing Millions
FakeCalls Vishing Malware Targets South Korean Users via Popular Financial Apps
THN Webinar: 3 Research-Backed Ways to Secure Your Identity Perimeter
New GoLang-Based HinataBot Exploiting Router and Server Flaws for DDoS Attacks
A New Security Category Addresses Web-borne Threats

Threat Wire

Exploits

LiveOverflow

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Reddit - Reverse Engineering
Showing names in SOLOQ champ select [League of legends] new
Obfuscating WebAssembly using Emscripten built with an LLVM-level obfuscator new
Build and launch online booking system for your business/e-commerce store. No coding required. - Join our Beta Program! Today's ProductHunt I'm hoping for your Feedback. new
Practical Introduction to BLE GATT Reverse Engineering: Hacking the EL500 Elliptical Trainer
Retro Game Mechanics Explained - Using Lakitu's Cloud to Defeat Bowser Quickly [YouTube, explanation of arbitrary code execution and other glitches]
Reverse Engineering a Windows 95 Game - Part II: Reversing (Undocumented) Settings
Disable AFK in WoW 3.3.5a - Reverse Engineering with Cheat Engine
Climbing the Beenastalk - How a BIOS got yanked
Reverse-engineering the multiplication algorithm in the Intel 8086 processor
Reverse engineering for beginners: a thread designed by our research team.
bobalkkagi 0.2.5 - Themida 3.1.x static unpacker and unwrapper
/r/ReverseEngineering's Weekly Questions Thread
Reddit - Game Hacks
Basketbros.io - Unlock Characters Hack new
Age of Magic v2.5.5 Hack Mod for Android new
Warrior Evolution: Fight v1.0.1 Hack Mod for Android new
Idle Angels v4.35.0.031702 Hack Mod for Android new
P2E Three Kingdoms Multiverse v0.4.7 Hack Mod for Android new
IDLE Death Knight v1.2.13080 Hack Mod for Android new
The Eminence in Shadow RPG v1.4.1 Hack Mod for Android
Dragons rise of berk
Fire Force Enbu no Shо̄ v1.1.2 Hack Mod for Android
. Buying your Minecon / OG minecraft accounts.
Medal Heroes : Return of the Summoners v3.5.7 Hack Mod for Android
ONE PIECE TREASURE CRUISE v12.4.1 Hack Mod for Android
Reddit - REGames
Ripping models from Dead or Alive Ultimate 2 (DX3DRipper not working)
Tools/Libraries for simple debugging?
making windows Kernel driver: exposing IOCTL interface to left click like an actual mouse?
[HIRING] Online Game Studio Looking For Developer/Reverse Engineer.
Haven't reversed games in *years*. Is there any recommended resources from this sub that can help me get back into the swing of things?
[HIRING] Online Studio Looking for Developer/Reverse Engineer
Reverse Engineered old Compression Algorithm for Frogger
how can i view these texture files is its posible.
Monster Seed PS1 Decrypting .DAT files
Extracting assets from PS2 ISO
Reimplementation of Super Metroid in C has started with buildable early version.
why doesnt il2cpp run
StackExchange - ReverseEngineering
Reverse engineering a flutter built apk new
Double constructor when reversing Unity game new
CAPE-sandbox signatures
IDA Pro 7, idc script to copy 8KB ROM to F000 Segment?
problem with LD_PRELOAD
Ida+Windbg alternative of Olly's "Back to user code" feature
WinDbg Preview search is not returning results
Please help with striped binary reverse
Android Hermes. Replace text to russian text (Cyrillic)
How can I disable watchdog in U-boot using mw command
Decyphering 8kbps audio file format used in Solar Chanting Lotus
Angr considers REP instruction as the end of a basic block

Guided Hacking

Malware/APT

Crypto

Reddit - Crypto
Does libsodium use constant time scalar mult for curve25519 + ed25519 keygen? new
Weekly cryptography community and meta thread new
Monthly cryptography wishlist thread
OpenSSL merged Argon2 support
How detectable is Steganography in the following context
OpenFHE (lattice cryptography library) is calling for participation in our Google Summer of Code!
ECC Algorithm
StackExchange - Crypto
Recovering the curve-point R from a signature ECDSA new
Issue with understanding Side Channel Attacks new
Why zero sharings are used to mask secret value to the masked value appears to be a random value? new
Computations over encrypted data [closed] new
How to verify that a JWT was in fact generated by the claimed issuer (iss)? new
Security implications of leaking d, e, and a ciphertext in an RSA calculation? [duplicate] new
Recover partially known ECC parameters from a single known point new
In CTR block cipher mode of operation, can I reuse the nonce with another key for encrypting another plaintext if using different counters? new
In Learning with errors, what is the relation between the size(or standard deviation) of errors and security? new
Rainbow What happened to signatures in the NIST standardization process? new
Which cryptographic attack here is feasible on RSA? [duplicate] new
Deriving secret keys vs generating and encrypting them

Seytonic

Podcasts

Security Weekly
PSW #776 - Santiago Torres Arias
PSW #775 - Ask Our PSW Hosts Anything!
PSW #774 - Asaf Cidon
Throwback Episode - PSW #480
PSW #773 - Ron Woerner
PSW #772 - Hal Pomeranz
PSW #772 - Hal Pomeranz
PSW #771 - Dan DeCloss
PSW #770 - Brian Behlendorf
Throwback Episode - Gary McGraw - PSW366
PSW #769 - Kate Stewart
PSW #768 - Robert Martin
Risky.Biz
Risky Business #699 -- BYOD risks ramp up
Risky Biz Soap Box: Six degrees of Domain Admin
Risky Business #698 -- Why LastPass was probably DPRK*
Risky Business #697 -- LastPass attacker: Do you gotta hand it to 'em?
Risky Business #696 -- Why Twitter had to kill SMS 2FA
An interview with Andrew Boyd, director of the CIA's Centre for Cyber Intelligence
Risky Biz Soap Box: Greynoise has built the world's biggest, and smartest, honeypot
Risky Business #695 -- North Korea is ransomwaring hospitals, Russia to make "patriotic" hacking legal
Risky Business #694 -- Cleansing fire claims ESXi, GoAnywhere servers
Risky Business #693 -- Hive takedown is the beginning, not the end
Risky Business #692 -- Google search results spew malware, phishing sites
Risky Biz Soap Box: Tools alone won't solve your vuln management problems
The CyberWire
Kathleen Smith: Translating the cyber world. [CMO] [Career Notes]
CISA Alert AA23-075A – #StopRansomware: LockBit 3.0.
ChatGPT grants malicious wishes? [Research Saturday]
Some movement in the cyber underworld. Vishing impersonates the US Social Security Administration. More SVB-themed phishing. And compromise without user interaction.
CISA warns of Telerik vulnerability exploitation. Cloud storage re-up attacks. Phishing tackle so convincing it will deceive the many. Cyber developments in Russia's hybrid war.
CISA Alert AA23-074A – Threat actors exploit progress telerik vulnerability in U.S. government IIS server. [CISA Cybersecurity Alerts]
Patch Tuesday notes. SVB's and the cybersecurity sector. SVR's APT29 is phishing for access to information. Trends in the Russo-Ukraine cyberwar. LockBit counts coup (says…
Silicon Valley Bank as phishbait. An “attack superhighway.” Unauthorized software in the workplace. YoroTrooper, a new cyberespionage threat actor. Hacktivists game, too. How crime pays.
Coping with Silicon Valley Bank's collapse. BatLoader's abuse of Google Search Ads. More on Emotet’s re-emergence. Medusa rising. NetWire collared. More-or-less quiet on the cyber…
Bat El Azerad: Find your niche to bring to the table. [CEO] [Career Notes]
Files stolen from a sneaky SymStealer. [Research Saturday]
Cybercrime and cyberespionage: IceFire, DUCKTAIL, LIGHTSHOW, Remcsos, and a tarot card reader. US cyber budgets, strategy, and a DoD cyber workforce approach. Five new ICS…
Cyber Security Interviews
#123 – Douglas Brush (Part 1): Guess Who’s Back, Dougie’s Back
ISC Daily Stormcast
ISC StormCast for Monday, March 20th, 2023 new
ISC StormCast for Friday, March 17th, 2023
ISC StormCast for Thursday, March 16th, 2023
ISC StormCast for Wednesday, March 15th, 2023
ISC StormCast for Tuesday, March 14th, 2023
ISC StormCast for Monday, March 13th, 2023
ISC StormCast for Friday, March 10th, 2023
ISC StormCast for Thursday, March 9th, 2023
ISC StormCast for Wednesday, March 8th, 2023
ISC StormCast for Tuesday, March 7th, 2023
Darknet Diaries
Presenting: Spycast "Black Ops: The Life of a Legendary CIA Shadow Warrior"
131: Welcome to Video

Threat Intel

Reddit - Onions
How to check that all my traffic is actually be routed through the tor network? new
How safe do you guys think I am? new
What about Personal Use? - Deep Dot Darknet new
Tor2Door new
Dread says can’t be reached new
Orders status? I’m a huge noob new
Is asap working and safe to deposit new
how safe is using tor on windows 10 if you are just ordering small amounts of substances for personal use? is a simple linux distro…
Fastly or AMP Snowflake
[March 18th] Dread Main Onion ONLINE, latest information
PGP keys
Finding company leaks on the Darknet
Reddit - Pwned
CISA: Multiple APTs exploited U.S. Government IIS Server, had access to a "federal civilian agency" from August to January 2023 new
Colorado city of Denver Public Schools hit by data breach; includes employee fingerprints, bank account numbers, driver's license numbers, passport numbers, student ID numbers, more
California City of Oakland's ransomware: employees' personal information released by cyberthieves - including data on senior officials
Spanish "Hospital Clinic de Barcelona" crippled by ransomware, forcing cancellation of 150 operations and ~3,000 patient checkups
TV-provider Dish Network's outage starting last week is due to ransomware, company finally admits
U.S. Marshals Service hit by ransomware attack; sensitive law enforcement data stolen incl. investigations data, employee data, and more
FBI New York Field Office breached in cyber attack - computer system used in investigations of images of child sexual exploitation affected by "cybersecurity incident"
Unprotected US military mail server exposed years of sensitive data belonging to the United States Special Operations Command (USSOCOM)
Food-producer Dole temporarily shut down North America production due to cyber attack, likely ransomware
Community Health Systems, one of US' largest healthcare providers, breached; personal data on up to 1 million patients stolen
Video game-maker Activision confirms data breach exposing employee and game info
GoDaddy: Hackers stole source code, installed malware in multi-year breach
HaveIBeenPwned
Shopper+ - 878,290 breached accounts
HDB Financial Services - 1,658,750 breached accounts
Eye4Fraud - 16,000,591 breached accounts
iD Tech - 415,121 breached accounts
LBB - 39,288 breached accounts
GunAuction.com - 565,470 breached accounts
Convex - 150,129 breached accounts
RealDudesInc - 101,543 breached accounts
Weee - 1,117,405 breached accounts
LimeVPN - 23,348 breached accounts
Truth Finder - 8,159,573 breached accounts
Instant Checkmate - 11,943,887 breached accounts

Privacy/VPNs

Slashdot - Rights
Online-Books Lawsuit Tests Limits of Libraries in Digital Age new
The Fed Had Already Spotted Big Problems at SVB Before Its Collapse new
Is Amazon Building a New AI-Powered Web Browser?
Dark Web 'BreachForums' Operator Charged With Computer Crime
Brazil Looks To Regulate Monetized Content On Internet
UK Backs Rolls-Royce Project To Build a Nuclear Reactor On the Moon
Cancer Patient Sues Hospital After Ransomware Gang Leaks Her Nude Medical Photos
New Zealand To Ban TikTok On Devices Linked To Parliament
The FBI And DOJ Are Investigating ByteDance's Use Of TikTok To Spy On Journalists
Authors Risk Losing Copyright If AI Content Is Not Disclosed, US Guidance Says
Amazon Sued For Not Telling New York Store Customers About Facial Recognition
FCC Orders Phone Companies To Block Scam Text Messages
Reddit - Privacy
How do I remove exif in linux? new
What is the least private phone os? new
Gmail keeps asking for my stolen phone number, how to make gmail understand, I don't have that phone number anymore? new
How save is our Reddit data from Tencent? new
How did the accumulation of private data become the norm? new
Privacy, or not so private new
Encrypting a usb drive folder that can be opened on Mac and Windows? new
Should I close my 5 year old bank account? new
Looking to get a second phone number attached to my phone new
How much can Facebook track within a given browser? new
18 Samsung and Pixel Phone Exploits - How Could I Have Known? new
Why You Should Opt Out of Sharing Data With Your Mobile Provider new
Reddit - VPN
Top 7 Best VPNs: How to Choose the Right One for You 😳 new
VPN on iPhone at Work new
Double VPN (router + pc) not working new
Suddenly getting unusable speeds on [COMMERCIAL VPN NAME HERE] new
What is M247 Europe SRL? new
Help setting up iron socket socks5 new
self hosted questions new
Undetectable VPS providers for VPN hosting? new
Affordable VPN capable router for streaming box? new
Concerns about VPN rankings new
Make a Notebook export vpn wifi? new
How come VPN service providers not get in trouble with illegal traffic? new
PrivacyTools.io
EFF
CBP Is Expanding Its Surveillance Tower Program at the U.S.-Mexico Border–And We're Mapping It new
What Policymakers Need to Know About the First Amendment and Section 230
Government Hasn't Justified a TikTok Ban
Civil Society Organizations Urge Ghana’s Parliament to Reject Repressive Anti-LGBTQ+ Bill
The Aftermath of Ola Bini’s Unanimous Acquittal by Ecuadorian Court
Tell the UK’s House of Lords: Protect End-to-End Encryption in the Online Safety Bill
Digital Rights Updates with EFFector 35.3
ADC's New Argentina Report Flags How ISPs Can Do More for Users’ Data Privacy
Even Rep. LaHood Likely Can't Sue the NSA or FBI to Protect His Rights
This Texas Bill Would Systematically Silence Anyone Who Dares to Talk About Abortion Pills
Why We’re Suing to Protect the Right of Incarcerated People to Receive Physical Mail
The Foilies 2023

Help Wanted

Reddit - AskNetSec
Any Discord/Slack channel recommendations for IR and/OR GRC related topics? new
Breaking into the field new
CVE-2023-23397 mitigations and questions new
How do I best improve my universities CTF team? new
Help with Cybersecurity from scratch new
VPN Question to you Security Nuts! new
Morning News/Article Reading Suggestions new
Are app-lock apps safe? new
Lastpass sucks. Which is the best alternative?
How to ban all VPNs on my website?
What Cybersecurity course to do to become an expert for a career path in an IT company
API cost/benefit analysis question
Reddit - Netsec Students
Degree Choice Impasse new
Do you know if the defense-in-depth strategy is still in use? new
Can anyone please give us a roadmap for the things i need to learn in Cyber Security? like general concepts and the tools that we… new
Pitting ChatGPT against common Cyber Security MCQ Exam Questions new
IP Tools - a Network Managing App
Help choosing between CCNP Security and CASP+ for cybersecurity certification?
Assignment help: Express Middleware Authentication (Node.js)
Help in Class?
Delivering Malware via Microsoft OneNote
Introduction to Windows Shortcut LNK Abuse
I’m an intern at a leading Post-Quantum Cybersecurity company. AMA
A simple configuration could anyone pls create the file so I can download?
Stackoverflow - Security
Setting up a measured boot on Raspberry Pi using a TPM 2.0 module new
Do I need a separate ssh authentication and ssh-git signing keys? new
avoid back-navigation and recover user 404s in SvelteKit new
Turning off SIM lock via ADB service calls or similar method new
How to use OAuth 2 without a client id? new
Using C# and Microsoft Outlook Interop. How to set trusted status? new
Is there an other approach to Cordova and Cordova-native plugins are expecting to allow access for localhost while using Keycloak? new
Store sudo password within bash environment variables - the paranoid way new
Why trivy scanner found vulnerabilities for dependencies that do not exist in my project? new
Remove basic GCP IAM roles for any newly created account new
How to make JavaScript code safe and secure so that API Key values cannot be open to public yet available for JavaScipt to process the… new
Spring boot API key setup for azure web app
Stack Exchange
This is supposed to be vulnerable to SQL injection but I can't really see how. Is it really that bad? new
Why does the fingerprint of a GPG key change after it is made a sub key? new
Can a VPN router be detected by a proctored online exam? [closed] new
Computations over encrypted data [migrated] new
Authorizing Access using AD with an API Gateway new
Ways to safeguard Internet users from fraudulent websites new
Help: Does this website contain malware? [closed] new
XSS bypass in url new
Windows Certificate Propagation Service configuration
Configure Comodo Internet Security to Allow Windows Sandbox to get internet [migrated]
Does this journalctl log look like my SCSI HDD is well and truly dead? [migrated]
I'm getting hacked, can't do a thing to stop it. my iphone, my personal computer [closed]

Locks/Social Engineering

Reddit - Lockpicking
Took your advice and got Sparrows picks (and a cutaway lock to learn on)! My first open ❤️ new
This Old Lock - Episode 6 - #thisoldlock #lockhistory #lockpicking #lock... new
MasterLock ProSeries 6230 new
Master 150 opened! Advice on English lever locks? new
Does anyone know what lock this is? new
Happy Spring! REMINDER - Celebration Draw for American 1100 Golden Flying Red Buddha CUTAWAY - deadline March 29 midnight. Find out how to enter, below. new
Danish locks🙂 new
Mini Lock Monday for March 20th, 2023 new
Need advice to pick a lock new
[194] "unpickable" 3D printed combination lock by u/beckreddit decoded and gutted new
how does this lock works? Are those sliders? new
My Lockpick kit. new
Reddit - Social Engineering
How do you demonstrate thoughtfulness through words? new
Why doesn't Cialdini mention basic emotions - like fear? new
If anybody wants to make some quick money guranteed hit me on telegram @unknownuser0981 for all methods new
Is the laws of human nature worth reading? new
No social life! No friends! Young, successful, good looking couple in Florida
I have no friends and I want to learn how to use Bumble BFF
What small mutual struggles are good for bonding?
Social Engineering with Voice Cloning in Real Time
Lost discord account
Looking for a profiling tool
Girl flakes on a date with me and then wants to hangout with friends. How can I recover?
A new choices-matter Steam indie game that demands the player psychoanalyze and use persuasive techniques to avoid conflict! (DEMO OUT)

Hak5

Security Blogs

Whitehat Security Blog
HITB News
Microsoft is testing a built-in cryptocurrency wallet for the Edge browser new
Fears of wider hacking theft as Latitude stays offline new
Anthropic introduces Claude, a “more steerable” AI competitor to ChatGPT new
Should You Wait for Wi-Fi 7 Before Upgrading Your Router?
AI imager Midjourney v5 stuns with photorealistic images—and 5-fingered hands
Federal agency hacked by 2 groups thanks to flaw that went unpatched for 4 years
Where did FTX customer money go? Firm says Bankman-Fried took $2.2 billion
ChatGPT’s API Is Here. Let the AI Gold Rush Begin
Stealthy UEFI malware bypassing Secure Boot enabled by unpatchable Windows flaw
After Musk’s mass layoffs, one engineer’s mistake “broke the Twitter API”
Microsoft aims to reduce “tedious” business tasks with new AI tools
Threat actors are using advanced malware to backdoor business-grade routers
The RISKS Digest
Cerebral admits to sharing patient data with Meta, TikTok, Google
Re: Terms of enscamment?
Vanishing phone customer support is driving us all insane
Re: Everyone is special, SMS-Based Multi-Factor Authentication
Noncompete clauses are everywhere, even for dancers and hair stylists
Quebec residents can now freeze their credit files
Samsung caught faking zoom photos of the Moon
Ransomware Group Claims Hack of Amazon's Ring
Verizon Copies T-Mobile's Popular Offer -- With Two Big Catches
Re: Why the Floppy Disk Just Won't Die
Microsoft lays off an ethical AI team as it doubles down on OpenAI
BlackMamba
Kaspersky Blog
Zero-click remote hacks for Samsung, Google, and Vivo smartphones | Kaspersky official blog new
Transatlantic Cable podcast, episode 290 | Kaspersky official blog
Copyright infringement, add a link | Kaspersky official blog
Update iPhone to iOS 16.3 and Mac to macOS Ventura 13.2 | Kaspersky official blog
How scammers swindle money out of new employees | Kaspersky official blog
Smart device vulnerabilities and securing against them | Kaspersky official blog
How to protect funds being stolen from bank cards with a chip and NFC | Kaspersky official blog
Transatlantic Cable podcast, episode 289 | Kaspersky official blog
Safe Chrome and Firefox settings for your organization | Kaspersky official blog
Why you shouldn’t use desktop messengers | Kaspersky official blog
Can your business switch to open-source and free applications? | Kaspersky official blog
How secure are authenticator apps? | Kaspersky official blog
Adam Shostack & friends
Security Bloggers Network
How to Ensure Your Development Complies With SOC 2 new
The AI Risk Landscape: How ChatGPT Is Shaping the Way Threat Actors Work new
USENIX Security ’22 – ‘Security At The End Of The Tunnel: The Anatomy Of VPN Mental Models Among Experts And Non-Experts In A Corporate Context’ new
Industry 4.0 vs. Smart Factory: What Will the Future Look Like? new
How Hackers are Exploiting Cloud Organizations | Eureka Security new
Six Ways to Foster a Security Mindset in Engineering Teams new
Identity Fabric: Why it’s Important for Identity Security new
DNSSEC is the Key to a Healthy Future for the Internet new
Embracing Biometric Identity Verification: A Look at Belgium and Kuwait Telecoms new
Digital Spring Cleaning: Tips for a More Secure Active Directory new
Eliminating Enterprise Passwords Is Now Possible new
Passwordless Demystified new
Graham Cluley
Free decryptor released for Conti-based ransomware following data leak
Android phones can be hacked just by someone knowing your phone number
Smashing Security podcast #313: Tesla twins and deepfake dramas
Microsoft has another go at closing security hole exploited by Magniber ransomware
Software supply chain attacks are on the rise — are you at risk?
STALKER 2 hacker demands Ukrainian game developer reinstates Russian language support, or else…
FBI reveals that more money is lost to investment fraud than ransomware and business email compromise combined
WhatsApp and UK government on collision course, as app vows not to remove end-to-end encryption
Pirated copies of Final Cut Pro infect Macs with cryptojacking malware
TSA tells US aviation industry to boost its cybersecurity
Smashing Security podcast #312: Super grannies, bar trolls, and US Marshals
Study reveals companies are wasting millions on unused Kubernetes resources
ThreatPost
Rapid7
MITRE ATT&CK® Mitigations: Thwarting Cloud Threats With Preventative Policies and Controls
Rapid7 Threat Command Delivered 311% ROI: 2023 Forrester Consulting Total Economic Impact™ Study
Build Security Muscle Memory With Tabletop Exercises
Three Steps for Ramping Up to Fully Automated Remediation
Patch Tuesday - March 2023
Microsoft Defender for Cloud Management Port Exposure Confusion
Executive Webinar: Confronting Security Fears to Control Cyber Risk, Part Two
Cloud Security Strategies for Healthcare
Metasploit Weekly Wrap-Up
[The Lost Bots] S03E01: Tech Stack Consolidation and Bacon
What Tech Companies Should Look For in Cloud Security
Vulnerability Management vs. Vulnerability Assessment
digitalmunition
Hacker News (YCombinator) - Security
MailChimp blacklists your IP if you open the browser's dev tools new
ChatGPT is rendering other people's chat history in the sidebar new
Supreme Court asked to strike down immunity for police who brutally beat student new
Supreme Court Asked to Strike Down Immunity for Police Who Brutally Beat Student new
Windows Critical ICMP Remote Code Execution Vulnerability new
Credit Suisse’s $17B of Risky Bonds Are Now Worthless new
Data from Atlassian dumped online after apparent hack new
Methylmercury in thawing permafrost new
Learning the ropes: why Germany is building risk into its playgrounds (2021)
The Curious Case of a Memory Leak in a Zig Program
The curious case of a memory leak in a Zig program
Firefox 66 to block automatically playing audible video and audio (2019)
eHacking News
Hacker Noon #Security
Wired - Security
Online Sleuths Untangle the Mystery of the Nord Stream Sabotage new
I Got Investigated by the Secret Service. Here's How to Not Be Me
Security News This Week: Ring Is in a Standoff With Hackers
Senator Warner on the Restrict Act and a US TikTok Ban
This Is the New Leader of Russia's Infamous Sandworm Hacking Unit
AI-Generated Voice Deepfakes Aren’t Scary Good—Yet
The World’s Real ‘Cybercrime’ Problem
A Spy Wants to Connect With You on LinkedIn
Ransomware Attacks Have Entered a ‘Heinous’ New Phase
How a Catholic Group Doxed Gay Priests
‘Pig Butchering’ Scams Are Now a $3 Billion Threat
Congressman Darin LaHood Says FBI Targeted Him With Unlawful 'Backdoor' Searches
Control C
Monero for privacy, safety and freedom
Orbot Tor VPN on Graphene OS
KeePassXC - Cross-Platform Password Manager
Graphene OS Introduction
Flipper Zero
Briar Secure Messenger
Krebs on Security
Feds Charge NY Man as BreachForums Boss “Pompompurin”
Microsoft Patch Tuesday, March 2023 Edition
Sued by Meta, Freenom Halts Domain Registrations
Highlights from the New U.S. Cybersecurity Strategy
When Low-Tech Hacks Cause High-Impact Breaches
Who’s Behind the Botnet-Based Service BHProxies?
New Protections for Food Benefits Stolen by Skimmers
Microsoft Patch Tuesday, February 2023 Edition
U.S., U.K. Sanction 7 Men Tied to Trickbot Hacking Group
KrebsOnSecurity in Upcoming Hulu Series on Ashley Madison Breach
Finland’s Most-Wanted Hacker Nabbed in France
Experian Glitch Exposing Credit Files Lasted 47 Days
Naked Security
Dangerous Android phone 0-day bugs revealed – patch or work around them now!
S3 Ep 126: The price of fast fashion (and feature creep) [Audio + Text]
Microsoft fixes two 0-days on Patch Tuesday – update now!
Firefox 111 patches 11 holes, but not 1 zero-day among them…
Linux gets double-quick double-update to fix kernel Oops!
SHEIN shopping app goes rogue, grabs price and URL data from your clipboard
S3 Ep125: When security hardware has security holes [Audio + Text]
Serious Security: TPM 2.0 vulns – is your super-secure data at risk?
DoppelPaymer ransomware supsects arrested in Germany and Ukraine
Feds warn about right Royal ransomware rampage that runs the gamut of TTPs
S3 Ep124: When so-called security apps go rogue [Audio + Text]
LastPass: Keylogger on home PC led to cracked corporate password vault
Schneier on Security
Friday Squid Blogging: New Species of Vampire Squid Lives 3,000 Feet below Sea Level
How AI Could Write Our Laws
NetWire Remote Access Trojan Maker Arrested
Friday Squid Blogging: Chinese Squid Fishing in the Southeast Pacific
Elephant Hackers
Another Malware with Persistence
BlackLotus Malware Hijacks Windows Secure Boot Process
Prompt Injection Attacks on Large Language Models
New National Cybersecurity Strategy
Friday Squid Blogging: We’re Almost at Flying Squid Drones
Nick Weaver on Regulating Cryptocurrency
Dumb Password Rules
Linux Security
Amazon Linux 2023, a Cloud-Optimized Linux Distro, Is Now Available new
ManageEngine Vulnerability Manager Plus: How To Protect Your Enterprise from Security Vulnerabilities new
Researcher Creates Polymorphic Blackmamba Malware with ChatGPT new
High-Impact DoS, Arbitrary Code Execution, Spoofing Bugs Fixed in Thunderbird 102.9.0
Thunderbird 102.9.0 is a security update for the open source email client
Business Conditions Prime for More Open-Source Contributors
Pentesters' Fave Kali Linux Turns 10 with Version 23.1
NordVPN Makes its Meshnet Private Tunnel Free for Everyone
5 Best free to use Linux Server distributions for 2023
Kali Linux 2023.1 Introduces 'Purple' Distro for Defensive Security
A Guide to Business Cybersecurity: Common Digital Attacks and Precautions
New Linux IceFire Ransomware Variant Discovered: What You Need to Know to Secure Your Systems
Dark Reading
Cyberattackers Hoop NBA Fan Data via Third-Party Vendor new
SecurityBridge Introduces The SAP Management Dashboard new
Shouldering the Increasingly Heavy Cloud Shared-Responsibility Model new
How CISOs Can Work With the CFO to Get the Best Security Budget
Microsoft Azure Warns on Killnet's Growing DDoS Onslaught Against Healthcare
Prancer Announces Integration With ChatGPT for Enhanced Security Assessments
Microsoft Outlook Vulnerability Could Be 2023's 'It' Bug
Technology Firms Delivering Much-Sought Encryption-in-Use
Low-Budget 'Winter Vivern' APT Awakens After 2-Year Hibernation
The Ethics of Network and Security Monitoring
Meta Proposes Revamped Approach to Online Kill Chain Frameworks
Leveraging Behavioral Analysis to Catch Living-Off-the-Land Attacks
Securelist
Business on the dark web: deals and regulatory mechanisms