Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Tools

Vulnerabilities

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

PacketStorm
Bugs Allowed Hackers To Dox All John Deere Ownersnew
Telegram Platform Abused In ToxicEye Malware Campaignsnew
SolarWinds Hack Analysis 56% Boost In Command Server Footprintnew
Zero-Day Vulns In SonicWall Email Security Are Being Exploited
Campaign Targets Bloomberg Clients With RATs
Lessons Learned From SolarWinds And Exchange Hacks
MI5 Warns Of Spies Using LinkedIn To Trick Staff Into Spilling Secrets
Facebook Downplays Data Breach In Internal Email
Lazarus Hacking Group Now Hides Payloads In BMP Image Files
China-Linked Hackers Used Pulse Secure Flaw To Target US Defense Industry
Geico Breach Let Fraudsters Steal Drivers' License Numbers
High-Level Organizer Of FIN7 Hacking Group Gets Ten Years In Prison
The Register
If you have a QNAP NAS, stop what you're doing right now and install latest updates. Do it before Qlocker gets younew
US aviation regulator warns of mid-air collision risk if Garmin TCAS boxes are not updatednew
MI5 wants to shed its cocktail-guzzling posho image – so it's opened an Instagram accountnew
Apple, you've AirDrop'd the ball: Academics detail ways to leak contact info of nearby iThings for spear-phishingnew
Asian buyers set for security spending spree to catch up on shabby strategies
Signal app's Moxie says it's possible to sabotage Cellebrite's phone-probing tools with booby-trapped file
Apple supplier Quanta Computer confirms it's fallen victim to ransomware attack
UK.gov wants mobile makers to declare death dates for their new devices from launch
Half of Q1's malware traffic observed by Sophos was TLS encrypted, hiding inside legit requests to legit services
REvil ransomware gang claims it stole top-secret tech designs – including Apple lappies – from Quanta Computer
Your cloud security is static – and you’re open to more risk than you realize
Japan accuses Chinese military of cyber-attacks on its space agency
Reddit - NetSec
Leaky John Deere API’s: Serious PII & Food Supply Chain Vulnerabilities Discovered In John Deere Websitenew
Duo two-factor authentication bypassnew
pe - Golang package to parse Windows PE files that is fast, complete and robust against malformed files.
Telegram bug bounties: XSS, privacy issues, official bot exploitation and more…
Exploiting vulnerabilities in Cellebrite UFED and Physical Analyzer from an app’s perspective
Remote code execution in Homebrew by compromising the official Cask repository
Azure Application Proxy C2
An Intro to Smart Contract Security for Pentesters | iosiro
Detect and exploit OS command injection vulnerabilities against #GraphQL applications via commix.
HabitsRAT Used to Target Linux and Windows Servers
Streaming encryption implementation, based on Encrypted Content-Encoding for HTTP (RFC 8188)
Hacking 3,000,000 apps at once through CocoaPods
Bleeping Computer
Microsoft releases first non-subscription Office 2021, LTSC previewsnew
Windows 10 1909 KB5001396 cumulative update preview releasednew
NVIDIA staff suggests rolling back Windows 10 update to fix game issuesnew
Botnet backdoors Microsoft Exchange servers, mines cryptocurrencynew
Windows 10 News and Interests taskbar news feed rolling out worldwidenew
Exchange Online down: Microsoft 365 outage affects email deliverynew
QNAP removes backdoor account in NAS backup, disaster recovery appnew
Attackers can hide 'external sender' email warnings with HTML and CSSnew
Signal CEO gives mobile-hacking firm a taste of being hacked
Microsoft Autoruns is crashing when listing Windows 10 startups
Windows 10 now lets you seamlessly run Linux GUI apps
Windows 10 Task Manager now lets you throttle resource-hungry apps
The Hacker News
Researchers Find Additional Infrastructure Used By SolarWinds Hackersnew
Cost of Account Unlocks, and Password Resets Add Upnew
Cybercriminals Using Telegram Messenger to Control ToxicEye Malwarenew
Facebook Busts Palestinian Hackers' Operation Spreading Mobile Spywarenew
1-Click Hack Found in Popular Desktop Apps — Check If You're Using Them
Improve Your Cyber Security Posture by Combining State of the Art Security Tools
Hackers threaten to leak stolen Apple blueprints if $50 million ransom isn't paid
Update Your Chrome Browser ASAP to Patch a Week Old Public Exploit
3 Zero-Day Exploits Hit SonicWall Enterprise Email Security Appliances
WARNING: Hackers Exploit Unpatched Pulse Secure 0-Day to Breach Organizations
Over 750,000 Users Downloaded New Billing Fraud Apps From Google Play Store
[eBook] Why Autonomous XDR Is Going to Replace NGAV/EDR

Threat Wire

Exploits

Packet Storm Exploits
BMD BMDWeb 2.0 Cross Site Scriptingnew
Packed.Win32.Black.d Unauthenticated Open Proxynew
OTRS 6.0.1 Remote Command Executionnew
Backdoor.Win32.DarkKomet.artr Insecure Permissionsnew
Trojan-Dropper.Win32.Agent.xtp Insecure Permissionsnew
RemoteClinic 2.0 Cross Site Scriptingnew
IM-Worm.Win32.Bropia.aa Insecure Permissionsnew
HEUR.Trojan.Win32.Generic Insecure Permissionsnew
CMS Made Simple 2.2.15 Cross Site Scriptingnew
GravCMS 1.10.7 Remote Command Execution
Cockpit CMS 0.11.1 NoSQL Injection / Remote Command Execution
Adtran Personal Phone Manager 10.8.1 DNS Exfiltration
Exploit-DB Webapps
[webapps] OTRS 6.0.1 - Remote Command Execution (2)
[webapps] CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)
[webapps] RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting (XSS)
[webapps] RemoteClinic 2.0 - 'Symptoms' Stored Cross-Site Scripting (XSS)
[webapps] Fast PHP Chat 1.3 - 'my_item_search' SQL Injection
[webapps] Multilaser Router RE018 AC1200 - Cross-Site Request Forgery (Enable Remote Access)
[webapps] WordPress Plugin RSS for Yandex Turbo 1.29 - Stored Cross-Site Scripting (XSS)
[webapps] BlackCat CMS 1.3.6 - 'Multiple' Stored Cross-Site Scripting (XSS)
[webapps] Discourse 2.7.0 - Rate Limit Bypass leads to 2FA Bypass
[webapps] RemoteClinic 2 - 'Multiple' Cross-Site Scripting (XSS)
[webapps] rconfig 3.9.6 - Arbitrary File Upload to Remote Code Execution (Authenticated) (2)
[webapps] OpenEMR 5.0.2.1 - Remote Code Execution
Exploit-DB Local and Privilege Escalation
[local] MariaDB 10.2 /MySQL - 'wsrep_provider' OS Command Execution
[local] Google Chrome V8 Engine 8.9.40 - Remote Code Execution
[local] Rockstar Service - Insecure File Permissions
[local] Ext2Fsd v0.68 - 'Ext2Srv' Unquoted Service Path
[local] Hi-Rez Studios 5.1.6.3 - 'HiPatchService' Unquoted Service Path
[local] ELAN Touchpad 15.2.13.1_X64_WHQL - 'ETDService' Unquoted Service Path
[local] ActivIdentity 8.2 - 'ac.sharedstore' Unquoted Service Path
[local] Elodea Event Collector 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service Path
[local] Winpakpro 4.8 - 'GuardTourService' Unquoted Service Path
[local] SAPSetup Automatic Workstation Update Service 750 - 'NWSAPAutoWorkstationUpdateSvc' Unquoted Service Path
[local] Winpakpro 4.8 - 'ScheduleService' Unquoted Service Path
[local] Winpakpro 4.8 - 'WPCommandFileService' Unquoted Service Path
Exploit-DB DoS
[dos] Hasura GraphQL 1.3.3 - Denial of Service
[dos] glFTPd 2.11a - Remote Denial of Service
[dos] DD-WRT 45723 - UPNP Buffer Overflow (PoC)
[dos] ProFTPD 1.3.7a - Remote Denial of Service
[dos] KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Device Reboot (Unauthenticated)
[dos] Nsasoft Hardware Software Inventory 1.6.4.0 - 'multiple' Denial of Service (PoC)
[dos] Product Key Explorer 4.2.7 - 'multiple' Denial of Service (PoC)
[dos] SpotAuditor 5.3.5 - 'multiple' Denial Of Service (PoC)
[dos] Managed Switch Port Mapping Tool 2.85.2 - Denial of Service (PoC)
[dos] AgataSoft PingMaster Pro 2.1 - Denial of Service (PoC)
[dos] Nsauditor 3.2.2.0 - 'Event Description' Denial of Service (PoC)
[dos] jQuery UI 1.12.1 - Denial of Service (DoS)
Exploit-DB Shellcode
Exploit-DB Papers
Exploit-DB Remote
[remote] Tenda D151 & D301 - Configuration Download (Unauthenticated)
[remote] vsftpd 2.3.4 - Backdoor Command Execution
[remote] Linux Kernel 5.4 - 'BleedingTooth' Bluetooth Zero-Click Remote Code Execution
[remote] Google Chrome 81.0.4044 V8 - Remote Code Execution
[remote] Google Chrome 86.0.4240 V8 - Remote Code Execution
[remote] vsftpd 3.0.3 - Remote Denial of Service
[remote] KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Weak Default WiFi Password Algorithm
[remote] KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 - Hard coded Credentials Shell Access
[remote] Microsoft Exchange 2019 - SSRF to Arbitrary File Write (Proxylogon)
[remote] Golden FTP Server 4.70 - 'PASS' Buffer Overflow (2)
[remote] CatDV 9.2 - RMI Authentication Bypass
[remote] AnyDesk 5.5.2 - Remote Code Execution

LiveOverflow

Vulnerabilities

Tools

Exploit Dev

Reddit - Exploit Dev
Fuzzing Rust crate library (ical-rs) using honggfuzz-rs (Youtube/Tutorial)
can you like the video you dont need to watch it i wanna try something with the algorithm
qrljacker for whatsapp
best resources for learning binary exploitation ?
Anyone here transitioned from SOC Analyst role to an Application Security Engineer role?
Ret2Libc help
Immunityinc Linux Kernel Exploitation
I've written a tool for generating automatically MIPS reverse shell shellcodes (custom IP, port and shell)
windows vulnserver help
Learn how hackers mirror smartphones.
Test Exploit in Android Smartphone.
Fuzzing JavaScript npm/nodejs/code (omggif) using jsfuzz (Youtube/Tutorial)
Source Incite
Smarty Template Engine Multiple Sandbox Escape PHP Code Injection Vulnerabilities
Google Project Zero
Policy and Disclosure: 2021 Edition
Who Contains the Containers?
In-the-Wild Series: October 2020 0-day discovery
Déjà vu-lnerability
A Look at iMessage in iOS 14
Security Researchers
Ethics: University of Minnesota's hostile patches
Tenet: A Trace Explorer for Reverse Engineers
SonarQube 8.9 LTS: standby for launch
Discover SonarCloud’s new project experience. Join the beta today!
New Book! The Best of TaoSecurity Blog, Volume 4
Detectify Security Updates for 12 April
Modern application security requires speed, scale, and collaboration
關於 TikTok 與抖音的常見問題
Humans of Detectify: You don’t need to be an expert to get into security
Code Vulnerabilities in NSA Application Revealed
Our reasoning for Outflank Security Tooling
The Origins of the Names TaoSecurity and the Unit Formerly Known as TAO

Reversing/I like ASM

Reddit - Reverse Engineering
The B-29 that Fought without a Tailnew
Reverse Engineering, Debugging and Malware Analysis – 2021 - free course from udemynew
CVE-2021-20226: A reference-counting bug in the Linux kernel io_uring subsystem that can be leveraged for local privilege escalationnew
Signal: Exploiting vulnerabilities in Cellebrite UFED and Physical Analyzer from an app's perspective
We Found a Pre-Released WhatsApp Feature - Technical Analysis
Design software program war - SketchupFamily
CVE-2021-30481: Source engine remote code execution via game invites
Tenet: A Trace Explorer for Reverse Engineers (IDA Pro Plugin)
Bug in Notepad Involving Asterisk in Title Bar
Malware Analysis of a Password Stealer
CVE-2021-3493: a vulnerability in OverlayFS allows local users under Ubuntu to gain root privileges
Reverse-engineering a vintage comparator chip
Reddit - Game Hacks
Apex Legend Hacksnew
NBA 2K21 CURRENT GEN EVENTS WITHOUT WINNING HOW TO DO FILES
Cheating community (Deep Rock Galatic, Outriders and many more games)
NEW OUTRIDERS CHEATING DISCORD
OHN STRAPPED 1.4 EXCELLENT SCRIPT SETUP TUTORIAL!! BEST SCRIPT IN NBA 2K21
Selling private Valorant cheat for cheap
THE BEST RUST HACKS/SCRIPTS FOR AN AFFORDABLE PRICE (ESP+, Scripts, Aimbot, etc)
hacks
NBA 2K21 BEST VC GLITCH CURRENT GEN 4,500 VC EVERY 3 MINUTES *MUST WATCH*
COLD WAR + MODERN WAREFARE SERVICES!
Looking to buy lifetime Valorant Hack
2021 PPSSPP Emulator Full Mac Setup Tutorial (Sony PSP Emulator) - PlayStation Emulator, Emu, PS
Reddit - REGames
[PS2] Unreferenced strings in vtables?new
Decompiling game to add new language
Moving away an app from GCM
My Efforts in MMORPG Server Emulation
Can anyone please help hook into DirectX mode used by Starcraft 2?
Total Overdose (engine & tools)
Manic Miner 2021 project by TobyLobster — disassembly and improvements for BBC Micro version of Manic Miner
How to find the copyright owner of an old game?
Problems generating and applying FLIRT signatures in IDA for UE4 project
Reverse engineering LEGO Island 2: part 2 of 2
[TUTORIAL]Stealthy way to hijack the existing game process handle within the game launcher (Steam and Blizzard/Battle.net launchers)
Is it possible to Reverse Engineer HTML5 game "Galactic Monster Quest"
StackExchange - ReverseEngineering
reversing an HDL filenew
devirtualize? or what is this obfuscator? and how to get rid of thisnew
Reverse Engineering Classes in ARMnew
Tool/parser for symbol tables produced with objdump -t to be used with IDA / Ghidra?new
How do I extract the firmware from this bluetooth speaker board?new
Analyzing a possibly malware samplenew
Tool for finding API in x86 code
Reverse engineer sticky notes to allow external script to open new notes
Local KD -- can't access physical address 0xFFFFFFF0 but you can with RwEverything
IDA Pro - How to remove multi-line bit definitions for register
Are there any 64 bit MIPS decompilers
IDA Pro - reverse Program while it's

Guided Hacking

Malware/APT

Reddit - Malware
Usage Share of Most Popular Antivirus Brands (1997 - 2020)new
Sample of ÿ.exe from Leurak
possibly have ransomware
Easy Malware to Reverse Engineer
Emotet vbs script complains with "Expected Sub" errors even though I already have sub
How to setup Android as Rubber Ducky without NetHunter - part 2
Malware Analysis Reports
Sample Deleted When Importing to IDA or Cutter
Current or former malware analysts/forensic folks that worked with malware, I am looking for some guidance
[Video] Malware Theory - Imphash algorithm explained
Hey Im here to ask if this is a false report
Carbine Loader Cryptojacking Campaign
Unit42
Are Your Nagios XI Servers Turning Into Cryptocurrency Miners for Attackers?
Actor Exploits Microsoft Exchange Server Vulnerabilities, Cortex XDR Blocks Harvesting of Credentials
New Vulnerability Affecting Container Engines CRI-O and Podman (CVE-2021-20291)
Threat Assessment: Clop Ransomware
Network Attack Trends: Internet of Threats (November 2020-January 2021)
Emotet Command and Control Case Study
Attackers Conducting Cryptojacking Operation Against U.S. Education Organizations
Wireshark Tutorial: Examining Traffic from Hancitor Infections
Highlights from the Unit 42 Cloud Threat Report, 1H 2021
2020 Phishing Trends With PDF Files
Hancitor’s Use of Cobalt Strike and a Noisy Network Ping Tool
Wireshark Tutorial: Decrypting RDP Traffic
FireEye Threat Research
Zero-Day Exploits in SonicWall Email Security Lead to Enterprise Compromise
Check Your Pulse: Suspected APT Actors Leverage Authentication Bypass Techniques and Pulse Secure Zero-Day
Check Your Pulse: Suspected APT Actors Leverage Authentication Bypass Techniques and Pulse Secure Zero-Day
Hacking Operational Technology for Defense: Lessons Learned From OT Red Teaming Smart Meter Control Infrastructure
Hacking Operational Technology for Defense: Lessons Learned From OT Red Teaming Smart Meter Control Infrastructure
M-Trends 2021: A View From the Front Lines
Back in a Bit: Attacker Use of the Windows Background Intelligent Transfer Service
Back in a Bit: Attacker Use of the Windows Background Intelligent Transfer Service
Detection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities
New SUNSHUTTLE Second-Stage Backdoor Uncovered Targeting U.S.-Based Entity; Possible Connection to UNC2452
New SUNSHUTTLE Second-Stage Backdoor Uncovered Targeting U.S.-Based Entity; Possible Connection to UNC2452
Fuzzing Image Parsing in Windows, Part Two: Uninitialized Memory

Bug Bounties

Crypto

Reddit - Crypto
Is VeraCrypt the best way to encrypt a hard drive?new
Jet farmsnew
Demystifying Aggregatable Distributed Key Generation (DKG)new
Alguna crypto nueva para comprar ?
Is there a judgeless blockchain transaction system?
4/22 CRYPTO KOREA PREMIUM 13.5%
$via??
Calculus in Cryptography
Child Public Key and Child Private Key for better Security?
$976 is good for Gigabyte Radeon RX 6700 XT ?
Do I really need to understand the inner workings of cryptographic algorithms?
University Project "Create your own hashing algorithm" -- Help me.
StackExchange - Crypto
Question about variations on Vigenere ciphernew
Finding shortest LFSR for periodic and aperiodic sequencesnew
effects of complementing and deleting output bits on LFSR ouputnew
Known text attack on Hash function (SHA 256 or SHA512)new
Prime factorization (99 digits)new
Are SHA-256 and SHA-512 collision resistant?new
Do I need an inititalization vector if I don't care about message leaking?new
Can SHA256 hash be considered as a secure key proof?new
Should I encrypt the signature along with the message?new
Number of false keys in exhaustive key search for block ciphersnew
Is AES/CBC/NoPadding vulnerable to padding oracle?new
Use the Index Calculus to solve for $19^x equiv 205$ (mod 337), using the factor base B = {2,3,5,7}

Podcasts

Security Weekly
The Hunt for Red October - PSW #690
Short Term Memory Issues - PSW #689
You Want More Budweiser? - PSW #688
Don't Waste Bourbon - PSW #687
We're A Lot Happier - PSW #686
As Long As You're Happy - PSW #685
Coming To A Theatre Near You - PSW #684
Party Time! - PSW #683
Annual Checkup - PSW #682
Get Out of My House - PSW #681
Risky.Biz
Snake Oilers: Greynoise! MergeBase! Votiro!
Risky Business #620 -- Project Zero burns Western counterterrorism operation
Risky Business #619 -- REvil crew demands $50m from Acer
Risky Biz Soap Box: 12 years since Operation Aurora. Have we learned anything?
Risky Business #618 -- MS security licensing faces congressional scrutiny
Risky Biz Feature Podcast: Chasing crooks through the blockchain
Risky Business #617 -- Exchangapalooza '21
Risky Business #616 -- Exchange 0day party time for Chinese APT crew
Risky Biz Soap Box: ExtraHop CTO and co-founder Jesse Rothstein
Risky Business #615 -- Dependency confusion is, uh, pretty bad
Risky Biz Feature Podcast: A primer on Microsoft cloud security
Risky Business #614 -- So was it Florida Man or an Iranian APT?
The CyberWire
VPN users remediate systems. New Supernova infection. Cryptojacking botnet afflicts vulnerable Exchange Servers. Facebook takes down spyware groups. Ransomware. Cellebrite bug found.new
SonicWall, Pulse Secure products under exploitation (mitigations are available). Power grid security. Cyber conflict in the Near Abroad. ISIS worries about Bitcoin. Bad passwords.
Codecov supply chain attack update. Babuk’s victim service. Catphishing in LinkedIn. Sanctioned company responds. SolarWinds, Exchange compromise TFs stand down. 5 Eyes notes. IoT risk.
Codecov may have sustained a supply chain attack. Natanz sabotage update. Big data gangs. Protecting ransomware gangs. Counterretaliation in the SolarWinds affair.
Aviv Grafi: There needs to be fundamental changes in security. [CEO] [Career Notes]
Social engineering: MINEBRIDGE RAT embedded to look like job résumés. [Research Saturday]
Imposing costs and sending signals (and prominently naming Cozy Bear). More speculation about the Natanz explosion. And a shift in the criminal-to-criminal economy.
The IAEA investigates the Natanz incident (amid conflicting reports on the nature of the sabotage). Mopping up the SolarWinds Exchange Server hacks.
Natanz pre-emptive sabotage updates. NAME:WRECK DNS vulnerabilities. Tax phishing. ATM cards and advance-fee scams. Ransomware-induced cheese shortage.
Apparent cyber sabotage at Natanz. Arrest made in alleged plot to blow up AWS facility. Scraped data for sale in criminal fora. US senior cyber…
Debra Danielson: Be fearless. [CTO] [Career Notes]
Strategic titles point to something more than a commodity campaign. [Research Saturday]
Cyber Security Interviews
#117 – Sara Avery: Go After What You Want
#116 – Jennifer Brown: This Is A Wakeup Call
#115 – Alyssa Miller: We Are Lacking Empathy
#114 – Chloé Messdaghi: How Can We Do Better
#113 – Julian Waits: Diversity of Thought
#112: Douglas Brush – Pain Is Inevitable, Suffering Is Optional
#111 – Danny Akacki: Work Worth Doing
ISC Daily Stormcast
ISC StormCast for Thursday, April 22nd, 2021
ISC StormCast for Wednesday, April 21st, 2021
ISC StormCast for Tuesday, April 20th, 2021
ISC StormCast for Monday, April 19th, 2021
ISC StormCast for Friday, April 16th, 2021
ISC StormCast for Thursday, April 15th, 2021
ISC StormCast for Wednesday, April 14th, 2021
ISC StormCast for Tuesday, April 13th, 2021
ISC StormCast for Monday, April 12th, 2021
Darknet Diaries
90: Jenny
89: Cybereason - Molerats in the Cloud
88: Victor
87: Guild of the Grumpy Old Hackers
86: The LinkedIn Incident
85: Cam the Carder
84: Jet-setters

Threat Intel

Reddit - Onions
I NEED HELP!new
New silk road?new
Access denied?new
Interview with NeighborJimi, the Darknet Vendor Selling Everything From LSD to Methamphetaminenew
What are some precautions before going on the Tor?new
Where can i get a hacking service?new
Does anyone know where I can get Red Devils in bulk on tor?new
Woman Sentenced to 40 Years and Husband Commits Suicide in Dark Web Case
How to find the good stuff?
TORBUY a scam
Support needed
Forums/chatrooms on onion for illegal stuff
Reddit - Pwned
Geico data breach exposed customers' driver's license numbers
Mobikwik (India) KYC data leaked
$5.7 Million Crypto Stolen Due To A Security Breach at Cryptocurrency platform Roll
Worldwide Hack: Microsoft Exchange Server Zero-day Exploits
American Armed Forces Mutual Aid Association hack impacted more than 161,000
CD Projekt Red 'EPICALLY pwned': Cyberpunk 2077 dev publishes ransom note after company systems encrypted
Florida city of Oldsmar's municipal water supply was almost poisoned during cyberattack, Sheriff says. A plant operator witnessed mouse movement on-screen and reverted the change
ENEL, Italian multinational manufacturer and distributor of electricity and gas with international customers, affected by data disclosure - 300,000 customers personal data leaked
Brazilian electric utility company COPEL hit by cyberattack; >1TB private data exfiltrated
Major Brazilian electric utility company Eletrobras hit by ransomware
EscortReviews.com vBulletin site suffers data breach; 470,000 members affected
Online image editor Pixlr breached - Cybercriminal posts 1.9 million user records for free on forum
HaveIBeenPwned
Phone House España - 5,223,350 breached accountsnew
Facebook - 509,458,528 breached accounts
Unverified Data Source (unverified) - 11,498,146 breached accounts
Liker - 465,141 breached accounts
Travel Oklahoma - 637,279 breached accounts
Oxfam - 1,834,006 breached accounts
Ticketcounter - 1,921,722 breached accounts
SuperVPN & GeckoVPN - 20,339,937 breached accounts
Filmai.in - 645,786 breached accounts
NurseryCam - 10,585 breached accounts
People's Energy - 358,822 breached accounts
NetGalley - 1,436,435 breached accounts

Privacy/VPNs

Slashdot - Rights
Flaws In John Deere's Website Provides a Map To Customers, Equipmentnew
Man Sues Apple For Terminating Apple ID With $24K Worth of Contentnew
Proctorio Sued For Using DMCA To Take Down a Student's Critical Tweetsnew
Big Tech $100 Billion Foreign-Profit Hoard Targeted by Tax Plannew
Ransomware Gang Wants To Short the Stock Price of Their Victimsnew
Supreme Court Slashes FTC's Power To Seek Monetary Awardsnew
TikTok Sued For Billions Over Use of Children's Data
Europe Proposes Strict Rules For Artificial Intelligence
Daily Mail Owner Sues Google Over Search Results
The Postal Service is Running a 'Covert Operations Program' That Monitors Americans' Social Media Posts
'Fourth Amendment Is Not For Sale Act' Would Ban Clearview and Warrantless Location Data Purchases
YouTube CEO Susan Wojcicki Gets 'Freedom Expression' Award Sponsored By YouTube
Reddit - Privacy
Scammer call solutionsnew
Putting advertisements on a self-built websitenew
Showing your face online in regards to privacy/internet security.. safe or not?new
How to Disable an Unknown AirTag Found Moving With You to Prevent Being Trackednew
Data Exploration and Visualization on Leaked Clubhouse Datanew
gmail recovery problemnew
IS there anything I can do??new
US Postal Service accused of monitoring American social media posts under controversial surveillance projectnew
Question to Air BNB hosts...new
Internet connection broken when using a ffprofile generated profile for firefox?new
"Security alert" need help understanding this onenew
Privacy Policy For Websitesnew
Reddit - VPN
Textnow/VOIP not working with VPNnew
Firewall for udp client bug as wget and curl work - but no webnew
Latest Update!new
How can I set up a vpn on the school computers to bypass website blocking?new
Can DigitalOcean actually view my traffic if I use the service for a VPN?new
The closest place is not the closest placenew
If I use VPN while working from abroad will my employer know where i am?new
Using work VPN from another country
US located VPN connects but I can't access US sites?
Accessing a virtual machine with a vpn from another virtual machine with a vpn?
Does SSH bypass a software VPN?
VPN speeds vs ISP speeds
PrivacyTools.io
Dban - wipe hard drive in enclosure onlynew
Zoom has access to internet even though I uninstalled it.new
Is it safe to keep my digital journal entries on OneNote or Google Docs?new
Is Evernote even worth using since it has a 100,000 note limit?new
Are there robots or drones impossible to hack? Is there anything impossible to hack?new
Mexico requiring biometric data for cellphone users is a gift to criminalsnew
Are "Firefox Multi-Account Containers" and "Temporary Containers" extensions detectable on fingerprinting ?new
Temporary and Multi Account Containers, syncing, and the master-slave relationshipnew
Is the Authy 2FA app better than the Google Authentication app?new
What’s a good digital note taking app that I can password protect so I can keep a digital journal and not have Google or another…new
FPI, Network Cookie Behavior/Anti-Tracking Protection Strict Mode (dFPI) & LocalCDN: What would be the best combination?new
i have questionnew
EFF
Tell Congress: Federal Money Shouldn’t Be Spent On Breaking Encryptionnew
Data Driven 2: California Dragnet—New Data Set Shows Scale of Vehicle Surveillance in the Golden Statenew
No Digital Vaccine Bouncersnew
EFF Sues Proctorio On Behalf of Student It Falsely Accused of Copyright Infringement to Get Critical Tweets Taken Down
Fighting FLoC and Fighting Monopoly Are Fully Compatible
Indian Government's Plans to Ban Cryptocurrency Outright Are A Bad Idea
Senators Demand Answers on the Dangers of Predictive Policing
Video Hearings Tuesday and Wednesday: EFF Will Tell Copyright Office That Consumers Should Have the Freedom to Fix, Modify Digital Devices They Own
Proctoring Tools and Dragnet Investigations Rob Students of Due Process
EFF Partners with DuckDuckGo to Enhance Secure Browsing and Protect User Information on the Web
HTTPS Everywhere Now Uses DuckDuckGo’s Smarter Encryption
Congress, Don’t Let ISP Lobbyists Sabotage Fiber for All

Help Wanted

Reddit - AskNetSec
Reddit - Netsec Students
Recovering phones and video for brother who lost his wife recentlynew
Getting networking basics down for cybersecuritynew
Books/resources on hacking/exploiting databasesnew
How to find network congestion?
Memberships, accounts etc to pick up for free with student email?
How to encrypt and store sensitive information?
Hooking, hijacking & spying on player resource data structures [Game Hacking 101]
IoT devices with a local web interface
“Applicant must have TS/SCI clearance”
Proxy
DVR systems
Analysis of Chromium issue 1196683, 1195777
Stackoverflow - Security
What is the reason to have a non-human user in /etc/passwd? [closed]new
What are some interesting ways to obfuscate/encrypt integer values?new
using Apache java HTTP client libraries, any way to accept valid signed certificates for wrong Subject Name? [duplicate]new
How to make discoverable API permissionsnew
Firestore security rule: query subcollection based on permission of parent documentnew
How can I securely clear the contents of a TextBox using pointers in C#?new
Detect if credit card is from the USnew
Is there a need to encrypt information that's otherwise public?new
Local but secure Jupyter notebook server setupnew
Client Service Authentication to Backendnew
Centralized identity management with different providersnew
When I delete a user, the user is still able to be authorized in endpoints unless I delete the cookies on postman or add new…new
Stack Exchange
Can quantum computer crack TrueCrypt algorithm?new
Is it more secure to enable upnp or to forward specific ports you need open?new
aircrack-ng / airodump-ng - some problems with interactive displaynew
XSS with Java to get User Cookiesnew
How did Firefox get my passwords?new
How many backdoors is Linux estimated to have?new
CORS with access-control-allow-credentialsnew
Increase Time to Brute Force Luks Full Disk Encryption [migrated]new
What's the actual atack / exploit in this Wireshark capture? [closed]new
Would this HTTP server setup be reasonably secure?new
Need to decrypt text without knowing algorithm or key [duplicate]new
Empty Grub after installing windows over kali [migrated]new

Locks/Social Engineering

Reddit - Lockpicking
Exactly what size screwdriver do I need to prevent this type of threading happening? Is there anything I can do or is this screw now…new
$1 Harbor Freight lock shimmed in 10 seconds with a tensionernew
This weeks funnew
I may have jumped too high.new
Ohhh yeaaah!new
First time pick on this lock i bought while visiting finland .new
VIDEO of picking and gutting GOAL V18 !!! This time gutting without disaster 😉new
Lockwood Twin Pickednew
The best kind of package arrived today - unboxing video of a bunch of awesome locks from Norlin!new
After 4 days of trying, i finally opened my first dimple lock!new
First time picking my 410new
Japanese high count pin dimple lock - GOAL V18 picked and gutted!!!new
Reddit - Social Engineering
Discover Anyone's Motivating Desire In 3 Stepsnew
Understanding People Part 14: Social Statusnew
Storytelling Tips: How to Tell an Amazing Storynew
Common Misconceptions People have about Email Phishing, Social Media Phishing and Phishing on Messaging platformsnew
So how do you negotiate prices online on sites like eBay or craigslist?new
Best social engineering PC toolsnew
Coordinated effort projects
We Pretended to be a Sugar Baby Online and Earned From it!
What rapport techniques Do you not use with certain people?
Is social media use a potentially addictive behavior? Maybe not
What cyber security certifications do you recommend obtaining if one is to take this on seriously full time?
How do I social engineer a hospital? My brother is gonna die because of the insane bills.

Hak5

Security Blogs

Security Bloggers Network
HAFNIUM Exploits Live Onnew
7 Ways Policy as Code Can Improve Automation and Securitynew
CPDP 2021 – Moderator: Juraj Sajfert ‘The Effective Supervision Of Law Enforcement Authorities: A Reality Or A Myth?’new
EdTech Awards Honors JumpCloud’s Platform as Innovative and Exceptional as 2021 Finalistnew
Vintage XKCD ‘Circuit Diagram’new
Reporting Live From Collision Conference 2021: Part One!new
See Our Solutions at Work in New Case Studiesnew
AppSec Decoded: Why organizations can’t ignore open source securitynew
The Aggregation Model is Falling Shortnew
Blocking Bots: Why We Need Advanced WAF?new
CPDP 2021 – Moderator: Peter Swire ‘Data Portability, Competition, Privacy, And Cybersecurity’new
Security threats affecting your workforce productivity? Here’s how Forrester says you can address themnew
ThreatPost
Mount Locker Ransomware Aggressively Changes Up Tacticsnew
Spotlight on Cybercriminal Supply Chainsnew
Telegram Platform Abused in ‘ToxicEye’ Malware Campaignsnew
It’s Easy to Become a Cyberattack Target, but a VPN Can Helpnew
4 Innovative Ways Cyberattackers Hunt for Security Bugs
QR Codes Offer Easy Cyberattack Avenues as Usage Spikes
Pulse Secure Critical Zero-Day Security Bug Under Active Exploit
Swiss Army Knife for Information Security: What Is Comprehensive Protection?
Novel Email-Based Campaign Targets Bloomberg Clients with RATs
Mozilla Fixes Firefox Flaw That Allowed Spoofing of HTTPS Browser Padlock
GEICO Alerts Customers Hackers Stole Driver License Data for Two Months
NitroRansomware Asks for $9.99 Discord Gift Codes, Steals Access Tokens
digitalmunition
Trojan-Dropper.Win32.Agent.xtp Insecure Permissions ≈ Packet Stormnew
Backdoor.Win32.DarkKomet.artr Insecure Permissions ≈ Packet Stormnew
OTRS 6.0.1 Remote Command Execution ≈ Packet Stormnew
Packed.Win32.Black.d Unauthenticated Open Proxy ≈ Packet Stormnew
BMD BMDWeb 2.0 Cross Site Scripting ≈ Packet Stormnew
Hi-5 With A CISO Rene Leimegger, Alpega Groupnew
SBA cyber teams, public affairs partner to take on social media scammersnew
Red Hat Security Advisory 2021-1315-01 ≈ Packet Stormnew
Red Hat Security Advisory 2021-1313-01 ≈ Packet Stormnew
Security Expert Reaction On Bank Of England Considering Digital Money Plannew
Ill-advised research on Linux kernel lands computer scientists in hot waternew
Information Security Threat Analyst at iOCOnew
eHacking News
Threat Actors Target India's No. 2 Discount Broker 'Upstox'; Personal Data of 2.5 Mn Users Leakednew
Data from thousands of Russian companies have been made publicly available on the webnew
Tag Barnakle Targets Various Web Servers with Malicious Adsnew
Eversource Energy Data Breach: Due to Unsecured Cloud Storagenew
Microsoft Fixes LPE Vulnerability Impacting Windows 7 and Server 2008new
Lazarus E-Commerce Attackers Adapt Web Skimming for Stealing Cryptocurrency
Sweden accused Russia of a hacking attack on the Confederation of Sports
SOCTA: Here's a Quick Look into the Report by Europol
Chinese WeChat Users Targeted by Attackers Using Recent Chromium Bug
Fake Microsoft Store, Spotify Distribute Malware to Steal User Data
Positive Technologies rejected accusations of the U.S. Department of the Treasury of Russia's cooperation with intelligence services
Two Outdated Software Bug Patched, Says WhatsApp
Wired - Security
A New Facebook Bug Exposes Millions of Email Addressesnew
Palestinian Hackers Tricked Victims to Install iOS Spyware
A Clubhouse Bug Let People Lurk in Rooms Invisibly
They Hacked McDonald’s Ice Cream Machines—and Started a Cold War
How the FBI Got Into the San Bernardino Shooter’s iPhone
US Sanctions on Russia Rewrite Cyberespionage's Rules
The Biggest Security Threats to the US Are the Hardest to Define
The FBI Takes a Drastic Step to Fight China’s Hacking Spree
100M More IoT Devices Are Exposed—and They Won’t Be the Last
How to Log In to Your Devices Without Passwords
Oh Look, LinkedIn Also Had 500M Users' Data Scraped
Facebook Had Years to Fix Flaw That Leaked 500M Users’ Data
Krebs on Security
Note to Self: Create Non-Exhaustive List of Competitors
Did Someone at the Commerce Dept. Find a SolarWinds Backdoor in Aug. 2020?
Microsoft Patch Tuesday, April 2021 Edition
ParkMobile Breach Exposes License Plate Data, Mobile Numbers of 21M Users
Are You One of the 533M People Who Got Facebooked?
Ransom Gangs Emailing Victim Customers for Leverage
Ubiquiti All But Confirms Breach Response Iniquity
New KrebsOnSecurity Mobile-Friendly Site
Phish Leads to Breach at Calif. State Controller
RedTorch Formed from Ashes of Norse Corp.
Can We Stop Pretending SMS Is Secure Now?
WeLeakInfo Leaked Customer Payment Info
Naked Security
Linux team in public bust-up over fake “patches” to introduce bugsnew
S3 Ep29: Anti-tracking, rowhammer problems and IoT vulns [Podcast]new
When cryptography attacks – how TLS helps malware hide in plain sight
Firefox 88 patches bugs and kills off a sneaky JavaScript tracking trick
Naked Security Live – To hack or not to hack?
Serious Security: Rowhammer is back, but now it’s called SMASH
S3 Ep28.5: Hacking back – is attack an acceptable form of defence? [Podcast]
S3 Ep28: Pwn2Own hacks, dark web hitmen and COVID-19 privacy [Podcast]
FBI hacks into hundreds of infected US servers (and disinfects them)
IoT bug report claims “at least 100M devices” may be impacted
Apple and Google block official UK COVID-19 app update
Naked Security Live – How to spot “government” scammers
Schneier on Security
On North Korea’s Cyberattack Capabilitiesnew
Backdoor Found in Codecov Bash Uploader
Biden Administration Imposes Sanctions on Russia for SolarWinds
Details on the Unlocking of the San Bernardino Terrorist’s iPhone
Friday Squid Blogging: Blobs of Squid Eggs Found Near Norway
Cybersecurity Experts to Follow on Twitter
NSA Discloses Vulnerabilities in Microsoft Exchange
DNI’s Annual Threat Assessment
The FBI Is Now Securing Networks Without Their Owners’ Permission
More Biden Cybersecurity Nominations
Friday Squid Blogging: Jurassic Squid and Prey
Backdoor Added — But Found — in PHP
Linux Security
Protect Your WordPress Sites with CrowdSec>new
Greg Kroah-Hartman bans University of Minnesota from Linux development for deliberately buggy patches>new
Tails 4.18 Anonymous OS Released with Tor Browser 10.0.16, Updated Intel Firmware>new
Google issues Chrome update patching seven security vulnerabilities>
Camera hack peels back layers of embedded Linux>
Looking for a CentOS Replacement? Start Here>
Rust support in Linux may be possible by 5.14 release: Torvalds>
Can Linux Be Used To Offer More Security In A WFH World (On And Offline)?>
Openwall Releases LKRG 0.9.0 with a Long List of Major Changes, Improvements & Bug Fixes>
A Linux Admin's Getting Started Guide to Improving PHP Security>
Google backs effort to bring Rust to the Linux kernel>
Linux Foundation creates research division to study open source impact>
Dark Reading
Supernova Malware Actors Masqueraded as Remote Workers to Access Breached Networknew
The Edge Pro Tip: Brush Up on Web Shellsnew
Edge Poll: Passwordless Plansnew
New CISA Advisories Warn of ICS Vulnerabilitiesnew
Prometei Botnet Adds New Twist to Exchange Server Attacksnew
Improving the Vulnerability Reporting Process With 5 Stepsnew
University Suspends Project After Researchers Submitted Vulnerable Linux Patchesnew
Name That Toon: Greetings, Earthlingsnew
10 Free Security Tools at Black Hat Asia 2021new
Looking for Greater Security Culture? Ask an 8-Bit Plumbernew
Who's Your Login?new
Rapid7 Acquires Velociraptor Open Source Project
Securelist
Targeted Malware Reverse Engineering Workshop follow-up. Part 2
Targeted Malware Reverse Engineering Workshop follow-up. Part 1
Whitehat Security Blog
HITB News
Malware and ransomware gangs have found this new way to cover their tracksnew
YouTube is now building its own video-transcoding chipsnew
Meet Thistle, Window Snyder's startup that wants to secure billions of IoT devicesnew
GCHQ chief warns UK faces cyber threat from China and Russianew
US COVID vaccinations fall nearly 11% in a week as demand wanesnew
New report provides petrospective, predictions, and analysis on the security of AI
Clubhouse vulnerabilities could have allowed for 'silent lurkers'
Apple supplier Quanta hit with $50 million ransomware attack from REvil
SpaceX denies claim that Starlink and OneWeb satellites almost collided
Brace yourselves. Facebook has a new mega-leak on its hands
Need an Angel Investor? Just Open Up Clubhouse
Palestinian Hackers Tricked Victims Into Installing iOS Spyware
The RISKS Digest
Scientists Create Online Games to Show Risks of AI Emotion Recognition
"Work From Home" being blamed for security risks
Marylanders could soon be fined $100 for intentionally releasing balloons
Supreme Court & Facebook Unwanted Automated Texts
NJ town: Our IT vendor ate our e-mails
Understanding fruit fly behavior may be next step toward autonomous vehicles
Remote exploitation of a man-in-the-disk vulnerability in WhatsApp
GPS is endangered by a misguided FCC decision made during the Trump administration
100 Million More IoT Devices Are Exposed and They Won't Be the Last
Cosmic rays causing 30,000 network malfunctions in Japan each year
The Foundations of AI Are Riddled With Errors
``How can a democracy function if we can't talk to one another?'' U.S. justices ask
Kaspersky Blog
Data leaked from public boards in Trellonew
Transatlantic Cable podcast, episode 198 | Kaspersky official blognew
Top 5 most dangerous ransomware in 2021 | Kaspersky official blog
Phishing for Microsoft Office credentials
Buyers of mining equipment scammed for bitcoins | Kaspersky official blog
DarkSide Leaks shows how ransomware is becoming an industry
Transatlantic Cable podcast, episode 197 | Kaspersky official blog
Transformers: War for Cybertron Trilogy in terms of cybersecurity | Kaspersky official blog
Desktop Window Manager vulnerability CVE-2021-28310 exploited ITW
Digital identity management is crucial. Learn how to protect yourself
Screenshot cryptoscam in Lightshot | Kaspersky official blog
APKPure is not safe, distributes Trojans | Kaspersky official blog
Adam Shostack & friends
Thursday Threat Model: Github’s Approach
The Updates Must Go Through
Dear Microsoft: Please fix MAU
Can Training Work Remotely?
Behind the Scenes: Training Development
Passover Pie
Threat Modeling Classes
Ever Given & Suez
Microsoft Autoupdate hangs Excel 16.47.21032301
Mmmm, Pandemic Puppies
Happy (Belated) Pi Day!
Linkedin Learning
Graham Cluley
REvil ransomware – what you need to knownew
Smashing Security podcast #224: The Lazarus Heist, Facebook faux pas, and no-cost securitynew
Facebook suffers a data breach about how it’s hoping to stop the media talking about its last data breach
Cluley and Cisco: Preparing for cybersecurity threats in a permanently hybrid world
Six million male members may have been exposed after hack of gay dating service
Sysadmin of fake cybersecurity company sentenced to jail after billion-dollar crime spree
Get FREE threat intelligence on hackers and exploits with the Recorded Future Cyber Daily
White House launches plan to protect US critical infrastructure against cyber attacks
Smashing Security podcast #223: Booze, nudes, and insurance dudes
School janitor says she was fired for not installing smartphone tracking app
Ransomware attack causes supermarket cheese shortage in the Netherlands
A helpful reminder about just how much Facebook stalks you on the internet
Rapid7
MDR Vendor Must-Haves, Part 8: Rapid7 Incident Response (Breach) Supportnew
Active Exploitation of Pulse Connect Secure Zero-Day (CVE-2021-22893)
The Future is Friction-Free: Drive Innovation With DevOps + Security
Rapid7 and Velociraptor Join Forces
Overview of the EU’s draft NIS 2 Directive
How to Turbocharge Your Phishing Response Plan
Rapid7 Announces Kubernetes Integration General Availability in InsightVM
Codecov Discloses Supply Chain Compromise
MDR Vendor Must-Haves, Part 7: Managed Response Actions
Rapid7 Releases New Industry Cyber-Exposure Report (ICER): FTSE 350
Rapid7 Announces General Availability for Scoped Executive Summary Report in InsightVM
How Philip Reiner Created the Ransomware Task Force
Hacker News (YCombinator) - Security
The Rise of North Korea's Hacking Armynew
A new biography of Louise Fitzhugh, who wrote “Harriet the Spy”new
Signal's CEO Just Hacked the Cops' Favorite Phone Cracking Toolnew
MEPs call for European AI rules to ban biometric surveillance in publicnew
Show HN: Diffie-Hellman exchange for the layman
ParkMobile Breach Exposes License Plate Data, Mobile Numbers of 21M Users
Statement on DNS Encryption [pdf]
Exploiting Vulnerabilities in Cellebrite UFED and Physical Analyzer
Exploiting vulnerabilities in Cellebrite UFED and Physical Analyzer
Sleeping less than 6 hours a night in midlife raises risk of dementia 30%
Feasibility of stealthily introducing vulnerabilities in open source software [pdf]
Smart Contract Security for Pentesters
Hacker Noon #Security
DevSecOps Introduction: Clear Instructions on How to Build a DevSecOps Pipeline in AWS [Part 2]
Understanding Azure AZ-500 Certification Exam
Signal Protocol — Open Source, Private, Encrypted Mobile Messaging App
Learning Cybersecurity: What is Risk Management?
Cryptocurrencies Promote Secure Decentralization or Support Cyber Piracy: the Truth
4 Reasons To Learn Ethical Hacking
What is Security Information and Event Management (SIEM) Software?
PARSIQ's Answer to Crypto-Crime and Crypto Exchange Compliance
British Cybersecurity Firm Darktrace Goes Public
DevSecOps Introduction: Clear Instructions on How to Build a DevSecOps Pipeline in AWS [Part 1]
The A-Z Of Email Development And Sending
The Problem with Centralized Internet

Security in Mainstream Media

Google News Hacking
VTA's system hacked: Transit officials say buses, light rail not impacted - KTVU San Francisconew
Prosecutor: Hacked Facebook accounts, custody dispute led to Rhoden killings - NBC4 WCMH-TVnew
City of Milwaukee's parking app was hacked, developer says - WTMJ-TVnew
Facebook Takes Action Against 2 Groups of Hackers Based in Palestine - Adweeknew
Cleveland man’s Facebook page hacked, fake fundraiser posted - Cleveland 19 Newsnew
Are Hackers Looking to Take a Bite Out of Apple? - IndustryWeeknew
Hacker's brief - County 17new
Hackers Exploit SolarWinds, Pulse Secure For Credential Theft: Feds - CRNnew
Tips from the BBB on keeping your computer safe from hackers - fox2now.comnew
Beware of hackers on social media - SYP - South Yorkshire Policenew
'Hacked' drawings reveal new MacBook Pro - Macworld UKnew
Learn to become an ethical hacker with this $30 training package - Engadgetnew
Google Cyber Security
Matthew Ireland named CISO at NTT Research - Security Magazinenew
Interview With IBM’s Cyber Security Engineer Holly Wright - Women Love Technew
NSW electoral commissioner warns IT systems at risk without more funding - iTnewsnew
TM strengthens cybersecurity offerings via Telefónica Tech - Digital News Asianew
Canada's aging critical infrastructure strategy an increasing concern, say cybersecurity experts - National Postnew
GCHQ chief: west faces ‘moment of reckoning’ over cybersecurity - The Guardiannew
‘Evolving and grave’ cybersecurity threats warrant investment - The Washington Postnew
The boom in collaboration software creates extra security risks - TechRepublicnew
Former NSA director says state and local governments must 'optimize' cybersecurity - StateScoopnew
DeRusha, Wales Say Cybersecurity Demands More Flexible, Rapid Acquisition Approaches - Defense Daily Networknew
Create and Develop your Cybersecurity Workforce - Which-50new
OPM Nominee Commits to Working With Senate on Cybersecurity Measures - MeriTalknew