Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

PacketStorm
The Register
Watch out, another max-severity, make-me-root Cisco bug on the loose
Quantum code breaking? You'd get further with an 8-bit computer, an abacus, and a dog
Ukrainian hackers claim to have destroyed major Russian drone maker's entire network
Operation Eastwood shutters 100+ servers used to DDoS websites supporting Ukraine
Retailer Co-op: Attackers snatched all 6.5M member records
Turbulence at Air Serbia, the latest airline under cyber siege
Curl creator mulls nixing bug bounty awards to stop AI slop
Nvidia A6000 GPUs flip memory bits if beaten by GPUHammer
A software-defined radio can derail a US train by slamming the brakes on remotely
GPS on the fritz? Britain and France plot a backup plan
CVSS 10 RCE in Wing FTP exploited within 24 hours, security researchers warn
UK Online Safety Act 'not up to scratch' on misinformation, warn MPs
Reddit - NetSec
Real-time CVE feed with filters, summaries, and email alerts
RCE in the Most Popular Survey Software You’ve Never Heard Of
Homebrew Malware Campaign
Weaponizing Windows Drivers: A Hacker's Guide for Beginners
Local Chatbot RAG with FreeBSD Knowledge
CVE-2025-5333 - CVSS 9.5: Remote Code Execution in Broadcom Symantec Endpoint Management Suite (Altiris)
Recruitment Themed Phishing Campaign
Revisiting automating MS-RPC vulnerability research and making the tool open source
[CVE-2024-58258] SugarCRM <= 14.0.0 (css/preview) LESS Code Injection Vulnerability
KongTuke FileFix Leads to New Interlock RAT Variant
I built a tool to track web exposure — screenshots, HTML/JS diff, and alerts
Bypassing Meta's Llama Firewall: A Case Study in Prompt Injection Vulnerabilities
Bleeping Computer
UK ties GRU to stealthy Microsoft 365 credential-stealing malware new
Microsoft mistakenly tags Windows Firewall error log bug as fixed new
New ChatGPT o3-alpha model hints at coding upgrade new
Russian alcohol retailer WineLab closes stores after ransomware attack new
Hackers scanning for TeleMessage Signal clone flaw exposing passwords new
Google sues to disrupt BadBox 2.0 botnet infecting 10 million devices
LameHug malware uses AI LLM to craft Windows data-theft commands in real-time
The Hacker News
China's Massistant Tool Secretly Extracts SMS, GPS Data, and Images From Confiscated Phones new
UNG0002 Group Hits China, Hong Kong, Pakistan Using LNK Files and RATs in Twin Campaigns new
Ivanti Zero-Days Exploited to Drop MDifyLoader and Launch In-Memory Cobalt Strike Attacks new
Hackers Use GitHub Repositories to Host Amadey Malware and Data Stealers, Bypassing Filters
Hackers Exploit Apache HTTP Server Flaw to Deploy Linuxsys Cryptocurrency Miner
Chinese Hackers Target Taiwan's Semiconductor Sector with Cobalt Strike, Custom Backdoors
UNC6148 Backdoors Fully-Patched SonicWall SMA 100 Series Devices with OVERSTEP Rootkit
Urgent: Google Releases Critical Chrome Update for CVE-2025-6558 Exploit Active in the Wild
Deepfakes. Fake Recruiters. Cloned CFOs — Learn How to Stop AI-Driven Attacks in Real Time
New Konfety Malware Variant Evades Detection by Manipulating APKs and Dynamic Code
Google AI "Big Sleep" Stops Exploitation of Critical SQLite Vulnerability Before Hackers Act
Newly Emerged GLOBAL GROUP RaaS Expands Operations with AI-Driven Negotiation Tools

Threat Wire

Bug Bounties

Vulnerabilities

0day Today
CXSecurity
NodeJS 24.x Path Traversal
Sudo 1.9.17 Host Option Elevation of Privilege
PX4 Military UAV Autopilot 1.12.3 Denial of Service (DoS)
Roundcube 1.6.10 Remote Code Execution (RCE)
Remote Mouse 4.601 Unauthenticated Remote System Control
jsbin-web app - XSS Reflected
ISPConfig language_edit.php PHP Code Injection
Events Manager < = 7.0.3 - Unauthenticated SQL Injection via orderby Parameter
File Provider < = 1.2.3 - Unauthenticated SQL Injection
SAP NetWeaver S/4HANA ABAP Code Execution
C-Based Automated Login Analyzer with CSRF Token Extraction for SSO bmi.ir Systems
Discourse 3.2.x Anonymous Cache Poisoning
Full Disclosure
Missing Critical Security Headers in OpenBlow
SAP NetWeaver S/4HANA - ABAP Code Execution via Internal Function
Tiki Wiki CMS Groupware <= 28.3 Two Server-Side Template Injection Vulnerabilities
KL-001-2025-011: Schneider Electric EcoStruxure IT Data Center Expert Unauthenticated Server-Side Request Forgery
KL-001-2025-010: Schneider Electric EcoStruxure IT Data Center Expert Privilege Escalation
KL-001-2025-009: Schneider Electric EcoStruxure IT Data Center Expert Remote Command Execution
KL-001-2025-008: Schneider Electric EcoStruxure IT Data Center Expert Root Password Discovery
KL-001-2025-007: Schneider Electric EcoStruxure IT Data Center Expert Unauthenticated Remote Code Execution
KL-001-2025-006: Schneider Electric EcoStruxure IT Data Center Expert XML External Entities Injection
eSIM security research (GSMA eUICC compromise and certificate theft)
Directory Traversal "Site Title" - bluditv3.16.2
XSS via SVG File Uploa - bluditv3.16.2
NIST National Vulnerability Database
Sixth PQC Standardization Conference new
Legal Metrology Meets the Digital Age

LiveOverflow

Exploit Dev

Reversing/I like ASM

Reddit - Reverse Engineering
Neural Network Fuzzing macOS Userland (For Fun and Pain) new
How I found an RCE affecting phones and cars
[Unity IL2CPP] gRPC request custom encoding/encryption – need help with reverse
Code injection to system process via APC(lsass.exe)
I built a Windows PE packer in C with manual loading, compression / encryption, and TLS/SEH support
A better Ghidra MCP server – GhidrAssistMCP
You Can't Fool the CPU: All x86 Conditional Jumps Are EFLAGS-Driven (Live GDB Demo + Explainer Video)
Can you crack Patti Vault? A password stored in pieces, decoys, and traps.
Bypassing AV with Binary Mutation — Part 1 of a Hands-On Experiment
I have a shining bright app mask, is there anyway to make a remote that changes the face?
meet Syd
Reddit - Game Hacks
Unlock all tool for bloodstrike new
🔧 Looking for a developer to create a 1:1 educational clone of the Ukrainian banking app Privat24 — paid project new
Is there someone who could hack a simple hand cricket android game which is not based on IL2CPP
Can BattlEye be bypassed by kernel mode manual map injection.
P1 to cpu code for clubhouse games ds and later versions
💙 PUBG Aimbot & ESP | Undetected & Secure 💙 (LIFETIME)
need help
are there any good r6 RAGE chetes
battlefront 2 hacks
[HIRING] Reverse Engineer / Kernel Developer for Anti-Cheat Bypass R&D (Remote / Paid / Long-Term)
[NEW] CHEAT DADDY COD BO6 CHAIR TOOL | BO6 AIMBOT + FULL ESP + STREAM-PROOF – LIFETIME €19
GHOSTED Discord — Squad Finder for DMA & Console AI Users
Reddit - REGames
StackExchange - ReverseEngineering
good way to intercept and figure out what it needs from defunct apis in order to figure out some of the defunct apis
How to enter payload as input in radare2?
I try decode file.dat with ROT13, Cypher, base64, Xor but i cant decode him, anyone can help me pls? [closed]
Unpack pack.bin for game "Allods Online" [closed]

Guided Hacking

Malware/APT

Crypto

Reddit - Crypto
Stateless, Verifiable zk-Login Protocol with Nonce-Bound Proofs (No Sessions, No Secrets Stored)
The FIPS 140-3 Go Cryptographic Module
Research paper on Enigma
DSSS Distributed Smamir's secret sharing question.
Weekly cryptography community and meta thread
Practical Attacks on Fiat-Shamir
Uncovering the Query Collision Bug in Halo2: How a Single Extra Query Breaks Soundness
Opossum attack - Application Layer Desynchronization using Opportunistic TLS
You Should Run a Certificate Transparency Log
append-only encrypted logs
StackExchange - Crypto
Probability of success of password search under assumptions on the distribution new
Implications of Cai and Young's paper on Shors algorithm for Discrete Logarithms
3DES Security nowadays
How many keys need to be broken to break the double-ratchet / Signal Protocol / Messaging Layer Security? [closed]
Security reduction advantage bounds
Fermat's difference of squares: Expanding & factoring the subsequent differences to infinity [closed]
How to find a satisfying input point for Satoh’s even’s degree Miller’s inversion algorithm?
Is MPC RAM practical yet?
In the RSA(SSA)-PSS signature scheme, why does the message need to be hashed twice and why is masking the "salt" needed?
Decapsulation failure rates for ML-KEM
Why is combining keys from a hybrid key exchange so complex?
What’s the complexity of solving the ᴇᴄᴅʟᴘ using this minors based las vegas algorithm?

Seytonic

Podcasts

Security Weekly
Hackers On A Train - PSW #883
Citrixbleed 2, Hardware Hacking, and Failed Bans - PSW #882
Exploring Meshtastic and LoRa Mesh Networks - Rob Allen - PSW #881
Hacking Drivers - PSW #879
UEFI Vulnerabilities Galore - PSW #878
Updating & Protecting Linux Systems - PSW #877
It's A Trap! - PSW #876
Malware Laced Printer Drivers - PSW #875
Ransomware in your CPU - PSW #874
Are You Down With RDP? - PSW #873
AI Tips, Tricks, and Traps! - PSW #872
Hacking Crosswalks and Attacking Boilers - PSW #871
Risky.Biz
Risky Biz Soap Box: Prowler, the open cloud security platform
Risky Business #798 -- Mexican cartel surveilled the FBI to identify, kill witnesses
Risky Business #797 -- Stuxnet vs Massive Ordnance Penetrators
Risky Business #796 -- With special guest co-host Chris Krebs
Soap Box: AI has entered the SOC, and it ain't going anywhere
Risky Business #795 -- How The Com is hacking Salesforce tenants
Risky Business #794 -- Psychic Panda outgunned by Fluffy Lizard and UNC56728242
Risky Business #793 -- Scattered Spider is hijacking MX records
Risky Business #792 -- Beware, Coinbase users. Crypto thieves are taking fingers now
Risky Biz Soap Box: Push Security's browser-first twist on identity security
Risky Business #791 -- Woof! Copilot for Sharepoint coughs up creds and keys
Wide World of Cyber: How state adversaries attack security vendors
The CyberWire
UK calls out Russia’s playbook. new
When hackers become the hunted.
Chrome’s high-risk bug gets squashed.
The Grok that broke the camel’s back.
Taxing times for cyber fraudsters.
MK Palmore: Lead from where you stand. [CISO] [Career Notes]
Click here to steal. [Research Saturday]
Behind the firewall, trouble brews.
Cybercrime has a hefty price tag.
Plug-ins gone rogue.
Memory leaks and login sneaks.
SafePay, unsafe day.
ISC Daily Stormcast
SANS Stormcast Friday, July 18th, 2025: Extended File Attributes; Critical Cisco ISE Patch; VMWare Patches; Quarterly Oracle Patches new
SANS Stormcast Thursday, July 17th, 2025: catbox.moe abuse; Sonicwall Attacks; Rendering Issues
SANS Stormcast Wednesday, July 16th, 2025: ADS Keystroke Logger; Fake Homebrew; Broadcom Altiris RCE; Malicious Cursor AI Extensions
SANS Stormcast Monday, July 14th, 2025: Web Honeypot Log Volume; Browser Extension Malware; RDP Forensics
SANS Stormcast Monday, July 14th, 2025: Suspect Domain Feed; Wing FTP Exploited; FortiWeb Exploited; NVIDIA GPU Rowhammer
SANS Stormcast Friday, July 11th, 2025: SSH Tunnel; FortiWeb SQL Injection; Ruckus Unpatched Vuln; Missing Motherboard Patches;
SANS Stormcast Thursday, July 10th, 2025: Internal CA with ACME; TapJacking on Android; Adobe Patches;
SANS Stormcast Wednesday, July 9th, 2025: Microsoft Patches; Opposum Attack;
SANS Stormcast Tuesday, July 8th, 2025: Detecting Filename (Windows); Atomic Stealer now with Backdoor; SEO Scams
SANS Stormcast Monday, July 7th, 2025: interesting usernames; More sudo issues; CitrixBleed2 PoC; Short Lived Certs
Darknet Diaries
161: mg
160: Greg
159: Vastaamo
158: MalwareTech
157: Grifter
156: Kill List
155: Kingpin
154: Hijacked Line
153: Bike Index
152: Stacc Attack
151: Chris Rock
150: mobman 2

Threat Intel

Privacy/VPNs

Slashdot - Rights
House Passes Historic Crypto Bill Regulating Stablecoins new
New Russian Law Criminalizes Online Searches For Controversial Content
Meta Investors, Mark Zuckerberg Reach Settlement To End $8 Billion Trial Over Facebook Privacy Litigation
Judge Allows Nationwide Class Action Against Anthropic Over Alleged Piracy of 7 Million Books For AI Training
Chinese Authorities Are Using a New Tool To Hack Seized Phones and Extract Data
A Retro Gaming YouTuber Faces Possible Jail Time For Reviewing Gaming Handhelds
WeTransfer Backtracks on Terms Suggesting User Files Could Train AI Models After Backlash
Thousands of Afghans Secretly Moved To Britain After Data Leak
US Prosecutors Close Probe Into Polymarket Betting Website
Cloudflare Starts Blocking Pirate Sites For UK Users
Hugging Face Is Hosting 5,000 Nonconsensual AI Models of Real People
US Defense Department Awards Contracts To Google, xAI
Reddit - Privacy
If I get my own router instead of my ISPs, can I completely encrypt my internet usage and device(s) info? new
Kiss cam privacy new
university account on personal device new
Best IOS browser and browser engine?
Somebody is trying to blackmail me, what do I do?
Feeling lost in the overwhelming world of privacy
Many Gen Z use Find My and other apps to share their location with friend groups 24/7
Should I delete my account and start over?.
EU PARLIAMENT INVITED PRO-CHATCONTROL LOBBYING GROUPS TO A SHADOW MEETING
Why the Data Broker Industry Should Be Banned to Protect Public Safety and National Security
Which cloud storage service doesn't scan my pirated movies?
The most surveilled small city in Texas? Kyle, TX has 47 Flock cameras & want more—with a population of around 63,000
Reddit - VPN
VPN on Router new
VPN on modem? new
Need Help Setting Up My Phone For A VPN + FIREWALL new
Will a vpn hide my browsing history from the Wi-Fi router?
Can selecting a server closer to where my friends are decrease ping?
Stay hidden: Alternatives to VPNs? Original purpose, trust issues & layering (VPN→Tor, Tor→VPN, etc.
Internet won't connect when VPN is turned on. Help?
Need help understanding legality of using VPN for watching sports
OpenVPN on raspberry pi
VPN with real Ad blocker
EFF
EFF to Court: The DMCA Didn't Create a New Right of Attribution, You Shouldn't Either new
California A.B. 412 Stalls Out—A Win for Innovation and Fair Use new
Radio Hobbyists, Rejoice! Good News for LoRa & Mesh
EFF and 80 Organizations Call on EU Policymakers to Preserve Net Neutrality in the Digital Networks Act
🤕 A Surveillance Startup in Damage Control | EFFector 37.8
Podcast Episode: Finding the Joy in Digital Security
EFF Tells Virginia Court That Constitutional Privacy Protections Forbid Cops from Finding out Everyone Who Searched for a Keyword
No Face, No Case: California’s S.B. 627 Demands Cops Show Their Faces
It's EFF's 35th Anniversary (And We're Just Getting Started)
Electronic Frontier Foundation to Present Annual EFF Awards to Just Futures Law, Erie Meyer, and Software Freedom Law Center, India
EFF to US Court of Appeals: Protect Taxpayer Privacy
🤫 Meta's Secret Spying Scheme | EFFector 37.7
Reddit - PrivacyGuides

Help Wanted

Reddit - AskNetSec
OPA Rego Rules Design
Stylography, AI and an impending privacy nightmare?
Add location
What’s a security hole you keep seeing over and over in small business environments?
Which filters do I use?
How likely is it that its a drive by download?
Looking for guidance on designing secure remote access infrastructure (VPN vs ZTNA) for an interview
How do modern anti-DDoS services handle low-and-slow application layer attacks without degrading UX?
MFA - security theatre?
SEBI Just Mandated Continuous Automated Red Teaming (CART)
Non-stop intense DDoS for the past 2 weeks, what to do ?
Reddit - Netsec Students
Best ways to stand out in the field? new
Starting out, I’ve been doing free scans for local businesses to build experience. Any tips on reporting or client comms?
A service to check your JA3/JA4 TLS fingerprints
Need help understanding an issue with netexec
Prospective Student CompSci/CyberSec
Looking for real-life red teaming / pentesting project ideas for summer internship (non-SOC)
Is my cybersecurity prep appropriate for the roles I would want in the future?
What are the legal limits of nmap?
Stackoverflow - Security
Need help about Encyption ".exe" Files and Bind them to the user who purchase it [closed] new
Denodo Partial Cache Bypasses Global Security Policies – How to Maintain Both Security and Performance?
What is the best way to download large files in JavaScript where the file is not public? [closed]
IFrame integration within salesforce
Windows Patching returning Privilege error
Potential clickjacking on legacy browsers issue while running checkmarx in an Angular 16 project
How can I compute SHA256 hashes on OptROMs for UEFI Secure Boot on Linux (ACPI)? [closed]
Why does DLL injection with CreateRemoteThread+LoadLibrary fail with exit code 0 in a 64-bit Windows process?
DKIM verification fails for mail with error "body hash did not verify" [closed]
Spring Boot requestMatchers permitAll always return 403
OAuth 2 Token management service?
Stack Exchange
Kerberos kinit password: what is it used for? Cryptographically? new
Fingerprint security when you sleep [closed]
How can we encrypt password in svnserve.cfg?
Arpspoof unintended behaviour
CVSS 3.1 Rating and Attack Vector for USB-based Vulnerabilities
What is best way to intercept https traffic on an APK that uses WebView

Locks/Social Engineering

Reddit - Lockpicking
My New Goal - Don't do dumb things! new
Will my ridgeback set be able to pick an abus 55/40? new
Recommendations for easy locks (like master lock 3) available in Europe. new
Locks picked so far... (Maybe 1-2 hours of settle time total) new
Why is SPP'ing the Abus Titalium so hard? new
Kwikset SmartKey padlock? Yes, please! new
Replacement/Comparison Alternatives Chart new
First Green Belt Lock Open new
Lock mail!!!!! Special thx 😊 🙏 new
Back in the saddle with the 410 new
Gravpick lanyard mod? new
Lock 4 new
Reddit - Social Engineering
💀 The Call of the LOLCOW — Your Sanctuary Awaits. new
Mastering the Hustler’s Game: How to Spot and Exploit Egos Like Fast Eddie in The Color of Money
How do i detect if someone is trying to fuck me over with bad advice?
Straight to the point algorithm, example dialogue templates, conversation flows, ...?
Is it possible to be forced to live in someone else's frame?
Dealing with manipulative people
Need friends to start these self improvement journey with
Questions about similarities between domestic abuse and fascism
Can you help me find someone? Crowdsourcing tools & processes here.

Hak5

Security Blogs

Rapid7
Patch Tuesday - June 2025
BlackSuit Continues Social Engineering Attacks in Wake of Black Basta’s Internal Conflict
Key Takeaways from the Take Command Summit 2025: Demystifying Cloud Detection & Response – The Future of SOC and MDR
5 Things Security Leaders Need to Know About Agentic AI
Metasploit Wrap-up 06/06/25
Cultivating Growth and Development at Rapid7
India's cyber leaders prepare for AI-driven threats
Navigating AWS Migration: Achieving Clarity and Confidence
Rapid7 Q1 2025 Incident Response Findings
From Ideology to Financial Gain: Exploring the Convergence from Hacktivism to Cybercrime
Introducing AI Attack Coverage in Exposure Command: Secure what traditional AppSec Tools miss
Key Takeaways from the Take Command Summit 2025: Risk Revolution – Proactive Strategies for Exposure Management
Hacker News (YCombinator) - Security
Hacker Noon #Security
The TechBeat: Coinzilla Delivers 75M+ Impressions, Powering Bitget’s 120% Growth in One Month (7/18/2025) new
9 Things Hollywood Gets Wrong About Hacking new
Scaling Real-Time Video on AWS: How We Keep WebRTC Latency Below 150ms with Kubernetes Autoscaling
Why is Cartesi Doubling Down on Ethereum?
A Static Taint Analyzer for Address Verification Vulnerabilities in Ethereum
What Happens When Smart Contracts Break
How to Find Smart Contract Vulnerabilities Before Exploit Happen
Blacklists Are Eating Crypto Alive. Here’s Why It Matters.
AI Agents Are Growing Up - And They Need Zero-Trust Parenting
Top 6 Privacy Note Apps for Linux and Android That Actually Sync
One Identity Everywhere: Why Digital Identity Is the Missing Infrastructure Layer in Tech
Where Security Begins: 5 Insights from the Intersection of Engineering and Teaching
Security Bloggers Network
Google Sues the Operators Behind the BadBox 2.0 Botnet new
Ukraine Pwns Russian Drone Maker — Gaskar is ‘Paralyzed’ new
The Challenges of Operationalizing Threat Intelligence new
Summer Vacation Alert Surfaces More Than 5 Million Unsecured Wi-Fi Networks new
Cambodia Arrests More Than 1,000 in Cyberscam Crackdown new
Critical MCP Vulnerabilities are Slipping Through the Cracks new
Emerging Cloaking-as-a-Service Offerings are Changing Phishing Landscape
1Password Adds MCP Server to Trelica Governance Platform
Google Gemini AI Flaw Could Lead to Gmail Compromise, Phishing
SquareX Collaborates with Top Fortune 500 CISOs to Launch The Browser Security Field Manual at Black Hat
Are We Truly Prepared for the Era of Quantum Computing?
Collaboration is Key: How to Make Threat Intelligence Work for Your Organization  
Control C
Bypassing file upload restrictions with extension truncation
Wired - Security
How China’s Patriotic ‘Honkers’ Became the Nation’s Elite Cyberspies new
Hackers Are Finding New Ways to Hide Malware in DNS Records
DHS Faces New Pressure Over DNA Taken From Immigrant Children
Adoption Agency Data Exposure Revealed Information About Children and Parents
The FBI's Jeffrey Epstein Prison Video Had Nearly 3 Minutes Cut Out
AI 'Nudify' Websites Are Raking in Millions of Dollars
4 Arrested Over Scattered Spider Hacking Spree
Metadata Shows the FBI’s ‘Raw’ Jeffrey Epstein Prison Video Was Likely Modified
DHS Tells Police That Common Protest Activities Are ‘Violent Tactics’
McDonald’s AI Hiring Bot Exposed Millions of Applicants' Data to Hackers Using the Password ‘123456’
Android May Soon Warn You About Fake Cell Towers
The Person in Charge of Testing Tech for US Spies Has Resigned
Elttam
Krebs on Security
Poor Passwords Tattle on AI Hiring Bot Maker Paradox.ai new
DOGE Denizen Marko Elez Leaked API Key for xAI
UK Arrests Four in ‘Scattered Spider’ Ransom Group
Microsoft Patch Tuesday, July 2025 Edition
Big Tech’s Mixed Response to U.S. Treasury Sanctions
Senator Chides FBI for Weak Advice on Mobile Security
Inside a Dark Adtech Empire Fed by Fake CAPTCHAs
Patch Tuesday, June 2025 Edition
Proxy Services Feast on Ukraine’s IP Address Exodus
U.S. Sanctions Cloud Provider ‘Funnull’ as Top Source of ‘Pig Butchering’ Scams
Pakistan Arrests 21 in ‘Heartsender’ Malware Service
Oops: DanaBot Malware Devs Infected Their Own PCs
Naked Security
Sophos announces UAE data center new
Sweet 16: Sophos named a Leader (again) in the 2025 Gartner® Magic Quadrant™ for Endpoint Protection Platforms
SophosAI at Black Hat USA ’25: Anomaly detection betrayed us, so we gave it a new job
Sophos Central firewall management update
July Patch Tuesday offers 127 fixes
Strengthening cyber resilience: Introducing Internal Attack Surface Management (IASM) for Sophos Managed Risk
Threat Intelligence Executive Report – Volume 2025, Number 3
Sophos Firewall Recognized as the #1 Overall Firewall Solution by G2 Users
Using AI to identify cybercrime masterminds
Taking the shine off BreachForums
The State of Ransomware 2025
Schneier on Security
Friday Squid Blogging: The Giant Squid Nebula new
New Mobile Phone Forensics Tool new
Security Vulnerabilities in ICEBlock
Hacking Trains
Report from the Cambridge Cybercrime Conference
Squid Dominated the Oceans in the Late Cretaceous
Tradecraft in the Information Age
Using Signal Groups for Activism
Yet Another Strava Privacy Leak
Hiding Prompt Injections in Academic Papers
Friday Squid Blogging: How Squid Skin Distorts Light
Surveillance Used by a Drug Cartel
Linux Security
Rescuezilla 2.6.1: Your New Ally in Secure System Recovery
Breaking Down CVE-2025-6558: Chromes Latest Actively Exploited 0-Day
Dark Reading
'PoisonSeed' Attacker Skates Around FIDO Keys new
3 Ways Security Teams Can Minimize Agentic AI Chaos new
Firmware Vulnerabilities Continue to Plague Supply Chain new
4 Chinese APTs Attack Taiwan's Semiconductor Industry new
Cisco Discloses '10' Flaw in ISE, ISE-PIC — Patch Now
Printer Security Gaps: A Broad, Leafy Avenue to Compromise
Armenian Extradited to US Over Ryuk Ransomware
China-Backed Salt Typhoon Hacks US National Guard for Nearly a Year
AI Driving the Adoption of Confidential Computing
ISC2 Finds Orgs Are Increasingly Leaning on AI
Elite 'Matanbuchus 3.0' Loader Spruces Up Ransomware Infections
Securing the Budget: Demonstrating Cybersecurity's Return
Securelist by Kaspersky
GhostContainer backdoor: malware compromising Exchange servers of high-value organizations in Asia
Forensic journey: Breaking down the UserAssist artifact structure
Code highlighting with Cursor AI for $500,000
Approach to mainframe penetration testing on z/OS. Deep dive into RACF
Batavia spyware steals data from Russian organizations
AI and collaboration tools: how cyberattackers are targeting SMBs in 2025
SparkKitty, SparkCat’s little brother: A new Trojan spy found in the App Store and Google Play
Toxic trend: Another malware threat targets DeepSeek
Sleep with one eye open: how Librarian Ghouls steal data by night
Analysis of the latest Mirai wave exploiting TBK DVR devices with CVE-2024-3721
IT threat evolution in Q1 2025. Non-mobile statistics
IT threat evolution in Q1 2025. Mobile statistics
HITB News
The RISKS Digest
Kaspersky Blog
Adam Shostack & friends
The Cyber Resilience Act (CRA)!
Threat modeling as a dial, not a switch
Voting Twice for Secession Would be More Fair
The Unanimous Declaration of the Thirteen United States of America
Appsec Roundup - June 2025
Google’s approach to AI Agents -- Threat Model Thursday
Publish your threat model!
The Essence and Beauty of Threat Modeling
Andor: Insider Threats
Appsec Roundup - May 2025
Free Threat Modeling Training for Displaced Federal Workers
Blackhat Earlybird Prices End Friday
Graham Cluley
Police dismantle DiskStation ransomware gang targeting NAS devices, arrest suspected ringleader
The AI Fix #59: Grok thinks it’s Mecha Hitler, and AIs can think strategically
SIM scammer’s sentence increased to 12 years, after failing to pay back victim $20 million
Quelle surprise! Twitter faces criminal probe in France
Elmo has been hacked, claims Trump is in Epstein files, calls for Jews to be exterminated
Russian basketball player arrested in ransomware case despite being “useless with computers”
As Texas floods, so does the internet – with dangerous lies
AiLock ransomware: What you need to know
The AI Fix #58: An AI runs a shop into the ground, and AI’s obsession with the number 27

Security in Mainstream Media

Google News Hacking
US government confirms Chinese hackers have stolen vital intelligence from the US Army - TweakTown new
Can House-Hacking Open the Door to Wealth? - GOBankingRates new
In Other News: Law Firm Hacked by China, Symantec Flaw, Meta AI Hack, FIDO Key Bypass - SecurityWeek new
Gazprom Hacked: Ukrainian Intel Attacks Heart of Russia’s Energy Empire - Kyiv Post new
Ukrainian hackers wipe databases at Russia's Gazprom in major cyberattack, intelligence source says - The Kyiv Independent new
Critical Nvidia Toolkit Flaw Exposes AI Cloud Services to Hacking - SecurityWeek new
Jynxzi’s Twitch account hacked, channel temporarily banned in cybersecurity scare - The Economic Times new
Hackers Abuse DNS Blind Spots to Stealthily Deliver Malware - gbhackers.com new
Someone Hacked Jynxzi's Twitch Account - Sports Illustrated
Hackers Use GitHub Repositories to Host Amadey Malware and Data Stealers, Bypassing Filters - The Hacker News
Chinese Group Hacks ‘Edge’ Devices in Ongoing Telecom Targeting - Bloomberg
Hacker breaks into Arizona election website, changes candidate photos - Votebeat
Google Cyber Security
Cyber Defenders Camp teaches high schoolers about cybersecurity - Upper Michigan's Source new
Paul Reynolds Unveils New Launch of Cyber Security Consultant Service for SMEs - FinancialContent new
Missouri Adopts New Data Breach Notice Law for Insurers – The 10 Things Insurers and Licensed Entities Need to Know - JD Supra new
How did Stuxnet impact cyber operations? The US House aims to find out - SC Media new
Adoption is up, panic is down: Cyber pros weigh AI’s real impact - Digital Journal new
Google Sued BadBox 2.0 Malware Botnet Operators That Infects 10 Million+ Devices - CyberSecurityNews new
Singapore accuses Chinese state-backed hackers of attacking critical infrastructure networks - The Record from Recorded Future News new
UK ties GRU to stealthy Microsoft 365 credential-stealing malware - BleepingComputer new
Guest Viewpoint: Bridging the cyber gap: The Greater Pittsburgh CyberHub - The Business Journals new
The Cat-and-Mouse Cyber War—and How to Win It - Security Info Watch new
GoSec 25: Shaping the Future of Cybersecurity - Yahoo Finance new
Singapore says cyber espionage group targeting critical infrastructure - MSN new

Thirsty for more

Hacker News (YCombinator)
Silence Is a Commons by Ivan Illich (1983) new
Exhausted man defeats AI model in world coding championship new
Hush: Holistic Panoramic 3D Scene Understanding Using Spherical Harmonics new
Wii U SDBoot1 Exploit "paid the beak" new
Wii U SDBoot1 Exploit “paid the beak” new
Multiplatform Matrix Multiplication Kernels new
AI CapEx Is Eating the Economy new
AI capex is so big that it's affecting economic statistics new
Trying to send a sticker in Steam Chat burned through a month of mobile data new
Broadcom to discontinue free Bitnami Helm charts new
Show HN: I built library management app for those who outgrew spreadsheets new
Evolution Mail Users Easily Trackable Part 2 new
Reddit - Cyberpunk
This car made by BYD has more than just autonomous driving, it can jump! new
LAPD recruitment ads on Reddit… new
New Yaiba Bike new
Made a cyberpunk/body horror short film! Check out ‘The Aug-Tech’! new
Grok AI Girlfriend new
Cyberpunk Digital Shrine new
Chinatown new
Cyberpunk mods new
WeTransfer. The next corporation to keep and sell your secrets. Cyberpunk is becoming less and less a distant dystopia.
It looks like it's going to be an interesting evening...
Inhabitants of the Dutch town Zandvoort 'digitally close' their neighbourhood's streets
Drones indicating exit after an event in Osaka, Japan
Reddit - Security CTF
💀 The Call of the LOLCOW — Your Sanctuary Awaits. new
Operation Frostbyte | Varonis
how to learn ctf
Need guide regarding how to setup forensic challs
[CTF] New vulnerable VM at hackmyvm.eu
Schizophrenic ZIP file - Yet Another ZIP Trick Writeup
Hello I'm new to here!
Symbol Ciphers in CTF Challenges - Common Cipher Identification Guide with Decoders 🔍
The image (created by me: zevvi)
WHERE CAN I GET CTFD CHALLENGES?
Steganography Cheatsheet for CTF Beginners – Tools and Techniques
Bypassing static hosting directory.
Reddit - Sysadmin
PSA: Edge Game Assist AppX package causing sysprep failures on Server 2022+ new
How to install latest acrobat reader dc patch during installation new
dbpill.com - Automated SQL indexer new
scanning from cloud.prosyst.com all day, what is this? new
You know it’s been too long when … new
What’s your game plan if you get hit by ransomware? new
Endpoint Mangement and Users Policies new
Alerts for Sharepoint Permissions new
Am I Getting Fucked Friday, July 18th 2025 new
Google Issues new
Corporate Phishing emails-Exchange Online-Shows the email is being sent by the receiver new
Cisco ISE 3.4 Patch 2 - All nodes require a CLI password reset new
Lobste.rs
The current technology is not ready for proper blending new
Pimping my Casio: Part Deux new
Asynchrony is not Concurrency new
firefox-patch-bin, librewolf-fix-bin and zen-browser-patched-bin AUR packages contain malware new
How do you compute the midpoint of an interval? (2014) new
Kap lang new
How much computing power in the world? new
Enough unix to get by new
Jsonptr: Using Wuffs’ Memory-Safe, Zero-Allocation JSON Decoder new
Petition: Repeal the Online Safety Act new
How I Fixed Ruby's Most Annoying Problem: 60-Second Gem Installs new
losing language features: some stories about disjoint unions new
Hackaday
Time, Stars, and Tides, All On Your Wrist new
2025 One-Hertz Challenge: HP Logic Probe Brought Into The Future new
Hackaday Podcast Episode 329: AI Surgery, a Prison Camp Lathe, and a One Hertz Four-Fer new
Unlocking the Potential of a No-Name Handheld Game new
This Week in Security: Trains, Fake Homebrew, and AI Auto-Hacking new
A Vulnerable Simulator for Drone Penetration Testing new
MR Browser is the Package Manager Classic Macs Never Had new
Improve Your KiCad Productivity With These Considered Shortcut Keys new
8-Core ARM Pocket Computer Runs NixOS new
ESP32 Plugs In to Real-Time Crypto Prices new
Building a Stirling Engine Bike
2025 One Hertz Challenge: Building a Better Jumping Bean
Ars Technica
As White House talks about impounding NASA funding, Congress takes the threat seriously new
Phishers have found a way to downgrade—not bypass—FIDO MFA new
Trump admin to finally cap price of weird bandages that cost $10 billion last year
Wired
How China’s Patriotic ‘Honkers’ Became the Nation’s Elite Cyberspies new
Lettuce Grow Indoor Farmstand Review: Grow Your Own new
Roborock Saros Z70 Review: OmniGrip Doesn’t Quite Work new
This Turbo Escooter Wants to Set a Guinness World Record new
Italian YouTuber Faces Jail Time for Showing Android Handhelds With Emulated Games new
Einstein Showed That Time Is Relative. But … Why Is It? new
'Eddington' Director Ari Aster Couldn’t Stand ‘Living in the Internet.’ So He Made a Movie About It new
7 Best Coffee Concentrates for Instant Caffeine (2025) new
Lelo Ora 3 Review: A Tongue Stimulator new
ICE Is Getting Unprecedented Access to Medicaid Data
Some Cities in China Are Advertising Exclusive Subsidies for Huawei-Powered Cars
The Best Meal Replacement Shakes for Total Life Optimization (2025)
Slashdot
Ukrainian Hackers Claim To Have Destroyed Major Russian Drone Maker's Entire Network new
Dictionary.com 'Devastated' Paid Users By Abruptly Deleting Saved Word Lists new
House Passes Historic Crypto Bill Regulating Stablecoins new
Google Spots Tailored Backdoor Malware Aimed At SonicWall Appliances
New Russian Law Criminalizes Online Searches For Controversial Content
News Publishers Take Paywall-Blocker 12ft.io Offline
Meta Investors, Mark Zuckerberg Reach Settlement To End $8 Billion Trial Over Facebook Privacy Litigation
Robinhood CEO Says Majority of Company's New Code Written by AI
Mozilla Ships WebGPU in Firefox 141, Catching Up To Chrome's 2023 Launch
Britain's Bankrupt Universities Are Hunting For Cheaper Models
OpenAI Debuts AI Agent That Controls Browsers To Automate Shopping, Presentations
'Sony is Still Stubborn About the Size of Its Cameras'
DZone Security
How to Expose IBM FS Cloud Container App to Public new
How Hackers Exploit Spring Core Vulnerability in 2025: Proactive Measures to Detect Emerging Cyber Threats
The Invisible Risk in Your Middleware: A Next.js Flaw You Shouldn’t Ignore
Securing Software Delivery: Zero Trust CI/CD Patterns for Modern Pipelines
The 7 Biggest Cloud Misconfigurations That Hackers Love (and How to Fix Them)
The Cybersecurity Blind Spot in DevOps Pipelines
Modernize Your IAM Into Identity Fabric Powered by Connectors
Self-Supervised Learning Techniques
DZone
AI-Driven Threat Hunting: Catching Zero Day Exploits Before They Strike new
Burn that List: Smarter Use of Allowlists and Denylists in Multi-Tenant Systems new
Building AI Agents Capable of Exploring Contextual Data for Taking Action new
How We Built a Smarter University Chatbot Using LLaMA2, AWS SageMaker, and RAG new
Developing Secure REST API Using Spring Boot SSL Bundle Feature new
The Twelve-Factor Agents: Building Production-Ready LLM Applications
The Underrated Hero of UI Testing: Why Screenshot Testing Matters
Best Practices for Syncing Hive Data to Apache Doris :  From Scenario Matching to Performance Tuning
Migrating Traditional Workloads From Classic Compute to Serverless Compute on Databricks
Rapid AWS Prototyping With LocalStack: A Developer’s Guide to Building AWS PoCs Locally
Optimizing Your IDP Using Centralized Configuration Management With IBM Cloud App Configuration: A Complete Guide
Streamline Your ELT Workflow in Snowflake With Dynamic Tables and Medallion Design