Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

PacketStorm
The Register
US imposes sanctions on second Russian bulletproof hosting vehicle this year new
UK eyes new laws as cable sabotage blurs line between war and peace new
International Criminal Court swats away 'sophisticated and targeted' cyberattack
Canada orders Chinese CCTV biz Hikvision to quit the country ASAP
Cisco punts network-security integration as key for agentic AI
Aloha, you’ve been pwned: Hawaiian Airlines discloses ‘cybersecurity event’
FBI used bitcoin wallet records to peg notorious IntelBroker as UK national
What if Microsoft just turned you off? Security pro counts the cost of dependency
Cisco fixes two critical make-me-root bugs on Identity Services Engine components
Glasgow City Council online services crippled following cyberattack
Qilin ransomware attack on NHS supplier contributed to patient fatality
UK to buy nuclear-capable F-35As that can't be refueled from RAF tankers
Reddit - NetSec
Azure API vulnerability and built-in roles misconfiguration enable corporate network takeover new
How I Scanned all of GitHub’s "Oops Commits" for Leaked Secrets new
Abusing Chrome Remote Desktop on Red Team Operations
r/netsec monthly discussion & tool thread
How we got persistent XSS on every AEM cloud site, thrice
RCE through Path Traversal
What the NULL?! Wing FTP Server RCE (CVE-2025-47812)
C4 Bomb: Blowing Up Chrome’s AppBound Cookie Encryption
État de l’art sur le phishing Azure en 2025 (partie 1) – Device code flow
New free 7h OpenSecurityTraining2 class: "Fuzzing 1001: Introductory white-box fuzzing with AFL++" by Francesco Pollicino is now released
Comparing Semgrep Community and Code for Static Analysis
When Your Login Page Becomes the Frontline: Lessons from a Real-World DDoS Attack
Bleeping Computer
Spain arrests hackers who targeted politicians and journalists new
Cisco warns that Unified CM has hardcoded root SSH credentials new
Citrix warns of login issues after NetScaler auth bypass patch new
Forminator plugin flaw exposes WordPress sites to takeover attacks new
The Hacker News
U.S. Sanctions Russian Bulletproof Hosting Provider for Supporting Cybercriminals Behind Ransomware new
Critical Vulnerability in Anthropic's MCP Exposes Developer Machines to Remote Exploits
⚡ Weekly Recap: Airline Hacks, Citrix 0-Day, Outlook Malware, Banking Trojans and more
GIFTEDCROOK Malware Evolves: From Browser Stealer to Intelligence-Gathering Tool
Facebook’s New AI Tool Asks to Upload Your Photos for Story Ideas, Sparking Privacy Concerns
PUBLOAD and Pubshell Malware Used in Mustang Panda's Tibet-Specific Attack
MOVEit Transfer Faces Increased Threats as Scanning Surges and CVE Flaws Are Targeted
Critical RCE Flaws in Cisco ISE and ISE-PIC Allow Unauthenticated Attackers to Gain Root Access
New FileFix Method Emerges as a Threat Following 517% Rise in ClickFix Attacks
Iranian APT35 Hackers Targeting Israeli Tech Experts with AI-Powered Phishing Attacks
Cyber Criminals Exploit Open-Source Tools to Compromise Financial Institutions Across Africa
CISA Adds 3 Flaws to KEV Catalog, Impacting AMI MegaRAC, D-Link, Fortinet

Threat Wire

Bug Bounties

Vulnerabilities

Full Disclosure
iOS Activation Flaw Enables Pre-User Device Compromise and Identity Exposure (iOS 18.5)
Remote DoS in httpx 1.7.0 – Out-of-Bounds Read via Malformed <title> Tag
CVE-2025-32978 - Quest KACE SMA Unauthenticated License Replacement
CVE-2025-32977 - Quest KACE Unauthenticated Backup Upload
CVE-2025-32976 - Quest KACE SMA 2FA Bypass
CVE-2025-32975 - Quest KACE SMA Authentication Bypass
Disclosure Yealink Cloud vulnerabilities
: "Glass Cage" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885)
SEC Consult SA-20250612-0 :: Reflected Cross-Site Scripting in ONLYOFFICE Docs (DocumentServer)
SEC Consult SA-20250611-0 :: Undocumented Root Shell Access on SIMCom SIM7600G Modem
Call for Applications: ERCIM STM WG 2025 Award for the Best Ph.D. Thesis on Security and Trust Management (July 31, 2025)
SEC Consult SA-20250604-0 :: Local Privilege Escalation and Default Credentials in INDAMED - MEDICAL OFFICE (Medical practice management) Demo version
NIST National Vulnerability Database
Sixth PQC Standardization Conference new
Now Available: NIST NCCoE Chatbot Internal Report
New NIST 5G Cybersecurity White Paper - Network Security Design Principles
0day Today
CXSecurity
Vite fs LFI (Local File Inclusion) Vulnerability new
VBA Bypass Windows Defender Exploit PoC new
Moodle 4.4.0 Authenticated Remote Code Execution new
WebDAV Windows 10 Remote Code Execution (RCE) new
Java-springboot-codebase 1.1 Arbitrary File Read new
Social Warfare WordPress Plugin 3.5.2 Remote Code Execution (RCE) new
PHP CGI Module 8.3.4 Remote Code Execution new
Grandstream GSD3710 1.0.11.13 Stack Overflow
Sitecore 10.4 Remote Code Execution (RCE)
Pitamaas - Sql Injection
Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability PoC (Conceptual Model)
Litespeed Cache WordPress Plugin 6.3.0.1 Privilege Escalation

LiveOverflow

Exploit Dev

Reddit - Exploit Dev
Fuzzing Intro @ OST2 new
if a purely visual bug can be used to hide malicious code, is it considered an exploit?
Help !
Mobile and ARM CTF like challenges
Fuzzing Methodology
How are vulns found in CPU architecture?
Faster Cache Exploits with Smarter Agents: Penalizing Useless Actions in Reinforcement Learning for Microarchitectural Attacks
Unity 2022.3.22f1 license bypass?
Exploit Development - Chatterbox PoC
Common Security Risks in Ethereum Smart Contracts
CyberGym: A Real-World Benchmark for Testing AI Agents in Software Security
HPTSA: Hierarchical LLM Agents for Zero-Day Vulnerability Exploitation
Source Incite
Google Project Zero
The Windows Registry Adventure #8: Practical exploitation of hive memory corruption
Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages
Security Researchers
BOF Linting for Accelerated Development
Type System and Modernization
Why is there no consistent single signon API flow?
My a11y journey
Same Sea, New Phish: Russian Government-Linked Social Engineering Targets App-Specific Passwords
Locally hosting an internet-connected server
Unspoken Implications: A Preliminary Analysis of Bill C-2 and Canada’s Potential Data-Sharing Obligations Towards the United States and Other Countries
Secure Enclaves for Offensive Operations (Part II)
Graphite Caught: First Forensic Confirmation of Paragon’s iOS Mercenary Spyware Finds Journalists Targeted
Streaming Zero-Fi Shells to Your Smart Speaker
Techno-Legal Internet Controls in Indonesia and Their Impact on Free Expression
How Twitter could (somewhat) fix their encrypted DMs

Reversing/I like ASM

Reddit - Game Hacks
What is GetCheats.io and Why You Should Choose Us. Best private cheats for online games. new
Escape From Tarkov cheat & hack Authority. Without bans more then 2 years. EFT hacks new
STEALTHFORGE ELITE new
The weirdest game AI control idea I’ve seen—entropic shadows?
Best eft hack desync. Escape from tarkov cheat DESYNC. No bans, чит на ефт десинк
Best arena breakout infinite hack Ancient. Cheat for ABI. Купить читы арена брейкаут
cum pot sa descarc un crack necesar pentru a functiona fs17 fara steam?
Hack PvZ goty to get ZenGardenPlants more often
Is this a false positive trojan? - Grim Client
Grenade preview with the best ABI DMA hack BBC. Arena Breakout hack. Аре...
Full game with the best cheat for arena breakout infinite. ABI hacks.
Most legit and cheapest cheat for Escape From Tarkov (EFT). Best hack without bans. Chams EFT
Reddit - REGames
StackExchange - ReverseEngineering
Prevent WinDbg from switching process context while stepping through syscall
Keyboard firmware problem
Help with editing some elements from a decompiled APK
Pronto Peel Bluetooth IR blaster
Reverse Engineering an IR Signal from a Remote
MCU processor name for MG5 instrument clustering
Reddit - Reverse Engineering
Computer Organization& Architecture in Arabic new
How to reverse engineer 'Rematch' game to access user statistics?
Type System and Modernization · x64dbg
Breaking Chrome’s AppBound Cookie Encryption Key
Time Travel Debugging in Binary Ninja with Xusheng Li
/r/ReverseEngineering's Weekly Questions Thread
help analyzing .net dll
find cipher key by reverse engineering
Action Camera or DIY Camera to mount on bike
Govee H6047 BLE control — does it require a handshake before accepting write commands?
Help Decompilate JPOG!
qualcomm hexagon qdsp6 for ghidra

Guided Hacking

Malware/APT

Crypto

Seytonic

Podcasts

Risky.Biz
Risky Business #798 -- Mexican cartel surveilled the FBI to identify, kill witnesses new
Risky Business #797 -- Stuxnet vs Massive Ordnance Penetrators
Risky Business #796 -- With special guest co-host Chris Krebs
Soap Box: AI has entered the SOC, and it ain't going anywhere
Risky Business #795 -- How The Com is hacking Salesforce tenants
Risky Business #794 -- Psychic Panda outgunned by Fluffy Lizard and UNC56728242
Risky Business #793 -- Scattered Spider is hijacking MX records
Risky Business #792 -- Beware, Coinbase users. Crypto thieves are taking fingers now
Risky Biz Soap Box: Push Security's browser-first twist on identity security
Risky Business #791 -- Woof! Copilot for Sharepoint coughs up creds and keys
Wide World of Cyber: How state adversaries attack security vendors
Risky Business #790 -- Bye bye Signal-gate, hello TeleMessage-gate
The CyberWire
North Korea’s covert coders caught. new
U.S. braces for Iranian cyber intrusions.
Jamil Jaffer: You should run towards risk. [Strategy] [Career Notes]
A tale of two botnets. [Research Saturday]
Turbulence in the cloud.
No panic—just patch.
Open-source, open season.
Iran’s digital threat after U.S. strikes.
Iran’s digital retaliation looms.
Jadee Hanson: Cybersecurity is a team effort. [CISO] [Career Notes]
Signed, sealed, exploitable. [Research Saturday]
A blast from the breached past.
ISC Daily Stormcast
SANS Stormcast Monday June 30th, 2025: Scattered Spider; AMI BIOS Exploited; Secure Boot Certs Expiring; Microsoft Resliliency Initiative
SANS Stormcast Friday, June 27th, 2025: Open-VSX Flaw; Airoha Bluetooth Vulnerablity; Critical Cisco Identity Service Engine Vuln;
SANS Stormcast Thursday, June 26th, 2025: Another Netscaler Vuln; CentOS Web Panel Vuln; IP Based Certs
SANS Stormcast Tuesday, June 24th, 2025: Telnet/SSH Scan Evolution; Fake Sonicwall Software; File-Fix vs Click-Fix
SANS Stormcast Tuesday, June 24th, 2025: Ichano ATHome IP Camera Scans; Netscaler Vulnerability; WinRar Vulnerability
SANS Stormcast Monday, June 23rd, 2025: ADS and Python; More Secure Cloud PCs; Zend.to Path Traversal; Parser Differentials
SANS Stormcast Friday, June 20th, 2025: New Employee Phishing; Malicious Tech Support Links; Social Engineering App Sepecific Passwords
Darknet Diaries
160: Greg
159: Vastaamo
158: MalwareTech
157: Grifter
156: Kill List
155: Kingpin
154: Hijacked Line
153: Bike Index
152: Stacc Attack
151: Chris Rock
150: mobman 2
149: Mini-Stories: Vol 3
Security Weekly
Hacking Drivers - PSW #879
UEFI Vulnerabilities Galore - PSW #878
Updating & Protecting Linux Systems - PSW #877
It's A Trap! - PSW #876
Malware Laced Printer Drivers - PSW #875
Ransomware in your CPU - PSW #874
Are You Down With RDP? - PSW #873
AI Tips, Tricks, and Traps! - PSW #872
Hacking Crosswalks and Attacking Boilers - PSW #871
Govt Unravelling, AI Hijinx, Bot Chaos, Recall, Oracle, Slopesquatting, Tycoon 2FA... - PSW #870
You Should Just Patch - PSW #869
Not-So-Secure Boot - Rob Allen - PSW #868

Threat Intel

Privacy/VPNs

Reddit - Privacy
Cell phone with physical lens cover? new
Is TradingView monitoring me? new
Reddit history new
Thoughts on RocketMoney new
Facebook (Meta) skeptics new
As someone who has used Google, Meta, Microsoft, etc for years... how do I "reclaim" my data? new
How can I improve the privacy of my email when I'm using Gmail? new
Every COROS watch has a major vulnerability exposing your private data new
Nexus Mods will soon require age verification for UK and EU users looking for its treasure trove of adult mods new
Cars being a privacy nightmare - I just don’t understand. new
Apple's Foundation Models framework is a genuine step toward local-first computing new
Reddit - VPN
how to use TikTok in China with VPN new
Split tunneling with pfSense new
I keep getting blocked form services with VPN on
Is my VPN Down or Blocked? Is there way to check?
Vpns on mobile devices not connecting
VPN Playstation
VPNs do not conceal location?
Network disconnects when using a vpn.
VPN for Fire Stick
Bimonthly VPN recommendations megathread: the only place for mentioning specific providers
EFF
🤫 Meta's Secret Spying Scheme | EFFector 37.7 new
EFFecting Change: EFF Turns 35! new
Flock Safety’s Feature Updates Cannot Make Automated License Plate Readers Safe
Today's Supreme Court Decision on Age Verification Tramples Free Speech and Undermines Privacy
How Cops Can Get Your Private Online Data
Why Are Hundreds of Data Brokers Not Registering with States?
Major Setback for Intermediary Liability in Brazil: How Did We Get Here?
A Token of Appreciation for Sustaining Donors 💞
Podcast Episode: Securing Journalism on the ‘Data-Greedy’ Internet
Betting on Your Digital Rights: EFF Benefit Poker Tournament at DEF CON 33
Connectivity is a Lifeline, Not a Luxury: Telecom Blackouts in Gaza Threaten Lives and Digital Rights
Google’s Advanced Protection Arrives on Android: Should You Use It?
Reddit - PrivacyGuides
Compartmentalize Your Life (and Your Privacy)
The Importance of Data Privacy For The Queer Community
Slashdot - Rights
Apple Accuses Former Engineer of Taking Vision Pro Secrets To Snap new
Tinder To Require Facial Recognition Check For New Users In California new
IT Worker Sentenced To Seven Months After Trashing Company Network new
US Government Takes Down Major North Korean 'Remote IT Workers' Operation
Apple Loses Bid To Dismiss US Smartphone Monopoly Case
In Last-Minute Move, Canada Rescinds Digital Services Tax, Restarts Negotiations
After 45 Years, 74-Year-Old Spreadsheet Legend/EFF Cofounder Mitch Kapor Gets His MIT Degree
New NSA/CISA Report Again Urges the Use of Memory-Safe Programming Language
Sinaloa Cartel Used Phone Data and Surveillance Cameras To Find and Kill FBI Informants in 2018, DOJ Says
Canada Orders Chinese Firm Hikvision To Cease Canadian Operations Over National Security Concerns
Facebook Is Asking To Use Meta AI On Photos In Your Camera Roll You Haven't Yet Shared
Brother Printer Bug In 689 Models Exposes Millions To Hacking

Help Wanted

Reddit - AskNetSec
How are you handling alert fatigue and signal-to-noise problems at scale in mature SOCs?
Can website fingerprinting be classified under traffic side-channel attacks?
what are some simple habits to improve my personal cybersecurity?
Privileged remote access gateway segmentation
Conducting ISO 27001 internal audit
EDR
Is CORS considered a success?
Do developers really care about package security when trying to move fast?
How does one register for a CVE these days?
Can hashcat's 'brain' server 'synthesize' password candidates from wordlists and rules?
My recent deep dive into WebRTC security - more to it than I thought!
What Feature Do You Think Makes or Breaks a Security Tool?
Reddit - Netsec Students
Hello
about exams for Certiport Network Security
Launching Free AiCybr Practise Centre for CompTIA certs (A+, Net+, Sec+) and Linux commands
learning technology from prison @conversationsofconviction
🎓 Found a Free ParrotOS Linux Course – Anyone Tried It or Have Better Beginner Resources?
🔍 How do you approach reverse engineering on ParrotOS? Looking for tool/flow tips
CV Redux
How do you structure your workflow for web-app testing on ParrotOS? Looking to compare setups
Beginner wants to learn hacking
arcsight
Used our private intel scraper (WRAITH) + SØPHIA overlays to locate a buried data hub during passive recon — AMA
Stackoverflow - Security
Retrieve Vulnerabilities for an asset in tenable SC (Security Center)
Docker Alpine - Not a CIS compliance and hardening [closed]
User-specific data that persists across browser closures, on a single specific browser instance, such as Chrome
about the html injection and RCE by protocol handler abuse [closed]
Imagine Columbia still flew. How much $$ to abduct it? [closed]
Encrypted TCP Tunnel for Log Transfer in SIEM Federation [closed]
Best practices for centralized Kubernetes security monitoring across multiple development teams [closed]
Is file sharing between iPhone and windows via Phone Link safe? [closed]
Why does psycopg2 still allow SQL injection with dynamically constructed table names
What are the key technical criteria to evaluate a VAPT service provider's methodology? [closed]
Stack Exchange
How often do you audit your systems against CIS recommendations—and what tools do you use? [closed] new

Locks/Social Engineering

Reddit - Lockpicking
Wow that's new new
More LOTO picking during smoke break, all keyed alike new
LockJawMFG Berserker Challenge new
LOTO picking before I start work for the day new
Mail call new
Finally got it new
Still struggling a little with my 1100 series, but popped this for the first time tonight. new
Burg Wachter Alpha 800 picked! This is a weirdo lock. new
Night cap picking new
Mail call some new handles, a pinning tray from bare bones and a Lockwood 227 that uses a 225 key😂 new
$25, how long does it last new
Did not expect to open this tonight new
Reddit - Social Engineering
Is it possible to be forced to live in someone else's frame? new
Dealing with manipulative people
Need friends to start these self improvement journey with
Questions about similarities between domestic abuse and fascism
Can you help me find someone? Crowdsourcing tools & processes here.
Sinister.ly down?
how do you make someone feel like your both part of the same social group?
The Narcissist's Playbook: 15+ Tactics They Use To Manipulate You
Social skills
How to reframe situations in a way that highlights common goals or values?
APSE(-like) homework/challenges examples/ideas?

Hak5

Security Blogs

Dark Reading
ClickFix Spin-off Attack Bypasses Key Browser Safeguards new
1 Year Later: Lessons Learned From the CrowdStrike Outage new
Like SEO, LLMs May Soon Fall Prey to Phishing Scams new
'CitrixBleed 2' Shows Signs of Active Exploitation
Scattered Spider Taps CFO Credentials in 'Scorched Earth' Attack
Vulnerability Debt: How Do You Put a Price on What to Fix?
US Falling Behind China in Exploit Production
How Geopolitical Tensions Are Shaping Cyber Warfare
Cloud Repatriation Driven by AI, Cost, and Security
Taming Agentic AI Risks Requires Securing Non-Human Identities
Millions of Brother Printers Hit by Critical, Unpatchable Bug
CISA Is Shrinking: What Does It Mean for Cyber?
Securelist by Kaspersky
AI and collaboration tools: how cyberattackers are targeting SMBs in 2025
SparkKitty, SparkCat’s little brother: A new Trojan spy found in the App Store and Google Play
Toxic trend: Another malware threat targets DeepSeek
Sleep with one eye open: how Librarian Ghouls steal data by night
Analysis of the latest Mirai wave exploiting TBK DVR devices with CVE-2024-3721
IT threat evolution in Q1 2025. Non-mobile statistics
IT threat evolution in Q1 2025. Mobile statistics
Host-based logs, container-based threats: How to tell where an attack began
Exploits and vulnerabilities in Q1 2025
Zanubis in motion: Tracing the active evolution of the Android banking malware
Dero miner zombies biting through Docker APIs to build a cryptojacking horde
Threat landscape for industrial automation systems in Q1 2025
HITB News
The RISKS Digest
Fraud trial for Ontario's 'Crypto King' set to begin in October 2026
Michael Levin says all intelligence is collective, and consciousness may not be limited to brains...
Billions of login credentials may have leaked. Here's how you can protect your accounts
Authorities Rescue Girl Whose Mother Livestreamed Her Sexual Abuse
Cargo Ship That Caught Fire Carrying Electric Vehicles Sinks in the Pacific
Record DDoS pummels site with once-unimaginable 7.3Tbps of junk traffic
Re: They Asked ChatGPT Questions. The Answers Sent Them Spiraling.
Re: Grief scams on Facebook
Re: Most Americans Believe Misinformation Is a Problem -- Federal Research Cuts Will Only Make the Problem Worse
What could go wrong? - AllTrails launches AI route-making tool
Anthropic wins a major fair-use victory for AI, but it's still in trouble for stealing books
New ACM Journal to Focus on AI Security, Privacy
Kaspersky Blog
Adam Shostack & friends
Appsec Roundup - June 2025
Google’s approach to AI Agents -- Threat Model Thursday
Publish your threat model!
The Essence and Beauty of Threat Modeling
Andor: Insider Threats
Appsec Roundup - May 2025
Free Threat Modeling Training for Displaced Federal Workers
Blackhat Earlybird Prices End Friday
Cyber Hard Problems Report
Andor: Think like a leader
Andor Threats: Information Disclosure
The Empire’s Threat Modeling
Graham Cluley
BreachForums broken up? French police arrest five members of notorious cybercrime site
SafePay ransomware: What you need to know
Smashing Security podcast #423: Operation Endgame, deepfakes, and dead slugs
Aflac, one of the USA’s largest insurers, is the latest to fall “under siege” to hackers
Marks & Spencer ransomware attack was good news for other retailers
Twitter refuses to explain what it’s doing about hate speech and misinformation, sues New York State for asking
Iranian State TV hacked, and that’s modern warfare
Qilin offers “Call a lawyer” button for affiliates attempting to extort ransoms from victims who won’t pay
Smashing Security podcast #422: The curious case of the code copier
Yes, the Co-op lost your data. Have a £10 shopping voucher
Rapid7
Patch Tuesday - June 2025
BlackSuit Continues Social Engineering Attacks in Wake of Black Basta’s Internal Conflict
Key Takeaways from the Take Command Summit 2025: Demystifying Cloud Detection & Response – The Future of SOC and MDR
5 Things Security Leaders Need to Know About Agentic AI
Metasploit Wrap-up 06/06/25
Cultivating Growth and Development at Rapid7
India's cyber leaders prepare for AI-driven threats
Navigating AWS Migration: Achieving Clarity and Confidence
Rapid7 Q1 2025 Incident Response Findings
From Ideology to Financial Gain: Exploring the Convergence from Hacktivism to Cybercrime
Introducing AI Attack Coverage in Exposure Command: Secure what traditional AppSec Tools miss
Key Takeaways from the Take Command Summit 2025: Risk Revolution – Proactive Strategies for Exposure Management
Hacker News (YCombinator) - Security
Hacker Noon #Security
The Limits of Automated Selfish Mining Detection new
How Confidential Are Your Blockchain Transactions, Really? new
Blockchain Security Layers: Tradeoffs Between L1, L2, and Hardware TEEs new
Why TEE-Based Smart Contracts Still Aren’t Fully Secure new
The TechBeat: The GTM Singularity: Why Sales Will Never be the Same Again (7/2/2025) new
$70M Committed To Boba Network As Foundation Concludes BOBA Token Agreement With FTX Recovery Trust new
Decentralized Public-Key Infrastructure: The Future of Supply Chain Security new
How Trusted Execution Environments Power Scalable, Private Smart Contracts new
Layer-One Confidential Smart Contracts: Architecture, Threats, and Tradeoffs new
What Most Blockchain Devs Get Wrong About TEE Security and Smart Contract Privacy new
Four Key Steps to Confidential Smart Contract Execution new
To Fix Smart Contracts, Start With Their Secrets new
Security Bloggers Network
Silent Push, NordVPN Uncover Thousands of Brand-Spoofing Websites new
Concentric AI Expands Data Security Ambitions With Swift Security, Acante Acquisitions  new
Blumira Identifies 824 Iranian Cyber Incidents Over 21 Months  new
Report Finds LLMs Are Prone to Be Exploited by Phishing Campaigns new
API Sprawl Can Trip Up Your Security, Big Time new
Your Agentic AI Governance Checklist: 7 Non-Negotiables to Fix Governance Blind Spots  new
Guiding Global Teams: Fostering Compliance and Creativity new
How Monitoring Users’ Holistic Digital Identities Can Help Businesses Eliminate Cybercriminals’ Greatest Advantage new
U.S. Target North Korean IT Worker Scams with Raids, Indictments new
Ghost in the Machine: A Spy’s Digital Lifeline
DOJ Charges 324 in Sprawling $14.6 Billion Health Care Fraud Scams
U.S. House Homeland Security Appropriations Bill Seeks to Modernize Border Infrastructure Security with Proactive OT/IT Security Measures
Control C
Wired - Security
Identities of More Than 80 Americans Stolen for North Korean IT Worker Scams
ICE Rolls Facial Recognition Tools Out to Officers' Phones
US Supreme Court Upholds Texas Porn ID Law
‘They're Not Breathing’: Inside the Chaos of ICE Detention Center 911 Calls
Telegram Purged Chinese Crypto Scam Markets—Then Watched as They Rebuilt
Taiwan Is Rushing to Make Its Own Drones Before It's Too Late
What Satellite Images Reveal About the US Bombing of Iran's Nuclear Sites
Truth Social Crashes as Trump Live-Posts Iran Bombing
Israel Says Iran Is Hacking Security Cameras for Spying
Iran’s Internet Blackout Adds New Dangers for Civilians Amid Israeli Bombings
Israel-Tied Predatory Sparrow Hackers Are Waging Cyberwar on Iran’s Financial System
Minnesota Shooting Suspect Allegedly Used Data Broker Sites to Find Targets’ Addresses
Elttam
Krebs on Security
Senator Chides FBI for Weak Advice on Mobile Security
Inside a Dark Adtech Empire Fed by Fake CAPTCHAs
Patch Tuesday, June 2025 Edition
Proxy Services Feast on Ukraine’s IP Address Exodus
U.S. Sanctions Cloud Provider ‘Funnull’ as Top Source of ‘Pig Butchering’ Scams
Pakistan Arrests 21 in ‘Heartsender’ Malware Service
Oops: DanaBot Malware Devs Infected Their Own PCs
KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS
Breachforums Boss to Pay $700k in Healthcare Breach
Patch Tuesday, May 2025 Edition
Pakistani Firm Shipped Fentanyl Analogs, Scams to US
xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs
Naked Security
Using AI to identify cybercrime masterminds
Taking the shine off BreachForums
The State of Ransomware 2025
June Patch Tuesday digs into 67 bugs
Sophos Emergency Incident Response is now available
The strange tale of ischhfd83: When cybercriminals eat their own
Schneier on Security
Ubuntu Disables Spectre/Meltdown Protections new
Iranian Blackout Affected Misinformation Campaigns
How Cybersecurity Fears Affect Confidence in Voting Systems
Friday Squid Blogging: What to Do When You Find a Squid “Egg Mop”
The Age of Integrity
White House Bans WhatsApp
What LLMs Know About Their Users
Here’s a Subliminal Channel You Haven’t Considered Before
Largest DDoS Attack to Date
Friday Squid Blogging: Gonate Squid Video
Surveillance in the US
Self-Driving Car Video Footage
Linux Security
CISA Warns of CVSS 9.3 MICROSENS NMP Web+ Flaws new
Zero-Day Alert: Chrome's V8 Security Flaw Fixed in Emergency Patch new
Ubuntu 25.10 Brings Rust-Based Tools to Security-Conscious Admins

Security in Mainstream Media

Google News Hacking
Hacked, leaked, exposed: Why you should never use stalkerware apps - TechCrunch new
Hackers Backed by Iran Claim to Have Stolen 100 GB of Emails from Trump Team and Stormy Daniels - Algemeiner.com new
New manipulative attack method gives hackers control over what AI sees - Cybernews new
U.S. Calls Iranian Hacker Threat to Release Trump-Related Emails a 'Smear Campaign' - kurdistan24.net new
CVE-2025-6554 is the fourth Chrome zero-day patched by Google in 2025 - Security Affairs new
Major airline hacked with data for 6 MILLION passengers stolen in shock raid - The US Sun new
Australian Airline Qantas Hacked – Attackers Gained Access to Customers Personal Data - gbhackers.com new
Who are Scattered Spider? FBI warns M&S hackers are now targeting airline industry - London Evening Standard new
'Robert' returns: FBI investigating suspected Iranian hackers claiming to have Trump team info - Washington Times new
Iranian Hackers Threaten to Release Stolen Emails From Trump's Inner Circle - Futurism new
Iran-linked hackers threaten to release roughly 100 gigabytes worth of emails stolen from Trump’s inner circle - New York Post new
Iranian-Linked Hackers Threaten to Release Trove Emails From Trump Aides - NTD News new
Google Cyber Security
Qantas hit by 'significant' cyberattack, data breach of 6 million customers days after FBI warning to airlines - Fast Company new
Hacktivists' Claimed Breach of Nuclear Secrets Debunked - GovInfoSecurity new
LevelBlue Expands AI Cyber Defense with Trustwave Buy - Channel Insider new
Key Cybersecurity, Privacy, and National Security Considerations for Data Centers in 2025 – Publications - Morgan Lewis new
US CISA agency extends Iran cyber alert, warns of CNI threat - Computer Weekly new
Germany seeks deeper partnership with Israel on cybersecurity - The Record from Recorded Future News new
Four Steps to Achieve Cyber Resilience for Utilities - Cisco Blogs new
Scattered Spider link to Qantas hack is likely, say experts - Computer Weekly new
NASA Needs to Refine Agencywide Cyber Risk Management Strategy, GAO Finds - ASIS new
Critical ModSecurity WAF Vulnerability Allows Denial of Service via Empty XML Tags - CyberSecurityNews new
FBI Warns of Cyber Attacks on “Airline Ecosystem” To Accompany Summer Travel Season - CPO Magazine new
Esse Health Data Breach Exposes Personal and Medical Information of 263,000 Patients - gbhackers.com new

Thirsty for more

Ars Technica
Astronomers may have found a third interstellar object new
White House works to ground NASA science missions before Congress can act new
Glen Powell plays a dangerous game in The Running Man trailer
Drug cartel hacked FBI official’s phone to track and kill informants, report says
Wired
4 Best Smart Displays (2025): Tested By a Smart Home Addict new
Airport Lounges Are Sexy Again—if You Can Get In new
Affluent Travelers Are Ditching Business Class for Business Jets new
For Today's Business Traveler, It's All About Work-Life Integration new
Insurers Aren’t Saying Whether They’ll Cover Vaccines for Kids if Government Stops Recommending Them new
Jabra Enhance Select 50R Review: Palatable Price new
23 Best MagSafe Accessories (2025), Tested and Reviewed new
Business Travel Is Evolving Faster Than Ever. We’ll Help You Navigate It new
The Best Tech Gear for Work Trips new
How to Travel to the Most Remote Office on Earth new
Airplane Wi-Fi Is Now … Good? new
Business Class Ain’t What It Used to Be. Don’t Tell First Class new
Slashdot
Recent Droughts Are 'Slow-Moving Global Catastrophe' - UN Report new
Lorde's New CD is So Transparent That Stereos Can't Even Read It new
Air Pollution Linked To Lung Cancer-Driving DNA Mutations, Study Finds new
Google Undercounts Its Carbon Emissions, Report Finds new
Earth's Atmosphere Hasn't Had This Much CO2 in Millions of Years new
UK Eyes New Law as 1885 Telegraph Act Proves Inadequate for Cable Sabotage new
Microsoft To Lay Off As Many As 9,000 Employees in Latest Round new
Young Americans Are Spending a Whole Lot Less On Video Games This Year new
China Successfully Tests Hypersonic Aircraft, Maybe At Mach 12 new
Bezos-Backed Methane Tracking Satellite Is Lost In Space new
Google's Data Center Energy Use Doubled In 4 Years new
Laptop Mag Is Shutting Down new
DZone Security
The Untold Costs of Automation: Are We Sacrificing Security for Speed?
Essential Steps to Building a Robust Cybersecurity Team
Beyond the Checklist: A Security Architect's Guide to Comprehensive Assessments
Kubernetes Admission Controllers: Your First Line of Defense
AI/ML Big Data-Driven Policy: Insights Into Governance and Social Welfare
Cybersecurity Innovations in Software Development: How Developers Are Tackling Security Threats
DZone
Microservice Madness: Debunking Myths and Exposing Pitfalls new
Reducing Hallucinations Using Prompt Engineering and RAG new
Docker Model Runner: A Game Changer in Local AI Development (C# Developer Perspective) new
Reinforcement Learning in CRM for Personalized Marketing new
Replacing Legacy Systems With Data Streaming: The Strangler Fig Approach new
Zero-Click CRM: The Future of Predictive Customer Management With Autonomous AI
The Death of REST? Why gRPC and GraphQL Are Taking Over
Microservices for Machine Learning
CRITICAL_PROCESS_DIED: How to Fix This Windows Blue Screen Error
Jakarta EE 11 and the Road Ahead With Jakarta EE 12
Docker Model Runner: Running AI Models Locally Made Simple
Tableau Dashboard Development Best Practices
Hacker News (YCombinator)
MindsDB (YC W20) Is Hiring for an AI Solutions Engineer new
Stop Killing Games new
ICEBlock, an app for anonymously reporting ICE sightings new
Sony's Mark Cerny Has Worked on "Big Chunks of RDNA 5" with AMD new
Content Independence Day: no AI crawl without compensation new
Show HN: CSS generator for a high-def glass effect new
ICEBlock climbs to the top of the App Store charts after officials slam it new
Show HN: I built an AI comic generator with consistent characters new
Double Is Winding Down new
Firefox 120 to Firefox 141 Web Browser Benchmarks new
Gene therapy restored hearing in deaf patients new
Ruby on Rails: The Open-Source Blueprint new
Reddit - Cyberpunk
A whole other genre....or an element found in all kinds of sci fi? Including cyberpunk. After all, isn't it the "indifference" of corporations that plague… new
plasma choker v2 new
The new Cyberpunk card game is co-op Poker spliced with an RPG new
cyber 3rd arm coming in new
My cyberpunk outfit new
Cory Doctorow in London new
Using GBS-C and an MSX with SCART output I was able to capture in game footage and output to a CRT and my PC. new
Made these in Dystopika! new
Code Enforcement: Wetware- A Dystopian Cyberpunk Detective-Noir Webserial new
Struggling with William Gibson's Burning Chrome new
Palantir welcomes you to SFO new
Neuromancer — In Production | Apple TV+ new
Reddit - Security CTF
Bandit0 not working ): new
Just Launched: GOAD v3 — Game of Active Directory on Parrot CTFs
🚩 CTF Cheatsheet – A Handy Resource I Put Together 🚩
Three new hacking labs just dropped on Parrot-CTFs - All free to play for 30 days.
i have a team and we’re looking for some skilled players for the google ctf competition if you’re interested let me know
help solve ctf
New Kerio Control Vulnerability
What skill should I learn for banglore market as a fresher
CTF team!
Whitebox CTF platform
CTF submitting platform
Shall we play a game?
Reddit - Sysadmin
Exclude shared folder from sharepoint dlp policy new
Does your org protect the BIOS with password? new
Bring back Win11 update after failed install? new
Is there a "sane" way of having "split" domains. new
Ubuntu Security is down FYI new
Tips for quieting 42U racks? new
It's hard to find value in IT... new
Are we too small for a CrowdStrike/SentinelOne/Arctic Wolf et. al.? new
Might need CJIS cert -- Expunged criminal record? new
RingCentral Issues new
Microsoft 365 Tenant Configuration backup new
HP EliteBook 840 G7 – Windows 11 Standby Issue: Devices Won’t Wake Up new
Lobste.rs
Programming as Theory Building new
sslcheck: Command-line tool to check and monitor SSL certificate expiration across multiple domains new
A Higgs-bugson in the Linux Kernel new
Inequality Union Finds: Baby Steps to Refinement E-graphs new
Deploying Python (Django) to Kubernetes: A practical guide with a complete DevOps Pipeline new
This Overly Long Variable Name Could Have Been a Comment new
I Shipped a macOS App Built Entirely by Claude Code new
How I Scanned all of GitHub’s “Oops Commits” for Leaked Secrets worth $25k in Bug Bounties new
Rapid Prototyping a Safe, Logless Reconfiguration Protocol for MongoDB with TLA+ new
Counterexamples of positivity implications in Kähler curvature tensors new
Three Years of Nix and NixOS: The Good, the Bad, and the Ugly new
Uncloud - tool for deploying and managing containerised applications new
Hackaday
Making a Smarter Laptop Cooler new
Why The Latest Linux Kernel Won’t Run On Your 486 And 586 Anymore new
Finally, An Extension To Copyright Law We Can Get Behind new
Adding Automatic Emergency Braking To An RC Car new
Whack-A-Disk new
Challenge: Square a Voltage new
A Crypto Miner Takes the Straight and Narrow new
There Are Better Lego-Compatible Universal Joints Out There new
Are Service Loops a Good Idea? new
C++ Encounters of the Rusty Zig Kind
DIY Book Lamp is a Different Take on the Illuminated Manuscript
One Laptop Manufacturer Had To Stop Janet Jackson Crashing Laptops