Security News

Morningstar Security News gathers all the most popular infosec and cyber security news headlines into a single page that auto-updates 24/7.

Most Popular

Exploits

Bug Bounties

Vulnerabilities

Tools

Exploit Dev

Reversing/I like ASM

Malware/APT

Crypto

Podcasts

Threat Intel

Privacy/VPNs

Help Wanted

Locks/Social Engineering

Security Blogs

Mainstream Media

Thirsty for more

Security Twitterverse

PacketStorm
The Register
China cracks down on personal information collection. No, seriously new
Oracle Health reportedly warns of info leak from legacy server new
After Chrome patches zero-day used to target Russians, Firefox splats similar bug
China’s FamousSparrow flies back into action, breaches US org after years off the radar
Security shop pwns ransomware gang, passes insider info to authorities
CrushFTP CEO's feisty response to VulnCheck's CVE for critical make-me-admin bug
Signalgate storm intensifies as journalist releases full secret Houthi airstrike chat
Credible nerd says stop using atop, doesn't say why, everyone panics
You know that generative AI browser assistant extension is probably beaming everything to the cloud, right?
VanHelsing ransomware emerges to put a stake through your Windows heart
Hm, why are so many DrayTek routers stuck in a bootloop?
Top Trump officials text secret Yemen airstrike plans to journo in Signal SNAFU
Reddit - NetSec
Detect NetxJS CVE-2025-29927 efficiently and at scale
Blacklock Ransomware: A Late Holiday Gift with Intrusion into the Threat Actor's Infrastructure
Next.js and the corrupt middleware: the authorizing artifact
smugglo – Bypass Email Attachment Restrictions with HTML Smuggling
Bypassing Detections with Command-Line Obfuscation
Doing the Due Diligence: Analyzing the Next.js Middleware Bypass (CVE-2025-29927)
CLI tool to sandbox Linux processes using Landlock no containers, no root
Kereva scanner: an open-source LLM security (and performance) scanner
Palo Alto Cortex XDR bypass (CVE-2024-8690)
The National Security Case for Email Plus Addressing
Orphaned DNS Records & Dangling IPs Still a problem in 2025
By Executive Order, We Are Banning Blacklists - Domain-Level RCE in Veeam Backup & Replication (CVE-2025-23120) - watchTowr Labs
Bleeping Computer
New Crocodilus malware steals Android users’ crypto wallet keys new
Microsoft's killing script used to avoid Microsoft Account in Windows 11 new
Retail giant Sam’s Club investigates Clop ransomware breach claims
The Hacker News
New Android Trojan Crocodilus Abuses Accessibility to Steal Banking and Crypto Credentials
BlackLock Ransomware Exposed After Researchers Exploit Leak Site Vulnerability
Researchers Uncover 46 Critical Flaws in Solar Inverters From Sungrow, Growatt, and SMA
CoffeeLoader Uses GPU-Based Armoury Packer to Evade EDR and Antivirus Detection
PJobRAT Malware Campaign Targeted Taiwanese Users via Fake Chat Apps
Hackers Repurpose RansomHub's EDRKillShifter in Medusa, BianLian, and Play Attacks
Top 3 MS Office Exploits Hackers Use in 2025 – Stay Alert!
150,000 Sites Compromised by JavaScript Injection Promoting Chinese Gambling Platforms
EncryptHub Exploits Windows Zero-Day to Deploy Rhadamanthys and StealC Malware
RedCurl Shifts from Espionage to Ransomware with First-Ever QWCrypt Deployment
Hackers Using E-Crime Tool Atlantis AIO for Credential Stuffing on 140+ Platforms
New Security Flaws Found in VMware Tools and CrushFTP — High Risk, PoC Released

Threat Wire

Bug Bounties

Vulnerabilities

Full Disclosure
Three bypasses of Ubuntu's unprivileged user namespace restrictions
SQL Injection in Admin Functionality - dolphin.prov7.4.2
Stored XSS via Send Message Functionality - dolphin.prov7.4.2
APPLE-SA-03-11-2025-4 visionOS 2.3.2
APPLE-SA-03-11-2025-3 macOS Sequoia 15.3.2
APPLE-SA-03-11-2025-2 iOS 18.3.2 and iPadOS 18.3.2
APPLE-SA-03-11-2025-1 Safari 18.3.1
CVE-2019-16261 (UPDATE): Unauthenticated POST requests to Tripp Lite UPS Systems
Multiple sandbox escapes in asteval python sandboxing module
NIST National Vulnerability Database
NIST Small Business Cybersecurity Webinar: Protecting Your Small Business from Phishing Risks new
Iris Experts Group (IEG) Annual Meeting new
5th High-Performance Computing Security Workshop new
Open Industrial Digital Ecosystem Summit new
macOS Security Compliance Project Developer Conference
CSF 2.0 Webinar Series: Implementing CSF 2.0—The Why, What, and How
NIST Selects HQC as Fifth Algorithm for Post-Quantum Encryption
NIST Finalizes Guidelines for Evaluating ‘Differential Privacy’ Guarantees to De-Identify Data
Workshop on Foundational Cybersecurity Activities for IoT Device Manufacturers
0day Today
CXSecurity
openweb-ui 0.5.20 Client-Side Path Traversal (CSPT)
NVIDIA Container Toolkit 1.16.1 Time-of-check Time-of-Use (TOCTOU)
PHP < 8.3.8 Remote Code Execution
Litespeed Cache 6.5.0.1 Authentication Bypass
OMOS-1.0-Copyright©2025-Multiple-SQLi
XWiki Standard 14.10 Remote Code Execution (RCE)
dolphin.prov7.4.2 Stored XSS via Send Message Functionality
dolphin.prov7.4.2 SQL Injection in Admin Functionality
University Registration System - IDOR Leads to Information Disclosure
Wordpress Modal Popup Box Plugin - Multiple Vulnerabilities
Wordpress Plugin Iron Security - IP Spoofing
Aztech DSL5005EN Router - 'sysAccess.asp' Admin Password Change (Unauthenticated)

LiveOverflow

Exploit Dev

Reddit - Exploit Dev
Could this work to get all games for free? new
Looking for advice for web based 0days/CVE.
draining slab caches
Ret2 software exploitation course
Recommend some free real vulnerable software for practice
Vulnerability Researcher in UK
Vulnerability Researcher in the UK
StilachiRAT Threat for businesses
Modifying pwndbg layout
CVE-2025-21333 Windows kernel heap buffer overflow analysis
OSED
Resourses , books, blogs, .. recommended
Source Incite
Google Project Zero
Blasting Past Webp
Windows Exploitation Tricks: Trapping Virtual Memory Access (2025 Update)
Windows Bug Class: Accessing Trapped COM Objects with IDispatch
Security Researchers
Security Update: Publicly Exposed Ingress NGINX Admission
Creating a Windows Application Using Visual Studio Code, Cline, OpenRouter, and Claude
Virtù o vizio? Un primo sguardo alle operazioni in espansione dello spyware di Paragon
Virtue or Vice? A First Look at Paragon’s Proliferating Spyware Operations
Failing upwards: the Twitter encrypted DM failure
DNS is the center of the modern attack surface – are you protecting all levels?
How to Write an Agent
Introducing Alfred for fully autonomous AI-built vulnerability assessments
Silenced by Surveillance: The Impacts of Digital Transnational Repression on Journalists, Human Rights Defenders, and Dissidents in Exile
Book release: “Transnational Repression and International Law” co-authored by Siena Anstis
Online Presentation of No Escape – Tackling Gender-Based Digital Transnational Repression: March 24, 10 am ET
Analysis at Scale with x64dbg Automate

Reversing/I like ASM

Reddit - Reverse Engineering
Writing a Pascal script emulator new
Emulating the YM2612: Part 1 - Interface
Analyzing Modern NVIDIA GPU cores
eDBG: Unleash Android Debugging with eBPF, Defying Anti-Debugging Barriers
MCP Server for IDA Pro
Evil CrackMe: Xtreme difficulty
Inside Windows' Default Browser Protection
Practice Reverse Engineering - crackmy.app
/r/ReverseEngineering's Weekly Questions Thread
HuggingFace Space to Test ReSym's VarDecoder model
tmp.0ut Volume 4
Recording Android App Execution Traces with Time Travel Analysis
Reddit - Game Hacks
LaviCheats are 100% not legit! BEWARE! new
Lavicheats (do not use these guys)
AIMEX CHEATS COD BLACK OPS 6 / WARZONE CHEAT | Aimbot | ESP | Radar | Zombie | Undetected + Streamproof | EASY PAYMENT &…
SUPER LEMON CHEAT UNDECTED SEA OF THIEVES HACK
safe site to hack iphone games?
BO6 BEST UNDETECTED CHEATS | UNLOCK TOOL | PERM UAV | EXTERNAL | FORTNITE | RAINBOW SIX SIEGE | MARVEL RIVALS | RUST | DAYZ…
Rabbids Go Home Hacking/Modding
Project Qt bot
Fortnite Cheats: FN Hacks With Aimbots And ESP/Wallhacks
SEA OF THIEVES UNDETECTED HACK
AIMEX CHEATS COD BLACK OPS 6 / WARZONE CHEAT | Aimbot | ESP | Radar | Zombie | Undetected + Streamproof | EASY PAYMENT &…
LEGIT B06 BOT LOBBY SERVICE + TOOL I DARK MATTER | NUKES | ALL PLATFORMS | CHEAPEST
Reddit - REGames
StackExchange - ReverseEngineering
The opaque value of NEFilterPacketContext struct in macOS network extension
How could a CRC-15 CAN be transformed into 8 bytes in an embedded system?
Problem with deobfuscation .NET-file, protected with XerinObfuscator, Anti-dnSpy and Anti-Debug
What are my next options for firmware reversing?
Interpreting binary data with repeating xxxx xx40 structure

Guided Hacking

Malware/APT

Reddit - Malware
Malware thru email or browser new
Looking for a job at Malware Analysis
Malware
SparrowDoor 2.0: Chinese Hackers Deploy More Powerful Malware in Global Attacks
Over 150K websites hit by full-page hijack linking to Chinese gambling sites
Vanhelsing Ransomware Analysis | From a TV Show into a Fully Fledged Ransomware
ML and malware detection
Received unexpected, suspect file received. Is it malvare?
Favorite/ Funniest Malware
New Arcane Stealer Malware Targets VPN Accounts via YouTube Cheats
Jaguar Land Rover Breached by HELLCAT Ransomware Group Using Its Infostealer Playbook—Then a Second Hacker Strikes
Stealc Malware Analysis with Binary Ninja
Unit42
Cloud Threats on the Rise: Alert Trends Show Intensified Attacker Focus on IAM, Exfiltration
GitHub Actions Supply Chain Attack: A Targeted Attack on Coinbase Expanded to the Widespread tj-actions/changed-files Incident: Threat Assessment (Updated 3/21)
Off the Beaten Path: Recent Unusual Malware
Investigating Scam Crypto Investment Platforms Using Pyramid Schemes to Defraud Victims
Multiple Vulnerabilities Discovered in a SCADA System
The Next Level: Typo DGAs Used in Malicious Redirection Chains
Beneath the Surface: Detecting and Blocking Hidden Malicious Traffic Distribution Systems
Uncovering .NET Malware Obfuscated by Encryption and Virtualization
JavaGhost’s Persistent Phishing Attacks From the Cloud
Squidoor: Suspected Chinese Threat Actor’s Backdoor Targets Global Organizations
RustDoor and Koi Stealer for macOS Used by North Korea-Linked Threat Actor to Target the Cryptocurrency Sector
Auto-Color: An Emerging and Evasive Linux Backdoor

Crypto

Seytonic

Podcasts

Security Weekly
SignalGate and How Not To Protect Secrets - PSW #867
Its Not Really A 0-Day - PSW #866
Don't Hack Russia - PSW #864
Zero Days Are Not Just Fiction - PSW #863
Live from ZTW - PSW #862
Prompt Injection, CISA, Patch Tuesday - PSW #861
Deepseek, AMD, and Forgotten Buckets - PSW #860
Cred Vaults, Cheap AI, and Hacking Devices - Matt Bishop - PSW #859
Vulnerability Prioritization In The Real World - Andy Jaquith - PSW #858
Stopping The Bad Things - Rob Allen - PSW #857
Threat Actors With A Thousand Names - PSW #856
Risky.Biz
Soap Box: Knocknoc glues your SSO to your firewalls for Just-in-Time network access
Risky Business #785 -- Signal-gate is actually as bad as it looks
Risky Business #784 -- GitHub supply chain attack steals secrets from 23k projects
Risky Business #783 -- Evil webcam ransomwares entire Windows network
Risky Business #782 -- Are the USA and Russia cyber friends now?
Risky Business #781 -- How Bybit oopsied $1.4bn
Wide World of Cyber: DeepSeek lobs an AI hand grenade
Risky Business #780 -- ASD torched Zservers data while admins were drunk
Risky Business #778 -- Musk's child soldiers seize control of FedGov IT systems
Risky Business #777 -- It's SonicWall's turn
Risky Business #776 -- Trump will flex American cyber muscles
The CyberWire
Alyssa Miller: We have to elevate others. [BISO] [Career Notes]
Breaking barriers, one byte at a time. [Research Saturday]
New sandbox escape looks awfully familiar.
FamousSparrow’s sneaky resurgence.
No click, all tricks.
The nightmare you can’t ignore.
Scammers celebrate with a bang.
Andrew Hammond: Understanding the plot. [Historian and Curator] [Career Notes]
Excel-lerating cyberattacks. [Research Saturday]
Brute force and broken trust.
Can’t escape RCE flaws.
Remote hijacking at your fingertips.
ISC Daily Stormcast
SANS Stormcast Monday, March 31st: Comparing Phishing Sites; DOH and MX Abuse Phishing; opkssh new
SANS Stormcast Friday, March 28th: Sitecore Exploited; Blasting Past Webp; Splunk and Firefox Vulnerabilities
SANS Stormcast Thursday Mar 27th: Classifying Malware with ML; Malicious NPM Packages; Google Chrome 0-day
SANS Stormcast Wednesday Mar 26th: XWiki Exploit; File Converter Correction; VMWare Vulnerability; Draytek Router Reboots; MMC Exploit Details;
SANS Stormcast Tuesday Mar 25th: Privacy Awware Bots; Ingress Nightmare; Malicious File Converters; VSCode Extension Leads to Ransomware
SANS Stormcast Monday Mar 24th: Critical Next.js Vulnerability; Microsoft Trust Signing Platform Abuse
SANS Stormcast Friday Mar 21st: New Data Feeds; SEO Spam; Veeam Deserialization; IBM AIX RCE;
SANS Stormcast Thursday Mar 20th: Cisco Smart Licensing Attacks; Vulnerable Drivers again; Synology Advisories Updated
SANS Stormcast Wednesday Mar 19th 2025: Python DLL Side Loading; Tomcast RCE Correction; SAML Roulette; Windows Shortcut 0-Day
SANS Stormcast Tuesday Mar 18th 2025: Analyzing GUID Encoded Shellcode; Node.js SAML Vuln; Tomcat RCE in the Wild; CSS e-mail obfuscation
Darknet Diaries
156: Kill List
155: Kingpin
154: Hijacked Line
153: Bike Index
152: Stacc Attack
151: Chris Rock
150: mobman 2
149: Mini-Stories: Vol 3
148: Dubsnatch
147: Tornado
146: ANOM
145: Shannen

Threat Intel

Privacy/VPNs

Slashdot - Rights
Nearly 1.5 Million Private Photos from Five Dating Apps Were Exposed Online
'Why Did the Government Declare War on My Adorable Tiny Truck?'
Madison Square Garden Bans Fan After Surveillance System IDs Him as Critic of Its CEO
DOGE To Rewrite SSA Codebase In 'Months'
Trump Pardons Founder of Electric Vehicle Start-Up Nikola, Trevor Milton
Smart TVs Are Employing Screen Monitoring Tech To Harvest User Data
Again and Again, NSO Group's Customers Keep Getting Their Spyware Operations Caught
Oracle Customers Confirm Data Stolen In Alleged Cloud Breach Is Valid
UK's First Permanent Facial Recognition Cameras Installed
Qualcomm Launches Global Antitrust Campaign Against Arm
Signal Head Defends Messaging App's Security After US War Plan Leak
DNA of 15 Million People For Sale In 23andMe Bankruptcy
Reddit - Privacy
Kink and LGBT dating apps exposed 1.5m private user images online new
Did it! new
Blur Faces or other Information on IOS -- photo and Videos? new
How do you answer “who cares about privacy if you have nothing to hide” ? new
Hey, I just found an AI image of me from, using a Google search on my face. What can I do to remove it and,…
Are there any VeraCrypt alternatives?
ETA for travel to UK - App Download vs Online Application?
Windows 11 blocks ability to skip Microsoft Account during setup
What do you make your login email?
Is there a service like SimpleLogin but for phone numbers?
Tools to become invisible online
Reddit - VPN
Will torrenting leak my IP if I have a domain bypass rule in my proxy?
I'm at my wit's end. Long post if anyone can help.
How does location finding work ?
Best way to access Financial websites with heavy Geo-Restrictions
Question regarding using a VPN when downloading
redirect-gateway def1 not taking over server ip address
Do I need certificate for home NAS vpn connection?
openwrt vs dd-wrt VPN Router
Help - Setting Up VLESS+REALITY
N.ord and Amazon
Question about vpns and streaming
Why do some websites not like the use of VPN's?
EFF
Online Tracking is Out of Control—Privacy Badger Can Help You Fight Back
A New Tool to Detect Cellular Spying | EFFector 37.3
How to Delete Your 23andMe Data
Saving the Internet in Europe: Fostering Choice, Competition and the Right to Innovate
230 Protects Users, Not Big Tech
A Win for Encryption: France Rejects Backdoor Mandate
New USPTO Memo Makes Fighting Patent Trolls Even Harder
How Do You Solve a Problem Like Google Search? Courts Must Enable Competition While Protecting Privacy.
EFF’s Reflections from RightsCon 2025
EFF Joins 7amleh Campaign to #ReconnectGaza
The Foilies 2025
EFF to NSF: AI Action Plan Must Put People First
Reddit - PrivacyGuides
Privacy Means Safety
Privacy-Respecting European Tech Alternatives
Stop Confusing Privacy, Anonymity, and Security
New Privacy Guides release: 2025.03.13
In Memoriam: Mark Klein, AT&amp;T Whistleblower Who Revealed NSA Mass Spying
Privacy is Also Protecting the Data of Others
Toward a Passwordless Future
How to Reset Your YubiKey and Create a Backup
Anonymity for Everyone: Why You Need Tor...

Help Wanted

Reddit - AskNetSec
How likely is it to catch a zero day virus new
utmstack vs securityonion vs alienvault vs selks or other software? new
Query
Oracle Cloud Infrastructrure - Security Best Practises
Do you think non nation-state groups can perform Lazarus level hacks?
Cloudflare - DDOS, WAF, Cloudfare One
Infrastructure as Code questions - Cloud security interview
My IPS tripped yesterday
Why do I have two identical secure keys on two different devices on Facebook messenger?
Stand alone pc for url security test
Reddit - Netsec Students
Just here to ask something.☺️
What benefit does http proxy add to arp spoofing?
🛡️ Cyber Sentinel Skills Challenge – compete, win, and gain access to job opportunities!
Stackoverflow - Security
Can I assist ISC2 CC Single Sign-On Error? [closed] new
Is this code already SQL injection proof or should I use prepared statements? [duplicate] new
Webapp users security general ideas [closed]
Cybersecurity in the Digital Age: Is Your Business Ready to Defend Against Modern Threats?
Feedback Needed: SAML Tester Tool for Debugging SAML Configurations
Development: Authenticating eSignature API
Diferentiating QSEALs from QWAC Certificates in .NET 6/8
How can I search for passwords across a range of local hosts ports using linux command? [closed]
Access denied to AWS Secrets Manager API for BatchGetSecretValue, while GetSecretValue works
Does a server push need to be secured with JWT? What’s the best practice for a notification system?
Is there any system level logs about secure enclave on macos?
What makes C++ an unsafe language in 2025 if we avoid raw pointers and arrays? [closed]
Stack Exchange
Am I experiencing a DNS leak?
Is it safe to use the public IP of players as the identity in a website between players?
What is the problem with Deserialization?

Locks/Social Engineering

Hak5

Security Blogs

Hacker News (YCombinator) - Security
Hacker Noon #Security
People Actually Read Privacy Policies - Then This Happened Next new
The TechBeat: Swift init(), Once and for All (3/30/2025)
How Do We Measure Blockchain Decentralization?
Blockchain’s Hidden Centralization Issues
Blockchain Decentralization: Policy, Regulation, and the Role of Testnets
A Unified Framework for Analyzing Blockchain Decentralization
The TechBeat: What Is a Diffusion LLM and Why Does It Matter? (3/29/2025)
Padma Naresh Vardhineedi: Revolutionizing Financial Planning Through Cloud Innovation
Revolutionizing Enterprise Security: Sasibhushana Matcha's FIDO Implementation
Siddhey Mahadik's Leadership in Call of Duty Security Development
The HackerNoon Newsletter: TechWomen is Back Online! (3/28/2025)
Revolutionizing Data Center Deployment Through Automation: Aditya Mehra's VCF Orchestration Success
Security Bloggers Network
CRQ & CTEM: Prioritizing Cyber Threats Effectively | Kovrr new
What are CCPA Penalties for Violating Compliance Requirements? new
HECVAT 4.0 new
Understanding Privacy Changes: eBay’s AI Policy and The Future of Data Privacy new
UK Cybersecurity Weekly News Roundup – 31 March 2025 new
BSidesLV24 – IATC – Introduction To I Am The Cavalry – Day Two – Preparing for 2027 new
Inside Daisy Cloud: 30K Stolen Credentials Exposed new
From checkbox to confidence: Why passing the audit isn’t the endgame
Genetic Breach Fallout: 23andMe’s Collapse Raises Security Alarms
What are the cost implications of maintaining NHI compliance?
What best practices ensure long-term compliance for NHIs?
How can technology simplify the process of NHI compliance?
Control C
Wired - Security
Top Trump Officials’ Passwords and Personal Phone Numbers Discovered Online
Even More Venmo Accounts Tied to Trump Officials in Signal Group Chat Left Data Public
SignalGate Is Driving the Most US Downloads of Signal Ever
Mike Waltz Left His Venmo Friends List Public
SignalGate Isn’t About Signal
6 Best Password Managers (2025), Tested and Reviewed
How to Delete Your Data From 23andMe
How to Enter the US With Your Digital Privacy Intact
Using Starlink Wi-Fi in the White House Is a Slippery Slope for US Federal IT
Trump’s Aggression Sours Europe on US Cloud Giants
How to Avoid US-Based Digital Services—and Why You Might Want To
Low-Cost Drone Add-Ons From China Let Anyone With a Credit Card Turn Toys Into Weapons of War
Elttam
Krebs on Security
How Each Pillar of the 1st Amendment is Under Attack new
When Getting Phished Puts You in Mortal Danger
Arrests in Tap-to-Pay Scheme Powered by Phishing
DOGE to Fired CISA Staff: Email Us Your Personal Data
ClickFix: How to Infect Your PC in Three Easy Steps
Microsoft: 6 Zero-Days in March 2025 Patch Tuesday
Alleged Co-Founder of Garantex Arrested in India
Feds Link $150M Cyberheist to 2022 LastPass Hacks
Who is the DOGE and X Technician Branden Spikes?
Notorious Malware, Spam Host “Prospero” Moves to Kaspersky Lab
U.S. Soldier Charged in AT&T Hack Searched “Can Hacking Be Treason”
Trump 2.0 Brings Cuts to Cyber, Consumer Protections
Naked Security
Stealing user credentials with evilginx
Sophos ranked #1 overall for Firewall, MDR, and EDR in the G2 Spring 2025 Reports
PJobRAT makes a comeback, takes another crack at chat apps
The future of MFA is clear – but is it here yet?
The sixth sense for cyber defense: Multimodal AI
Little fires everywhere for March Patch Tuesday
Sophos Recognized as Top Employer in British Columbia, Canada
Fostering Gender Equality: Sophos Celebrates International Women’s Day with Global Initiatives
Expanded management regions for Sophos DNS Protection
Schneier on Security
Friday Squid Blogging: Squid Werewolf Hacking Group
AIs as Trusted Third Parties
A Taxonomy of Adversarial Machine Learning Attacks and Mitigations
AI Data Poisoning
Report on Paragon Spyware
More Countries are Demanding Backdoors to Encrypted Apps
Friday Squid Blogging: A New Explanation of Squid Camouflage
My Writings Are in the LibGen AI Training Corpus
NCSC Releases Post-Quantum Cryptography Timeline
Critical GitHub Attack
Is Security Human Factors Research Skewed Towards Western Ideas and Habits?
Improvements in Brute Force Attacks
Linux Security
Anatomy of Linux Ransomware Attacks and Protection Strategies
What OpenInfra Joining Linux Foundation Means for Cloud Security Posture Management
Dark Reading
Evilginx Tool (Still) Bypasses MFA
Oracle Still Denies Breach as Researchers Persist
Hoff's Rule: People First
How CISA Cuts Impact Election Security
OpenAI Bumps Up Bug Bounty Reward to $100K in Security Update
Student-Powered SOCs Train Security's Next Generation
Fake DeepSeek Ads Spread Malware to Google Users
Cybersecurity Gaps Leave Doors Wide Open
'Lucid' Phishing-as-a-Service Exploits Faults in iMessage, Android RCS
Beyond STIX: Next-Level Cyber-Threat Intelligence
New Testing Framework Helps Evaluate Sandboxes
Google Hastily Patches Chrome Zero-Day Exploited by APT
Securelist by Kaspersky
Operation ForumTroll: APT attack with Google Chrome zero-day exploit chain
Financial cyberthreats in 2024
Threat landscape for industrial automation systems in Q4 2024
Arcane stealer: We want all your data
Head Mare and Twelve join forces to attack Russian entities
Incident response analyst report 2024
DCRat backdoor returns
SideWinder targets the maritime and nuclear sectors with an updated toolset
Trojans disguised as AI: Cybercriminals exploit DeepSeek’s popularity
Undercover miner: how YouTubers get pressed into distributing SilentCryptoMiner as a restriction bypass tool
Mobile malware evolution in 2024
The SOC files: Chasing the web shell
HITB News
The RISKS Digest
1 in 4 U.S. Programming Jobs Vanish
Heathrow Comes to a Standstill
Warning regarding AI contamination of Google
The Trump Administration Wants USAID on the Blo ckchain
Re: The Worst 7 Years in Boeing's History
Waymo Driverless Taxis Got 589 Parking Tickets in San Francisco Last Year
French scientist on way to U.S. conference denied entrance and threatened by FBI due to messages on phone critical of Trump
`Deadman' loses benefits and lives to tell the story
Social Security experts fear disaster after DOGE changes
Ontario police may have secretly used controversial spyware Israeli software
Airport Theory Will Make You Miss Your Flight
Quantum Computing Milestone Quickly Challenged by Supercomputer
Kaspersky Blog
Protecting Android, Windows, and Linux devices against being tracked via the Find My network | Kaspersky official blog
Adam Shostack & friends
Introducing the DEF CON 32 Hackers' Almanack
Security Researcher Comments on HIPAA Security Rule
OWASP Training in Barcelona
The Covid pandemic, 5 years on
The First Constitutional Crisis of 2025
Strategy for threat modeling AI
RSAC Webinar: Building Resilient Systems
Appsec Roundup - Feb 2025
Inside Man
How to Threat Model Medical Devices, on The Medical Device Cybersecurity Podcast
A New Hope for Threat Modeling, on The CyberTuesday Podcast
Blackhat and Human Factors
Graham Cluley
VanHelsing ransomware: what you need to know
Malaysian PM says “no way” to $10 million ransom after alleged cyber attack against Kuala Lumpur airport
Smashing Security podcast #410: Unleash the AI bot army against the scammers – now!
Smashing Security podcast #409: Peeping perverts and FBI phone calls
Supply-chain CAPTCHA attack hits over 100 car dealerships
Mandatory Coinbase wallet migration? It’s a phishing scam!
Free file converter malware scam “rampant” claims FBI
Borked Chromecasts are beginning to receive their update – just hope you didn’t do a factory reset
Chromecast chaos – 2nd gen devices go belly-up as Google struggles to fix certificate issue
Medusa ransomware: FBI and CISA urge organisations to act now to mitigate threat
Smashing Security podcast #408: A gag order backfires, and a snail mail ransom demand
Man found guilty of planting infinite loop logic bomb on ex-employer’s system
Rapid7
Metasploit Wrap-Up 03/28/2025
Overcoming the Challenges of Vulnerability Remediation
Unpacking a post-compromise breach simulation with Vector Command
Rapid7 Earns 5-Star Rating in the 2025 CRN® Partner Program Guide
Inside the Mind of the Attacker: A Conversation with Raj Samani
Multiple vulnerabilities in Ingress NGINX Controller for Kubernetes
Notable vulnerabilities in Next.js (CVE-2025-29927) and CrushFTP
Metasploit Wrap-Up 03/21/2025
Rapid7 MDR Supports AWS GuardDuty's New Attack Sequence Alerts
Secure Your Attack Surface: Key Findings from IDC's 2024 Spotlight Report
Critical Veeam Backup & Replication CVE-2025-23120
Apache Tomcat CVE-2025-24813: What You Need to Know

Security in Mainstream Media

Google News Hacking
Former University of Michigan Football Coach Matt Weiss Indicted on Hacking, Identity Theft Charges - Campus Safety Magazine new
SIR.trading: Hacker steals the entire TVL of $355,000 by exploiting a vulnerability in Ethereum’s transient storage - The Cryptonomist new
FBI apparently raid ‘gay furry hackers’ behind Project 2025 hack - Computing new
Sleeping lola, grandson, 5, hacked to death by man in Compostela, Cebu - Inquirer.net new
Teen charged with hacking into Giant Eagle fuelperks accounts - Pittsburgh Post-Gazette new
FBI Alert Issued As Time Traveling Hackers Attack—Act Now - Forbes new
Can Hackers Bring Jooki Back To Life? - Hackaday new
Is your iPhone really hacked? Or is it those fake security alerts? - Fox News new
Apple ID Hack—New Warning For 2 Billion Users - Forbes new
New Windows 11 Account Bypass Hack Confirmed—What You Need To Do Now - Forbes new
Is a hacker logged into your Google account? Here’s how to tell - PCWorld new
Security spring cleaning — 7 things you should do now to avoid getting hacked - Tom's Guide
Google Cyber Security
Trojan Horses in Space: Cyber Threats Hidden in Satellite Networks - Space War new
Cybersecurity M&A Roundup: Google Agrees $32bn Wiz Acquisition - Infosecurity Magazine new
Over 300 Malicious Apps on Google Play Store Engaged in Ad Fraud and Data Theft Installed 60 Million Times - CPO Magazine new
This month in security with Tony Anscombe – March 2025 edition - We Live Security new
Cyber Deception Market Positioned for Strong Growth, Projected to Hit New Peaks by 2031 - openPR new
Resilience in the face of ransomware: A key to business survival - We Live Security new
It’s World Backup Day, but backups alone are not enough - Techzine Europe new
Maruti Suzuki Appoints Head of Digital Enterprise and Cybersecurity - The Tribune India new
Konni RAT Exploit Windows Explorer To Launches a Multi-Stage Attack in Windows - CybersecurityNews new
Ransomware crews add 'EDR killers' to their arsenal – and some aren't even malware - The Register new
Cisco Talos report finds identity-based attacks drove majority of cyber incidents in 2024 - SiliconANGLE News new
FBI document warning, Resurge exploits Ivanti, Blacklock exposed - CISO Series new

Thirsty for more

Hacker News (YCombinator)
The demoscene as a UNESCO heritage in Sweden new
James Webb Space Telescope Reveals That Most Galaxies Rotate Clockwise new
Nvidia GPU roadmap confirms it: Moore's Law is dead and buried new
ToS;DR new
Show HN: WhatsApp MCP Server new
UK poll: Work and money worry young people more than culture wars or climate new
Custom AI Chatbot Development Services: Restrictions and Opportunities new
HTTPS RR in Curl new
How to Secure Existing C and C++ Software Without Memory Safety [pdf] new
DOGE's Marko Elez is back on U.S. payroll new
Wondercraft (YC S22) Is Hiring new
Why Norway is edging towards a fresh EU membership bid new
Reddit - Cyberpunk
Vote out your least favorite cyberpunk city! new
A small question new
Will artificial womb technology dilute the bond between mother and child? new
Got a pretty big issue new
Why can't I find Phantom Liberty specific map locations? new
Cyberpunk OC - Romantic Rockerboy new
Old sculpture I made, commissions open 0_0 new
Sketch Concept For A Gun Prosthetic I Did. Thoughts? new
z.oom zoo.m new
"I hate it here" -- Spider Jerusalem new
Help an artist out! new
OC my todays artwork new
Reddit - Security CTF
PicoCTF - SaaS (Shellcode As a Service) CTF Writeup new
Looking for CyberSec friends in Japan. Pentest/Offensive side/CTF Friends
Urgent help for a CTF challenege
HackConRD2025 MicroPython Crypto & R.E CTF
Want a real-life, unscripted CTF challenge? Try to hack me!
Stuck on this CTF
[CTF] New *very easy* lab at HackerDna: Hack the Login 👀
Looking for members - CTF Team
TryHackMe writeup: Digital Forensics Case B4DM755
We are looking for players to join our team
🛡️ Cyber Sentinel Skills Challenge – compete, win, and gain access to job opportunities!
[CTF] HackerDna's Lab of the Month: Cronpocalypse 💀
Reddit - Sysadmin
I accepted one job, then got a better offer now I don’t know how to quit the first one without looking awful new
WMI Monitoring: Best Way to Troubleshoot Remote Issues? new
AGPM on Server 2025 new
Digital signage displays without the need of a Mini PC? new
Win 11 24H2 x64 cumulative updates failing to install, unresponsiveness, black screens and memory leaks new
Explain Python installation and management to a Windows admin new
Hosts can't resolve DC's name after restart new
Website can't access using client's device new
What small physical tools or accessories do you wish existed to make your job easier? new
What transferable skills got you where you are today? new
Anyone doing a fun prank this upcoming April Fools Day? new
Would you deploy this? If so, why? What scenario? new
Lobste.rs
Zephyr RTOS 4.1 Now Available: Performance Improvements, Support for IAR Toolchain, Rust, and More new
There is no Vibe Engineering new
Dipping my toes in OpenBSD, in Amsterdam new
What are you doing this week? new
French antitrust watchdog fines Apple €150M for App Tracking Transparency implementation new
Rust on the Ferris Sweep new
Impromptu disaster recovery new
How to borrow memory (2021) new
Crate-training Tiamat, un-calling Cthulhu: Taming the UB monsters in C++ new
An AlphaStation's SROM new
Fjall 2.8 new
SaaS Is Broken: Why Bring Your Own Cloud (BYOC) Is the Future new
Hackaday
Tiny Bubbles in the Memory new
A Prototyping Board With Every Connector new
Reconfigurable FPGA for Single Photon Measurements new
Hackaday Links: March 30, 2025 new
Help Propel The Original ARM OS Into The Future new
Protocol Analyzer Remembered new
Can Hackers Bring Jooki Back to Life? new
Automatically Crack Safes with this Autodialer
Chip Glitching 101 with [Hash]
Yaydio, a Music Player For Kids
DIY Split Keyboard Made with a Saw
An ESP32 Pomdoro Timer
Ars Technica
What could possibly go wrong? DOGE to rapidly rebuild Social Security codebase.
Oracle has reportedly suffered 2 separate breaches exposing thousands of customers‘ PII
Google discontinues Nest Protect smoke alarm and Nest x Yale lock
Ex-FCC chairs from both parties say CBS news distortion investigation is bogus
NASA to put Starliner’s thrusters through an extensive workout before next launch
Tel‘Aran’Rhiod at last—the Wheel of Time reveals the world of dreams
EU will go easy with Apple, Facebook punishment to avoid Trump’s wrath
Wired
Startup Founder Claims Elon Musk Is Stealing the Name ‘Grok’ new
11 Best Retro Game Consoles (2025), Tested and Reviewed new
Traeger Woodridge Pro Review: Fearless Smoking new
Wahl Peanut Li Review: A Cordless Take on a Classic new
For a Master Class in Salt, Try Making Kimchi new
The Best Cooling Sheets, Tested and Reviewed (2025)
Why Adding a Full Hard Drive Can Make a Computer More Powerful
4 Best Tax Services (2025), Tested and Reviewed
Dinnerly Meal Kit Review: Hearty Meals on a Budget
AtGames Legends Ultimate HD Arcade Review: Bring the Arcade Home
13 Best Soundbars We’ve Tested and Reviewed (2025): Sonos, Sony, Bose
The 22 Best Movies on Amazon Prime Right Now (March 2024)
Slashdot
HTTPS Certificate Industry Adopts New Security Requirements new
Linus Torvalds Gently Criticizes Build-Slowing Testing Code Left in Linux 6.15-rc1 new
As Microsoft Turns 50, Four Employees Remember Its Early Days new
Copilot Can't Beat a 2013 'TouchDevelop' Code Generation Demo for Windows Phone new
China is Already Testing AI-Powered Humanoid Robots in Factories new
Microsoft Attempts To Close Local Account Windows 11 Setup Loophole new
Bloomberg's AI-Generated News Summaries Had At Least 36 Errors Since January new
How Rust Finally Got a Specification - Thanks to a Consultancy's Open-Source Donation new
What that Facebook Whistleblower's Memoir Left Out new
Has the Decline of Knowledge Worker Jobs Begun? new
Google Sunsets Two Devices From Its Nest Smart Home Product Line new
Microsoft Announces 'Hyperlight Wasm': Speedy VM-Based Security at Scale with a WebAssembly Runtime new
DZone Security
Security in the CI/CD Pipeline
Patch Management in the Age of IoT: Challenges and Solutions
Tackling Multidomain Integration in Software Development
Bringing Security to Digital Product Design
Building Security into the Feature During the Design Phase
DZone
Challenges of Using LLMs in Production: Constraints, Hallucinations, and Guardrails
Ansible Security and Testing Tools for Automation
Understanding the Importance of Web Accessibility
Real-World Garbage Collection Scenarios and Solutions
Why Mocking Sucks
Using Terraform Moved Block to Refactor Resources
Using Heap Dumps to Find Memory Leaks
Self-Healing Data Pipelines: The Next Big Thing in Data Engineering?
XAI: Making ML Models Transparent for Smarter Hiring Decisions
Automatic Versioning in Mobile Apps
Creating an Application With a Personality
Optimized Metrics Generation With Metadata-Driven Dynamic SQL