Top submissions
-
31. Unauthenticated path traversal in Wordpress leading to conditional RCE (github.com) ▲ -
32. OpenAI Agents Turned RubyGems Into a Scraping Proxy (safedep.io) ▲ -
33. Plugin4Shell – Zero Click RCE Vulnerability found in top four coding agents (air.security) ▲ -
34. Chinese Routers Sold Worldwide Contain Backdoors (darkreading.com) ▲ -
35. Hackers Got Inside a Flock Camera. Its Data Shows How the System Really Works (wired.com) ▲ -
36. Cisco email security boxes can be rooted by an email (theregister.com) ▲ -
37. A Single Firm Is Behind OpenAI, Anthropic, and Meta Hacking Scandals (effort.news) ▲ -
38. Revolut confirms customer data breach through fake government requests (techcrunch.com) ▲ -
39. An alignment assessment of recent cybersecurity incidents (anthropic.com) ▲ -
40. Active Directory Security (activedirectorysecurity.com) ▲ -
41. Trezor's email provider has been breached (x.com) ▲ -
42. Understanding the Recent DDoS Attack Against Read the Docs (about.readthedocs.com) ▲ -
43. How I advertise malicious software on Google Ads (xlii.space) ▲ -
44. Stuxnet – A reconstructed source code of the infamous cyber-weapon (github.com) ▲ -
45. Trusting-Trust Attack against an Entire Linux Distribution through Binary Manipulation (arxiv.org) ▲ -
46. RSA-260 factorized (x.com) ▲ -
47. FBI Probes Service Selling 153M+ Drivers Licenses (krebsonsecurity.com) ▲ -
48. Hackers Had a Live Feed of Every ID Verification Company Scanned for over a Year (techdirt.com) ▲ -
49. How to get a free .arpa domain (hawksley.dev) ▲ -
50. Dropbox got hacked (x.com) ▲ -
51. Mobile networks expose IMEI and other phone data to attackers – report (cybernews.com) ▲ -
52. No Privileges, No Lockout, No Trace: Kerberoasting with SPN Misconfigurations (trellix.com) ▲ -
53. Two Alleged ‘TeamPCP’ Hackers Arrested in Australia (krebsonsecurity.com) ▲ -
54. Do NOT use Omarchy if you care about security of your machine even a little bit. (blog.happyfellow.dev) ▲ -
55. MS-Nightmare Un-defend v2 — What Happens When Signatures Can’t Land Introduction (weedhashpeddler.medium.com) ▲ -
56. Iranian hackers shut down UK power plant (telegraph.co.uk) ▲ -
57. First Android malware targeting automotive head units (securelist.com) ▲ -
58. Nightmare Eclipse has a new zero day that gives system privileges on fully patched Windows (theregister.com) ▲ -
59. Going Dark, and the era of law enforcement hacking (blog.cryptographyengineering.com) ▲ -
60. Namecheap service outage update (namecheap.com) ▲