Top submissions

61. 61.	Terabytes of credentials leaked in massive supply-chain attack (arstechnica.com)
    ▲	by janki | discuss

62. 62.	Russian hackers adopt the fake job interview tactics (news.risky.biz)
    ▲	by danreom | discuss

63. 63.	How Pass-ta-key attacks steal passkeys instead of passwords (andreafortuna.org)
    ▲	by jame_kig | discuss

64. 64.	Security Vulnerability in Pioneer Rekordbox (theins.press) Vulnerability
    ▲	by lschueller | discuss

65. 65.	Ransomware gangs skip the CEO, head straight for the 40-something IT manager (theregister.com) Malware Threat Intel Ransomware
    ▲	by lschueller | discuss

66. 66.	CSS:the bomb inside your inbox (portswigger.net)
    ▲	by jame_kig | discuss

67. 67.	Humans missed 1 in 3 threats approving AI agent commands across 40k game runs (scalex.dev) Research Threat Intel
    ▲	by lschueller | discuss

68. 68.	How legitimate cloud platforms enable phishers to bypass MFA (securelist.com)
    ▲	by samBa | discuss

69. 69.	cPanel Bug Enables Full Database Administrator Access (securityaffairs.com)
    ▲	by reddragon3919 | discuss

70. 70.	Bypassing AI guardrails is so easy a script kiddie can do it (theregister.com)
    ▲	by aristopunk | discuss

71. 71.	Operators of dozens of sanctioned tankers share one email domain with Russia’s Sovcomflot, Kharon Research finds (theins.press)
    ▲	by jame_kig | discuss

72. 72.	TryHackMe Hacker Holidays 2026 (tryhackme.com)
    ▲	by hunter11 | discuss

73. 73.	SQLite Critical CVEs or LLM Slop? (research.jfrog.com)
    ▲	by raidn | discuss

74. 74.	Pass the Passkey: A Novel Attack Surface in Passwordless Authentication (unit42.paloaltonetworks.com)
    ▲	by EXPO | discuss

75. 75.	Harvesting SSH Credentials: Insights from my Honeypot Network (uphillsecurity.com)
    ▲	by janki | discuss

76. 76.	The rooting, firmware analysis and hardcoded, reset-persistent credentials of the TP-Link (blog.juni-mp4.com)
    ▲	by jame_kig | discuss

77. 77.	Bitcoin cold-wallet attack spreads to 4,500 addresses as losses near $89 million (coindesk.com)
    ▲	by samBa | discuss

78. 78.	Anthropic's Fever Dream: Claude's package that stole real keys (aikido.dev)
    ▲	by hunter11 | discuss

79. 79.	CISA Alert: Water Sector PLC Targeting (censys.com) Threat Intel CISA OT
    ▲	by lschueller | discuss

80. 80.	New Defcon Badges Pack a Unique Open-Source Chip That Doubles as a Security Key (wired.com) Defcon
    ▲	by lschueller | discuss

81. 81.	OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia (securelist.com)
    ▲	by enderal | discuss

82. 82.	North Korea busts elite hacking ring inside its own banks (dailynk.com)
    ▲	by reddragon3919 | discuss

83. 83.	Read This Before You Buy That TV Streaming Stick (krebsonsecurity.com)
    ▲	by reddragon3919 | discuss

84. 84.	Shai-Hulud and the risks of external dependencies (scotto.me) Malware Supply Chain
    ▲	by lschueller | discuss

85. 85.	Disrupting supply chain attacks on npm and GitHub Actions (github.blog) GitHub
    ▲	by lschueller | discuss

86. 86.	What does GitHub’s security team even do? (orchidfiles.com)
    ▲	by raidn | discuss

87. 87.	Pope's official prayer app commits cardinal sin, leaks 700K+ users' info (theregister.com)
    ▲	by danreom | discuss

88. 88.	The hacker who humiliated spyware makers and was never caught (techcrunch.com)
    ▲	by lschueller | discuss

89. 89.	Hacker wipes Romania's land registry database (news.risky.biz) Attack
    ▲	by lschueller | discuss

90. 90.	[post] How to maintain best practice in CS? Discussion Research Vulnerability
    ▲	by aristopunk | discuss