Newest submissions
-
61. Terabytes of credentials leaked in massive supply-chain attack (arstechnica.com) ▲ -
62. Russian hackers adopt the fake job interview tactics (news.risky.biz) ▲ -
63. How Pass-ta-key attacks steal passkeys instead of passwords (andreafortuna.org) ▲ -
64. Security Vulnerability in Pioneer Rekordbox (theins.press) ▲ -
65. Ransomware gangs skip the CEO, head straight for the 40-something IT manager (theregister.com) ▲ -
66. CSS:the bomb inside your inbox (portswigger.net) ▲ -
67. Humans missed 1 in 3 threats approving AI agent commands across 40k game runs (scalex.dev) ▲ -
68. How legitimate cloud platforms enable phishers to bypass MFA (securelist.com) ▲ -
69. cPanel Bug Enables Full Database Administrator Access (securityaffairs.com) ▲ -
70. Bypassing AI guardrails is so easy a script kiddie can do it (theregister.com) ▲ -
71. Operators of dozens of sanctioned tankers share one email domain with Russia’s Sovcomflot, Kharon Research finds (theins.press) ▲ -
72. TryHackMe Hacker Holidays 2026 (tryhackme.com) ▲ -
73. SQLite Critical CVEs or LLM Slop? (research.jfrog.com) ▲ -
74. Pass the Passkey: A Novel Attack Surface in Passwordless Authentication (unit42.paloaltonetworks.com) ▲ -
75. Harvesting SSH Credentials: Insights from my Honeypot Network (uphillsecurity.com) ▲ -
76. The rooting, firmware analysis and hardcoded, reset-persistent credentials of the TP-Link (blog.juni-mp4.com) ▲ -
77. Bitcoin cold-wallet attack spreads to 4,500 addresses as losses near $89 million (coindesk.com) ▲ -
78. Anthropic's Fever Dream: Claude's package that stole real keys (aikido.dev) ▲ -
79. CISA Alert: Water Sector PLC Targeting (censys.com) ▲ -
80. New Defcon Badges Pack a Unique Open-Source Chip That Doubles as a Security Key (wired.com) ▲ -
81. OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia (securelist.com) ▲ -
82. North Korea busts elite hacking ring inside its own banks (dailynk.com) ▲ -
83. Read This Before You Buy That TV Streaming Stick (krebsonsecurity.com) ▲ -
84. Shai-Hulud and the risks of external dependencies (scotto.me) ▲ -
85. Disrupting supply chain attacks on npm and GitHub Actions (github.blog) ▲ -
86. What does GitHub’s security team even do? (orchidfiles.com) ▲ -
87. Pope's official prayer app commits cardinal sin, leaks 700K+ users' info (theregister.com) ▲ -
88. The hacker who humiliated spyware makers and was never caught (techcrunch.com) ▲ -
89. Hacker wipes Romania's land registry database (news.risky.biz) ▲ -
90. [post] How to maintain best practice in CS? ▲