← Feed

Posts

• View post

  Security researcher Nightmare Eclipse has released a new Windows zero-day named SignDrop The zero-day can allow attackers to elevate privileges on Windows systems. It works by exploiting Microsoft's mitigations against CLFS authentication attacks https://github.com/MSNightmare/SignDrop

• View post

  Only 442 of the nearly 38,000 vulnerabilities claimed to have been found using Anthropic's Project Glasswing have received a CVE identifier, and only two of those have been exploited in the wild. https://www.vulncheck.com/blog/anthropic-glasswing-november-update

• View post

  Humble Bundle just completely killed most of their security through vibecoding :KEKW: https://forums.spacebattles.com/threads/humble-bundle-just-completely-killed-most-of-their-security-through-vibecoding.1346295/

• View post

  If you wanna learn more about Shahid Kaveh, the Iranian cyber group behind the French supermarket hacks, see this DomainTools report https://dti.domaintools.com/research/irans-intelligence-group-13

• View post

  -Some OpenSSH instances take any password longer than 256 characters -Fridge hacks also went after French blood banks -French bank hacked for $133 million -Thai opposition targeted with spyware -Kremlin hacktivists claim fridge hacks -DigiCert and Chainstack breaches -One Midterms hack attempt -Breach impacts Iceland schools -White House staffers infected with proxyware -Japan's Ministry of Foreign Affairs gets hacked P: https://risky.biz/RBNEWS630/ N: https://news.risky.biz/risky-bulletin-...

• View post

  Bitdefender found an infinte crash loop in Android that triggers even after you reboot in Safe Mode https://www.bitdefender.com/en-us/blog/labs/ghostmap-android

• View post

  Reddit is now login-only RIP Reddit

• View post

  -Binance hacked for billions ($6.3b no) -Hacker leaks data on 41k DHS employees -PHP bugs exploited to hack Palo Alto Networks firewalls -Belarusian state hackers get on the data-wiping train -Cyberattack cripples Belgium tax portal -FEC hacked ahead of the Midterms -Cyberattack delays coronial investigations in NZ -Warhorse gaming studio gets hacked -GMO offers reward for its hackers -Hacker infected poker players with malware P: https://risky.biz/RBNEWS627/ N: https://news.risky.biz/risky-bul...

• View post

  Quad9 will leave France after a court ordered it to block some piracy sites https://quad9.net/news/blog/au-revoir-france/

• View post

  After this week's incindet, eMuhdra says it will exit the CA market https://emudhra.com/en/press-release/emudhra-to-exit-global-ssl-tls-certificate-business

• View post

  Dutch security firm Eye Security has uninstalled an abandoned Popcorn Time piracy app from more than two million PCs https://labs.eye.security/operation-ixim-preventing-a-botnet-of-millions-of-popcorn-time-users/

• View post

  The developer of the StealC infostealer has returned to the cybercrime underground with a new (Stadia) RAT after Europol seized StealC infrastructure in June https://www.varonis.com/blog/stealc-returns

• View post

  I love infosec drama https://phpbleed.com/

• View post

  -Supply chain attack lets ransomware group inside 40+ shipping companies -Pentagon builds tech sabotage unit -PHP2Shell exploitation gets underway -GoDaddy revokes 400,000 certs -LiteLLM has another security incident -Breach at cloud providers Railway[.]com, Onamae, and TiBD -Breach at Iwai Cosmo Securities -Breaches at Hollys, Capcom, SBI, Save-on-Food, Quest Diagnostics, TAKKT -Toronto Crime Stoppers stops program after breach P: https://risky.biz/RBNEWS624/ N: https://news.risky.biz/risky-bu...

• View post

  Knicks Employees Thought They Were Getting Championship Rings. The Email Was Reportedly a Phishing Test https://www.inc.com/amaya-nichole/knicks-employees-thought-championship-rings-email-reportedly-phishing-test/91424668

• View post

  LOL... is half the internet offline because of that PHP bug?

• View post

  A new study argues that Canada could develop its own national operating system to replace Microsoft's Windows and still save millions in the process https://theconversation.com/canada-could-save-millions-by-developing-its-own-operating-system-instead-of-relying-on-microsoft-windows-294027

• View post

  -Russia arrests DataSuckers hacking group -Ad company delivered zero-click exploits and spyware -OpenAI employee arrested for planting spy device -US disrupts 40 DPRK laptop farms -Cyberattack halts Danish-German tunnel construction -Bug exposes Czech business registry data -Hackers leak photos from Netanyahu campaign personnel -Thailand arrests 39 scammers after visa reviews -FTC sues a sextortion assistance provider N: https://news.risky.biz/risky-bulletin-russia-arrests-datasuckers-hacking-g...

• View post

  This new Firefox Nova UI is just straight ugly Give me my normal tabs back. The new rounded corners make everything look crowded and smooshed together about:config browser.nova.enabled ----> false

• View post

  NSA announced it is accelerating it's PQC timeline 👀 👀 👀 All systems must be PQC hardened by the start of next year All legacy systems that don't support PQC must be phased out by 2030 https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/4615285/nsa-announces-post-quantum-cryptography-measures-to-safeguard-national-security/

• View post

  RE: https://techhub.social/@Techmeme/117373191633975809 The "clashing work styles" being privacy and security, from the company that's suppose to self-regulate its AI models

• View post

  RE: https://mastodon.social/@campuscodi/117365393830105700 According to Transluce, the probes targeted the Library and Archives Canada, a Canadian federal agency. Government statement: https://www.cyber.gc.ca/en/news-events/statement-regarding-reported-activity-targeting-government-canada-websites Transluce report: https://transluce.org/us-canada-gov

• View post

  "AI-powered probes targeted Canadian and US government sites, with officials reporting no evidence of successful breaches" https://www.verdict.co.uk/canadian-website-ai-hacking-attempts/

• View post

  More than 540,000 creds, valid and working, were found in public GitHub repos in a scan this July. More than 200,000 were uploaded even after GitHub turned on a security feature to catch them from being sent to public repos https://trufflesecurity.com/blog/github-repos-exposed-543699-credentials-nobody-revoked-them

• View post

  -Sanctions impact TLS certs in Iran, Russia -ShinyHunters member arrested in the Netherlands -Apple fixes iOS zero-day found by Meta -Citrix zero-days see mass exploitation within hours -Hackers exploit security product in Bitget hack -Belnet hacked -Arizona courts hit by cyberattack -MEP sues NSO over hacks -Pentagon unleashes Cyber Command on election threats -Agencies sabotage GAO's DOGE investigation -China expands AI travel bans P: https://risky.biz/RBNEWS617/ N: https://news.risky.biz...

• View post

  Social media giant Meta pulled down Brazilian President Lula's Facebook page and blocked his campaign from running political ads but allows paid ads calling for a military coup It also didn't take down any of the right-wing disinformation campaigns reported in August https://novaramedia.com/2026/09/28/facebook-blocks-lulas-campaign-ads-just-days-before-brazil-election/

• View post

  Two days until everyone becomes hyper aware of cybersecurity

• View post

  -Intel ends paid bug bounties -OpenAI agents probed dozens of organizations -Fraudsters use AI to scam €95m from an Italian bank -Bitget hacked for $350m -Hackers breach Poland's Medyc platform -Data breach at the Pentagon DMDC -OpenAI brute-forced UN website API -DIVD says it was hacked by an AI -Hackers extort Flink customers for €10 -Cyberattack hits Wales police force -Asus store breach -TapClicks ransomware attack -WebRezPro hack N: https://news.risky.biz/risky-bulletin-intel-ends-paid...

• View post

  North Korea is now using female operatives as part of its remote IT workforce groups https://haydenmckenzie.com/research/dprk-it-worker-cell-part-one

• View post

  That Reddit rumor about Citrix notifying customers to take Netscaler servers offline because of actively exploited zero-days is apparently real: https://www.reddit.com/r/Citrix/comments/1wqjk9a/netscaler_leak/ Confirmation 1: https://mastodon.social/@GossiTheDog@cyberplace.social/117339185245199481 Confirmation 2: https://www.linkedin.com/feed/update/urn:li:activity:7509660925809819649/