Magecart skimmer turns Stripe into a malware command server (sansec.io)
in security@lemmy.ml from yogthos@lemmy.ml on 06 Jun 17:38
comments (0)
New IronWorm malware hits 36 packages in npm supply-chain attack (www.bleepingcomputer.com)
in security@lemmy.ml from yogthos@lemmy.ml on 05 Jun 17:12
comments (3)
Ammaraskar: 1-Click GitHub Token Stealing via a VSCode Bug (blog.ammaraskar.com)
in security@lemmy.ml from exu@feditown.com on 05 Jun 10:49
comments (0)
"Patches are available to sophisticated attackers as soon as Google discloses them to OEMs. A partial embargo for months makes no sense." (grapheneos.social)
in security@lemmy.ml from cypherpunks@lemmy.ml on 03 Jun 11:12
comments (0)
1-Click GitHub Token Stealing via a VSCode Bug (blog.ammaraskar.com)
in security@lemmy.ml from yogthos@lemmy.ml on 03 Jun 06:03
comments (0)
The Newest Instagram "Exploit" is the Goofiest I've Seen (www.0xsid.com)
in security@lemmy.ml from yogthos@lemmy.ml on 01 Jun 23:22
comments (3)
No fix yet for critical RCE bug in open-source Git service Gogs - exploit module is out (www.theregister.com)
in security@lemmy.ml from cypherpunks@lemmy.ml on 30 May 22:30
comments (1)
Vulnerability-Lookup 5.0.0 released (www.vulnerability-lookup.org)
in security@lemmy.ml from cedric@lemmy.ml on 29 May 11:34
comments (0)
Websites have a new way to spy on visitors: Analyzing their SSD activity (arstechnica.com)
in security@lemmy.ml from yogthos@lemmy.ml on 28 May 16:39
comments (9)
FuzzingBrain V2: A Multi-Agent LLM System for Automated Vulnerability Discovery and Reproduction (arxiv.org)
in security@lemmy.ml from yogthos@lemmy.ml on 28 May 00:39
comments (0)
Megalodon chums the waters in 5.5K+ GitHub repo poisonings (www.theregister.com)
in security@lemmy.ml from yogthos@lemmy.ml on 23 May 17:24
comments (2)
The GitHub Breach Through VS Code Is the One I Warned About (mazinahmed.net)
in security@lemmy.ml from yogthos@lemmy.ml on 22 May 23:10
comments (0)
Vulnerability-Lookup 4.6.0 (www.vulnerability-lookup.org)
in security@lemmy.ml from cedric@lemmy.ml on 21 May 13:39
comments (0)
ESA and Spain strengthen ties for secure connectivity (www.esa.int)
in security@lemmy.ml from Zerush@lemmy.ml on 20 May 22:19
comments (0)
Hidden Voice Glitches Could Hijack Audio AI Tools (spectrum.ieee.org)
in security@lemmy.ml from yogthos@lemmy.ml on 20 May 00:38
comments (0)
CISA Admin Leaked AWS GovCloud Keys on Github (krebsonsecurity.com)
in security@lemmy.ml from yogthos@lemmy.ml on 19 May 22:13
comments (0)
A partial response to "Piefed has some really bad security bugs that people running this software should be aware of"
in security@lemmy.ml from freamon@lemmy.world on 19 May 20:17
comments (0)
Fabricked: Misconfiguring Infinity Fabric to Break AMD SEV-SNP (software-based compromise of "Confidential Virtual Machines") (xca-attacks.github.io)
in security@lemmy.ml from cypherpunks@lemmy.ml on 18 May 01:05
comments (0)
A security researcher says Microsoft secretly built a backdoor into BitLocker, releases an exploit to prove it (www.techspot.com)
in security@lemmy.ml from yogthos@lemmy.ml on 17 May 20:06
comments (2)
PSA: open source security considerations in the era of LLMs
in security@lemmy.ml from yogthos@lemmy.ml on 16 May 19:19
comments (39)
A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens (projectzero.google)
in security@lemmy.ml from yogthos@lemmy.ml on 16 May 18:48
comments (0)
A worm just ate its way through the NPM registry... (www.youtube.com)
in security@lemmy.ml from yogthos@lemmy.ml on 14 May 20:34
comments (0)
France investigates 15-year-old over alleged hack of national ID agency (therecord.media)
in security@lemmy.ml from yogthos@lemmy.ml on 14 May 02:16
comments (0)
Linux Dirtyfrag vulnerability (github.com)
in security@lemmy.ml from Zerush@lemmy.ml on 08 May 2026 11:36
comments (1)
DAEMON Tools software infected – supply chain attack ongoing since April 8, 2026 (securelist.com)
in security@lemmy.ml from Zerush@lemmy.ml on 06 May 2026 12:39
comments (2)
Microsoft Edge: Passwords end up in memory as plaintext (www.heise.de)
in security@lemmy.ml from yogthos@lemmy.ml on 05 May 2026 16:08
comments (8)
Vulnerability Report - April 2026 (www.vulnerability-lookup.org)
in security@lemmy.ml from cedric@lemmy.ml on 04 May 2026 11:41
comments (0)
Copy Fail — 732 Bytes to Root (copy.fail)
in security@lemmy.ml from Zerush@lemmy.ml on 30 Apr 2026 10:05
comments (0)
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Attack (socket.dev)
in security@lemmy.ml from yogthos@lemmy.ml on 23 Apr 2026 23:38
comments (0)
Quantum Computers Are Not a Threat to 128-bit Symmetric Keys (words.filippo.io)
in security@lemmy.ml from yogthos@lemmy.ml on 21 Apr 2026 20:08
comments (2)
Microsoft's Silent Lockout: Why WireGuard, VeraCrypt & Windscribe Can No Longer Update Windows Users (techlore.tech)
in security@lemmy.ml from Zerush@lemmy.ml on 19 Apr 2026 22:31
comments (2)
Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them. (anchor.host)
in security@lemmy.ml from yogthos@lemmy.ml on 14 Apr 2026 01:12
comments (0)
AI Cybersecurity After Mythos: The Jagged Frontier (aisle.com)
in security@lemmy.ml from yogthos@lemmy.ml on 11 Apr 2026 19:42
comments (2)
Supply chain nightmare: How Rust will be attacked and what we can do to mitigate the inevitable (kerkour.com)
in security@lemmy.ml from yogthos@lemmy.ml on 11 Apr 2026 16:32
comments (2)
HWMonitor & CPU-Z users were exposed to malware through fake downloads after CPUID breach (alternativeto.net)
in security@lemmy.ml from Zerush@lemmy.ml on 11 Apr 2026 13:14
comments (0)
Google rolls out end-to-end encryption for Gmail on Android and iOS devices for enterprise users, letting them read and compose emails without additional tools (www.bleepingcomputer.com)
in security@lemmy.ml from Innerworld@lemmy.world on 11 Apr 2026 05:51
comments (0)
FBI Extracts Suspect’s Deleted Signal Messages Saved in iPhone Notification Database (www.404media.co)
in security@lemmy.ml from yogthos@lemmy.ml on 10 Apr 2026 14:31
comments (0)
Vulnerability-Lookup 4.4.0
in security@lemmy.ml from cedric@lemmy.ml on 09 Apr 2026 13:15
comments (0)
Microsoft BANNED WireGuard, VeraCrypt & Windscribe With Zero Warning (www.youtube.com)
in security@lemmy.ml from feckingmigraine@beehaw.org on 09 Apr 2026 09:38
comments (4)
New multilingual severity classifiers for vulnerability analysis
in security@lemmy.ml from cedric@lemmy.ml on 06 Apr 2026 15:55
comments (0)
YASA: Scalable Multi-Language Taint Analysis on the Unified AST at Ant Group (arxiv.org)
in security@lemmy.ml from yogthos@lemmy.ml on 04 Apr 2026 06:35
comments (0)
CNVD Severity Classification and RMSV Effects: Honest Metrics & Data Leakage (www.vulnerability-lookup.org)
in security@lemmy.ml from cedric@lemmy.ml on 03 Apr 2026 09:28
comments (0)
Supply chain attack hits 300 million-download Axios npm package (www.itnews.com.au)
in security@lemmy.ml from yogthos@lemmy.ml on 31 Mar 2026 18:12
comments (0)
ICE List Wiki (theicelist.org)
in security@lemmy.ml from Zerush@lemmy.ml on 27 Mar 2026 12:45
comments (0)
VulnMCP 1.0.0 released (www.vulnerability-lookup.org)
in security@lemmy.ml from cedric@lemmy.ml on 25 Mar 2026 13:53
comments (0)
Supply Chain Attack in litellm 1.82.8 on PyPI (futuresearch.ai)
in security@lemmy.ml from yogthos@lemmy.ml on 24 Mar 2026 17:23
comments (0)
Someone has publicly leaked an exploit kit that can hack millions of iPhones (techcrunch.com)
in security@lemmy.ml from yogthos@lemmy.ml on 23 Mar 2026 23:42
comments (1)
Trivy Compromised by "TeamPCP" | Wiz Blog (www.wiz.io)
in security@lemmy.ml from Zerush@lemmy.ml on 23 Mar 2026 15:01
comments (0)
cpe-guesser 2.0 released (www.vulnerability-lookup.org)
in security@lemmy.ml from cedric@lemmy.ml on 23 Mar 2026 08:44
comments (0)
Vulneratility-Lookup 4.2.0
in security@lemmy.ml from cedric@lemmy.ml on 20 Mar 2026 10:17
comments (0)
CrackArmor: Critical AppArmor Flaws Enable Local Privilege Escalation to Root (www.qualys.com)
in security@lemmy.ml from cypherpunks@lemmy.ml on 14 Mar 2026 15:17
comments (0)
Supply-chain attack using invisible code hits GitHub and other repositories (arstechnica.com)
in security@lemmy.ml from yogthos@lemmy.ml on 13 Mar 2026 21:26
comments (0)
45,000 malicious IP addresses taken down in international cyber operation (www.interpol.int)
in security@lemmy.ml from Zerush@lemmy.ml on 13 Mar 2026 13:44
comments (3)
AI Agent Hacks McKinsey (codewall.ai)
in security@lemmy.ml from yogthos@lemmy.ml on 11 Mar 2026 21:25
comments (1)
GitHub - Bombadil-Systems/zombie-zip: Malformed ZIP archive that evades antivirus detection by declaring Method=0 (stored) while containing DEFLATE-compressed payload. (github.com)
in security@lemmy.ml from Zerush@lemmy.ml on 11 Mar 2026 15:59
comments (2)
Russian-backed hackers have gained access to Signal and WhatsApp accounts used ‌by officials, military personnel and journalists, as claimed by two intelligence agencies in the Netherlands. (www.reuters.com)
in security@lemmy.ml from yogthos@lemmy.ml on 09 Mar 2026 13:52
comments (0)
FBI investigating ‘suspicious’ cyber activities on critical surveillance network | CNN Politics (edition.cnn.com)
in security@lemmy.ml from Zerush@lemmy.ml on 06 Mar 2026 10:32
comments (0)
Google Safe Browsing missed 84% of phishing sites we found in February (www.norn-labs.com)
in security@lemmy.ml from yogthos@lemmy.ml on 05 Mar 2026 17:12
comments (1)
Global phishing-as-a-service platform taken down in coordinated public-private action (www.europol.europa.eu)
in security@lemmy.ml from Zerush@lemmy.ml on 05 Mar 2026 10:37
comments (0)
New AirSnitch attack bypasses Wi-Fi encryption in homes, offices, and enterprises (arstechnica.com)
in security@lemmy.ml from davel@lemmy.ml on 02 Mar 2026 22:25
comments (7)
hackerbot-claw: An AI-Powered Bot Actively Exploiting GitHub Actions (www.stepsecurity.io)
in security@lemmy.ml from Zerush@lemmy.ml on 02 Mar 2026 14:18
comments (0)
Vulnerability Report - February 2026 (www.vulnerability-lookup.org)
in security@lemmy.ml from cedric@lemmy.ml on 02 Mar 2026 10:33
comments (0)
Fake Job Interviews Are Installing Backdoors on Developer Machines (threatroad.substack.com)
in security@lemmy.ml from yogthos@lemmy.ml on 26 Feb 2026 02:05
comments (0)
AI-augmented threat actor accesses FortiGate devices at scale (aws.amazon.com)
in security@lemmy.ml from Zerush@lemmy.ml on 23 Feb 2026 11:45
comments (1)
We hid backdoors in ~40MB binaries and asked AI + Ghidra to find them (quesma.com)
in security@lemmy.ml from yogthos@lemmy.ml on 23 Feb 2026 04:48
comments (2)
Vulnerability Report - January 2026
in security@lemmy.ml from cedric@lemmy.ml on 18 Feb 2026 10:15
comments (0)
Password managers less secure than promised (ethz.ch)
in security@lemmy.ml from Zerush@lemmy.ml on 17 Feb 2026 12:09
comments (4)
Vulnerability-Lookup 4.0.0 is out – Federation is here
in security@lemmy.ml from cedric@lemmy.ml on 16 Feb 2026 13:50
comments (0)
Fake AI Chrome extensions with 300K users steal credentials, emails (www.bleepingcomputer.com)
in security@lemmy.ml from Zerush@lemmy.ml on 13 Feb 2026 19:14
comments (4)
Fake 7-Zip downloads are turning home PCs into proxy nodes (www.malwarebytes.com)
in security@lemmy.ml from Zerush@lemmy.ml on 10 Feb 2026 13:45
comments (6)
The Shadow Campaigns: Uncovering Global Espionage (unit42.paloaltonetworks.com)
in security@lemmy.ml from Zerush@lemmy.ml on 06 Feb 2026 15:50
comments (0)
Vulnerability-Lookup 3.0.0 (www.vulnerability-lookup.org)
in security@lemmy.ml from cedric@lemmy.ml on 02 Feb 2026 22:34
comments (2)
Minimal CVE Hardened container image collection (github.com)
in security@lemmy.ml from yogthos@lemmy.ml on 01 Feb 2026 01:11
comments (0)
Phishing attack: Numerous journalists targeted in attack via Signal Messenger (netzpolitik.org)
in security@lemmy.ml from yogthos@lemmy.ml on 29 Jan 2026 03:33
comments (0)
Vulnerability-Lookup 2.21.0
in security@lemmy.ml from cedric@lemmy.ml on 23 Jan 2026 11:55
comments (0)
GNU InetUtils Security Advisory: remote authentication by-pass in telnetd (vulnerability.circl.lu)
in security@lemmy.ml from cedric@lemmy.ml on 20 Jan 2026 22:50
comments (0)
Dissecting CrashFix: KongTuke's New Toy | Huntress (www.huntress.com)
in security@lemmy.ml from Zerush@lemmy.ml on 20 Jan 2026 12:42
comments (0)
China bans U.S. and Israeli cybersecurity software over security concerns (securityaffairs.com)
in security@lemmy.ml from yogthos@lemmy.ml on 19 Jan 2026 14:43
comments (2)
Malware peddlers are now hijacking Snap publisher domains (blog.popey.com)
in security@lemmy.ml from cypherpunks@lemmy.ml on 18 Jan 2026 02:08
comments (0)
A Libre Architecture for Verifiable Data Collection and Proof-of-Check Timestamping (doi.org)
in security@lemmy.ml from cedric@lemmy.ml on 13 Jan 2026 07:42
comments (0)
Vulnerability Report - December 2025 (www.vulnerability-lookup.org)
in security@lemmy.ml from cedric@lemmy.ml on 12 Jan 2026 22:18
comments (0)
Ni8mare - Unauthenticated Remote Code Execution in n8n (CVE-2026-21858) | Cyera Research Labs (www.cyera.com)
in security@lemmy.ml from Zerush@lemmy.ml on 08 Jan 2026 14:15
comments (0)
Dozens of Global Companies Hacked via Cloud Credentials from Infostealer Infections & More at Risk (www.infostealers.com)
in security@lemmy.ml from Zerush@lemmy.ml on 08 Jan 2026 09:38
comments (0)
China hacked email systems of US congressional committee staff (www.ft.com)
in security@lemmy.ml from yogthos@lemmy.ml on 08 Jan 2026 03:51
comments (0)
"MongoBleed": Exploit for critical vulnerability in MongoDB makes attacks easier (www.heise.de)
in security@lemmy.ml from cypherpunks@lemmy.ml on 06 Jan 2026 13:36
comments (0)
Bluetooth Headphone Jacking: A Key to Your Phone (media.ccc.de)
in security@lemmy.ml from cypherpunks@lemmy.ml on 06 Jan 2026 13:22
comments (0)
The Kimwolf Botnet is Stalking Your Local Network (krebsonsecurity.com)
in security@lemmy.ml from yogthos@lemmy.ml on 03 Jan 2026 20:54
comments (0)
Why We Abandoned Matrix: The Dark Truth About User Security and Safety (forum.hackliberty.org)
in security@lemmy.ml from yogthos@lemmy.ml on 24 Dec 2025 17:27
comments (6)
People online say old computers are prime candidates for repurposing into routers, is that actually a good idea security wise?
in security@lemmy.ml from HiddenLayer555@lemmy.ml on 20 Dec 2025 10:39
comments (5)
Vulnerability-Lookup 2.20.0
in security@lemmy.ml from cedric@lemmy.ml on 19 Dec 2025 22:43
comments (0)
How avoid spying by my phone and harden my LineageOS?
in privacy@lemmy.ml from zimno@piefed.social on 17 Dec 2025 21:54
comments (8)
GPU Efficiency in VLAI Model Training (www.vulnerability-lookup.org)
in security@lemmy.ml from cedric@lemmy.ml on 17 Dec 2025 14:52
comments (0)
PornHub extorted after hackers steal Premium member activity data (www.bleepingcomputer.com)
in security@lemmy.ml from Zerush@lemmy.ml on 16 Dec 2025 10:47
comments (0)
Security content of iOS 26.2 and iPadOS 26.2 (social.circl.lu)
in security@lemmy.ml from cedric@lemmy.ml on 16 Dec 2025 08:09
comments (0)
Fake ‘One Battle After Another’ torrent hides malware in subtitles (www.bleepingcomputer.com)
in security@lemmy.ml from yogthos@lemmy.ml on 14 Dec 2025 23:36
comments (0)
How we got hit by Shai-Hulud: A complete post-mortem (trigger.dev)
in security@lemmy.ml from yogthos@lemmy.ml on 14 Dec 2025 17:28
comments (0)
GitLab discovers widespread npm supply chain attack (about.gitlab.com)
in security@lemmy.ml from yogthos@lemmy.ml on 10 Dec 2025 21:47
comments (0)
Vulnerability-Lookup 2.19.0 (discourse.ossbase.org)
in security@lemmy.ml from cedric@lemmy.ml on 10 Dec 2025 07:42
comments (0)
To Catch a Predator: Leak exposes the internal operations of Intellexa’s mercenary spyware (securitylab.amnesty.org)
in security@lemmy.ml from yogthos@lemmy.ml on 06 Dec 2025 21:25
comments (0)
Cloudflare's 2025 Q3 DDoS threat report -- including Aisuru, the apex of botnets (blog.cloudflare.com)
in security@lemmy.ml from Zerush@lemmy.ml on 04 Dec 2025 13:12
comments (0)
End-of-Year Threat Intelligence Sightings Forecast
in security@lemmy.ml from cedric@lemmy.ml on 02 Dec 2025 13:34
comments (0)
oh no, not npm again... (www.youtube.com)
in security@lemmy.ml from yogthos@lemmy.ml on 26 Nov 2025 19:54
comments (0)
Cato CTRL™ Threat Research: HashJack - Novel Indirect Prompt Injection Against AI Browser Assistants (www.catonetworks.com)
in security@lemmy.ml from Zerush@lemmy.ml on 26 Nov 2025 11:43
comments (1)
How Quickly Can AI Crack Your Password? (messente.com)
in security@lemmy.ml from Zerush@lemmy.ml on 25 Nov 2025 10:40
comments (16)
Malicious app developers offering to buy old apps from developers who are no longer active, so they can push malware onto those users (support.google.com)
in security@lemmy.ml from NaNin@lemmy.dbzer0.com on 25 Nov 2025 09:52
comments (5)
3.5 Billion Accounts: Complete WhatsApp Directory Retrieved and Evaluated (www.heise.de)
in security@lemmy.ml from yogthos@lemmy.ml on 20 Nov 2025 14:39
comments (0)
A Simple WhatsApp Security Flaw Exposed 3.5 Billion Phone Numbers (www.wired.com)
in security@lemmy.ml from yogthos@lemmy.ml on 19 Nov 2025 18:13
comments (0)
Vulnerability-Lookup 2.18.0 - Integration with Rulezet
in security@lemmy.ml from cedric@lemmy.ml on 14 Nov 2025 14:09
comments (0)
Meta is earning a fortune on a deluge of fraudulent ads, documents show (www.reuters.com)
in security@lemmy.ml from Zerush@lemmy.ml on 08 Nov 2025 22:40
comments (0)
Study concludes cybersecurity training doesn’t work (www.kpbs.org)
in security@lemmy.ml from yogthos@lemmy.ml on 01 Nov 2025 23:47
comments (8)
NPM flooded with malicious packages downloaded more than 86,000 times (arstechnica.com)
in security@lemmy.ml from yogthos@lemmy.ml on 31 Oct 2025 13:27
comments (0)
Someone Snuck Into a Cellebrite Microsoft Teams Call and Leaked Phone Unlocking Details (www.404media.co)
in security@lemmy.ml from yogthos@lemmy.ml on 30 Oct 2025 23:43
comments (6)
Gmail Passwords Confirmed As Part Of 183 Million Account Data Leak (www.forbes.com)
in security@lemmy.ml from yogthos@lemmy.ml on 27 Oct 2025 22:02
comments (5)
How I Almost Got Hacked By A 'Job Interview' (blog.daviddodda.com)
in security@lemmy.ml from yogthos@lemmy.ml on 21 Oct 2025 06:20
comments (8)
Could the XZ backdoor have been detected with better Git and Debian packaging practices? (optimizedbyotto.com)
in security@lemmy.ml from otto@programming.dev on 19 Oct 2025 19:36
comments (1)
MS Digital Defense Report (cdn-dynmedia-1.microsoft.com)
in security@lemmy.ml from Zerush@lemmy.ml on 17 Oct 2025 12:49
comments (2)
Satellites Are Leaking the World’s Secrets: Calls, Texts, Military and Corporate Data (www.wired.com)
in security@lemmy.ml from yogthos@lemmy.ml on 14 Oct 2025 19:17
comments (0)
ASCII Smuggling Attack Lets Hackers Manipulate Gemini to Deliver Smuggled Data to Users (cybersecuritynews.com)
in security@lemmy.ml from yogthos@lemmy.ml on 12 Oct 2025 15:11
comments (1)
Vulnerability Report - September 2025
in security@lemmy.ml from cedric@lemmy.ml on 03 Oct 2025 14:21
comments (3)
Hacking Campaign Has Breached Cisco Devices in US Government (www.bloomberg.com)
in security@lemmy.ml from yogthos@lemmy.ml on 26 Sep 2025 19:20
comments (0)
Safe by Default: Building a Minimal Sandbox in Linux (medium.com)
in security@lemmy.ml from Trev13@programming.dev on 22 Sep 2025 16:40
comments (0)
Vulnerability-Lookup 2.16.0
in security@lemmy.ml from cedric@lemmy.ml on 19 Sep 2025 14:24
comments (0)
Satori Threat Intelligence Alert: SlopAds Covers Fraud with Layers of Obfuscation - HUMAN Security (www.humansecurity.com)
in security@lemmy.ml from Zerush@lemmy.ml on 17 Sep 2025 13:01
comments (1)
Apple releases iOS 15.8.5 security update for 10-year old iPhone 6s (support.apple.com)
in security@lemmy.ml from ray@lemmy.ml on 17 Sep 2025 03:13
comments (0)
Self-Replicating Worm Hits 180+ Software Packages (krebsonsecurity.com)
in security@lemmy.ml from ray@lemmy.ml on 16 Sep 2025 23:43
comments (1)
Vulnerability Report - August 2025 (discourse.ossbase.org)
in security@lemmy.ml from cedric@lemmy.ml on 12 Sep 2025 10:11
comments (0)
npm debug and chalk packages compromised (www.aikido.dev)
in security@lemmy.ml from yogthos@lemmy.ml on 09 Sep 2025 19:46
comments (0)
The number of mis-issued 1.1.1.1 certificates grows. Here’s the latest. (arstechnica.com)
in security@lemmy.ml from yogthos@lemmy.ml on 05 Sep 2025 01:42
comments (0)
Cybersecurity News Review - Week 35 (2025) (cybernewsweekly.substack.com)
in security@lemmy.ml from Zerush@lemmy.ml on 29 Aug 2025 20:38
comments (0)
Two New feeds from CERT-FR integrated in Vulnerability-Lookup (discourse.ossbase.org)
in security@lemmy.ml from cedric@lemmy.ml on 29 Aug 2025 12:41
comments (0)
Vulnerability-Lookup 2.15.0 released (discourse.ossbase.org)
in security@lemmy.ml from cedric@lemmy.ml on 25 Aug 2025 09:58
comments (0)
BCP-04 Draft Preparation - Work-group session 25/08/2025 - Luxembourg (discourse.ossbase.org)
in security@lemmy.ml from cedric@lemmy.ml on 25 Aug 2025 09:50
comments (0)
How We Exploited CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories (research.kudelskisecurity.com)
in security@lemmy.ml from ray@lemmy.ml on 19 Aug 2025 18:52
comments (1)
Intel Outside: Hacking every Intel employee and various internal websites (eaton-works.com)
in security@lemmy.ml from cypherpunks@lemmy.ml on 19 Aug 2025 11:53
comments (0)
Google's 'AI Overview' Pointed Him to a Customer Service Number. It Was a Scam - Slashdot (yro.slashdot.org)
in security@lemmy.ml from Zerush@lemmy.ml on 18 Aug 2025 11:25
comments (0)
MadeYouReset: Turning HTTP/2 Server Against Itself | Imperva (www.imperva.com)
in security@lemmy.ml from Zerush@lemmy.ml on 15 Aug 2025 12:53
comments (0)
Adult sites trick users into Liking Facebook posts using a clickjack Trojan (www.malwarebytes.com)
in security@lemmy.ml from Zerush@lemmy.ml on 12 Aug 2025 13:29
comments (0)
MSS unveils case of foreign agents hacking commercial camera to spy on Chinese port (www.globaltimes.cn)
in security@lemmy.ml from yogthos@lemmy.ml on 10 Aug 2025 01:27
comments (0)
Hackers Went Looking for a Backdoor in High-Security Safes—and Now Can Open Them in Seconds (www.wired.com)
in security@lemmy.ml from yogthos@lemmy.ml on 10 Aug 2025 01:05
comments (1)
ReVault! When your SoC turns against you… (blog.talosintelligence.com)
in security@lemmy.ml from Zerush@lemmy.ml on 06 Aug 2025 12:05
comments (0)
Vulnerability-Lookup 2.14.0 released (www.vulnerability-lookup.org)
in security@lemmy.ml from cedric@lemmy.ml on 29 Jul 2025 22:35
comments (0)
ArcaneChat 2.6.0 released with major security enhancement
in security@lemmy.ml from adbenitez@lemmy.ml on 25 Jul 2025 13:03
comments (0)
AI-Generated Malware in Panda Image Hides Persistent Linux Threat (www.aquasec.com)
in security@lemmy.ml from Zerush@lemmy.ml on 25 Jul 2025 11:34
comments (2)
Hacker Plants Computer 'Wiping' Commands in Amazon's AI Coding Agent (www.404media.co)
in security@lemmy.ml from yogthos@lemmy.ml on 25 Jul 2025 04:26
comments (1)
‘If you are reading…’: This password ‘mistake’ shuts down a 158-year-old company (www.hindustantimes.com)
in security@lemmy.ml from Zerush@lemmy.ml on 23 Jul 2025 12:20
comments (6)
Limitations of GrapheneOS
in security@lemmy.ml from goatbeard@beehaw.org on 22 Jul 2025 18:53
comments (4)
The Solidity Language open-source package was used in a $500,000 crypto heist (securelist.com)
in security@lemmy.ml from yogthos@lemmy.ml on 17 Jul 2025 16:04
comments (0)
Malware in DNS - DomainTools Investigations | DTI (dti.domaintools.com)
in security@lemmy.ml from Zerush@lemmy.ml on 17 Jul 2025 11:55
comments (0)
VLAI Hugging Face Set (discourse.ossbase.org)
in security@lemmy.ml from cedric@lemmy.ml on 17 Jul 2025 10:50
comments (0)
How to Prove False Statements: Practical Attacks on Fiat-Shamir (eprint.iacr.org)
in security@lemmy.ml from yogthos@lemmy.ml on 14 Jul 2025 00:01
comments (0)
Vulnerability-Lookup 2.13.0 (discourse.ossbase.org)
in security@lemmy.ml from cedric@lemmy.ml on 11 Jul 2025 22:41
comments (0)
ChatGPT creates phisher’s paradise by serving wrong URLs (www.theregister.com)
in security@lemmy.ml from Zerush@lemmy.ml on 11 Jul 2025 15:19
comments (1)
Act now: Secure Boot certificates expire in June 2026 - Windows IT Pro Blog (techcommunity.microsoft.com)
in security@lemmy.ml from Zerush@lemmy.ml on 09 Jul 2025 08:49
comments (0)
VLAI: A RoBERTa-Based Model for Automated Vulnerability Severity Classification (huggingface.co)
in security@lemmy.ml from cedric@lemmy.ml on 08 Jul 2025 10:18
comments (0)
Vulnerability Report - June 2025 (www.vulnerability-lookup.org)
in security@lemmy.ml from cedric@lemmy.ml on 07 Jul 2025 09:46
comments (0)
AI Model for Chinese Vulnerability Severity in Vulnerability-Lookup (www.linkedin.com)
in security@lemmy.ml from cedric@lemmy.ml on 01 Jul 2025 19:41
comments (0)
The Most Terrifying Company in America Is Probably One You’ve Never Heard Of (www.thedailybeast.com)
in security@lemmy.ml from Zerush@lemmy.ml on 28 Jun 2025 14:10
comments (9)
Stegano 2.0.0 released with functions to hide and reveal messages in PCM encoded .wav files
in security@lemmy.ml from cedric@lemmy.ml on 22 Jun 2025 12:43
comments (0)
GCVE-BCP-03 - Decentralized Publication Standard implemented in Vulnerability-Lookup
in security@lemmy.ml from cedric@lemmy.ml on 13 Jun 2025 10:48
comments (0)
The strange tale of ischhfd83: When cybercriminals eat their own (news.sophos.com)
in security@lemmy.ml from Zerush@lemmy.ml on 05 Jun 2025 14:19
comments (0)
Vulnerability-Lookup Discourse on Mastodon!
in security@lemmy.ml from cedric@lemmy.ml on 05 Jun 2025 08:25
comments (0)
Vulnerability Report - May 2025
in security@lemmy.ml from cedric@lemmy.ml on 03 Jun 2025 08:43
comments (0)
Suspected InfoStealer Malware Data Breach Exposed 184 Million Logins and Passwords (www.websiteplanet.com)
in security@lemmy.ml from Zerush@lemmy.ml on 26 May 2025 12:38
comments (0)
Remote Prompt Injection in GitLab Duo Leads to Source Code Theft (www.legitsecurity.com)
in security@lemmy.ml from Zerush@lemmy.ml on 26 May 2025 12:35
comments (0)
A local server designed to load one or more pre-trained NLP models during startup and expose them through a clean, RESTful API (github.com)
in security@lemmy.ml from cedric@lemmy.ml on 23 May 2025 13:10
comments (0)
270 arrested in global dark web crackdown targeting online drug and criminal networks | Europol (www.europol.europa.eu)
in security@lemmy.ml from Zerush@lemmy.ml on 23 May 2025 10:08
comments (0)
Dero miner spreads inside containerized Linux environments (securelist.com)
in security@lemmy.ml from Zerush@lemmy.ml on 21 May 2025 14:22
comments (0)
DDoSecrets publishes 410 GB of heap dumps, hacked from TeleMessage's archive server (micahflee.com)
in security@lemmy.ml from yogthos@lemmy.ml on 20 May 2025 02:15
comments (0)
VMware Hacked As $150,000 Zero-Day Exploit Dropped (www.forbes.com)
in security@lemmy.ml from yogthos@lemmy.ml on 19 May 2025 14:56
comments (1)
Detecting malicious Unicode (daniel.haxx.se)
in security@lemmy.ml from Zerush@lemmy.ml on 19 May 2025 12:44
comments (0)
USN-7292-1: Dropbear vulnerabilities | Ubuntu security notices | Ubuntu (ubuntu.com)
in security@lemmy.ml from Zerush@lemmy.ml on 19 May 2025 11:22
comments (0)
Botnet Dismantled in International Operation, Russian and Kazakhstani Administrators Indicted (www.justice.gov)
in security@lemmy.ml from Zerush@lemmy.ml on 19 May 2025 11:11
comments (0)
89 million Steam account details just got leaked, so now's a good time to change your password (www.xda-developers.com)
in security@lemmy.ml from yogthos@lemmy.ml on 14 May 2025 14:35
comments (3)
Intel data-leaking Spectre defenses scared off once again (www.theregister.com)
in security@lemmy.ml from yogthos@lemmy.ml on 14 May 2025 00:43
comments (0)
RSS feed for CISA KEV vulnerabilities, powered by Vulnerability-Lookup (www.vulnerability-lookup.org)
in security@lemmy.ml from cedric@lemmy.ml on 13 May 2025 22:53
comments (0)
Vulnerability-Lookup 2.9.0 - MITRE EMB3D, GCVE (www.vulnerability-lookup.org)
in security@lemmy.ml from cedric@lemmy.ml on 07 May 2025 16:46
comments (0)
China's cybersecurity center discloses malicious foreign websites and IP addresses, mainly from US, Sweden and India (www.globaltimes.cn)
in security@lemmy.ml from yogthos@lemmy.ml on 03 May 2025 04:29
comments (5)
🚨 April 2025 Vulnerability Report is out! 🚨
in security@lemmy.ml from cedric@lemmy.ml on 01 May 2025 11:13
comments (0)
A Python client for the Global CVE Allocation System. (github.com)
in security@lemmy.ml from cedric@lemmy.ml on 28 Apr 2025 09:59
comments (0)
Vulnerabilities in the SS7 phone system can allow attackers to steal your calls and texts, track your location (www.youtube.com)
in security@lemmy.ml from HiddenLayer555@lemmy.ml on 16 Apr 2025 21:43
comments (0)
GCVE: Global CVE Allocation System (gcve.eu)
in security@lemmy.ml from cedric@lemmy.ml on 16 Apr 2025 20:51
comments (1)
Homeland Security funding for CVE program expires (www.theregister.com)
in security@lemmy.ml from cypherpunks@lemmy.ml on 16 Apr 2025 09:26
comments (0)
Google fixes two Android zero-day bugs actively exploited by hackers (techcrunch.com)
in security@lemmy.ml from yogthos@lemmy.ml on 09 Apr 2025 04:18
comments (0)
Hacker hacked hackers (www.bleepingcomputer.com)
in security@lemmy.ml from Zerush@lemmy.ml on 08 Apr 2025 12:23
comments (0)
Why OAuth MUST share access token with 3rd party?!?
in security@lemmy.ml from maltfield@lemmy.ml on 06 Apr 2025 03:47
comments (7)
Vulnerability-Lookup 2.6.0 Released — Advanced monitoring tools for administrators of Vulnerability-Lookup instances (www.vulnerability-lookup.org)
in security@lemmy.ml from cedric@lemmy.ml on 14 Feb 2025 15:13
comments (0)
Exclusive: Spyware maker caught distributing malicious Android apps for years (techcrunch.com)
in security@lemmy.ml from yogthos@lemmy.ml on 13 Feb 2025 16:15
comments (0)
Massive brute force attack uses 2.8 million IPs to target VPN devices (www.bleepingcomputer.com)
in security@lemmy.ml from Zerush@lemmy.ml on 10 Feb 2025 15:50
comments (0)
Twitter (X) Hit by 2.8 Billion Profile Data Leak in Alleged Insider Job (hackread.com)
in security@lemmy.ml from yogthos@lemmy.ml on 30 Mar 2025 23:44
comments (0)
Messaging app Signal threatens to leave France over anti-encryption demands (brusselssignal.eu)
in security@lemmy.ml from yogthos@lemmy.ml on 21 Mar 2025 05:08
comments (0)
This Windows PowerShell Phish Has Scary Potential (krebsonsecurity.com)
in security@lemmy.ml from yogthos@lemmy.ml on 15 Mar 2025 15:13
comments (0)
Regularly updated Hugging Face datasets and models for software vulnerabilities (huggingface.co)
in security@lemmy.ml from cedric@lemmy.ml on 09 Mar 2025 21:22
comments (0)
LLMs + Vulnerability-Lookup: What We’re Testing and Where We’re Headed (www.vulnerability-lookup.org)
in security@lemmy.ml from cedric@lemmy.ml on 26 Feb 2025 23:24
comments (0)
two OpenSSH vulnerabilities fixed: one allowed MITM against clients which had enabled `VerifyHostKeyDNS`, the other allowed pre-auth DoS (blog.qualys.com)
in security@lemmy.ml from cypherpunks@lemmy.ml on 21 Feb 2025 21:49
comments (0)
VSCode’s SSH Agent Is Bananas (fly.io)
in security@lemmy.ml from yogthos@lemmy.ml on 08 Feb 2025 15:35
comments (0)
Violet Blue: America’s unfolding cybersecurity catastrophe (medium.com)
in security@lemmy.ml from davel@lemmy.ml on 08 Feb 2025 04:27
comments (1)
Track vulnerabilities with product watch lists and email notifications (vulnerability.circl.lu)
in security@lemmy.ml from cedric@lemmy.ml on 07 Feb 2025 11:34
comments (0)
AMD Zen 1 through Zen 4 CPUs use an insecure hash function in the signature validation for microcode updates; researchers released a proof of concept update which makes the RDRAND instruction return 4 (github.com)
in security@lemmy.ml from cypherpunks@lemmy.ml on 04 Feb 2025 02:55
comments (8)
WhatsApp says journalists and civil society members were targets of Israeli spyware (www.theguardian.com)
in security@lemmy.ml from yogthos@lemmy.ml on 01 Feb 2025 01:35
comments (0)
Seized Cracked.io, Nulled.to hacking forums in Operation Talent (www.bleepingcomputer.com)
in security@lemmy.ml from Zerush@lemmy.ml on 30 Jan 2025 12:46
comments (0)