Sources
SlashDot
- How Will AI Affect Open Source Development? 2 hours 21 min old
- Rust Leaves Top 10 in TIOBE Index, Making Room for Go 2 hours 21 min old
- Did Alice Huang's Megaspeed Bypass America's Controls on Exporting Nvidia Chip to China? 6 hours 21 min old
- Italy Fines Meta €805m Over Accessing Android Users' Photos with Facebook App 6 hours 21 min old
- Did Alice Jensen's Megaspeed Bypass America's Controls on Exporting Nvidia Chip to China? 12 hours 28 min old
- 50th Anniversary of 'Star Wars' Celebrated with iMax 70mm Re-Release, Special Events, New Movie 13 hours 29 min old
- Manjaro Linux Moves Toward Independent Community Governance 17 hours 30 min old
- America Officially Loses Its Measles-elimination Status After Continued Spread of the Disease 17 hours 30 min old
- Bitcoin Plummets 24% in 46 Days as Crypto Falls on Rising Inflation 17 hours 30 min old
- America Cancels 4,000 More Flights. FAA Denies Impact of New AI System. 20 hours 30 min old
Security Week
- Pentagon Renames CDAO ‘Super Intelligence Office’ 5 hours 38 min old
- Meta Fined $887 Million in Italy Over Android Gallery Photos and Videos on Facebook 23 hours 30 min old
- Is AI Making Us Worse at Cybersecurity? 1 day 4 hours old
- Apple Reveals How Secure Exclaves Shield Camera and Microphone Data 1 day 7 hours old
- No Signs of Hacking in FAA Ground Stop as FBI Reportedly Probes Software Update 1 day 9 hours old
- FAA Ground Stop Issued Due to ‘Extraordinary Circumstances’ 1 day 20 hours old
- In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach 2 days 3 hours old
- Microsoft Struggles to Restore Email and Other Services in a Global Outage 2 days 4 hours old
- Apify Confirms Customer Data Accessed in Cyberattack 2 days 5 hours old
- SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks 2 days 6 hours old
Hacker News
- Show HN: Aurora GeoXAI – Sovereign geospatial AI built out of frustration 6 hours 22 min old
- Show HN: Aurora GeoXAI – Sovereign geospatial AI built out of frustration 6 hours 22 min old
- Fireface UCX on Linux: reverse engineered and built with Claude Code 6 hours 25 min old
- We Need Guidelines for Learning and AI 6 hours 26 min old
- No Second Run: Does RSI Stop at Frontier Pre-Training? 6 hours 28 min old
- Show HN: Nano-Edge-TTS – 70x realtime, Lightweight Kokoro-based TTS model 6 hours 36 min old
- Show HN: Keep Your Screen Awake 6 hours 37 min old
- Amass v5 silently ignores -alts and -brute: flags never cross the engine API 6 hours 37 min old
- Ask HK: how to expose yourself more? 6 hours 39 min old
- Show HN: a Rust implementation of the Reticulum mesh networking stack 6 hours 39 min old
Guardian Security
- ‘Prove you are not a robot’: how the Captcha scam captures your computer 11 hours 30 min old
- Hacked fridges and other dangers lurking in the ‘internet of shit’ | Letters 4 days 1 hour old
- The Guardian view on the British Library: don’t privatise the reading rooms | Editorial 5 days 23 hours old
- Hot fridges, a fake nuclear alert and a $6bn heist: are we in the foothills of a hacking epidemic? 1 week 12 hours old
- Activists break into building site of Microsoft datacentre in Amsterdam 1 week 1 day old
- AI-powered malware ‘highly likely’ to be used to hack UK infrastructure by 2028 1 week 5 days old
- A gift to scammers: why you should probably keep your birthday a secret 2 weeks 11 hours old
- Credit where it’s due to AI for uncovering the PHP flaw – and discredit to the leaker | Letters 2 weeks 2 days old
- Non-profit group leaks data of more than 40,000 homeland security workers 2 weeks 3 days old
- Anthropic’s Claude AI model accessed Georgia voter data in US 2 weeks 6 days old
Wired Security
- Beware the New AI-Fueled Ransomware Boom 1 day 5 hours old
- Microsoft 365 Crawls Back to Life After a 24-Hour Outage 1 day 23 hours old
- The Microsoft Outage Is a Warning for the World 2 days 1 hour old
- Major Microsoft Outlook Outage Leaves People With Email Jobs Unable to Email 2 days 22 hours old
- Apple’s HomeView Tries Face Authentication Without FaceID 3 days 4 hours old
- Security Flaws Across UK Government Sites Exposed ‘God-Tier’ Information 5 days 11 hours old
- A New AI Tool From Google DeepMind Proved the Signal Protocol Is Secure 5 days 13 hours old
- DHS Has Used This Controversial Investigative Tool 185,000 Times Since Trump Took Office 6 days 8 hours old
- The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call 1 week 1 day old
- Free Chinese AI Models Are Getting Scary Good at Hacking 1 week 1 day old
Microsoft Malware Protection Center
- SCKit abuses ScreenConnect to deploy remote access and target technician sessions 1 day 20 hours old
- Trained to betray: How post-training supply chain attacks hijack coding agents 3 days 1 hour old
- The global socket: how threat actors are weaponizing GSocket for stealthy C2 3 days 22 hours old
- Lessons from 59 Linux Kernel Bug Reports 4 days 1 hour old
- Detecting sleeper agents hiding in AI model neurons 4 days 19 hours old
- FORGE Lab uses agentic tools to identify memory safety issues in Rust 5 days 22 hours old
- ARTEX abuse expands as cybercriminals target financial sector 1 week 1 day old
- Threat actors use agentic AI tooling to find and abuse exposed secrets 1 week 2 days old
- New investments to reduce on-premises security risk 1 week 3 days old
- What’s new in Microsoft Security: November 2026 1 week 3 days old
Computer Weekly Feed
- With suppliers focused on ensuring their own product lines are quantum-secure, end-users with diverse estates still can't afford to sleep on quantum security. 1 day 21 hours old
- Italian prosecution against mafia group collapses after judge throws out intercept evidence from police hacking of the Sky ECC cryptophone network 1 day 23 hours old
- As more processes become automated by AI, business leaders are taking greater responsibility for the tech their teams are using, as one head of HR explains 1 day 23 hours old
- The global degradation of service impacting many Microsoft functions means admins may be less able to keep corporate IT security safe 2 days 3 hours old
- Government-instigated investigation into system will report too late to be included in January miscarriage of justice appeal 2 days 3 hours old
- The Microsoft 365 suite provides everything from office productivity to cyber security tools. Should organisations rethink their Microsoft strategy? 2 days 3 hours old
- Embattled Nvidia CEO and founder Jensen Huang has resigned amid a sex scandal involving an alleged Chinese spy 2 days 23 hours old
- New development will expand Qatar’s domestic datacentre capacity as the country accelerates its digital transformation ambitions under Digital Agenda 2030 3 days 2 hours old
- A former subpostmaster is appealing a 1998 conviction that was based on evidence from the Post Office’s faulty Capture system 3 days 4 hours old
- AI is giving intelligence agencies new capabilities to sift and analyse communications on a previously unimaginable scale. What safeguards are being applied to protect individuals and to ensure UK’s agencies don’t go beyond their lawful powers? 3 days 4 hours old
Malware Bytes Security
- New York City votes to ban surveillance pricing 2 days 1 hour old
- Google pushes second Chrome update this week 2 days 7 hours old
- Worldwide Microsoft 365 outage disrupts Outlook, SharePoint, Teams, and more 2 days 9 hours old
- LEGO’s BrickLink taken offline: What users should know 3 days 4 hours old
- Why scammers want you to allow push notifications 3 days 7 hours old
- FBI agent stole $2.47m in crypto from criminal wallets 3 days 9 hours old
- Vanderbilt restores systems after cyberattack as hackers claim data theft 4 days 1 min old
- Remus malware claims Gmail access even after you change your password 4 days 4 hours old
- Muse sleep band users weren’t told their brain data was training AI 4 days 6 hours old
- Microsoft Patch Tuesday fixes Outlook flaw already under attack 4 days 7 hours old
Cisco Security Advisories
- Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability 2 days 20 hours old
- Cisco Identity Services Engine Authorization Bypass Vulnerabilities 4 days 14 hours old
- Cisco Meraki Security Hardening Release: October 2026 5 days 19 hours old
- Cisco UCS Central Software Remote Code Execution Vulnerability 1 week 3 days old
- Cisco Identity Services Engine Authorization Bypass Vulnerability 1 week 3 days old
- Cisco Unified Communications Manager Cross-Site Scripting Vulnerability 1 week 3 days old
- Cisco Secure Email Gateway SQL Injection Vulnerability 1 week 4 days old
- Cisco Finesse Server-Side Request Forgery Vulnerability 2 weeks 2 days old
- Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability 2 weeks 3 days old
- Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability 2 weeks 3 days old
Graham Cluely Security Blog
- WhiteArmor gang claims responsibility for latest cyber attack on shipping giant Maersk 3 days 3 hours old
- Smashing Security podcast #492: How hackers turned Russian cars into pumpkins 3 days 17 hours old
- Iranian hackers turned up the heat on French supermarket freezers, says France 5 days 2 hours old
- Smashing Security podcast #491: How AI agents are spooking the banks 1 week 3 days old
- Hackers leak personnel data of 41,000+ Homeland Security staff, including ICE and border agents 2 weeks 2 days old
- BYOD cyberattack diverts ambulances and cancels classes at University of New Mexico health center 2 weeks 3 days old
- Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice 2 weeks 3 days old
- Hive ransomware affiliate jailed, years after FBI infiltrated the gang’s systems 2 weeks 4 days old
- Hacker leaks 281 GB of data from Germany’s far-right AfD party 3 weeks 2 days old
- Smashing Security podcast #489: How a brand new crypto wallet came with a spy inside 3 weeks 3 days old
KrebsOnSecurity
- Who Runs the Ransomware Group Qilin? 4 days 24 min old
- Microsoft Fixes Nearly 1,100 Security Vulnerabilities 4 days 20 hours old
- Want to Rent an Internet Address at the White House? 1 week 3 days old
- Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies 1 week 5 days old
- Widespread PHP Flaw May Cause Many Site Outages Today 3 weeks 4 days old
- Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site 3 weeks 6 days old
Security Now
- SN 1104: The hole in OpenSSH - Password Bypass in Plain Sight 4 days 15 hours old
- SN 1103: Exposing Bad Consumer Crypto - AI vs. Encrypted Drives 1 week 4 days old
- SN 1102: A Strategic Plug Pull - Lessons From a Global Patch-and-Panic Fire Drill 2 weeks 4 days old
- SN 1101: ECDSA's Curves Origins - When AI Becomes the Attacker 3 weeks 4 days old
Security Wire Daily News
- Enterprises use 802.1X authentication to manage their wireless LANs, and that process relies on the Extensible Authentication Protocol and its various types. 2 weeks 4 days old
- Electronic protected health information (ePHI) is protected health information that is produced, saved, transferred or received in an electronic form. 2 weeks 4 days old
- Businesses contend with a combination of issues spawned by data overload, privacy regulations, access rights, cyberattacks, cloud environments, generative AI and human error. 2 weeks 4 days old
- Data loss prevention is an ever-changing process of proactive and reactive protection and planning. Read on to learn how to set up a successful DLP policy. 2 weeks 4 days old
- Disaster recovery (DR) is an organization's ability to respond to and recover from an event that negatively affects business operations. 2 weeks 4 days old
- India's Digital Personal Data Protection Act, 2023 (DPDPA) is a comprehensive privacy and data protection law that recognizes the right of individuals, referred to as "data principals," to protect their personal data during the processing of that data... 2 weeks 4 days old
- Hashing is the process of transforming any given key or a string of characters into another value. 2 weeks 4 days old
- Data protection trends include securing backups and planning for ransomware recovery. Veeam executives discuss these keys, plus why the 'data resilience company' can go public. 2 weeks 4 days old
- To effectively recover from a disruptive incident, IT and DR teams must have a plan in place. This guide breaks down the four phases of an emergency management plan. 2 weeks 4 days old
- Discover how fraudsters are using social media platforms to steal personal and financial information from unsuspecting users. 2 weeks 4 days old
Cloud Security Briefing: News and Advice
- Your cloud backup and storage usage may be on the rise. Make sure you take the necessary security precautions detailed here to keep your data protected. 2 weeks 4 days old
- With so many dangerous threats in the IT landscape, make sure you protect your data backups from the likes of corruption, unauthorized access and leakage. 2 weeks 4 days old
- Before jumping feet first into the cloud, understand the new and continuing top cloud security challenges your organization is likely to face -- and how to mitigate them. 2 weeks 4 days old
- Frameworks provide the structure for an effective incident response program. Here's where to turn for guidance on what to include. 3 weeks 2 days old
- Threats from cyberattacks continue to grow in frequency and severity. Considering the potential disruptions from such events, an organization needs an incident response plan. 3 weeks 4 days old
Security Wire Weekly
- IT automation uses instructions to create clear, consistent and repeatable processes that replace an IT professional's manual work in data centers and cloud deployments. 3 weeks 2 days old
- Create a security compliance plan for the data center that includes various standards, audit schedules, and 2026 AI governance and sustainability reporting requirements. 3 weeks 3 days old
- A time-based one-time password (TOTP) is a temporary passcode generated by an algorithm that uses the current time of day as one of its authentication factors. 3 weeks 4 days old
- Red teams can harness the power of LLMs for penetration testing. From session analysis to payload crafting, discover five ways AI transforms security testing. 3 weeks 5 days old
EFF
- As Federal Court Rules ALPRs are Mass Surveillance, EFF Gets Disappointing Ruling 1 month 3 days old
- Privacy's Defenders Podcast: No Privacy Without Encryption 1 month 3 days old
- Resisting the Menace of Federal Data Consolidation 1 month 6 days old
- Organizing in the Town at Oakland Tech Week 1 month 1 week old
- Turkish Crackdown On LGBTQ+ Organizations Threatens Freedom of Expression and Association 1 month 1 week old
Google Security Blog
- Security for the Quantum Era: Implementing Post-Quantum Cryptography in Android 7 months 3 weeks old
- Cultivating a robust and efficient quantum-safe HTTPS 8 months 3 weeks old
- Staying One Step Ahead: Strengthening Android’s Lead in Scam Protection 8 months 3 weeks old
- Keeping Google Play & Android app ecosystems safe in 2025 8 months 4 weeks old
- New Android Theft Protection Feature Updates: Smarter, Stronger 9 months 3 weeks old
- HTTPS certificate industry phasing out less secure domain validation methods 11 months 1 week old
- Further Hardening Android GPUs 11 months 1 week old
- Architecting Security for Agentic Capabilities in Chrome 11 months 1 week old
- Android expands pilot for in-call scam protection for financial apps 11 months 2 weeks old
- Android Quick Share Support for AirDrop: A Secure Approach to Cross-Platform File Sharing 12 months 1 hour old
Cisco Threat Outbreak
CNET Feed
Corero Security
CSOOnline - Salted Hash - Top Security News
Dark Reading Attacks and Breaches
Dark Reading Cloud
Dark Reading Security Monitoring
Dark Reading Threat Intelligence
Dark Readuing Vulnerability and Threats
InfoSec Island
InfoWorld
Naked Security
Network World
NoticeBored
Paul's Security Weekly
PC Magazine Security
Schneier on Security
Security News White Papers
Tao Security
Tech Crunch Security
Techworld Security
The Security Ledger
Threat Post
US-Cert Alerts
US-Cert Current Activity
ZDNet Security
