|
Article: Lone attacker published 14 malicious npm packages mimicking popular OpenSearch, Elasticsearch libraries - published 5 months ago. Content: A single npm user on Thursday published 14 malicious packages within a four-hour window, all mimicking popular OpenSearch, Elasticsearch, DevOps, and environment-configuration libraries, according to Microsoft. It’s the latest in a seemingly never-ending string of supply chain attacks targeting developer tools, and stealing cloud credentials and CI/CD pipel... https://www.theregister.com/security/2026/05/29/14-malicious-npm-packages-impersonated-opensearch-elasticsearch-libraries/5248792 Published: 2026 05 29 21:46:34 Received: 2026 06 09 15:27:20 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: Friday Squid Blogging: Another Squid - published 5 months ago. Content: Someone named “Squid” seems to be a “West Country legend.” As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy. ... https://www.schneier.com/blog/archives/2026/05/friday-squid-blogging-another-squid.html Published: 2026 05 29 21:05:33 Received: 2026 06 09 15:25:42 Feed: Schneier on Security Source: Schneier on Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: The White House’s Aliens.gov Site Brags That ICE Arrested More Than 700 US Citizens - published 5 months ago. Content: https://www.wired.com/story/white-house-aliens-gov-us-citizens-arrested/ Published: 2026 05 29 20:53:09 Received: 2026 06 09 15:00:57 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
Article: One Step Forward, Two Steps Back: CA's AB 1856 Exempts Open Source But Expands Age-Gating - published 5 months ago. Content: https://www.eff.org/deeplinks/2026/05/one-step-forward-two-steps-back-cas-ab-1856-exempts-open-source-expands-age-gating Published: 2026 05 29 20:15:43 Received: 2026 06 09 15:27:39 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
|
Article: ICE to keep an eye on your eyes under $25M biometric scanner deal - published 5 months ago. Content: If you thought US Immigration and Customs Enforcement’s widespread use of face recognition apps was a privacy violation, you’re about to get eye-rate over a new $25 million contract. According to a largely unreported contract summary published last week by ICE parent agency the Department of Homeland Security, US immigration cops have doled out about $25.1 ... https://www.theregister.com/public-sector/2026/05/29/ice-awards-bi2-25m-contract-for-1570-biometric-scanners/5248733 Published: 2026 05 29 19:35:45 Received: 2026 06 09 15:27:21 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: OffensiveCon26 YouTube Playlist released - published 5 months ago. Content: submitted by /u/maurosoria [link] [comments] https://www.reddit.com/r/netsec/comments/1trbc7u/offensivecon26_youtube_playlist_released/ Published: 2026 05 29 18:38:42 Received: 2026 06 09 15:25:38 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: No fix yet for critical RCE bug in open-source Git service Gogs - exploit module is out - published 5 months ago. Content: There's a huge hole and no one is patching it thus far. A critical, remote code execution (RCE) bug in Gogs, a popular open-source self-hosted Git service, can be exploited by any authenticated user - no special privileges required - on a default installation to fully compromise vulnerable servers, steal credentials and multi-factor authentication secrets, ... https://www.theregister.com/security/2026/05/29/no-fix-yet-for-critical-gogs-rce-bug-exploit-module-is-out/5248691 Published: 2026 05 29 18:26:48 Received: 2026 06 09 15:27:21 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: 23andMe inherits lawsuit over 'disturbing' DNA data breach - published 5 months ago. Content: The office of Rob Bonta, California's attorney general, is suing 23andMe for the data protection failings that led to the genetics company's disastrous 2023 breach. Bonta and his team claim [PDF] that 23andMe failed to implement adequate security controls for the sensitive records it stored, and misled customers about the nature of the mishap after the fact... https://www.theregister.com/legal/2026/05/29/rob-bonta-sues-23andmes-new-owners-over-2023-breach/5248565 Published: 2026 05 29 16:12:26 Received: 2026 06 09 15:27:21 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Risks of Robinhood Using AI Agents to Trade, Make Purchases - published 5 months ago. Content: https://www.securitymagazine.com/articles/102330-risks-of-robinhood-using-ai-agents-to-trade-make-purchases Published: 2026 05 29 15:00:00 Received: 2026 06 09 15:04:14 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
Article: Dutch cops wrest 17M devices from mystery botnet's clutches - published 5 months ago. Content: Dutch police say they dismantled a large botnet this week comprising at least 17 million infected devices. After being tipped off by a researcher at the Netherlands' National Cyber Security Centre (NCSC-NL), police began an investigation, which resulted in the discovery of 200 servers underpinning the botnet's infrastructure located in the country. Cybercri... https://www.theregister.com/security/2026/05/29/dutch-cops-liberate-17m-devices-from-botnets-clutches/5248312 Published: 2026 05 29 13:00:00 Received: 2026 06 09 15:27:22 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: ChatGPT blindly trusts browser content, turning the page into a payload - published 5 months ago. Content: EXCLUSIVE ChatGPT can’t tell its own generated content from attacker-controlled Markdown pulled from external sources, according to a researcher who found the prompt injection technique and reported it to OpenAI. This means that if a user asks the chatbot to summarize a web page that contains hidden instructions, the page can become the payload. An attacker... https://www.theregister.com/research/2026/05/29/chatgpt-prompt-injection-turns-web-pages-into-phishing-lures/5248137 Published: 2026 05 29 12:00:00 Received: 2026 06 09 15:27:22 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: CISA Adds One Known Exploited Vulnerability to Catalog - published 5 months ago. Content: https://www.cisa.gov/news-events/alerts/2026/05/29/cisa-adds-one-known-exploited-vulnerability-catalog Published: 2026 05 29 12:00:00 Received: 2026 06 09 15:04:48 Feed: CISA Current Activity Source: Cybersecurity and Infrastructure Security Agency (CISA) Category: News Topic: Cyber Security |
|
|
Article: ChatGPT blindly trusts browser content, turning the page into a payload - published 5 months ago. Content: EXCLUSIVE ChatGPT can’t tell its own generated content from attacker-controlled Markdown pulled from external sources, according to a researcher who found the prompt injection technique and reported it to OpenAI. This means that if a user asks the chatbot to summarize a web page that contains hidden instructions, the page can become the payload. An attacker... https://www.theregister.com/research/2026/05/29/chatgpt-prompt-injection-turns-web-pages-into-phishing-lures/5248137 Published: 2026 05 29 12:00:00 Received: 2026 06 09 15:01:13 Feed: The Register - Security Source: The Register Category: News Topic: Cyber Security |
|
Article: Russia-linked threat group put ChatGPT to work from lure to payload - published 5 months ago. Content: Russia-linked cyber espionage crews appear to be using AI tools to help build malware, spin up infrastructure, and craft lures for attacks on Ukrainian targets. Researchers at WithSecure say a previously undocumented threat group, tracked as "GREYVIBE," has been using OpenAI's ChatGPT, Google's Gemini, and Ideogram AI across almost every stage of its operat... https://www.theregister.com/research/2026/05/29/russia-linked-threat-group-put-chatgpt-to-work-from-lure-to-payload/5248368 Published: 2026 05 29 11:49:45 Received: 2026 06 09 15:27:22 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: ShinyHunters adds Charter to trophy shelf after 4.9M customer records leak - published 5 months ago. Content: ShinyHunters claims it has dumped the personal details of millions of Charter Communications customers after the US telecom giant apparently declined to play along with the gang's latest extortion demands. According to Have I Been Pwned, the breach exposed the personal details of 4.9 million customers, including names, email addresses, phone numbers, and ph... https://www.theregister.com/cyber-crime/2026/05/29/shinyhunters-adds-charter-to-trophy-shelf-after-49m-customer-records-leak/5248281 Published: 2026 05 29 10:22:31 Received: 2026 06 09 15:27:22 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: 1,001 IPs, 64 countries, one operation: mapping a botnet by its back end · HoneyLabs blog - published 5 months ago. Content: We found a cluster of 1,001 IPs across 306 networks and 64 countries, tied to eight shared staging servers and a single TLS and HTTP fingerprint that appears nowhere else, plus smaller botnets that fall into clean separate islands. submitted by /u/Honeylabs [link] [comments]... https://www.reddit.com/r/netsec/comments/1tqvtjl/1001_ips_64_countries_one_operation_mapping_a/ Published: 2026 05 29 08:52:11 Received: 2026 06 09 15:25:38 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: Police arrest man following hack of Ajax football club - published 5 months ago. Content: https://www.bitdefender.com/en-us/blog/hotforsecurity/police-arrest-hack-ajax-football Published: 2026 05 29 08:04:39 Received: 2026 06 09 15:20:34 Feed: Graham Cluley Source: Graham Cluley Category: Cyber Security Topic: Cyber Security |
|
Article: I evaluated 5 LLM agents on patching real-world CVEs. Here is what I found. - published 5 months ago. Content: I built an independent benchmark with 20 real CVEs across 15 CWE categories, 5 models (3 OpenAI, 2 Poolside Laguna), three prompt conditions: full advisory, behavioral description only, and location only (file and function, no description of the flaw). I have three findings worth sharing: No model reliably fixes real vulnerabilities. The best solve rate (gp... https://www.reddit.com/r/netsec/comments/1tquesx/i_evaluated_5_llm_agents_on_patching_realworld/ Published: 2026 05 29 07:32:36 Received: 2026 06 09 15:25:38 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: The Hidden War Over AI Transparency - published 5 months ago. Content: https://www.silicon.co.uk/usa-content/the-hidden-war-over-ai-transparency-630058 Published: 2026 05 29 07:27:46 Received: 2026 06 09 15:02:31 Feed: Silicon UK – Security Source: Silicon UK Category: News Topic: Cyber Security |
|
|
Article: From the Hammer to the Scalpel: The Evolution of Account Takeover - published 5 months ago. Content: https://www.securitymagazine.com/articles/102328-from-the-hammer-to-the-scalpel-the-evolution-of-account-takeover Published: 2026 05 29 05:00:00 Received: 2026 06 09 15:04:14 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
Article: Fooling around with encrypted reasoning blobs - published 5 months ago. Content: submitted by /u/feross [link] [comments]... https://www.reddit.com/r/netsec/comments/1tqqaoy/fooling_around_with_encrypted_reasoning_blobs/ Published: 2026 05 29 04:00:25 Received: 2026 06 09 15:25:39 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: [remote] strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow - published 5 months ago. Content: https://www.exploit-db.com/exploits/52587 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:31 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
Article: [webapps] CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated) - published 5 months ago. Content: https://www.exploit-db.com/exploits/52588 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:31 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [remote] Wing FTP Server 8.1.3 - Authenticated Remote Code Execution - published 5 months ago. Content: https://www.exploit-db.com/exploits/52589 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:31 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [webapps] MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution - published 5 months ago. Content: https://www.exploit-db.com/exploits/52590 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:31 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
Article: [local] Linux Kernel - Local Privilege Escalation - published 5 months ago. Content: https://www.exploit-db.com/exploits/52591 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:30 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [local] ZTE H298A / H108N - Unauthenticated Credential Exposure - published 5 months ago. Content: https://www.exploit-db.com/exploits/52592 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:30 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [local] ZTE Routers - Unauthenticated Denial of Service - published 5 months ago. Content: https://www.exploit-db.com/exploits/52594 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:29 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [local] ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion - published 5 months ago. Content: https://www.exploit-db.com/exploits/52595 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:29 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [webapps] Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution - published 5 months ago. Content: https://www.exploit-db.com/exploits/52596 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:29 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
Article: [webapps] Langflow 1.3.0 - Remote Code Execution - published 5 months ago. Content: https://www.exploit-db.com/exploits/52597 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:28 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [webapps] Prodigy Commerce 3.3.0 - Local File Inclusion - published 5 months ago. Content: https://www.exploit-db.com/exploits/52598 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:28 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [remote] Microsoft - NTLMv2 Hash Capture - published 5 months ago. Content: https://www.exploit-db.com/exploits/52601 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:27 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
Click to Open Code Editor