|
Article: A JPEG, a Race, and a Ghost: Breaking Discourse's Image Pipeline - published 30 days ago. Content: submitted by /u/Mempodipper [link] [comments]... https://www.reddit.com/r/netsec/comments/1x165mn/a_jpeg_a_race_and_a_ghost_breaking_discourses/ Published: 2026 10 08 23:32:09 Received: 2026 10 13 13:15:48 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: US disrupts Chinese hacking tools as 7 govts warn of PRC spies stealing sensitive data worldwide - published 30 days ago. Content: The FBI announced that it has seized seven web domains linked to hacking tools allegedly operated by a Chinese security firm called Integrity Technology Group and used by Beijing-backed cyber operatives to scan a South Carolina power company's network and other critical infrastructure systems for vulnerabilities. In a subsequent advisory, the FBI and other ... https://www.theregister.com/security/2026/10/08/us-disrupts-chinese-hacking-tools-as-7-govts-warn-of-prc-spies-stealing-sensitive-data-worldwide/5302107 Published: 2026 10 08 21:59:00 Received: 2026 10 13 13:16:53 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: How We Found Thousands of Exposed NVIDIA GPUs and a Way to Disrupt Them (CVE-2026-47483) - published 30 days ago. Content: TL;DR: NVIDIA DCGM Exporter is a widely used monitoring tool that collects GPU metrics like utilization, memory, temperature, and power consumption from AI servers. We discovered that thousands of these monitoring endpoints are exposed to the public internet, allowing anyone to inspect GPU infrastructure. Worse, we found a high-severity vulnerability (CVE-20... https://www.reddit.com/r/netsec/comments/1x13vqz/how_we_found_thousands_of_exposed_nvidia_gpus_and/ Published: 2026 10 08 21:49:51 Received: 2026 10 13 13:15:47 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: Loupe: An Android Console in the Browser - published 30 days ago. Content: submitted by /u/CaptMeelo [link] [comments] https://www.reddit.com/r/netsec/comments/1x13cde/loupe_an_android_console_in_the_browser/ Published: 2026 10 08 21:27:29 Received: 2026 10 13 13:15:48 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: When No ID Means No Internet: Age Verification and the Right to Access Information - published 30 days ago. Content: https://www.eff.org/deeplinks/2026/10/when-no-id-means-no-internet-age-verification-and-right-access-information Published: 2026 10 08 19:59:49 Received: 2026 10 13 13:17:01 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
|
Article: TP-Link Faces 5 State Lawsuits: Are Its Routers Still Legal in the US? - published 30 days ago. Content: https://www.techrepublic.com/article/news-tp-link-router-lawsuits-fcc-ban-us/ Published: 2026 10 08 19:23:07 Received: 2026 10 13 13:16:51 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
Article: FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails - published 30 days ago. Content: https://thehackernews.com/2026/10/fbi-says-china-linked-hackers-ran.html Published: 2026 10 08 18:32:21 Received: 2026 10 13 13:15:21 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: High-severity Nvidia bug could crash GPU monitoring on exposed servers - published 30 days ago. Content: Researchers found thousands of GPU servers exposing Nvidia's DCGM Exporter to the internet, with hundreds potentially vulnerable to a high-severity flaw that could let unauthenticated attackers crash the GPU monitoring service and disrupt AI workloads. DCGM Exporters read telemetry from the GPUs on a host, including its hardware, utilization, memory usage, ... https://www.theregister.com/security/2026/10/08/high-severity-nvidia-bug-could-crash-gpu-monitoring-on-exposed-servers/5302077 Published: 2026 10 08 18:17:08 Received: 2026 10 13 13:16:53 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories - published 30 days ago. Content: https://thehackernews.com/2026/10/threatsday-ransomware-affiliate.html Published: 2026 10 08 17:58:02 Received: 2026 10 13 13:15:21 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Anthony “Tony” Pope Named Douglas J. Leonard Indiana Caregiver of the Year - published 30 days ago. Content: Pope is the first non-clinical recipient of this award. https://www.securitymagazine.com/articles/102633-anthony-tony-pope-named-douglas-j-leonard-indiana-caregiver-of-the-year Published: 2026 10 08 17:00:00 Received: 2026 10 13 13:01:25 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
|
Article: Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromise - published 30 days ago. Content: The credential-hijacking Shai-Hulud worm has struck again, this time burrowing its way into a popular AI agent platform SDK. Multiple security researchers reported Thursday that they had detected Shai-Hulud infection in a recent release of the npm package for version 0.5.144 of Tensorlake’s SDK. That package has somewhere in the neighborhood of 12,000 downl... https://www.theregister.com/security/2026/10/08/shai-hulud-worm-makes-jump-to-ai-infrastructure-with-tensorlake-compromise/5302054 Published: 2026 10 08 16:54:48 Received: 2026 10 13 13:16:53 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Reconstructing AI Agent Activity: Two New Scripts for Forensic Review, (Thu, Oct 8th) - published 30 days ago. Content: We just did a major update to FOR577 and added a lot of new material on day 5 about investigating AI usage in incident response. In the new material we dicsuss 8 of the most popular AI coding assistants and agents including Claude Code, Codex, Gemini CLI, Cursor, Copilot, Warp, Windsurf, and Qwen Code. I've been using Claude Code and a little bit of Codex, b... https://isc.sans.edu/diary/rss/33410 Published: 2026 10 08 16:52:53 Received: 2026 10 13 13:12:11 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
|
Article: A Single POST Freezes Any Next.js Server - published 30 days ago. Content: submitted by /u/TradeGold6317 [link] [comments] https://www.reddit.com/r/netsec/comments/1x0v7sw/a_single_post_freezes_any_nextjs_server/ Published: 2026 10 08 16:17:23 Received: 2026 10 13 13:15:47 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: 5 Data Security Stories to Know About (September 2026) - published 30 days ago. Content: Five data security stories to know about. https://www.securitymagazine.com/articles/102552-5-data-security-stories-to-know-about-september-2026 Published: 2026 10 08 16:00:00 Received: 2026 10 13 13:01:25 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
|
Article: Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks - published 30 days ago. Content: https://thehackernews.com/2026/10/japan-sees-sharp-rise-in-web-data-leaks.html Published: 2026 10 08 15:45:56 Received: 2026 10 13 13:15:21 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
Article: UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML - published 30 days ago. Content: https://thehackernews.com/2026/10/uac-0099-targets-ukrainian-government.html Published: 2026 10 08 15:26:56 Received: 2026 10 13 13:15:21 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Fighting GenAI with GenAI: The New Email Security Landscape - published 30 days ago. Content: The use of phishing emails as a means of stealing information or implanting damaging malware dates back to the mid-1990s. Although almost as old as the Internet, it remains the instrument of choice for threat actors wanting to pose as trusted organizations or individuals for the purposes of corporate infiltration. In fact its use is on the rise: according t... https://www.theregister.com/security/2026/10/08/sponsored-fighting-genai-with-genai-the-new-email-security-landscape/5301063 Published: 2026 10 08 15:00:00 Received: 2026 10 13 13:16:53 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: 3 Fundamentals Mid-Market IT Leaders Should Focus On - published 30 days ago. Content: Three key steps IT leaders can take to bolster their organization’s security. https://www.securitymagazine.com/articles/102632-3-fundamentals-mid-market-it-leaders-should-focus-on Published: 2026 10 08 14:30:00 Received: 2026 10 13 13:01:26 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
Article: ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms - published 30 days ago. Content: https://thehackernews.com/2026/10/artex-ai-pentesting-tool-used-in-data.html Published: 2026 10 08 14:12:34 Received: 2026 10 13 13:15:21 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Cisco NX-OS Software NX-API Remote Code Execution Vulnerability - published 30 days ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-napi-rce-r2shwu2j?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20NX-OS%20Software%20NX-API%20Remote%20Code%20Execution%20Vulnerability%26vs_k=1 Published: 2026 10 08 14:11:23 Received: 2026 10 13 13:12:24 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
|
Article: China-linked malicious actors called out by UK and international partners for targeting sensitive data globally - published about 1 month ago. Content: https://www.ncsc.gov.uk/news/china-linked-actors-called-out-by-uk-and-international-partners-for-targeting-sensitive-data Published: 2026 10 08 12:00:00 Received: 2026 10 13 13:00:20 Feed: NCSC – All Feeds Source: National Cyber Security Centre (NCSC) Category: All Topic: Cyber Security |
|
|
Article: UK and Germany team up against Russian cyberattacks as Brexit rethink looms - published about 1 month ago. Content: Britain and Germany have announced a partnership to counter cyberattacks and sabotage, particularly from Russia, as Prime Minister Andy Burnham heads to Berlin for talks. Under the arrangement announced Thursday, the countries will share information and coordinate efforts to monitor, deter, and disrupt hostile activity, including threats to critical infrast... https://www.theregister.com/security/2026/10/08/uk-and-germany-team-up-against-russian-cyberattacks-as-brexit-rethink-looms/5301914 Published: 2026 10 08 11:22:01 Received: 2026 10 13 13:16:54 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: How Technology Empowers—and Imperils—Dictators - published about 1 month ago. Content: This essay was written with Seva Gunitsky, and originally appeared in Foreign Affairs. Two weeks after Moscow’s full-scale invasion of Ukraine in March 2022, the Russian TV Channel One editor Marina Ovsyannikova burst onto the set of the evening newscast. She held up a hand-drawn sign behind the anchor’s head that read: “Stop the war. Don’t believe propagand... https://www.schneier.com/blog/archives/2026/10/how-technology-empowers-and-imperils-dictators.html Published: 2026 10 08 11:07:35 Received: 2026 10 13 13:15:49 Feed: Schneier on Security Source: Schneier on Security Category: Cyber Security Topic: Cyber Security |
|
Article: Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia - published about 1 month ago. Content: https://thehackernews.com/2026/10/wazza-phishkit-targets-banking.html Published: 2026 10 08 10:30:00 Received: 2026 10 13 13:15:22 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Chinese Man May Be Linked To South Korean Bank Hacks - published about 1 month ago. Content: https://www.silicon.co.uk/cybersecurity/south-korea-bank-hack-631829 Published: 2026 10 08 10:00:16 Received: 2026 10 13 13:00:54 Feed: Silicon UK – Security Source: Silicon UK Category: News Topic: Cyber Security |
|
Article: 16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases - published about 1 month ago. Content: https://thehackernews.com/2026/10/16-malicious-firefox-extensions-pose-as.html Published: 2026 10 08 09:46:32 Received: 2026 10 13 13:15:22 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: The Man Behind a West Bank Telegram Channel Trying to Keep Palestinian Drivers Safe - published about 1 month ago. Content: https://www.wired.com/story/the-man-behind-a-west-bank-telegram-channel-trying-to-keep-palestinian-drivers-safe/ Published: 2026 10 08 09:00:00 Received: 2026 10 13 13:00:30 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
Article: Leaked Data Exposes Law Firms’ Ransom Payments - published about 1 month ago. Content: https://www.silicon.co.uk/cybersecurity/payment-data-luna-moth-631821 Published: 2026 10 08 08:30:40 Received: 2026 10 13 13:00:54 Feed: Silicon UK – Security Source: Silicon UK Category: News Topic: Cyber Security |
|
|
Article: Cheapskates wouldn't pay for security help, got hit by ransomware, and went bust months later - published about 1 month ago. Content: Welcome back to PWNED, the weekly column where we highlight some of the lowlights in corporate security. This week, we’ll talk about two scenarios, one that ended in tragedy and another that shows the power of a good defense over dedicated phishing attacks. Have a story about someone leaving a gaping hole in their network? Share it with us at pwned@sitpub.c... https://www.theregister.com/security/2026/10/08/cheapskates-wouldnt-pay-for-security-help-got-hit-by-ransomware-and-went-bust-months-later/5301757 Published: 2026 10 08 08:15:00 Received: 2026 10 13 13:16:54 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks - published about 1 month ago. Content: https://thehackernews.com/2026/10/us-offers-up-to-10-million-for-tips-on.html Published: 2026 10 08 07:42:04 Received: 2026 10 13 13:15:22 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data - published about 1 month ago. Content: https://thehackernews.com/2026/10/monstercloud-owner-accused-of-billing.html Published: 2026 10 08 07:41:44 Received: 2026 10 13 13:15:22 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
Article: Onecom launches deepfake update to Vox voice platform - published about 1 month ago. Content: Aaron Brown, CEO, Onecom Technology Group Onecom Technology Group has announced the next generation of its Vox voice platform – the first in the world to combine deepfake call detection, identity verification, recording and transcription with actionable intelligence that drives productivity and growth. Vox has been rebuilt from the ground up, adding a... https://securityjournaluk.com/onecom-deepfake-update-to-vox-voice-platform/ Published: 2026 10 08 07:30:00 Received: 2026 10 13 13:18:40 Feed: Security Journal UK Source: Security Journal UK Category: Security Topic: Security |
|
|
Article: Goldman Sachs Client Data Affected By EY Hack - published about 1 month ago. Content: https://www.silicon.co.uk/cybersecurity/goldman-ey-hack-631811 Published: 2026 10 08 07:00:51 Received: 2026 10 13 13:00:54 Feed: Silicon UK – Security Source: Silicon UK Category: News Topic: Cyber Security |
|
Article: UK’s most security-exposed industries named - published about 1 month ago. Content: New research combining official crime statistics with data breach records reveals which UK industries face the greatest combined threat from both digital and physical security failure. The new research ranks UK industries by combined digital and physical security exposure, a new UK index to bring the two together in a single measure. The UK Industry S... https://securityjournaluk.com/uks-most-security-exposed-industries-named/ Published: 2026 10 08 07:00:00 Received: 2026 10 13 13:18:40 Feed: Security Journal UK Source: Security Journal UK Category: Security Topic: Security |
|
|
Article: Connecting the dots from port to port - published about 1 month ago. Content: SJUK’s editor, Mark Fletcher, speaks to Cymoril Métivier, Global Digital Portfolio Director at Smiths Detection, and discovers that ports have been slow on the uptake in the global digital transformation In the world of manufacturing, tighter integration, open platforms and intuitive standardisation are defining the new normal. This technologically ag... https://securityjournaluk.com/connecting-the-dots-from-port-to-port/ Published: 2026 10 08 06:30:00 Received: 2026 10 13 13:18:41 Feed: Security Journal UK Source: Security Journal UK Category: Security Topic: Security |
|
|
Article: Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm - published about 1 month ago. Content: https://thehackernews.com/2026/10/tensorlake-npm-package-compromised-to.html Published: 2026 10 08 05:46:20 Received: 2026 10 13 13:15:22 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
Article: I found yet another way to invoke JavaScript functions without parentheses - published about 1 month ago. Content: It turns out you can overwrite the Error.prepareStackTrace method with the function constructor. Then, using prototype pollution, you can inject valid JavaScript code to generate arbitrary functions and invoke it using the usual tricks. submitted by /u/DrAdalbbert [link] [comments]... https://www.reddit.com/r/netsec/comments/1x0iuul/i_found_yet_another_way_to_invoke_javascript/ Published: 2026 10 08 05:38:09 Received: 2026 10 13 13:15:48 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: Security Leaders Share Additional Thoughts on Oracle Health Breach - published about 1 month ago. Content: Recently, additional information was released regarding the data breach Oracle Health faced in Spring 2025. https://www.securitymagazine.com/articles/102631-security-leaders-share-additional-thoughts-on-oracle-health-breach Published: 2026 10 08 04:00:00 Received: 2026 10 13 13:01:26 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
Article: Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead - published about 1 month ago. Content: The United States Department of Justice has charged a man with fraud after he allegedly told clients he could decrypt files locked up by ransomware but actually paid ransoms – and seemingly got away with it for years. The Feds allege that Zohar Pinhasi – aka “Zack Silver” and “Zack Green” – ran a Florida company called “MonsterCloud” that advised ransomware... https://www.theregister.com/cyber-crime/2026/10/08/ransomware-fixer-claimed-he-could-decrypt-files-allegedly-defrauded-clients-instead/5301831 Published: 2026 10 08 02:29:55 Received: 2026 10 13 13:16:54 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: ISC Stormcast For Thursday, October 8th, 2026 https://isc.sans.edu/podcastdetail/10128, (Thu, Oct 8th) - published about 1 month ago. Content: https://isc.sans.edu/diary/rss/33408 Published: 2026 10 08 02:00:02 Received: 2026 10 13 13:12:11 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
|
Article: Cisco Meraki Security Hardening Release: October 2026 - published about 1 month ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-meraki-os-drbEX9GH?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Meraki%20Security%20Hardening%20Release:%20October%202026%26vs_k=1 Published: 2026 10 08 00:18:38 Received: 2026 10 13 13:12:24 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
Click to Open Code Editor