|
Article: A JPEG, a Race, and a Ghost: Breaking Discourse's Image Pipeline - published 5 days ago. Content: submitted by /u/Mempodipper [link] [comments]... https://www.reddit.com/r/netsec/comments/1x165mn/a_jpeg_a_race_and_a_ghost_breaking_discourses/ Published: 2026 10 08 23:32:09 Received: 2026 10 13 13:15:48 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: US disrupts Chinese hacking tools as 7 govts warn of PRC spies stealing sensitive data worldwide - published 5 days ago. Content: The FBI announced that it has seized seven web domains linked to hacking tools allegedly operated by a Chinese security firm called Integrity Technology Group and used by Beijing-backed cyber operatives to scan a South Carolina power company's network and other critical infrastructure systems for vulnerabilities. In a subsequent advisory, the FBI and other ... https://www.theregister.com/security/2026/10/08/us-disrupts-chinese-hacking-tools-as-7-govts-warn-of-prc-spies-stealing-sensitive-data-worldwide/5302107 Published: 2026 10 08 21:59:00 Received: 2026 10 13 13:16:53 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: How We Found Thousands of Exposed NVIDIA GPUs and a Way to Disrupt Them (CVE-2026-47483) - published 5 days ago. Content: TL;DR: NVIDIA DCGM Exporter is a widely used monitoring tool that collects GPU metrics like utilization, memory, temperature, and power consumption from AI servers. We discovered that thousands of these monitoring endpoints are exposed to the public internet, allowing anyone to inspect GPU infrastructure. Worse, we found a high-severity vulnerability (CVE-20... https://www.reddit.com/r/netsec/comments/1x13vqz/how_we_found_thousands_of_exposed_nvidia_gpus_and/ Published: 2026 10 08 21:49:51 Received: 2026 10 13 13:15:47 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: Loupe: An Android Console in the Browser - published 5 days ago. Content: submitted by /u/CaptMeelo [link] [comments] https://www.reddit.com/r/netsec/comments/1x13cde/loupe_an_android_console_in_the_browser/ Published: 2026 10 08 21:27:29 Received: 2026 10 13 13:15:48 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: When No ID Means No Internet: Age Verification and the Right to Access Information - published 5 days ago. Content: https://www.eff.org/deeplinks/2026/10/when-no-id-means-no-internet-age-verification-and-right-access-information Published: 2026 10 08 19:59:49 Received: 2026 10 13 13:17:01 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
|
Article: TP-Link Faces 5 State Lawsuits: Are Its Routers Still Legal in the US? - published 5 days ago. Content: https://www.techrepublic.com/article/news-tp-link-router-lawsuits-fcc-ban-us/ Published: 2026 10 08 19:23:07 Received: 2026 10 13 13:16:51 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
Article: FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails - published 5 days ago. Content: https://thehackernews.com/2026/10/fbi-says-china-linked-hackers-ran.html Published: 2026 10 08 18:32:21 Received: 2026 10 13 13:15:21 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: High-severity Nvidia bug could crash GPU monitoring on exposed servers - published 5 days ago. Content: Researchers found thousands of GPU servers exposing Nvidia's DCGM Exporter to the internet, with hundreds potentially vulnerable to a high-severity flaw that could let unauthenticated attackers crash the GPU monitoring service and disrupt AI workloads. DCGM Exporters read telemetry from the GPUs on a host, including its hardware, utilization, memory usage, ... https://www.theregister.com/security/2026/10/08/high-severity-nvidia-bug-could-crash-gpu-monitoring-on-exposed-servers/5302077 Published: 2026 10 08 18:17:08 Received: 2026 10 13 13:16:53 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories - published 5 days ago. Content: https://thehackernews.com/2026/10/threatsday-ransomware-affiliate.html Published: 2026 10 08 17:58:02 Received: 2026 10 13 13:15:21 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Anthony “Tony” Pope Named Douglas J. Leonard Indiana Caregiver of the Year - published 5 days ago. Content: Pope is the first non-clinical recipient of this award. https://www.securitymagazine.com/articles/102633-anthony-tony-pope-named-douglas-j-leonard-indiana-caregiver-of-the-year Published: 2026 10 08 17:00:00 Received: 2026 10 13 13:01:25 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
|
Article: Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromise - published 5 days ago. Content: The credential-hijacking Shai-Hulud worm has struck again, this time burrowing its way into a popular AI agent platform SDK. Multiple security researchers reported Thursday that they had detected Shai-Hulud infection in a recent release of the npm package for version 0.5.144 of Tensorlake’s SDK. That package has somewhere in the neighborhood of 12,000 downl... https://www.theregister.com/security/2026/10/08/shai-hulud-worm-makes-jump-to-ai-infrastructure-with-tensorlake-compromise/5302054 Published: 2026 10 08 16:54:48 Received: 2026 10 13 13:16:53 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Reconstructing AI Agent Activity: Two New Scripts for Forensic Review, (Thu, Oct 8th) - published 5 days ago. Content: We just did a major update to FOR577 and added a lot of new material on day 5 about investigating AI usage in incident response. In the new material we dicsuss 8 of the most popular AI coding assistants and agents including Claude Code, Codex, Gemini CLI, Cursor, Copilot, Warp, Windsurf, and Qwen Code. I've been using Claude Code and a little bit of Codex, b... https://isc.sans.edu/diary/rss/33410 Published: 2026 10 08 16:52:53 Received: 2026 10 13 13:12:11 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
|
Article: A Single POST Freezes Any Next.js Server - published 5 days ago. Content: submitted by /u/TradeGold6317 [link] [comments] https://www.reddit.com/r/netsec/comments/1x0v7sw/a_single_post_freezes_any_nextjs_server/ Published: 2026 10 08 16:17:23 Received: 2026 10 13 13:15:47 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: 5 Data Security Stories to Know About (September 2026) - published 5 days ago. Content: Five data security stories to know about. https://www.securitymagazine.com/articles/102552-5-data-security-stories-to-know-about-september-2026 Published: 2026 10 08 16:00:00 Received: 2026 10 13 13:01:25 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
|
Article: Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks - published 5 days ago. Content: https://thehackernews.com/2026/10/japan-sees-sharp-rise-in-web-data-leaks.html Published: 2026 10 08 15:45:56 Received: 2026 10 13 13:15:21 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
Article: UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML - published 5 days ago. Content: https://thehackernews.com/2026/10/uac-0099-targets-ukrainian-government.html Published: 2026 10 08 15:26:56 Received: 2026 10 13 13:15:21 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Fighting GenAI with GenAI: The New Email Security Landscape - published 5 days ago. Content: The use of phishing emails as a means of stealing information or implanting damaging malware dates back to the mid-1990s. Although almost as old as the Internet, it remains the instrument of choice for threat actors wanting to pose as trusted organizations or individuals for the purposes of corporate infiltration. In fact its use is on the rise: according t... https://www.theregister.com/security/2026/10/08/sponsored-fighting-genai-with-genai-the-new-email-security-landscape/5301063 Published: 2026 10 08 15:00:00 Received: 2026 10 13 13:16:53 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: 3 Fundamentals Mid-Market IT Leaders Should Focus On - published 5 days ago. Content: Three key steps IT leaders can take to bolster their organization’s security. https://www.securitymagazine.com/articles/102632-3-fundamentals-mid-market-it-leaders-should-focus-on Published: 2026 10 08 14:30:00 Received: 2026 10 13 13:01:26 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
Article: ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms - published 5 days ago. Content: https://thehackernews.com/2026/10/artex-ai-pentesting-tool-used-in-data.html Published: 2026 10 08 14:12:34 Received: 2026 10 13 13:15:21 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Cisco NX-OS Software NX-API Remote Code Execution Vulnerability - published 5 days ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-napi-rce-r2shwu2j?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20NX-OS%20Software%20NX-API%20Remote%20Code%20Execution%20Vulnerability%26vs_k=1 Published: 2026 10 08 14:11:23 Received: 2026 10 13 13:12:24 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
|
Article: China-linked malicious actors called out by UK and international partners for targeting sensitive data globally - published 5 days ago. Content: https://www.ncsc.gov.uk/news/china-linked-actors-called-out-by-uk-and-international-partners-for-targeting-sensitive-data Published: 2026 10 08 12:00:00 Received: 2026 10 13 13:00:20 Feed: NCSC – All Feeds Source: National Cyber Security Centre (NCSC) Category: All Topic: Cyber Security |
|
|
Article: UK and Germany team up against Russian cyberattacks as Brexit rethink looms - published 5 days ago. Content: Britain and Germany have announced a partnership to counter cyberattacks and sabotage, particularly from Russia, as Prime Minister Andy Burnham heads to Berlin for talks. Under the arrangement announced Thursday, the countries will share information and coordinate efforts to monitor, deter, and disrupt hostile activity, including threats to critical infrast... https://www.theregister.com/security/2026/10/08/uk-and-germany-team-up-against-russian-cyberattacks-as-brexit-rethink-looms/5301914 Published: 2026 10 08 11:22:01 Received: 2026 10 13 13:16:54 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: How Technology Empowers—and Imperils—Dictators - published 5 days ago. Content: This essay was written with Seva Gunitsky, and originally appeared in Foreign Affairs. Two weeks after Moscow’s full-scale invasion of Ukraine in March 2022, the Russian TV Channel One editor Marina Ovsyannikova burst onto the set of the evening newscast. She held up a hand-drawn sign behind the anchor’s head that read: “Stop the war. Don’t believe propagand... https://www.schneier.com/blog/archives/2026/10/how-technology-empowers-and-imperils-dictators.html Published: 2026 10 08 11:07:35 Received: 2026 10 13 13:15:49 Feed: Schneier on Security Source: Schneier on Security Category: Cyber Security Topic: Cyber Security |
|
Article: Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia - published 6 days ago. Content: https://thehackernews.com/2026/10/wazza-phishkit-targets-banking.html Published: 2026 10 08 10:30:00 Received: 2026 10 13 13:15:22 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Chinese Man May Be Linked To South Korean Bank Hacks - published 6 days ago. Content: https://www.silicon.co.uk/cybersecurity/south-korea-bank-hack-631829 Published: 2026 10 08 10:00:16 Received: 2026 10 13 13:00:54 Feed: Silicon UK – Security Source: Silicon UK Category: News Topic: Cyber Security |
|
Article: 16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases - published 6 days ago. Content: https://thehackernews.com/2026/10/16-malicious-firefox-extensions-pose-as.html Published: 2026 10 08 09:46:32 Received: 2026 10 13 13:15:22 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: The Man Behind a West Bank Telegram Channel Trying to Keep Palestinian Drivers Safe - published 6 days ago. Content: https://www.wired.com/story/the-man-behind-a-west-bank-telegram-channel-trying-to-keep-palestinian-drivers-safe/ Published: 2026 10 08 09:00:00 Received: 2026 10 13 13:00:30 Feed: Wired.com – Security Feed Source: Wired Category: News Topic: Cyber Security |
|
Article: Leaked Data Exposes Law Firms’ Ransom Payments - published 6 days ago. Content: https://www.silicon.co.uk/cybersecurity/payment-data-luna-moth-631821 Published: 2026 10 08 08:30:40 Received: 2026 10 13 13:00:54 Feed: Silicon UK – Security Source: Silicon UK Category: News Topic: Cyber Security |
|
|
Article: Cheapskates wouldn't pay for security help, got hit by ransomware, and went bust months later - published 6 days ago. Content: Welcome back to PWNED, the weekly column where we highlight some of the lowlights in corporate security. This week, we’ll talk about two scenarios, one that ended in tragedy and another that shows the power of a good defense over dedicated phishing attacks. Have a story about someone leaving a gaping hole in their network? Share it with us at pwned@sitpub.c... https://www.theregister.com/security/2026/10/08/cheapskates-wouldnt-pay-for-security-help-got-hit-by-ransomware-and-went-bust-months-later/5301757 Published: 2026 10 08 08:15:00 Received: 2026 10 13 13:16:54 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks - published 6 days ago. Content: https://thehackernews.com/2026/10/us-offers-up-to-10-million-for-tips-on.html Published: 2026 10 08 07:42:04 Received: 2026 10 13 13:15:22 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data - published 6 days ago. Content: https://thehackernews.com/2026/10/monstercloud-owner-accused-of-billing.html Published: 2026 10 08 07:41:44 Received: 2026 10 13 13:15:22 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
Article: Onecom launches deepfake update to Vox voice platform - published 6 days ago. Content: Aaron Brown, CEO, Onecom Technology Group Onecom Technology Group has announced the next generation of its Vox voice platform – the first in the world to combine deepfake call detection, identity verification, recording and transcription with actionable intelligence that drives productivity and growth. Vox has been rebuilt from the ground up, adding a... https://securityjournaluk.com/onecom-deepfake-update-to-vox-voice-platform/ Published: 2026 10 08 07:30:00 Received: 2026 10 13 13:18:40 Feed: Security Journal UK Source: Security Journal UK Category: Security Topic: Security |
|
|
Article: Goldman Sachs Client Data Affected By EY Hack - published 6 days ago. Content: https://www.silicon.co.uk/cybersecurity/goldman-ey-hack-631811 Published: 2026 10 08 07:00:51 Received: 2026 10 13 13:00:54 Feed: Silicon UK – Security Source: Silicon UK Category: News Topic: Cyber Security |
|
Article: UK’s most security-exposed industries named - published 6 days ago. Content: New research combining official crime statistics with data breach records reveals which UK industries face the greatest combined threat from both digital and physical security failure. The new research ranks UK industries by combined digital and physical security exposure, a new UK index to bring the two together in a single measure. The UK Industry S... https://securityjournaluk.com/uks-most-security-exposed-industries-named/ Published: 2026 10 08 07:00:00 Received: 2026 10 13 13:18:40 Feed: Security Journal UK Source: Security Journal UK Category: Security Topic: Security |
|
|
Article: Connecting the dots from port to port - published 6 days ago. Content: SJUK’s editor, Mark Fletcher, speaks to Cymoril Métivier, Global Digital Portfolio Director at Smiths Detection, and discovers that ports have been slow on the uptake in the global digital transformation In the world of manufacturing, tighter integration, open platforms and intuitive standardisation are defining the new normal. This technologically ag... https://securityjournaluk.com/connecting-the-dots-from-port-to-port/ Published: 2026 10 08 06:30:00 Received: 2026 10 13 13:18:41 Feed: Security Journal UK Source: Security Journal UK Category: Security Topic: Security |
|
|
Article: Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm - published 6 days ago. Content: https://thehackernews.com/2026/10/tensorlake-npm-package-compromised-to.html Published: 2026 10 08 05:46:20 Received: 2026 10 13 13:15:22 Feed: The Hacker News [ THN ] - Best Security Blog Source: The Hacker News [ THN ] - Best Security Blog Category: Cyber Security Topic: Cyber Security |
|
Article: I found yet another way to invoke JavaScript functions without parentheses - published 6 days ago. Content: It turns out you can overwrite the Error.prepareStackTrace method with the function constructor. Then, using prototype pollution, you can inject valid JavaScript code to generate arbitrary functions and invoke it using the usual tricks. submitted by /u/DrAdalbbert [link] [comments]... https://www.reddit.com/r/netsec/comments/1x0iuul/i_found_yet_another_way_to_invoke_javascript/ Published: 2026 10 08 05:38:09 Received: 2026 10 13 13:15:48 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: Security Leaders Share Additional Thoughts on Oracle Health Breach - published 6 days ago. Content: Recently, additional information was released regarding the data breach Oracle Health faced in Spring 2025. https://www.securitymagazine.com/articles/102631-security-leaders-share-additional-thoughts-on-oracle-health-breach Published: 2026 10 08 04:00:00 Received: 2026 10 13 13:01:26 Feed: Security Magazine – All Feeds Source: Security Magazine Category: News Topic: Security |
|
Article: Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead - published 6 days ago. Content: The United States Department of Justice has charged a man with fraud after he allegedly told clients he could decrypt files locked up by ransomware but actually paid ransoms – and seemingly got away with it for years. The Feds allege that Zohar Pinhasi – aka “Zack Silver” and “Zack Green” – ran a Florida company called “MonsterCloud” that advised ransomware... https://www.theregister.com/cyber-crime/2026/10/08/ransomware-fixer-claimed-he-could-decrypt-files-allegedly-defrauded-clients-instead/5301831 Published: 2026 10 08 02:29:55 Received: 2026 10 13 13:16:54 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: ISC Stormcast For Thursday, October 8th, 2026 https://isc.sans.edu/podcastdetail/10128, (Thu, Oct 8th) - published 6 days ago. Content: https://isc.sans.edu/diary/rss/33408 Published: 2026 10 08 02:00:02 Received: 2026 10 13 13:12:11 Feed: SANS Internet Storm Center, InfoCON: green Source: SANS Internet Storm Center, InfoCON: green Category: Alerts Topic: Vulnerabilities |
|
|
Article: Cisco Meraki Security Hardening Release: October 2026 - published 6 days ago. Content: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-meraki-os-drbEX9GH?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Meraki%20Security%20Hardening%20Release:%20October%202026%26vs_k=1 Published: 2026 10 08 00:18:38 Received: 2026 10 13 13:12:24 Feed: Cisco Security Advisory Source: Cisco Security Advisory Category: Alerts Topic: Vulnerabilities |
|
Click to Open Code Editor