|
Article: [remote] strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow - published 5 months ago. Content: https://www.exploit-db.com/exploits/52587 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:31 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
Article: [webapps] CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated) - published 5 months ago. Content: https://www.exploit-db.com/exploits/52588 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:31 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [remote] Wing FTP Server 8.1.3 - Authenticated Remote Code Execution - published 5 months ago. Content: https://www.exploit-db.com/exploits/52589 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:31 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [webapps] MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution - published 5 months ago. Content: https://www.exploit-db.com/exploits/52590 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:31 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
Article: [local] Linux Kernel - Local Privilege Escalation - published 5 months ago. Content: https://www.exploit-db.com/exploits/52591 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:30 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [local] ZTE H298A / H108N - Unauthenticated Credential Exposure - published 5 months ago. Content: https://www.exploit-db.com/exploits/52592 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:30 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [local] ZTE Routers - Unauthenticated Denial of Service - published 5 months ago. Content: https://www.exploit-db.com/exploits/52594 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:29 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [local] ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion - published 5 months ago. Content: https://www.exploit-db.com/exploits/52595 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:29 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [webapps] Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution - published 5 months ago. Content: https://www.exploit-db.com/exploits/52596 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:29 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
Article: [webapps] Langflow 1.3.0 - Remote Code Execution - published 5 months ago. Content: https://www.exploit-db.com/exploits/52597 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:28 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [webapps] Prodigy Commerce 3.3.0 - Local File Inclusion - published 5 months ago. Content: https://www.exploit-db.com/exploits/52598 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:28 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [remote] Microsoft - NTLMv2 Hash Capture - published 5 months ago. Content: https://www.exploit-db.com/exploits/52601 Published: 2026 05 29 00:00:00 Received: 2026 06 09 15:30:27 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [webapps] YAMCS yamcs-core 5.12.7 - LDAP Injection - published 5 months ago. Content: https://www.exploit-db.com/exploits/52603 Published: 2026 05 30 00:00:00 Received: 2026 06 09 15:30:27 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [webapps] YAMCS yamcs-core 5.12.7 - No Rate Limiting - published 5 months ago. Content: https://www.exploit-db.com/exploits/52605 Published: 2026 05 30 00:00:00 Received: 2026 06 09 15:30:26 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [remote] Notepad++ 8.9.6 - Arbitrary Code Execution - published 5 months ago. Content: https://www.exploit-db.com/exploits/52606 Published: 2026 05 30 00:00:00 Received: 2026 06 09 15:30:26 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [webapps] Drupal Core 10.5.5 - Error-Based SQL Injection - published 5 months ago. Content: https://www.exploit-db.com/exploits/52608 Published: 2026 06 01 00:00:00 Received: 2026 06 09 15:30:25 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: [webapps] WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection - published 5 months ago. Content: https://www.exploit-db.com/exploits/52609 Published: 2026 06 05 00:00:00 Received: 2026 06 09 15:30:25 Feed: Exploit-DB updates Source: Exploit-DB updates Category: News Topic: Hacking |
|
|
Article: DEADFACE CTF 2026 Content: https://ctftime.org/event/3279 Published: : Received: 2026 06 09 15:28:22 Feed: CTFtime.org: upcoming CTF events Source: CTFtime.org Category: Events Topic: Cyber Security |
|
|
Article: CDCTF 2026 Content: https://ctftime.org/event/3293 Published: : Received: 2026 06 09 15:28:22 Feed: CTFtime.org: upcoming CTF events Source: CTFtime.org Category: Events Topic: Cyber Security |
|
|
Article: FAUST CTF 2026 Content: https://ctftime.org/event/3312 Published: : Received: 2026 06 09 15:28:21 Feed: CTFtime.org: upcoming CTF events Source: CTFtime.org Category: Events Topic: Cyber Security |
|
Article: COMPFEST CTF 2026 Content: https://ctftime.org/event/3290 Published: : Received: 2026 06 09 15:28:18 Feed: CTFtime.org: upcoming CTF events Source: CTFtime.org Category: Events Topic: Cyber Security |
|
|
Article: VuwCTF 2026 Content: https://ctftime.org/event/3311 Published: : Received: 2026 06 09 15:28:15 Feed: CTFtime.org: upcoming CTF events Source: CTFtime.org Category: Events Topic: Cyber Security |
|
|
Article: DeadSec CTF 2026 Content: https://ctftime.org/event/3303 Published: : Received: 2026 06 09 15:28:14 Feed: CTFtime.org: upcoming CTF events Source: CTFtime.org Category: Events Topic: Cyber Security |
|
Article: Codegate CTF 2026 Finals Content: https://ctftime.org/event/3292 Published: : Received: 2026 06 09 15:28:12 Feed: CTFtime.org: upcoming CTF events Source: CTFtime.org Category: Events Topic: Cyber Security |
|
|
Article: LYKNCTF Content: https://ctftime.org/event/3280 Published: : Received: 2026 06 09 15:28:11 Feed: CTFtime.org: upcoming CTF events Source: CTFtime.org Category: Events Topic: Cyber Security |
|
|
Article: RIFFHACK: Black Market Break-In Content: https://ctftime.org/event/3297 Published: : Received: 2026 06 09 15:28:07 Feed: CTFtime.org: upcoming CTF events Source: CTFtime.org Category: Events Topic: Cyber Security |
|
Article: Sieberrsec CTF 7.0 Content: https://ctftime.org/event/3299 Published: : Received: 2026 06 09 15:28:06 Feed: CTFtime.org: upcoming CTF events Source: CTFtime.org Category: Events Topic: Cyber Security |
|
|
Article: boroCTF 2026 Content: https://ctftime.org/event/3309 Published: : Received: 2026 06 09 15:28:04 Feed: CTFtime.org: upcoming CTF events Source: CTFtime.org Category: Events Topic: Cyber Security |
|
|
Article: Making Sense of Security for AI: The AI Defense Matrix - published 6 months ago. Content: The AI Defense Matrix maps eight AI asset classes to NIST CSF functions, giving security leaders one grid to assign ownership, find gaps, and select controls. Sounil Yu and I co-authored it as the security-for-AI companion to his Cyber Defense Matrix.The AI Defense Matrix helps security leaders find gaps, assign ownership, and select controls to defend AI sy... https://zeltser.com/ai-defense-matrix-intro Published: 2026 05 11 00:00:00 Received: 2026 06 09 15:28:02 Feed: Lenny Zeltser Source: Lenny Zeltser Category: Cyber Security Topic: Cyber Security |
|
Article: Plant Decoy Personas to Detect Impersonation Attacks - published 6 months ago. Content: Decoy personas extend honeytoken thinking to user accounts and public profiles. The technique gives defenders a tripwire on the identity surface that other detection layers don't cover.A decoy persona is a fake identity established to catch attackers as they probe your workforce. Plant it wherever threat actors look for employees to pursue in scams and other... https://zeltser.com/the-notion-of-a-honeypot-persona Published: 2026 05 14 00:00:00 Received: 2026 06 09 15:28:02 Feed: Lenny Zeltser Source: Lenny Zeltser Category: Cyber Security Topic: Cyber Security |
|
|
Article: Six Signals for Threat Attribution - published 6 months ago. Content: Credible threat attribution weighs six signals together. Each signal has a disciplined methodology behind it, with citations and stress tests to back the conclusions."A Chinese state-sponsored group." "Tied to APT41." "ShinyHunters." Phrases like these appear in vendor advisories, government bulletins, and news coverage. We use them to inform response steps,... https://zeltser.com/six-signals-for-threat-attribution Published: 2026 05 19 00:00:00 Received: 2026 06 09 15:28:02 Feed: Lenny Zeltser Source: Lenny Zeltser Category: Cyber Security Topic: Cyber Security |
|
|
Article: A Report Template for Cyber Threat Intelligence - published 6 months ago. Content: Cyber threat intelligence analysts produce credible reports by weighing signals at tactical, operational, and strategic levels. A customizable CTI report template helps analysts capture activity, attribute it with calibrated confidence, and translate findings into defensive actions.Authors of cyber threat intelligence (CTI) reports need to follow the CTI dis... https://zeltser.com/cyber-threat-intel-report-template Published: 2026 05 26 00:00:00 Received: 2026 06 09 15:28:01 Feed: Lenny Zeltser Source: Lenny Zeltser Category: Cyber Security Topic: Cyber Security |
|
Article: The Past, Present, and Future of the Web's Trust Model - published 6 months ago. Content: Observability, short-lived credentials, and active enforcement hold the web's trust model together. Without them, a decade of Certificate Authority failures would've collapsed it. Will those same levers hold for what's coming next?The web's certificate trust model has held up through more than a decade of CA breaches, misissued certificates, and distrust eve... https://zeltser.com/past-present-future-web-trust-model Published: 2026 05 28 00:00:00 Received: 2026 06 09 15:28:01 Feed: Lenny Zeltser Source: Lenny Zeltser Category: Cyber Security Topic: Cyber Security |
|
|
Article: A Report Template for Security Assessments - published 5 months ago. Content: The technical severity of an assessment finding tells only part of the story. A customizable report template helps you document the scope, rate findings by risk, and write for the executives and engineers who read the results differently.Security assessors are good at finding and ranking weaknesses, but reporting them so the reader trusts the approach and ca... https://zeltser.com/security-assessment-report-template Published: 2026 05 31 00:00:00 Received: 2026 06 09 15:28:00 Feed: Lenny Zeltser Source: Lenny Zeltser Category: Cyber Security Topic: Cyber Security |
|
|
Article: Security of Third-Party Keyboard Apps on Mobile Devices - published 5 months ago. Content: Keyboard apps offer better predictions, voice transcription, and AI-powered writing, all requiring users to send what they type to remote servers. Mobile OS vendors set the rules but can't enforce what developers do with that data.A third-party keyboard app with network access effectively becomes a keylogger that the user has authorized. The safeguards depen... https://zeltser.com/third-party-keyboards-security Published: 2026 06 02 00:00:00 Received: 2026 06 09 15:28:00 Feed: Lenny Zeltser Source: Lenny Zeltser Category: Cyber Security Topic: Cyber Security |
|
Article: Securing API Keys on Your Workstation - published 5 months ago. Content: Every dev tool you grant API access to, AI assistants included, can read the keys within its reach. You can't make a key unstealable by software running as you, so the goal is fewer secrets exposed and less damage when one leaks.Developer workstations accumulate API keys and other secrets that malware can read from .env files, shell history, and saved CLI cr... https://zeltser.com/securing-api-keys-on-your-workstation Published: 2026 06 09 00:00:00 Received: 2026 06 09 15:27:59 Feed: Lenny Zeltser Source: Lenny Zeltser Category: Cyber Security Topic: Cyber Security |
|
|
Article: Handling High-Profile Vulnerabilities - published 5 months ago. Content: When a high-profile vulnerability surfaces, executives and customers want to know whether it affects you. With a one-page brief and a short process, you can capture the key details and reach the answer without scrambling.As a CISO, I received the same question whenever a vulnerability became famous. Are we affected? A colleague shared the headline, wanting t... https://zeltser.com/high-profile-vulnerabilities Published: 2026 06 09 00:00:00 Received: 2026 06 09 15:27:59 Feed: Lenny Zeltser Source: Lenny Zeltser Category: Cyber Security Topic: Cyber Security |
|
|
Article: Congress Narrowed the GUARD Act, But Serious Problems Remain - published 6 months ago. Content: https://www.eff.org/deeplinks/2026/05/congress-narrowed-guard-act-serious-problems-remain Published: 2026 05 08 23:24:31 Received: 2026 06 09 15:27:44 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
|
Article: EFF Stands in Solidarity With RightsCon and the Global Digital Rights Community - published 6 months ago. Content: https://www.eff.org/deeplinks/2026/05/eff-stands-solidarity-rightscon-and-global-digital-rights-community Published: 2026 05 11 17:37:05 Received: 2026 06 09 15:27:43 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
|
Article: EFF to Fourth Circuit: Electronic Device Searches at the Border Require a Warrant - published 6 months ago. Content: https://www.eff.org/deeplinks/2026/05/eff-fourth-circuit-electronic-device-searches-border-require-warrant Published: 2026 05 11 20:12:50 Received: 2026 06 09 15:27:43 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
Article: Canada’s Bill C-22 Is a Repackaged Version of Last Year’s Surveillance Nightmare - published 6 months ago. Content: https://www.eff.org/deeplinks/2026/05/canadas-bill-c-22-repackaged-version-last-years-surveillance-nightmare Published: 2026 05 11 20:18:14 Received: 2026 06 09 15:27:43 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
|
Article: A Hackers Guide to Circumventing Internet Shutdowns - published 6 months ago. Content: https://www.eff.org/deeplinks/2026/05/hackers-guide-circumventing-internet-shutdowns Published: 2026 05 12 15:45:04 Received: 2026 06 09 15:27:42 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
|
Article: EFF Launches New Offline Campaign for Saudi Wikipedian Osama Khalid - published 6 months ago. Content: https://www.eff.org/deeplinks/2026/05/eff-launches-new-offline-campaign-saudi-wikipedian-osama-khalid Published: 2026 05 12 16:41:01 Received: 2026 06 09 15:27:42 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
Article: Victory! End-to-End Encrypted RCS Comes to Apple and Android Chats - published 6 months ago. Content: https://www.eff.org/deeplinks/2026/05/victory-end-end-encrypted-rcs-comes-apple-and-android-chats Published: 2026 05 12 16:48:16 Received: 2026 06 09 15:27:42 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
|
Article: Broken Promises: RIP Instagram’s End-to-End Encrypted DMs - published 6 months ago. Content: https://www.eff.org/deeplinks/2026/05/broken-promises-rip-instagrams-end-end-encrypted-dms Published: 2026 05 12 22:11:00 Received: 2026 06 09 15:27:42 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
|
Article: The Science is Not Settled: How Weak Evidence is Fueling a National Push to Ban Social Media for Youth - published 6 months ago. Content: https://www.eff.org/deeplinks/2026/05/science-not-settled-how-weak-evidence-fueling-national-push-ban-social-media-youth Published: 2026 05 13 16:48:05 Received: 2026 06 09 15:27:41 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
Article: Help EFF Solve an Issue That's Bigger than Creepy Ads - published 6 months ago. Content: https://www.eff.org/deeplinks/2026/05/online-tracking-isnt-just-unethical-its-dangerous Published: 2026 05 13 17:10:44 Received: 2026 06 09 15:27:41 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
|
Article: We Must Not Normalize Digital Surveillance Abuses. EFF’s New Guide Underlines Concrete Steps to Fight Back. - published 6 months ago. Content: https://www.eff.org/deeplinks/2026/05/we-must-not-normalize-digital-surveillance-abuses-effs-new-guide-underlines Published: 2026 05 18 17:15:00 Received: 2026 06 09 15:27:41 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
|
Article: We Updated Our Privacy Policy. Here's What Changed and Why. - published 6 months ago. Content: https://www.eff.org/deeplinks/2026/05/we-updated-our-privacy-policy-heres-what-changed-and-why Published: 2026 05 18 18:03:04 Received: 2026 06 09 15:27:41 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
Article: Your Privacy Shouldn't Be A Corporate Decision - published 6 months ago. Content: https://www.eff.org/deeplinks/2026/05/your-privacy-shouldnt-be-corporate-decision Published: 2026 05 19 15:06:13 Received: 2026 06 09 15:27:40 Feed: Deeplinks Source: Deeplinks Category: Cyber Security Topic: Cyber Security |
|
Click to Open Code Editor