|
Article: '123456' password linked to Denmark data breach affecting 8.8M people - published 26 days ago. Content: A person claiming responsibility for the breach of Denmark's Central Register of Persons (CPR) says they gained access through an IT company's account protected by the password "123456." The person told Danish news outlet Politiken they had no intention of selling or leaking the data. The newspaper reported that at least three company accounts, including an... https://www.theregister.com/security/2026/10/13/123456-password-linked-to-denmark-data-breach-affecting-88m-people/5302726 Published: 2026 10 13 11:14:00 Received: 2026 10 13 13:16:52 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
Article: Cyberattacks crank French supermarket refrigeration systems up to 50°C - published 26 days ago. Content: Cyberattacks on supermarket refrigeration systems reportedly pushed temperatures as high as 50°C (122°F), affecting hundreds of stores in France and forcing retailers to discard food. Major supermarkets such as Carrefour, Coopérative U, Intermarché, Monoprix, and more were hit by the attacks, which spoiled perishable food and left stores without fresh produ... https://www.theregister.com/security/2026/10/13/cyberattacks-crank-french-supermarket-refrigeration-systems-up-to-50c/5302784 Published: 2026 10 13 12:00:00 Received: 2026 10 13 13:16:52 Feed: The Register - Security Source: The Register - Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Anthropic Declines Australian AI Hearing as OpenAI Agent Breach Faces Scrutiny - published about 1 month ago. Content: https://www.techrepublic.com/article/news-anthropic-australia-ai-hearing-openai-agent-breach-apac/ Published: 2026 09 28 12:41:52 Received: 2026 10 13 13:16:52 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
|
Article: Private 5G Moves Into Banking at Hana Financial’s 16-Floor Headquarters - published about 1 month ago. Content: https://www.techrepublic.com/article/news-hana-financial-private-5g-apac-south-korea/ Published: 2026 09 29 10:04:05 Received: 2026 10 13 13:16:52 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
Article: iOS 27.0.1 Is Here: 3 iPhone Problems Apple Just Fixed - published about 1 month ago. Content: https://www.techrepublic.com/article/news-ios-27-0-1-iphone-fixes/ Published: 2026 09 29 14:32:09 Received: 2026 10 13 13:16:51 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
|
Article: iPhone Security Warning: Apple Says iOS 26 Flaw May Have Been Exploited - published about 1 month ago. Content: https://www.techrepublic.com/article/news-apple-iphone-ios-26-security-flaw-exploited/ Published: 2026 09 30 15:49:25 Received: 2026 10 13 13:16:51 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
|
Article: Meta AI Shares Seller’s Address: Facebook Marketplace Buyer Shows Up at His Home - published about 1 month ago. Content: https://www.techrepublic.com/article/news-meta-ai-facebook-marketplace-buyer-seller-address/ Published: 2026 09 30 20:31:31 Received: 2026 10 13 13:16:51 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
Article: FTC Probes OpenAI, Anthropic as AI Agent Safety Risks Draw Scrutiny - published about 1 month ago. Content: https://www.techrepublic.com/article/news-ftc-openai-anthropic-ai-consumer-harms/ Published: 2026 10 02 08:50:51 Received: 2026 10 13 13:16:51 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
|
Article: California Man Charged in Alleged $300M AI Server Smuggling Scheme to China - published about 1 month ago. Content: https://www.techrepublic.com/article/news-california-ai-server-smuggling-china/ Published: 2026 10 05 12:36:59 Received: 2026 10 13 13:16:51 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
|
Article: St. Lucie County Finds Unpermitted Flock Cameras, Raising Privacy Concerns - published about 1 month ago. Content: https://www.techrepublic.com/article/news-st-lucie-county-unpermitted-flock-cameras/ Published: 2026 10 05 16:14:33 Received: 2026 10 13 13:16:51 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
Article: AI Agents Leaked 13,000 Screenshots: Why Enterprise Approval Controls Failed - published about 1 month ago. Content: https://www.techrepublic.com/article/news-ai-agents-screenshot-leak-enterprise-governance/ Published: 2026 10 06 17:29:32 Received: 2026 10 13 13:16:51 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
|
Article: Samsung’s October Update Patches 9 Critical Security Flaws Across Galaxy Devices - published about 1 month ago. Content: https://www.techrepublic.com/article/news-samsung-october-2026-security-update/ Published: 2026 10 06 20:09:00 Received: 2026 10 13 13:16:51 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
|
Article: South Korean President Orders Probe After Financial Data Breaches - published about 1 month ago. Content: https://www.techrepublic.com/article/news-south-korean-president-financial-data-breach-probe-apac/ Published: 2026 10 07 10:48:06 Received: 2026 10 13 13:16:51 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
Article: Dutch Tax Agency Reverses Microsoft 365 Cloud Migration Over Data Risks - published about 1 month ago. Content: https://www.techrepublic.com/article/news-dutch-tax-agency-microsoft-365-cloud-migration-emea/ Published: 2026 10 07 13:34:01 Received: 2026 10 13 13:16:51 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
|
Article: Meta Faces First Ofcom Probe Under Online Safety Act Over Instagram Instants - published about 1 month ago. Content: https://www.techrepublic.com/article/news-ofcom-meta-instagram-instants-online-safety-act-probe-uk-emea/ Published: 2026 10 07 14:23:51 Received: 2026 10 13 13:16:51 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
|
Article: Google October Update Fixes Pixel Bugs as Pixel 6 Nears End of Support - published about 1 month ago. Content: https://www.techrepublic.com/article/news-google-pixel-october-2026-security-update/ Published: 2026 10 07 14:46:42 Received: 2026 10 13 13:16:51 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
Article: Use AI to Hunt Bugs Smarter With This $14.99 Course - published about 1 month ago. Content: https://www.techrepublic.com/article/ai-bug-bounty-automation-course/ Published: 2026 10 07 15:28:01 Received: 2026 10 13 13:16:51 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
|
Article: Best Smart Home Security Cameras for 2026: Ring, Nest, Arlo and Eufy - published about 1 month ago. Content: https://www.techrepublic.com/article/news-best-smart-home-security-cameras-2026/ Published: 2026 10 07 18:18:45 Received: 2026 10 13 13:16:51 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
|
Article: TP-Link Faces 5 State Lawsuits: Are Its Routers Still Legal in the US? - published about 1 month ago. Content: https://www.techrepublic.com/article/news-tp-link-router-lawsuits-fcc-ban-us/ Published: 2026 10 08 19:23:07 Received: 2026 10 13 13:16:51 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
Article: AI Agents, Local Hardware, and Security Risks Reshape Tech - published about 1 month ago. Content: https://www.techrepublic.com/article/ai-agents-local-hardware-and-security-risks-reshape-tech/ Published: 2026 10 09 14:02:16 Received: 2026 10 13 13:16:50 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
|
Article: Google Adds Android Enterprise AI Controls: What IT Teams Can Manage - published 27 days ago. Content: https://www.techrepublic.com/article/news-google-android-enterprise-ai-controls/ Published: 2026 10 12 15:19:39 Received: 2026 10 13 13:16:50 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
|
Article: UK Regains Early Access to AI Models After Reported White House Reversal - published 26 days ago. Content: https://www.techrepublic.com/article/news-uk-ai-model-access-white-house-reversal-emea/ Published: 2026 10 13 07:59:19 Received: 2026 10 13 13:16:50 Feed: IT Security Blog | TechRepublic Source: IT Security Blog | TechRepublic Category: Cyber Security Topic: Cyber Security |
|
Article: Connected Cars Are a Surveillance Platform - published about 1 month ago. Content: Researchers at Northeastern University, in collaboration with Consumer Reports, evaluated how much modern cars spy in their drivers: The new Northeastern study shows, for the first time, data flowing among the vehicles, the vehicle apps you download when you buy your car, and third-party companies, documenting exactly what kind of data gets siphoned from our... https://www.schneier.com/blog/archives/2026/10/connected-cars-are-a-surveillance-platform.html Published: 2026 10 01 11:06:14 Received: 2026 10 13 13:15:49 Feed: Schneier on Security Source: Schneier on Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: How American Political Campaigns Are Using AI—and What They’re Spending on the Tools - published about 1 month ago. Content: This essay was written with Nathan E. Sanders, and originally appeared in The Guardian. New campaign finance disclosure data shines a light on which US political campaigns are using AI tools and how much they are spending on them. Candidates’, parties’ and committees’ spending reveals that AI is fast becoming an essential tool of politics. The candidates the... https://www.schneier.com/blog/archives/2026/10/how-american-political-campaigns-are-using-ai-and-what-theyre-spending-on-the-tools.html Published: 2026 10 02 11:02:19 Received: 2026 10 13 13:15:49 Feed: Schneier on Security Source: Schneier on Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Unidentified Flock Cameras in Florida - published about 1 month ago. Content: St. Lucie County in Florida discovered (alt link) a dozen Flock cameras whose ownership it can’t identify, and that the county government had not permitted. I am reminded of the decade-old story of StingRay cell phone surveillance devices in Washington, DC, whose operators were also unknown. My guess is that in the StingRay case, the devices were operated by... https://www.schneier.com/blog/archives/2026/10/unidentified-flock-cameras-in-florida.html Published: 2026 10 02 14:52:46 Received: 2026 10 13 13:15:49 Feed: Schneier on Security Source: Schneier on Security Category: Cyber Security Topic: Cyber Security |
|
Article: Friday Squid Blogging: EU is Trying to Fight Unregulated Squid Fishing - published about 1 month ago. Content: The EU is recommending import controls to combat unregulated squid fishing in the Southwest Atlantic. I’m not optimistic. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy. ... https://www.schneier.com/blog/archives/2026/10/friday-squid-blogging-eu-is-trying-to-fight-unregulated-squid-fishing.html Published: 2026 10 02 21:02:18 Received: 2026 10 13 13:15:49 Feed: Schneier on Security Source: Schneier on Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Another Historic Cipher Falls to AI - published about 1 month ago. Content: This one is from 1809, written by Napoleon’s nephew. https://www.schneier.com/blog/archives/2026/10/another-historic-cipher-falls-to-ai.html Published: 2026 10 05 11:04:47 Received: 2026 10 13 13:15:49 Feed: Schneier on Security Source: Schneier on Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Possible Vulnerability in Apple’s Automatic Reboot - published about 1 month ago. Content: 404Media is reporting (alternate link) that a cyber-weapons arms manufacturer is exploiting a vulnerability in iOS to bypass its automatic reboot security feature. This is the feature that automatically puts an iPhone into a more secure state if it hasn’t been used for 72 hours. The new technology to get around inactivity reboot was developed by Magnet Foren... https://www.schneier.com/blog/archives/2026/10/possible-vulnerability-in-apples-automatic-reboot.html Published: 2026 10 06 11:06:46 Received: 2026 10 13 13:15:49 Feed: Schneier on Security Source: Schneier on Security Category: Cyber Security Topic: Cyber Security |
|
Article: Apple’s Verified Photography System - published about 1 month ago. Content: Apple just released a system called “Reference Image.” It can verify the image is exactly as taken by an iPhone—new models only—without tying it to a specific iPhone or photographer. It can also verify that multiple images came from the same iPhone. Other industry solutions require a photographer or institution to vouch for an image using their own credentia... https://www.schneier.com/blog/archives/2026/10/apples-verified-photography-system.html Published: 2026 10 07 11:07:36 Received: 2026 10 13 13:15:49 Feed: Schneier on Security Source: Schneier on Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: How Technology Empowers—and Imperils—Dictators - published about 1 month ago. Content: This essay was written with Seva Gunitsky, and originally appeared in Foreign Affairs. Two weeks after Moscow’s full-scale invasion of Ukraine in March 2022, the Russian TV Channel One editor Marina Ovsyannikova burst onto the set of the evening newscast. She held up a hand-drawn sign behind the anchor’s head that read: “Stop the war. Don’t believe propagand... https://www.schneier.com/blog/archives/2026/10/how-technology-empowers-and-imperils-dictators.html Published: 2026 10 08 11:07:35 Received: 2026 10 13 13:15:49 Feed: Schneier on Security Source: Schneier on Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: Friday Squid Blogging: I Caught a Squid - published 30 days ago. Content: On Wednesday I spent a day fishing, on a small boat out of Gloucester, MA. We caught many cod (none of which we could keep), and a bunch of hake and mackerel (all of which we could keep). And…I caught a squid! Near as I can tell, it’s a longfin squid, sometimes called a Boston squid (Doryteuthis (Amerigo) pealeii). That night I cooked it over a barbecue gril... https://www.schneier.com/blog/archives/2026/10/friday-squid-blogging-i-caught-a-squid.html Published: 2026 10 09 20:24:45 Received: 2026 10 13 13:15:49 Feed: Schneier on Security Source: Schneier on Security Category: Cyber Security Topic: Cyber Security |
|
Article: FBI Arrests Suspect in FBI-Hacking Case - published 27 days ago. Content: In September, hackers from a group called ShinyHunters announced that they stole a trove of FBI data about its own agents. It was an intelligence disaster. Last week, the FBI arrested (alternate link) someone associated with that crime. ... https://www.schneier.com/blog/archives/2026/10/fbi-arrests-suspect-in-fbi-hacking-case.html Published: 2026 10 12 15:01:26 Received: 2026 10 13 13:15:49 Feed: Schneier on Security Source: Schneier on Security Category: Cyber Security Topic: Cyber Security |
|
|
Article: RCE and bad crypto in Internxt's 'post-quantum' cloud storage - published about 1 month ago. Content: Internxt is a post-quantum secure encrypted cloud storage provider which is open-source and has passed multiple independent audits. I reviewed their code and found that post-quantum security should have been the least of their problems. Clicking a link in your browser could trigger remote code execution on the desktop app or leak your long-term encryption ke... https://www.reddit.com/r/netsec/comments/1wwgdom/rce_and_bad_crypto_in_internxts_postquantum_cloud/ Published: 2026 10 03 06:43:58 Received: 2026 10 13 13:15:48 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: How to Hack Time, With C2PA - published about 1 month ago. Content: submitted by /u/si9int [link] [comments] https://www.reddit.com/r/netsec/comments/1wxc5pb/how_to_hack_time_with_c2pa/ Published: 2026 10 04 10:12:01 Received: 2026 10 13 13:15:48 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: Wordpress libheif RCE - published about 1 month ago. Content: submitted by /u/adrian_rt [link] [comments] https://www.reddit.com/r/netsec/comments/1wy4edi/wordpress_libheif_rce/ Published: 2026 10 05 09:46:02 Received: 2026 10 13 13:15:48 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: Open Build Service, one year later: command execution through Mercurial argument injection - published about 1 month ago. Content: submitted by /u/SzLam__ [link] [comments] https://www.reddit.com/r/netsec/comments/1wy33ar/open_build_service_one_year_later_command/ Published: 2026 10 05 08:18:43 Received: 2026 10 13 13:15:48 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: Teaching network intrusion in the funnest way possible - published about 1 month ago. Content: I wanted to share a project I’ve been working on that I’m super excited about: Project RedTeam: Contract Offensive There’s a free Demo that provides a tutorial and lets you play a few contracts (no time limit, play as much as you want). Some players are already pulling some serious hours in the demo! At its core, this is a game about using MITRE ATT&CK a... https://www.reddit.com/r/netsec/comments/1wz39uk/teaching_network_intrusion_in_the_funnest_way/ Published: 2026 10 06 13:57:00 Received: 2026 10 13 13:15:48 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) - watchTowr Labs - published about 1 month ago. Content: submitted by /u/dx7r__ [link] [comments]... https://www.reddit.com/r/netsec/comments/1wz82op/you_wont_hear_about_these_even_in_myths_atlassian/ Published: 2026 10 06 17:06:35 Received: 2026 10 13 13:15:48 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: CVE-2026-102489 Deep-Dive: Zammad Session Leak to RCE - published about 1 month ago. Content: submitted by /u/scopedsecurity [link] [comments]... https://www.reddit.com/r/netsec/comments/1wzw573/cve2026102489_deepdive_zammad_session_leak_to_rce/ Published: 2026 10 07 13:11:06 Received: 2026 10 13 13:15:48 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: I found yet another way to invoke JavaScript functions without parentheses - published about 1 month ago. Content: It turns out you can overwrite the Error.prepareStackTrace method with the function constructor. Then, using prototype pollution, you can inject valid JavaScript code to generate arbitrary functions and invoke it using the usual tricks. submitted by /u/DrAdalbbert [link] [comments]... https://www.reddit.com/r/netsec/comments/1x0iuul/i_found_yet_another_way_to_invoke_javascript/ Published: 2026 10 08 05:38:09 Received: 2026 10 13 13:15:48 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: Loupe: An Android Console in the Browser - published about 1 month ago. Content: submitted by /u/CaptMeelo [link] [comments] https://www.reddit.com/r/netsec/comments/1x13cde/loupe_an_android_console_in_the_browser/ Published: 2026 10 08 21:27:29 Received: 2026 10 13 13:15:48 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: A JPEG, a Race, and a Ghost: Breaking Discourse's Image Pipeline - published about 1 month ago. Content: submitted by /u/Mempodipper [link] [comments]... https://www.reddit.com/r/netsec/comments/1x165mn/a_jpeg_a_race_and_a_ghost_breaking_discourses/ Published: 2026 10 08 23:32:09 Received: 2026 10 13 13:15:48 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: A Single POST Freezes Any Next.js Server - published about 1 month ago. Content: submitted by /u/TradeGold6317 [link] [comments] https://www.reddit.com/r/netsec/comments/1x0v7sw/a_single_post_freezes_any_nextjs_server/ Published: 2026 10 08 16:17:23 Received: 2026 10 13 13:15:47 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: How We Found Thousands of Exposed NVIDIA GPUs and a Way to Disrupt Them (CVE-2026-47483) - published about 1 month ago. Content: TL;DR: NVIDIA DCGM Exporter is a widely used monitoring tool that collects GPU metrics like utilization, memory, temperature, and power consumption from AI servers. We discovered that thousands of these monitoring endpoints are exposed to the public internet, allowing anyone to inspect GPU infrastructure. Worse, we found a high-severity vulnerability (CVE-20... https://www.reddit.com/r/netsec/comments/1x13vqz/how_we_found_thousands_of_exposed_nvidia_gpus_and/ Published: 2026 10 08 21:49:51 Received: 2026 10 13 13:15:47 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) - watchTowr Labs - published 30 days ago. Content: submitted by /u/dx7r__ [link] [comments]... https://www.reddit.com/r/netsec/comments/1x1squu/death_by_a_thousand_papercuts_papercut_preauth/ Published: 2026 10 09 18:17:56 Received: 2026 10 13 13:15:47 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: Smashing the token limit with overlapping fragments (CSS injection token exfiltration, PortSwigger Research) - published 29 days ago. Content: submitted by /u/theomkamble [link] [comments] https://www.reddit.com/r/netsec/comments/1x2bhmo/smashing_the_token_limit_with_overlapping/ Published: 2026 10 10 10:00:26 Received: 2026 10 13 13:15:47 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: GitHub Actions leaking secrets when Miri output is cached - published 29 days ago. Content: submitted by /u/Beaconamber [link] [comments]... https://www.reddit.com/r/netsec/comments/1x2dgsg/github_actions_leaking_secrets_when_miri_output/ Published: 2026 10 10 11:54:58 Received: 2026 10 13 13:15:47 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: A story of wifi secrets, UART lockdowns and a damaged flash memory chip - published 29 days ago. Content: submitted by /u/gid0rah [link] [comments] https://www.reddit.com/r/netsec/comments/1x2l1ii/a_story_of_wifi_secrets_uart_lockdowns_and_a/ Published: 2026 10 10 17:32:25 Received: 2026 10 13 13:15:47 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: LG webOS sync-demo Preauth RCE - published 27 days ago. Content: An exploit chain was found in LG webOS, leading to root command execution. The chain starts with a client-key issuance bypass, progresses through service-level access, and ultimately leads to root command execution. submitted by /u/SSDisclosure [link] [comments]... https://www.reddit.com/r/netsec/comments/1x3wv86/lg_webos_syncdemo_preauth_rce/ Published: 2026 10 12 08:58:28 Received: 2026 10 13 13:15:46 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: Security Issues in Cloud Computing: 6 Common Threats and Risks - published 26 days ago. Content: submitted by /u/Unhappy-Bed-23 [link] [comments] https://www.reddit.com/r/netsec/comments/1x4pak3/security_issues_in_cloud_computing_6_common/ Published: 2026 10 13 06:26:32 Received: 2026 10 13 13:15:46 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: Telegram Desktop vulnerability allowed any user file to be stolen - published 27 days ago. Content: submitted by /u/namanyayg [link] [comments] https://www.reddit.com/r/netsec/comments/1x3r3u8/telegram_desktop_vulnerability_allowed_any_user/ Published: 2026 10 12 03:13:45 Received: 2026 10 13 13:15:46 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: CVE-2026-91768: FastCGI allowed_clients compared only 96 of an IPv6 address's 128 bits - published 27 days ago. Content: submitted by /u/AlexandreDaubois [link] [comments]... https://www.reddit.com/r/netsec/comments/1x3xa8g/cve202691768_fastcgi_allowed_clients_compared/ Published: 2026 10 12 09:24:39 Received: 2026 10 13 13:15:46 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: frontier class vulnerabilities: it gets worse before it (maybe) gets better - published 27 days ago. Content: submitted by /u/fagnerbrack [link] [comments]... https://www.reddit.com/r/netsec/comments/1x4j70a/frontier_class_vulnerabilities_it_gets_worse/ Published: 2026 10 13 01:01:00 Received: 2026 10 13 13:15:46 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: Playing It SFAPE: Code Execution in Isolated User Mode - published 26 days ago. Content: Doyensec discovered multiple vulnerabilities in SFAPE.dll, a VBS enclave shipped with Windows, and chained them to gain code execution within the enclave in Windows Isolated User Mode (VTL1). The post explores how VBS enclaves work and how memory corruption can undermine their isolation guarantees. Microsoft addressed the reported issue in the September 2026... https://www.reddit.com/r/netsec/comments/1x4s0yk/playing_it_sfape_code_execution_in_isolated_user/ Published: 2026 10 13 09:25:31 Received: 2026 10 13 13:15:46 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: Google paid me $90,000 for this RCE - published 27 days ago. Content: submitted by /u/TradeGold6317 [link] [comments] https://www.reddit.com/r/netsec/comments/1x3v6od/google_paid_me_90000_for_this_rce/ Published: 2026 10 12 07:09:37 Received: 2026 10 13 13:15:46 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: r/netsec monthly discussion & tool thread - published about 1 month ago. Content: Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links. Rules & Guidelines Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary. Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will... https://www.reddit.com/r/netsec/comments/1wuzgqr/rnetsec_monthly_discussion_tool_thread/ Published: 2026 10 01 13:29:06 Received: 2026 10 13 13:15:45 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: /r/netsec's Q3 2026 Information Security Hiring Thread - published 4 months ago. Content: Overview If you have open positions at your company for information security professionals and would like to hire from the /r/netsec user base, please leave a comment detailing any open job listings at your company. We would also like to encourage you to post internship positions as well. Many of our readers are currently in school or are just finishing thei... https://www.reddit.com/r/netsec/comments/1ulbf96/rnetsecs_q3_2026_information_security_hiring/ Published: 2026 07 02 07:32:10 Received: 2026 10 13 13:15:45 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: Airlock Digital Unveils Agentic AI Control & Governance to Extend Preventative Endpoint Security - published 3 months ago. Content: https://latesthackingnews.com/2026/08/04/airlock-digital-unveils-agentic-ai-control-governance-to-extend-preventative-endpoint-security/ Published: 2026 08 04 16:31:24 Received: 2026 10 13 13:15:43 Feed: Latest Hacking News Source: Latest Hacking News Category: Cyber Security Topic: Cyber Security |
|
Article: How to Test for CORS Misconfigurations Like a Bug Bounty Hunter - published 3 months ago. Content: https://latesthackingnews.com/2026/08/13/testing-cors-misconfiguration-vulnerability/ Published: 2026 08 13 09:16:22 Received: 2026 10 13 13:15:43 Feed: Latest Hacking News Source: Latest Hacking News Category: Cyber Security Topic: Cyber Security |
|
|
Article: Airlock Digital Completes Independent IRAP Assessment at the PROTECTED Level - published 3 months ago. Content: https://latesthackingnews.com/2026/08/20/airlock-digital-completes-independent-irap-assessment-at-the-protected-level/ Published: 2026 08 19 23:30:22 Received: 2026 10 13 13:15:43 Feed: Latest Hacking News Source: Latest Hacking News Category: Cyber Security Topic: Cyber Security |
|
|
Article: Lunar Cyber Launches Token Exposure Monitoring as Infostealers Target Developer and AI Credentials - published 2 months ago. Content: https://latesthackingnews.com/2026/08/31/lunar-cyber-launches-token-exposure-monitoring-as-infostealers-target-developer-and-ai-credentials/ Published: 2026 08 31 14:10:06 Received: 2026 10 13 13:15:43 Feed: Latest Hacking News Source: Latest Hacking News Category: Cyber Security Topic: Cyber Security |
|
Article: Reflectiz Launches Agentic Pentesting for Websites: Up to 10x Coverage vs Conventional Pentests - published 2 months ago. Content: https://latesthackingnews.com/2026/09/08/reflectiz-launches-agentic-pentesting-for-websites-up-to-10x-coverage-vs-conventional-pentests/ Published: 2026 09 08 12:43:01 Received: 2026 10 13 13:15:43 Feed: Latest Hacking News Source: Latest Hacking News Category: Cyber Security Topic: Cyber Security |
|
|
Article: SpyCloud 2026 Identity Threat Report Finds Non-Human Identities Are Now the Leading Path into the Enterprise - published 2 months ago. Content: https://latesthackingnews.com/2026/09/09/spycloud-2026-identity-threat-report-finds-non-human-identities-are-now-the-leading-path-into-the-enterprise/ Published: 2026 09 09 12:01:54 Received: 2026 10 13 13:15:43 Feed: Latest Hacking News Source: Latest Hacking News Category: Cyber Security Topic: Cyber Security |
|
|
Article: UkeySoft Spotify Music Converter Review: Download Spotify to MP3 with Free Account(2026) - published about 1 month ago. Content: https://latesthackingnews.com/2026/09/24/ukeysoft-spotify-music-converter-review-download-spotify-to-mp3-with-free-account2026/ Published: 2026 09 24 15:09:15 Received: 2026 10 13 13:15:42 Feed: Latest Hacking News Source: Latest Hacking News Category: Cyber Security Topic: Cyber Security |
|
Article: Salmon Introduces Execution Verification Infrastructure (EVI) for Securing AI Agents and Autonomous Systems - published about 1 month ago. Content: https://latesthackingnews.com/2026/09/29/salmon-introduces-execution-verification-infrastructure-evi-for-securing-ai-agents-and-autonomous-systems/ Published: 2026 09 29 14:00:05 Received: 2026 10 13 13:15:42 Feed: Latest Hacking News Source: Latest Hacking News Category: Cyber Security Topic: Cyber Security |
|
|
Article: Anonymous Proxies Review 2026: Proxy Types, Security Use Cases and Who It’s For - published about 1 month ago. Content: https://latesthackingnews.com/2026/10/05/anonymous-proxies-review-2026-proxy-types-security-use-cases-and-who-its-for/ Published: 2026 10 05 18:59:23 Received: 2026 10 13 13:15:42 Feed: Latest Hacking News Source: Latest Hacking News Category: Cyber Security Topic: Cyber Security |
|
|
Article: 7 Best Agentic AI Tools for Penetration Testing in 2026 - published about 1 month ago. Content: https://latesthackingnews.com/2026/10/07/7-best-agentic-ai-tools-for-penetration-testing-in-2026/ Published: 2026 10 07 11:28:56 Received: 2026 10 13 13:15:42 Feed: Latest Hacking News Source: Latest Hacking News Category: Cyber Security Topic: Cyber Security |
|
Article: Basics of Tracking WMI Activity - published about 9 years ago. Content: WMI (Windows Management Instrumentation) has been part of the Windows Operating System since since Windows 2000 when it was included in the OS. The technology has been of great value to system administrators by providing ways to pull all types of information, configure components and take action based on state of several components of the OS. Due to this fle... https://www.darkoperator.com/blog/2017/10/14/basics-of-tracking-wmi-activity Published: 2017 10 16 12:00:00 Received: 2026 10 13 13:15:39 Feed: Blog Source: Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Sysinternals Sysmon 6.10 Tracking of Permanent WMI Events - published about 9 years ago. Content: In my previous blog post I covered how Microsoft has enhanced WMI logging in the latest versions of their client and server operating systems. WMI Permanent event logging was also added in version 6.10 specific events for logging permanent event actions. The new events are:Event ID 19: WmiEvent (WmiEventFilter activity detected). When a WMI event filter is r... https://www.darkoperator.com/blog/2017/10/15/sysinternals-sysmon-610-tracking-of-permanent-wmi-events Published: 2017 10 18 12:00:00 Received: 2026 10 13 13:15:39 Feed: Blog Source: Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Update to Pentest Metasploit Plugin - published about 9 years ago. Content: I recently update my Metasploit Pentest Plugin . I added 2 new commands to the plugin and fixed issues when printing information as a table. The update are small ones.Lets take a look at the changes for the plugin. We can start by loading the plugin in a Metasploit Framework session. msf > load pentest ___ ... https://www.darkoperator.com/blog/2017/10/17/update-to-pentest-metasploit-plugin Published: 2017 10 19 12:00:00 Received: 2026 10 13 13:15:39 Feed: Blog Source: Blog Category: Cyber Security Topic: Cyber Security |
|
Article: Basics of The Metasploit Framework API - IRB Setup - published about 9 years ago. Content: Those of you who have taken my "Automating Metasploit Framework" class all this material should not be new. I have decided to start making a large portion of the class available here in the blog as a series. On this post I will cover the basics of setting up IRB so we can start exploring in a general sense the Metasploit Framework API. The API is extensive a... https://www.darkoperator.com/blog/2017/10/21/basics-of-the-metasploit-framework-irb-setup Published: 2017 10 23 12:00:00 Received: 2026 10 13 13:15:39 Feed: Blog Source: Blog Category: Cyber Security Topic: Cyber Security |
|
|
Article: Switching Ruby Version in RVM for Metasploit Development - published about 9 years ago. Content: If you have setup a development environment with RVM to do development in Metasploit Framework you are bound to encounter that the Metasploit team has changed preferred Ruby versions. carlos@ubuntu:/opt$ cd metasploit-framework/ ruby-2.4.2 is not installed. To install do: 'rvm install ruby-2.4.2' You get... https://www.darkoperator.com/blog/2017/10/22/switching-ruby-version-in-rvm-for-metasploit-development Published: 2017 10 25 12:00:00 Received: 2026 10 13 13:15:39 Feed: Blog Source: Blog Category: Cyber Security Topic: Cyber Security |
|
Click to Open Code Editor