All Articles

Ordered by Date Received
Page: << < 19 (of 10,711) > >>

Total Articles in this collection: 535,569

Navigation Help at the bottom of the page
Article: Nuclear threats and street brawls: Russia, Ukraine report attacks on their emergency alert apps - published 5 days ago.
Content: Cyberattacks on both Russia’s and Ukraine’s emergency alert apps resulted in fake messages about missile and nuclear strikes broadcast to the public. Officials from both countries confirmed the attacks, which occurred at similar times, on Sunday evening. According to public statements and messages sent via social media, Ukraine’s alert app was hit first, wi...
https://www.theregister.com/security/2026/11/02/nuclear-threats-and-street-brawls-russia-ukraine-report-attacks-on-their-emergency-alert-apps/5306901   
Published: 2026 11 02 14:45:00
Received: 2026 11 05 17:19:16
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: Nuclear threats and street brawls: Russia, Ukraine report attacks on their emergency alert apps - published 5 days ago.
Content: Cyberattacks on both Russia’s and Ukraine’s emergency alert apps resulted in fake messages about missile and nuclear strikes broadcast to the public. Officials from both countries confirmed the attacks, which occurred at similar times, on Sunday evening. According to public statements and messages sent via social media, Ukraine’s alert app was hit first, wi...
https://www.theregister.com/security/2026/11/02/nuclear-threats-and-street-brawls-russia-ukraine-report-attacks-on-their-emergency-alert-apps/5306901   
Published: 2026 11 02 14:45:00
Received: 2026 11 05 17:19:16
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: Token thieves costing companies $100K+ per day in illicit LLM charges - published 5 days ago.
Content: Victim organizations are losing millions of dollars in token charges as criminals hijack their corporate LLM access to steal expensive computing resources and AI services. These fraudulent charges from resource consumption can exceed $100,000 a day, according to a Monday report by Google's Mandiant incident responders, who saw cumulative charges at some org...
https://www.theregister.com/security/2026/11/02/token-thieves-costing-companies-100k-per-day-in-illicit-llm-charges/5306967   
Published: 2026 11 02 16:00:00
Received: 2026 11 05 17:19:16
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: Token thieves costing companies $100K+ per day in illicit LLM charges - published 5 days ago.
Content: Victim organizations are losing millions of dollars in token charges as criminals hijack their corporate LLM access to steal expensive computing resources and AI services. These fraudulent charges from resource consumption can exceed $100,000 a day, according to a Monday report by Google's Mandiant incident responders, who saw cumulative charges at some org...
https://www.theregister.com/security/2026/11/02/token-thieves-costing-companies-100k-per-day-in-illicit-llm-charges/5306967   
Published: 2026 11 02 16:00:00
Received: 2026 11 05 17:19:16
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Free Score Certificate
Cyber Tzar Free Score Certificate
Article: Thieves pilfer environment variables from Trigger AI workflow tool - published 5 days ago.
Content: If you're a customer of cloud-hosted AI workflow platform Trigger.dev, take heed, because your environment variables may have been exposed in a security incident disclosed on Sunday. Trigger offered little explanation in its Sunday security incident report, noting that its investigation had identified “exposure across a subset of organizations” and that an ...
https://www.theregister.com/security/2026/11/02/thieves-pilfer-environment-variables-from-trigger-ai-workflow-tool/5306998   
Published: 2026 11 02 16:44:30
Received: 2026 11 05 17:19:16
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: Thieves pilfer environment variables from Trigger AI workflow tool - published 5 days ago.
Content: If you're a customer of cloud-hosted AI workflow platform Trigger.dev, take heed, because your environment variables may have been exposed in a security incident disclosed on Sunday. Trigger offered little explanation in its Sunday security incident report, noting that its investigation had identified “exposure across a subset of organizations” and that an ...
https://www.theregister.com/security/2026/11/02/thieves-pilfer-environment-variables-from-trigger-ai-workflow-tool/5306998   
Published: 2026 11 02 16:44:30
Received: 2026 11 05 17:19:16
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Score Summary
Cyber Tzar Score Summary
Cyber Tzar Free Score Certificate
Cyber Tzar Free Score Certificate
Article: Cops bust botnet of 1.3M infected Android TV boxes - published 5 days ago.
Content: A coalition of private-sector security firms working with Japan’s National Police Agency has disrupted XCPE, a backdoor used to build a massive botnet comprising more than 1.3 million Android devices across more than 200 countries. Google, Lumen, Human Security, Plume, Synthient, and TrendAI participated in the disruption. “We assess with high confidence th...
https://www.theregister.com/cyber-crime/2026/11/02/cops-bust-botnet-of-13m-infected-android-tv-boxes/5307045   
Published: 2026 11 02 19:03:31
Received: 2026 11 05 17:19:15
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: Cops bust botnet of 1.3M infected Android TV boxes - published 5 days ago.
Content: A coalition of private-sector security firms working with Japan’s National Police Agency has disrupted XCPE, a backdoor used to build a massive botnet comprising more than 1.3 million Android devices across more than 200 countries. Google, Lumen, Human Security, Plume, Synthient, and TrendAI participated in the disruption. “We assess with high confidence th...
https://www.theregister.com/cyber-crime/2026/11/02/cops-bust-botnet-of-13m-infected-android-tv-boxes/5307045   
Published: 2026 11 02 19:03:31
Received: 2026 11 05 17:19:15
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: Max-severity bug in widely used OT programming tool exploited to deliver Linux malware - published 5 days ago.
Content: Unknown criminals are exploiting a maximum-severity vulnerability in Node-RED, a flow-based programming tool that is widely used in critical infrastructure, to deploy a flow that downloads and runs a Linux bot. Node-RED is commonly used for workflow automation in industrial control systems (ICS) and operational technology (OT) environments. It’s built on to...
https://www.theregister.com/security/2026/11/02/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware/5307086   
Published: 2026 11 02 22:55:17
Received: 2026 11 05 17:19:15
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: Max-severity bug in widely used OT programming tool exploited to deliver Linux malware - published 5 days ago.
Content: Unknown criminals are exploiting a maximum-severity vulnerability in Node-RED, a flow-based programming tool that is widely used in critical infrastructure, to deploy a flow that downloads and runs a Linux bot. Node-RED is commonly used for workflow automation in industrial control systems (ICS) and operational technology (OT) environments. It’s built on to...
https://www.theregister.com/security/2026/11/02/max-severity-bug-in-widely-used-ot-programming-tool-exploited-to-deliver-linux-malware/5307086   
Published: 2026 11 02 22:55:17
Received: 2026 11 05 17:19:15
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Your Score Explained
Cyber Tzar Your Score Explained
Article: Britain on notice: AI-powered ransomware attacks to arrive by 2028 - published 4 days ago.
Content: The UK's National Cyber Security Centre (NCSC) says AI-powered malware is "highly likely" to be a part of a future ransomware attack on Britain's critical national infrastructure between now and 2028. The warning accompanies its annual review and a separate assessment exploring how AI could change cyber threats over the next two years. The cyber arm of sign...
https://www.theregister.com/security/2026/11/03/britain-on-notice-ai-powered-ransomware-attacks-to-arrive-by-2028/5307200   
Published: 2026 11 03 12:39:25
Received: 2026 11 05 17:19:15
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: Britain on notice: AI-powered ransomware attacks to arrive by 2028 - published 4 days ago.
Content: The UK's National Cyber Security Centre (NCSC) says AI-powered malware is "highly likely" to be a part of a future ransomware attack on Britain's critical national infrastructure between now and 2028. The warning accompanies its annual review and a separate assessment exploring how AI could change cyber threats over the next two years. The cyber arm of sign...
https://www.theregister.com/security/2026/11/03/britain-on-notice-ai-powered-ransomware-attacks-to-arrive-by-2028/5307200   
Published: 2026 11 03 12:39:25
Received: 2026 11 05 17:19:15
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Gold Score Certificate
Cyber Tzar Gold Score Certificate
Article: Password manager mSecure tells users to change passwords, won't say why - published 4 days ago.
Content: Password manager mSecure has warned customers to change their passwords, reset two-factor authentication, and potentially remove their passkeys after detecting suspicious activity, but it has not explained what happened or whether anyone's secrets were exposed. In an email sent to customers on November 3, seen by The Register, US-based developer mSeven Soft...
https://www.theregister.com/security/2026/11/03/password-manager-msecure-tells-users-to-change-passwords-wont-say-why/5307296   
Published: 2026 11 03 16:10:00
Received: 2026 11 05 17:19:15
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: Password manager mSecure tells users to change passwords, won't say why - published 4 days ago.
Content: Password manager mSecure has warned customers to change their passwords, reset two-factor authentication, and potentially remove their passkeys after detecting suspicious activity, but it has not explained what happened or whether anyone's secrets were exposed. In an email sent to customers on November 3, seen by The Register, US-based developer mSeven Soft...
https://www.theregister.com/security/2026/11/03/password-manager-msecure-tells-users-to-change-passwords-wont-say-why/5307296   
Published: 2026 11 03 16:10:00
Received: 2026 11 05 17:19:15
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: AI policy wonks declare 'sovereign agents' a threat to civilization - published 4 days ago.
Content: The Center for a New American Security posits that the next big threat from our future AI overlords involves "sovereign agents" acting on their own and regularly improving themselves. These are AI agents that operate outside of human control and “pursue open-ended, evolving survival,” AI policy researcher Ben Hayum said in a Tuesday report from the bipartis...
https://www.theregister.com/security/2026/11/03/ai-policy-wonks-declare-sovereign-agents-a-threat-to-civilization/5307354   
Published: 2026 11 03 19:33:01
Received: 2026 11 05 17:19:15
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: AI policy wonks declare 'sovereign agents' a threat to civilization - published 4 days ago.
Content: The Center for a New American Security posits that the next big threat from our future AI overlords involves "sovereign agents" acting on their own and regularly improving themselves. These are AI agents that operate outside of human control and “pursue open-ended, evolving survival,” AI policy researcher Ben Hayum said in a Tuesday report from the bipartis...
https://www.theregister.com/security/2026/11/03/ai-policy-wonks-declare-sovereign-agents-a-threat-to-civilization/5307354   
Published: 2026 11 03 19:33:01
Received: 2026 11 05 17:19:15
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Score Analysis
Cyber Tzar Score Analysis
Article: North Korean fake job interview led to $6.3B Binance heist - published 4 days ago.
Content: North Korean cryptocurrency thieves tricked a Binance software engineer into downloading malware onto their work-issued computer during a fake job interview process before last week's record-breaking $6.3 billion heist. In an incident report published on Tuesday, the cryptocurrency exchange said several techniques - including social engineering via fake job...
https://www.theregister.com/security/2026/11/03/north-korean-fake-job-interview-led-to-63b-binance-heist/5307398   
Published: 2026 11 03 22:04:45
Received: 2026 11 05 17:19:15
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: North Korean fake job interview led to $6.3B Binance heist - published 4 days ago.
Content: North Korean cryptocurrency thieves tricked a Binance software engineer into downloading malware onto their work-issued computer during a fake job interview process before last week's record-breaking $6.3 billion heist. In an incident report published on Tuesday, the cryptocurrency exchange said several techniques - including social engineering via fake job...
https://www.theregister.com/security/2026/11/03/north-korean-fake-job-interview-led-to-63b-binance-heist/5307398   
Published: 2026 11 03 22:04:45
Received: 2026 11 05 17:19:15
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Risk Impact Distribution
Cyber Tzar Risk Impact Distribution
Cyber Tzar Your Score Explained
Cyber Tzar Your Score Explained
Article: Cyberattack on French plasma stores is enough to make your blood boil - published 3 days ago.
Content: Attackers tampered with cold-storage settings used by France's civilian blood service after compromising a refrigeration supplier, the organization said. The French Blood Establishment (EFS) confirmed the incident on Tuesday, saying its own systems had not been directly targeted. Safeguards prevented any loss of blood products. The affected equipment stored...
https://www.theregister.com/security/2026/11/04/cyberattack-on-french-plasma-stores-is-enough-to-make-your-blood-boil/5307519   
Published: 2026 11 04 11:56:54
Received: 2026 11 05 17:19:15
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: Cyberattack on French plasma stores is enough to make your blood boil - published 3 days ago.
Content: Attackers tampered with cold-storage settings used by France's civilian blood service after compromising a refrigeration supplier, the organization said. The French Blood Establishment (EFS) confirmed the incident on Tuesday, saying its own systems had not been directly targeted. Safeguards prevented any loss of blood products. The affected equipment stored...
https://www.theregister.com/security/2026/11/04/cyberattack-on-french-plasma-stores-is-enough-to-make-your-blood-boil/5307519   
Published: 2026 11 04 11:56:54
Received: 2026 11 05 17:19:15
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: US gov IT worker pleads guilty to sending Top Secret files to Ethiopia - published 3 days ago.
Content: He swore an allegiance to the US, but he was working for someone else. An IT specialist who worked across US government departments and held Top Secret clearance has pleaded guilty to transmitting sensitive documents to Ethiopia. Abraham Teklu Lemma, 53, admitted to the espionage offenses and agreed to a prison term between 120 and 262 months, the Justice D...
https://www.theregister.com/security/2026/11/04/us-gov-it-worker-pleads-guilty-to-sending-top-secret-files-to-ethiopia/5307595   
Published: 2026 11 04 15:39:30
Received: 2026 11 05 17:19:14
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: US gov IT worker pleads guilty to sending Top Secret files to Ethiopia - published 3 days ago.
Content: He swore an allegiance to the US, but he was working for someone else. An IT specialist who worked across US government departments and held Top Secret clearance has pleaded guilty to transmitting sensitive documents to Ethiopia. Abraham Teklu Lemma, 53, admitted to the espionage offenses and agreed to a prison term between 120 and 262 months, the Justice D...
https://www.theregister.com/security/2026/11/04/us-gov-it-worker-pleads-guilty-to-sending-top-secret-files-to-ethiopia/5307595   
Published: 2026 11 04 15:39:30
Received: 2026 11 05 17:19:14
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Risk Impact Assesment
Cyber Tzar Risk Impact Assesment
Article: Apple turns iCloud into spy cloud, will start looking at public share links - published 3 days ago.
Content: If you share content using public iCloud links, Apple could soon be looking over your shoulder and checking for "harmful content." The iBiz announced plans to moderate publicly accessible iCloud share links in version 27.3 of iOS, iPadOS, macOS, and visionOS on a support page published on Tuesday. To clarify, this applies only to iCloud content shared via l...
https://www.theregister.com/security/2026/11/04/apple-turns-icloud-into-spy-cloud-will-start-looking-at-public-share-links/5307681   
Published: 2026 11 04 21:49:38
Received: 2026 11 05 17:19:14
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: Apple turns iCloud into spy cloud, will start looking at public share links - published 3 days ago.
Content: If you share content using public iCloud links, Apple could soon be looking over your shoulder and checking for "harmful content." The iBiz announced plans to moderate publicly accessible iCloud share links in version 27.3 of iOS, iPadOS, macOS, and visionOS on a support page published on Tuesday. To clarify, this applies only to iCloud content shared via l...
https://www.theregister.com/security/2026/11/04/apple-turns-icloud-into-spy-cloud-will-start-looking-at-public-share-links/5307681   
Published: 2026 11 04 21:49:38
Received: 2026 11 05 17:19:14
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Your Score Explained
Cyber Tzar Your Score Explained
Cyber Tzar Gold Score Certificate
Cyber Tzar Gold Score Certificate
Article: Norway's aid agency pwned and all users' data is stolen - published 2 days ago.
Content: Norway's national aid agency, Norad, has confirmed that cyber criminals broke into its systems, stealing information about each and every registered user of its grant portal. Norad, which coordinates Norway's assistance for foreign development, said that 20,614 registered individuals had their names and email addresses swiped, and information from at least ...
https://www.theregister.com/cyber-crime/2026/11/05/norways-aid-agency-pwned-and-all-users-data-is-stolen/5307765   
Published: 2026 11 05 11:19:16
Received: 2026 11 05 17:19:14
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: Norway's aid agency pwned and all users' data is stolen - published 2 days ago.
Content: Norway's national aid agency, Norad, has confirmed that cyber criminals broke into its systems, stealing information about each and every registered user of its grant portal. Norad, which coordinates Norway's assistance for foreign development, said that 20,614 registered individuals had their names and email addresses swiped, and information from at least ...
https://www.theregister.com/cyber-crime/2026/11/05/norways-aid-agency-pwned-and-all-users-data-is-stolen/5307765   
Published: 2026 11 05 11:19:16
Received: 2026 11 05 17:19:14
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: New York's Queens Public Library battles ransomware crims: Wi-Fi, checkouts, and website go dark - published 2 days ago.
Content: New York City's Queens Public Library (QPL) is battling a ransomware attack, it confirmed on Wednesday evening via social media and to patrons directly. The disruption has downed QPL's website, on-site computers, check-out and return machines, its public Wi-Fi, mobile app, and its digital media services. Renewals are also unavailable, although library users...
https://www.theregister.com/cyber-crime/2026/11/05/new-yorks-queens-public-library-battles-ransomware-crims-wi-fi-checkouts-and-website-go-dark/5307796   
Published: 2026 11 05 12:10:15
Received: 2026 11 05 17:19:14
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: New York's Queens Public Library battles ransomware crims: Wi-Fi, checkouts, and website go dark - published 2 days ago.
Content: New York City's Queens Public Library (QPL) is battling a ransomware attack, it confirmed on Wednesday evening via social media and to patrons directly. The disruption has downed QPL's website, on-site computers, check-out and return machines, its public Wi-Fi, mobile app, and its digital media services. Renewals are also unavailable, although library users...
https://www.theregister.com/cyber-crime/2026/11/05/new-yorks-queens-public-library-battles-ransomware-crims-wi-fi-checkouts-and-website-go-dark/5307796   
Published: 2026 11 05 12:10:15
Received: 2026 11 05 17:19:14
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Risk Groups Explained
Cyber Tzar Risk Groups Explained
Article: Anthropic won't fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries - published 2 days ago.
Content: A vulnerability in Anthropic’s Claude products lets any browser extension that can control Claude Dispatch make Claude Desktop run code on the computer – or even a different machine signed into the same Claude account – with no browser exploit and minimal user interaction required. Anthropic, aware of the problem since May, has taken no action to close the ...
https://www.theregister.com/research/2026/11/05/anthropic-wont-fix-a-claude-dispatch-flaw-that-could-let-attackers-execute-remote-commands-across-corporate-boundaries/5307684   
Published: 2026 11 05 13:00:00
Received: 2026 11 05 17:19:14
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: Anthropic won't fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries - published 2 days ago.
Content: A vulnerability in Anthropic’s Claude products lets any browser extension that can control Claude Dispatch make Claude Desktop run code on the computer – or even a different machine signed into the same Claude account – with no browser exploit and minimal user interaction required. Anthropic, aware of the problem since May, has taken no action to close the ...
https://www.theregister.com/research/2026/11/05/anthropic-wont-fix-a-claude-dispatch-flaw-that-could-let-attackers-execute-remote-commands-across-corporate-boundaries/5307684   
Published: 2026 11 05 13:00:00
Received: 2026 11 05 17:19:14
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Change Over Time (Extended)
Cyber Tzar Change Over Time (Extended)
Cyber Tzar Score Analysis
Cyber Tzar Score Analysis
Article: Tobacco company got smoked by leaving secret recipes on a file share - published 2 days ago.
Content: Welcome once again to PWNED, where all of the security victims are self-owned. Today, we celebrate a company that makes a supremely unhealthy product having a supremely unhealthy security posture. Our tale of terrible data management, once again, comes courtesy of professional pen tester and red teamer Dahvid Schloss. Assigned to find flaws in the network o...
https://www.theregister.com/security/2026/11/05/tobacco-company-got-smoked-by-leaving-secret-recipes-on-a-file-share/5307704   
Published: 2026 11 05 16:02:00
Received: 2026 11 05 17:19:14
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: Tobacco company got smoked by leaving secret recipes on a file share - published 2 days ago.
Content: Welcome once again to PWNED, where all of the security victims are self-owned. Today, we celebrate a company that makes a supremely unhealthy product having a supremely unhealthy security posture. Our tale of terrible data management, once again, comes courtesy of professional pen tester and red teamer Dahvid Schloss. Assigned to find flaws in the network o...
https://www.theregister.com/security/2026/11/05/tobacco-company-got-smoked-by-leaving-secret-recipes-on-a-file-share/5307704   
Published: 2026 11 05 16:02:00
Received: 2026 11 05 17:19:14
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: OpenAI releases GPT-6 Cyber, and promises this one stays within 'rules of engagement' - published 2 days ago.
Content: OpenAI, on Thursday, released its latest cybersecurity-tuned model, GPT-6 Cyber, which the House of Altman says combines "stronger cybersecurity capabilities with better adherence to researchers’ rules of engagement." The new model, we’re told, is much better at finding and exploiting vulnerabilities, compared to GPT-5.6 and GPT-6 Astra. OpenAI released GPT...
https://www.theregister.com/security/2026/11/05/openai-releases-gpt-6-cyber-and-promises-this-one-stays-within-rules-of-engagement/5307855   
Published: 2026 11 05 17:00:00
Received: 2026 11 05 17:19:14
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Article: OpenAI releases GPT-6 Cyber, and promises this one stays within 'rules of engagement' - published 2 days ago.
Content: OpenAI, on Thursday, released its latest cybersecurity-tuned model, GPT-6 Cyber, which the House of Altman says combines "stronger cybersecurity capabilities with better adherence to researchers’ rules of engagement." The new model, we’re told, is much better at finding and exploiting vulnerabilities, compared to GPT-5.6 and GPT-6 Astra. OpenAI released GPT...
https://www.theregister.com/security/2026/11/05/openai-releases-gpt-6-cyber-and-promises-this-one-stays-within-rules-of-engagement/5307855   
Published: 2026 11 05 17:00:00
Received: 2026 11 05 17:19:14
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Change Over Time (Extended)
Cyber Tzar Change Over Time (Extended)
Article: Microsoft Warns Windows Server Updates May Disrupt Exchange Email — Here’s the Workaround - published 19 days ago.
Content:
https://www.techrepublic.com/article/news-windows-server-exchange-email-workaround/   
Published: 2026 10 20 04:38:37
Received: 2026 11 05 17:19:13
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: Microsoft Warns Windows Server Updates May Disrupt Exchange Email — Here’s the Workaround - published 19 days ago.
Content:
https://www.techrepublic.com/article/news-windows-server-exchange-email-workaround/   
Published: 2026 10 20 04:38:37
Received: 2026 11 05 17:19:13
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Change Over Time (Extended)
Cyber Tzar Change Over Time (Extended)
Article: White House Begins 120-Day AI Safety Review Amid Growing Security Concerns - published 18 days ago.
Content:
https://www.techrepublic.com/article/news-white-house-ai-task-force-120-day-review/   
Published: 2026 10 20 11:52:59
Received: 2026 11 05 17:19:13
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: White House Begins 120-Day AI Safety Review Amid Growing Security Concerns - published 18 days ago.
Content:
https://www.techrepublic.com/article/news-white-house-ai-task-force-120-day-review/   
Published: 2026 10 20 11:52:59
Received: 2026 11 05 17:19:13
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: DHS Orders DeepSeek Removed from Federal IT Systems Over Security Risks - published 18 days ago.
Content:
https://www.techrepublic.com/article/news-dhs-deepseek-federal-systems-security-ban/   
Published: 2026 10 20 13:53:08
Received: 2026 11 05 17:19:13
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: DHS Orders DeepSeek Removed from Federal IT Systems Over Security Risks - published 18 days ago.
Content:
https://www.techrepublic.com/article/news-dhs-deepseek-federal-systems-security-ban/   
Published: 2026 10 20 13:53:08
Received: 2026 11 05 17:19:13
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Change Over Time (Extended)
Cyber Tzar Change Over Time (Extended)
Article: ChatGPT Can Now Do More in Chrome, but There’s a Security Trade-Off - published 17 days ago.
Content:
https://www.techrepublic.com/article/news-openai-chatgpt-chrome-browser-integration-privacy/   
Published: 2026 10 21 09:04:55
Received: 2026 11 05 17:19:13
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: ChatGPT Can Now Do More in Chrome, but There’s a Security Trade-Off - published 17 days ago.
Content:
https://www.techrepublic.com/article/news-openai-chatgpt-chrome-browser-integration-privacy/   
Published: 2026 10 21 09:04:55
Received: 2026 11 05 17:19:13
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Change Over Time (Extended)
Cyber Tzar Change Over Time (Extended)
Cyber Tzar Risk Impact Assesment
Cyber Tzar Risk Impact Assesment
Article: Amazon Bee Frontier and Bee Eclipse Raise Workplace Consent Concerns - published 17 days ago.
Content:
https://www.techrepublic.com/article/news-amazon-bee-frontier-eclipse-workplace-consent/   
Published: 2026 10 21 10:50:04
Received: 2026 11 05 17:19:13
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: Amazon Bee Frontier and Bee Eclipse Raise Workplace Consent Concerns - published 17 days ago.
Content:
https://www.techrepublic.com/article/news-amazon-bee-frontier-eclipse-workplace-consent/   
Published: 2026 10 21 10:50:04
Received: 2026 11 05 17:19:13
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: EU Website Outages Follow Critical PHP Flaws: What IT Teams Should Know - published 17 days ago.
Content:
https://www.techrepublic.com/article/news-critical-php-flaws-government-websites-patches-europe-emea/   
Published: 2026 10 21 19:30:01
Received: 2026 11 05 17:19:13
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: EU Website Outages Follow Critical PHP Flaws: What IT Teams Should Know - published 17 days ago.
Content:
https://www.techrepublic.com/article/news-critical-php-flaws-government-websites-patches-europe-emea/   
Published: 2026 10 21 19:30:01
Received: 2026 11 05 17:19:13
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Change Over Time (Extended)
Cyber Tzar Change Over Time (Extended)
Article: Chrome Adds Suspicious Site Warnings and ClickFix Protection - published 16 days ago.
Content:
https://www.techrepublic.com/article/news-chrome-suspicious-site-warnings-clickfix/   
Published: 2026 10 22 09:14:59
Received: 2026 11 05 17:19:13
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: Chrome Adds Suspicious Site Warnings and ClickFix Protection - published 16 days ago.
Content:
https://www.techrepublic.com/article/news-chrome-suspicious-site-warnings-clickfix/   
Published: 2026 10 22 09:14:59
Received: 2026 11 05 17:19:13
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Re-Score Report
Cyber Tzar Re-Score Report
Cyber Tzar Your Score Explained
Cyber Tzar Your Score Explained
Article: How to choose the right CTI tools for your business - published 16 days ago.
Content:
https://www.techrepublic.com/article/cyber-threat-intelligence-is-a-great-way-for-a-company-to-improve-its-security/   
Published: 2026 10 22 11:16:48
Received: 2026 11 05 17:19:13
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: How to choose the right CTI tools for your business - published 16 days ago.
Content:
https://www.techrepublic.com/article/cyber-threat-intelligence-is-a-great-way-for-a-company-to-improve-its-security/   
Published: 2026 10 22 11:16:48
Received: 2026 11 05 17:19:13
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: ChatGPT Locked Chats Explained: How to Use It and What to Know - published 16 days ago.
Content:
https://www.techrepublic.com/article/news-chatgpt-locked-chats-pin-biometric-privacy/   
Published: 2026 10 22 14:56:55
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: ChatGPT Locked Chats Explained: How to Use It and What to Know - published 16 days ago.
Content:
https://www.techrepublic.com/article/news-chatgpt-locked-chats-pin-biometric-privacy/   
Published: 2026 10 22 14:56:55
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Top Ten Vulnerabilities Explained
Article: Zoomtopia 2026: Zoom Introduces AI Agents, New Security Controls - published 16 days ago.
Content:
https://www.techrepublic.com/article/news-zoom-ai-agents-conversation-to-completion/   
Published: 2026 10 22 20:50:47
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: Zoomtopia 2026: Zoom Introduces AI Agents, New Security Controls - published 16 days ago.
Content:
https://www.techrepublic.com/article/news-zoom-ai-agents-conversation-to-completion/   
Published: 2026 10 22 20:50:47
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Risk Groups Explained
Cyber Tzar Risk Groups Explained
Article: Your Older Android Phone Is Getting a New Scam Defense — Here’s What Google Changed - published 12 days ago.
Content:
https://www.techrepublic.com/article/news-google-android-scam-call-protection/   
Published: 2026 10 26 12:52:38
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: Your Older Android Phone Is Getting a New Scam Defense — Here’s What Google Changed - published 12 days ago.
Content:
https://www.techrepublic.com/article/news-google-android-scam-call-protection/   
Published: 2026 10 26 12:52:38
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: New US China Investment Proposal Could Reshape AI, Biotech and Chip Funding - published 11 days ago.
Content:
https://www.techrepublic.com/article/news-us-treasury-china-investment-rules-ai-biotech-chips/   
Published: 2026 10 27 10:38:37
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: New US China Investment Proposal Could Reshape AI, Biotech and Chip Funding - published 11 days ago.
Content:
https://www.techrepublic.com/article/news-us-treasury-china-investment-rules-ai-biotech-chips/   
Published: 2026 10 27 10:38:37
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Top Ten Vulnerabilities Explained
Article: Apple Just Patched 163 iPhone Security Flaws — Here’s What Was at Risk - published 11 days ago.
Content:
https://www.techrepublic.com/article/news-ios-27-2-security-flaws-patched/   
Published: 2026 10 27 11:52:06
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: Apple Just Patched 163 iPhone Security Flaws — Here’s What Was at Risk - published 11 days ago.
Content:
https://www.techrepublic.com/article/news-ios-27-2-security-flaws-patched/   
Published: 2026 10 27 11:52:06
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Change Over Time (Extended)
Cyber Tzar Change Over Time (Extended)
Article: Your Ring Doorbell Could Miss Trick-or-Treaters — Check These Settings Before Halloween - published 9 days ago.
Content:
https://www.techrepublic.com/article/news-ring-doorbell-motion-zones-halloween/   
Published: 2026 10 29 11:31:13
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: Your Ring Doorbell Could Miss Trick-or-Treaters — Check These Settings Before Halloween - published 9 days ago.
Content:
https://www.techrepublic.com/article/news-ring-doorbell-motion-zones-halloween/   
Published: 2026 10 29 11:31:13
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: GM’s $220 Million Data Privacy Settlement: What Drivers Need to Know - published 4 days ago.
Content:
https://www.techrepublic.com/article/news-gm-220-million-settlement-driver-data-privacy/   
Published: 2026 11 03 11:03:39
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: GM’s $220 Million Data Privacy Settlement: What Drivers Need to Know - published 4 days ago.
Content:
https://www.techrepublic.com/article/news-gm-220-million-settlement-driver-data-privacy/   
Published: 2026 11 03 11:03:39
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Top Ten Vulnerabilities Explained
Article: Google’s New Android App Store Program Costs $10,000 a Year - published 4 days ago.
Content:
https://www.techrepublic.com/article/news-google-android-registered-app-stores-program/   
Published: 2026 11 03 11:17:00
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: Google’s New Android App Store Program Costs $10,000 a Year - published 4 days ago.
Content:
https://www.techrepublic.com/article/news-google-android-registered-app-stores-program/   
Published: 2026 11 03 11:17:00
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Change Over Time (Extended)
Cyber Tzar Change Over Time (Extended)
Article: European Supermarket Freezers Set to 122°F in Suspected Hacks - published 4 days ago.
Content:
https://www.techrepublic.com/article/news-europe-supermarket-freezer-cyberattacks-emea/   
Published: 2026 11 03 14:46:32
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: European Supermarket Freezers Set to 122°F in Suspected Hacks - published 4 days ago.
Content:
https://www.techrepublic.com/article/news-europe-supermarket-freezer-cyberattacks-emea/   
Published: 2026 11 03 14:46:32
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: Microsoft Authenticator’s Android Backup Switch Is Coming in January — Google One Takes Over - published 3 days ago.
Content:
https://www.techrepublic.com/article/news-microsoft-authenticator-android-google-one-backup/   
Published: 2026 11 04 15:45:39
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: Microsoft Authenticator’s Android Backup Switch Is Coming in January — Google One Takes Over - published 3 days ago.
Content:
https://www.techrepublic.com/article/news-microsoft-authenticator-android-google-one-backup/   
Published: 2026 11 04 15:45:39
Received: 2026 11 05 17:19:12
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Top Ten Vulnerabilities Explained
Article: Google Changes AI Access Rules for Schools Ahead of 2027 - published 3 days ago.
Content:
https://www.techrepublic.com/article/news-google-schools-ai-opt-out-search-access/   
Published: 2026 11 04 16:54:00
Received: 2026 11 05 17:19:11
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: Google Changes AI Access Rules for Schools Ahead of 2027 - published 3 days ago.
Content:
https://www.techrepublic.com/article/news-google-schools-ai-opt-out-search-access/   
Published: 2026 11 04 16:54:00
Received: 2026 11 05 17:19:11
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Change Over Time (Extended)
Cyber Tzar Change Over Time (Extended)
Article: AI Agent Governance: Who Owns Access and Accountability? - published 3 days ago.
Content:
https://www.techrepublic.com/article/news-ai-agent-governance-access-accountability/   
Published: 2026 11 04 21:30:16
Received: 2026 11 05 17:19:11
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: AI Agent Governance: Who Owns Access and Accountability? - published 3 days ago.
Content:
https://www.techrepublic.com/article/news-ai-agent-governance-access-accountability/   
Published: 2026 11 04 21:30:16
Received: 2026 11 05 17:19:11
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security
Article: New Serious PHP Vulnerabilities Released and Patched - published 16 days ago.
Content: PHP maintainers have released fixes for two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php...
https://www.schneier.com/blog/archives/2026/10/new-serious-php-vulnerabilities-released-and-patched.html   
Published: 2026 10 22 13:26:51
Received: 2026 11 05 17:18:10
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Article: New Serious PHP Vulnerabilities Released and Patched - published 16 days ago.
Content: PHP maintainers have released fixes for two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php...
https://www.schneier.com/blog/archives/2026/10/new-serious-php-vulnerabilities-released-and-patched.html   
Published: 2026 10 22 13:26:51
Received: 2026 11 05 17:18:10
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Top Ten Vulnerabilities Explained
Article: Compromised TLS Certificates - published 15 days ago.
Content: The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost...
https://www.schneier.com/blog/archives/2026/10/compromised-tls-certificates.html   
Published: 2026 10 23 11:04:22
Received: 2026 11 05 17:18:10
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Article: Compromised TLS Certificates - published 15 days ago.
Content: The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost...
https://www.schneier.com/blog/archives/2026/10/compromised-tls-certificates.html   
Published: 2026 10 23 11:04:22
Received: 2026 11 05 17:18:10
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Change Over Time (Extended)
Cyber Tzar Change Over Time (Extended)
Article: Friday Squid Blogging: Increasing Squid Populations - published 15 days ago.
Content: This article in Nature argues that it’s due to an overfishing of predators and warming sea temperatures. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy. ...
https://www.schneier.com/blog/archives/2026/10/friday-squid-blogging-increasing-squid-populations.html   
Published: 2026 10 23 21:00:09
Received: 2026 11 05 17:18:10
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Article: Friday Squid Blogging: Increasing Squid Populations - published 15 days ago.
Content: This article in Nature argues that it’s due to an overfishing of predators and warming sea temperatures. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy. ...
https://www.schneier.com/blog/archives/2026/10/friday-squid-blogging-increasing-squid-populations.html   
Published: 2026 10 23 21:00:09
Received: 2026 11 05 17:18:10
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Article: Bias in Qwen3-Coder Model - published 12 days ago.
Content: Interesting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what it writes changes. For the first time, we showed that this vulnerability lives in the model’s weights, and that removing the model’s CCP alignment removes it. One word tilts the co...
https://www.schneier.com/blog/archives/2026/10/bias-in-qwen3-coder-model.html   
Published: 2026 10 26 11:03:31
Received: 2026 11 05 17:18:10
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Article: Bias in Qwen3-Coder Model - published 12 days ago.
Content: Interesting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what it writes changes. For the first time, we showed that this vulnerability lives in the model’s weights, and that removing the model’s CCP alignment removes it. One word tilts the co...
https://www.schneier.com/blog/archives/2026/10/bias-in-qwen3-coder-model.html   
Published: 2026 10 26 11:03:31
Received: 2026 11 05 17:18:10
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Marketplace Benchmark
Cyber Tzar Marketplace Benchmark
Article: Hiding Capabilities in AI Models - published 11 days ago.
Content: Interesting research: “AI Models Can Provably Hide Arbitrary Capabilities” Abstract: Capability evaluations aim to surface dangerous model behaviors before deployment, but their reliability depends on the assumption that hidden capabilities can be elicited. We show this assumption does not hold under adversarial conditions by constructing backdoor attacks th...
https://www.schneier.com/blog/archives/2026/10/hiding-capabilities-in-ai-models.html   
Published: 2026 10 27 11:01:26
Received: 2026 11 05 17:18:10
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Article: Hiding Capabilities in AI Models - published 11 days ago.
Content: Interesting research: “AI Models Can Provably Hide Arbitrary Capabilities” Abstract: Capability evaluations aim to surface dangerous model behaviors before deployment, but their reliability depends on the assumption that hidden capabilities can be elicited. We show this assumption does not hold under adversarial conditions by constructing backdoor attacks th...
https://www.schneier.com/blog/archives/2026/10/hiding-capabilities-in-ai-models.html   
Published: 2026 10 27 11:01:26
Received: 2026 11 05 17:18:10
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Benchmark Summary
Cyber Tzar Benchmark Summary
Cyber Tzar Change Over Time (Extended)
Cyber Tzar Change Over Time (Extended)
Article: Studying Fraudulent North Korean IT Workers - published 10 days ago.
Content: Researchers set up a fake start-up company to study fraudulent North Korean IT workers.
https://www.schneier.com/blog/archives/2026/10/studying-fraudulent-north-korean-it-workers.html   
Published: 2026 10 28 11:05:00
Received: 2026 11 05 17:18:10
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Article: Studying Fraudulent North Korean IT Workers - published 10 days ago.
Content: Researchers set up a fake start-up company to study fraudulent North Korean IT workers.
https://www.schneier.com/blog/archives/2026/10/studying-fraudulent-north-korean-it-workers.html   
Published: 2026 10 28 11:05:00
Received: 2026 11 05 17:18:10
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Article: Bloatware in Aftermarket Auto Parts - published 8 days ago.
Content: This story is interesting: One Civic owner purchased a cheap aftermarket head unit off Amazon, and decided to have Claude work its magic on it, like it would a smart TV. What was reportedly discovered isn’t surprising, but is worth knowing about. Among the pre-installed bloatware—­or spyware, if you’re being less charitable­—was a voice assistant equipped wi...
https://www.schneier.com/blog/archives/2026/10/bloatware-in-aftermarket-auto-parts.html   
Published: 2026 10 30 15:20:02
Received: 2026 11 05 17:18:10
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Article: Bloatware in Aftermarket Auto Parts - published 8 days ago.
Content: This story is interesting: One Civic owner purchased a cheap aftermarket head unit off Amazon, and decided to have Claude work its magic on it, like it would a smart TV. What was reportedly discovered isn’t surprising, but is worth knowing about. Among the pre-installed bloatware—­or spyware, if you’re being less charitable­—was a voice assistant equipped wi...
https://www.schneier.com/blog/archives/2026/10/bloatware-in-aftermarket-auto-parts.html   
Published: 2026 10 30 15:20:02
Received: 2026 11 05 17:18:10
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Change Over Time (Basic)
Cyber Tzar Change Over Time (Basic)
Article: Friday Squid Blogging: Bigfin Squid Off California Coast - published 8 days ago.
Content: Neat video: The sighting, announced September 2, marks the first time anyone has spotted a live bigfin squid, which belongs to the Magnapinna genus, in the northeastern Pacific Ocean. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy. ...
https://www.schneier.com/blog/archives/2026/10/friday-squid-blogging-bigfin-squid-off-california-coast.html   
Published: 2026 10 30 21:04:36
Received: 2026 11 05 17:18:10
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Article: Friday Squid Blogging: Bigfin Squid Off California Coast - published 8 days ago.
Content: Neat video: The sighting, announced September 2, marks the first time anyone has spotted a live bigfin squid, which belongs to the Magnapinna genus, in the northeastern Pacific Ocean. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy. ...
https://www.schneier.com/blog/archives/2026/10/friday-squid-blogging-bigfin-squid-off-california-coast.html   
Published: 2026 10 30 21:04:36
Received: 2026 11 05 17:18:10
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Port Vulnerability Scan Report
Cyber Tzar Port Vulnerability Scan Report
Cyber Tzar Change Over Time (Extended)
Cyber Tzar Change Over Time (Extended)
Article: AI Vulnerability Finding - published 5 days ago.
Content: A comment: 3% of ‘critical’ software security bugs, in all of recorded history, have been found in the last month. This is on pace to find another ~100,000 bugs this year alone, adding ~26% more vulnerabilities to the all time total Do you realize how fucking insane that is? Yes. It is a new world out there. ...
https://www.schneier.com/blog/archives/2026/11/ai-vulnerability-finding-2.html   
Published: 2026 11 02 12:02:34
Received: 2026 11 05 17:18:09
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Article: AI Vulnerability Finding - published 5 days ago.
Content: A comment: 3% of ‘critical’ software security bugs, in all of recorded history, have been found in the last month. This is on pace to find another ~100,000 bugs this year alone, adding ~26% more vulnerabilities to the all time total Do you realize how fucking insane that is? Yes. It is a new world out there. ...
https://www.schneier.com/blog/archives/2026/11/ai-vulnerability-finding-2.html   
Published: 2026 11 02 12:02:34
Received: 2026 11 05 17:18:09
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Article: AIs Hacking the Law - published 4 days ago.
Content: In both a 2021 essay and my 2022 book, A Hacker’s Mind, I talk about AIs finding vulnerabilities and exploits—hacking—the legal system. Here’s some demonstrations of this from Germany: Legal systems encode the foundations of social order in natural language. Similar to computer systems, the written law can contain vulnerabilities that invite exploitation.1 C...
https://www.schneier.com/blog/archives/2026/11/ais-hacking-the-law.html   
Published: 2026 11 03 12:01:00
Received: 2026 11 05 17:18:09
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Article: AIs Hacking the Law - published 4 days ago.
Content: In both a 2021 essay and my 2022 book, A Hacker’s Mind, I talk about AIs finding vulnerabilities and exploits—hacking—the legal system. Here’s some demonstrations of this from Germany: Legal systems encode the foundations of social order in natural language. Similar to computer systems, the written law can contain vulnerabilities that invite exploitation.1 C...
https://www.schneier.com/blog/archives/2026/11/ais-hacking-the-law.html   
Published: 2026 11 03 12:01:00
Received: 2026 11 05 17:18:09
Feed: Schneier on Security
Source: Schneier on Security
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Port Vulnerability Scan Report
Cyber Tzar Port Vulnerability Scan Report
Article: EMBRACE: How We Hacked the Browsers Embedded in Top Five Desktop AI Assistants · Forever Secur - published 9 days ago.
Content: submitted by /u/Content-Winter5328 [link] [comments]...
https://www.reddit.com/r/netsec/comments/1xilm92/embrace_how_we_hacked_the_browsers_embedded_in/   
Published: 2026 10 29 14:31:39
Received: 2026 11 05 17:18:09
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: EMBRACE: How We Hacked the Browsers Embedded in Top Five Desktop AI Assistants · Forever Secur - published 9 days ago.
Content: submitted by /u/Content-Winter5328 [link] [comments]...
https://www.reddit.com/r/netsec/comments/1xilm92/embrace_how_we_hacked_the_browsers_embedded_in/   
Published: 2026 10 29 14:31:39
Received: 2026 11 05 17:18:09
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Port Vulnerability Scan Report
Cyber Tzar Port Vulnerability Scan Report
Cyber Tzar Re-Score Report
Cyber Tzar Re-Score Report
Article: Axis Camera Station Deep-Dive: Unauth RCE to Decrypting Every Camera Credential (CVE-2025-30026/30023 + CVE-2026-63286) - published 9 days ago.
Content: submitted by /u/Rare_Bicycle_5705 [link] [comments]
https://www.reddit.com/r/netsec/comments/1xiekai/axis_camera_station_deepdive_unauth_rce_to/   
Published: 2026 10 29 08:45:46
Received: 2026 11 05 17:18:09
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: Axis Camera Station Deep-Dive: Unauth RCE to Decrypting Every Camera Credential (CVE-2025-30026/30023 + CVE-2026-63286) - published 9 days ago.
Content: submitted by /u/Rare_Bicycle_5705 [link] [comments]
https://www.reddit.com/r/netsec/comments/1xiekai/axis_camera_station_deepdive_unauth_rce_to/   
Published: 2026 10 29 08:45:46
Received: 2026 11 05 17:18:09
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: TightVNC Viewer Pre-auth RCE - published 9 days ago.
Content: What if a VNC server could make your viewer believe it had a ~4 GB framebuffer… while actually allocating only 128 KB? That’s the core of this TightVNC vulnerability. A malicious server can announce a crafted 32768 × 32769 screen at 32bpp, causing the framebuffer size calculation to overflow. The allocation wraps down to 128 KB, but the viewer continues usin...
https://www.reddit.com/r/netsec/comments/1xil17j/tightvnc_viewer_preauth_rce/   
Published: 2026 10 29 14:09:08
Received: 2026 11 05 17:18:09
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: TightVNC Viewer Pre-auth RCE - published 9 days ago.
Content: What if a VNC server could make your viewer believe it had a ~4 GB framebuffer… while actually allocating only 128 KB? That’s the core of this TightVNC vulnerability. A malicious server can announce a crafted 32768 × 32769 screen at 32bpp, causing the framebuffer size calculation to overflow. The allocation wraps down to 128 KB, but the viewer continues usin...
https://www.reddit.com/r/netsec/comments/1xil17j/tightvnc_viewer_preauth_rce/   
Published: 2026 10 29 14:09:08
Received: 2026 11 05 17:18:09
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Port Vulnerability Scan Report
Cyber Tzar Port Vulnerability Scan Report
Article: TeamViewer RCE Vulnerability (CVE-2026-11585) - published 9 days ago.
Content: submitted by /u/NewResearch1337 [link] [comments]...
https://www.reddit.com/r/netsec/comments/1xikzuw/teamviewer_rce_vulnerability_cve202611585/   
Published: 2026 10 29 14:07:38
Received: 2026 11 05 17:18:09
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: TeamViewer RCE Vulnerability (CVE-2026-11585) - published 9 days ago.
Content: submitted by /u/NewResearch1337 [link] [comments]...
https://www.reddit.com/r/netsec/comments/1xikzuw/teamviewer_rce_vulnerability_cve202611585/   
Published: 2026 10 29 14:07:38
Received: 2026 11 05 17:18:09
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar SSL Certificate Health Check
Cyber Tzar SSL Certificate Health Check
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Top Ten Vulnerabilities Explained
Article: Supermicro BMC ipmi cves - published 8 days ago.
Content: submitted by /u/Alfrede81 [link] [comments]
https://www.reddit.com/r/netsec/comments/1xjeg2c/supermicro_bmc_ipmi_cves/   
Published: 2026 10 30 12:47:51
Received: 2026 11 05 17:18:09
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: Supermicro BMC ipmi cves - published 8 days ago.
Content: submitted by /u/Alfrede81 [link] [comments]
https://www.reddit.com/r/netsec/comments/1xjeg2c/supermicro_bmc_ipmi_cves/   
Published: 2026 10 30 12:47:51
Received: 2026 11 05 17:18:09
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: Mirage2FA stole 4,561 M365 session cookies despite MFA via AiTM proxy (CVE-2026-69836 CVSS 10.0) : detection rules and WHfB/Cloud Kerberos Trust hardening guide - published 6 days ago.
Content: submitted by /u/doit4everyone [link] [comments]
https://www.reddit.com/r/netsec/comments/1xkzjb0/mirage2fa_stole_4561_m365_session_cookies_despite/   
Published: 2026 11 01 10:15:16
Received: 2026 11 05 17:18:09
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: Mirage2FA stole 4,561 M365 session cookies despite MFA via AiTM proxy (CVE-2026-69836 CVSS 10.0) : detection rules and WHfB/Cloud Kerberos Trust hardening guide - published 6 days ago.
Content: submitted by /u/doit4everyone [link] [comments]
https://www.reddit.com/r/netsec/comments/1xkzjb0/mirage2fa_stole_4561_m365_session_cookies_despite/   
Published: 2026 11 01 10:15:16
Received: 2026 11 05 17:18:09
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar SSL Certificate Health Check
Cyber Tzar SSL Certificate Health Check
Article: Investigating three incidents in our evaluations - published 6 days ago.
Content: submitted by /u/fagnerbrack [link] [comments]
https://www.reddit.com/r/netsec/comments/1xlnvfe/investigating_three_incidents_in_our_evaluations/   
Published: 2026 11 02 04:32:13
Received: 2026 11 05 17:18:08
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: Investigating three incidents in our evaluations - published 6 days ago.
Content: submitted by /u/fagnerbrack [link] [comments]
https://www.reddit.com/r/netsec/comments/1xlnvfe/investigating_three_incidents_in_our_evaluations/   
Published: 2026 11 02 04:32:13
Received: 2026 11 05 17:18:08
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar SSL Certificate Health Check
Cyber Tzar SSL Certificate Health Check
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Top Ten Vulnerabilities Explained
Article: Remote code execution on Linux systems with multipath TCP - published 5 days ago.
Content: submitted by /u/lucidsparrow982 [link] [comments]
https://www.reddit.com/r/netsec/comments/1xlsqor/remote_code_execution_on_linux_systems_with/   
Published: 2026 11 02 09:30:42
Received: 2026 11 05 17:18:08
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: Remote code execution on Linux systems with multipath TCP - published 5 days ago.
Content: submitted by /u/lucidsparrow982 [link] [comments]
https://www.reddit.com/r/netsec/comments/1xlsqor/remote_code_execution_on_linux_systems_with/   
Published: 2026 11 02 09:30:42
Received: 2026 11 05 17:18:08
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: WordPress pingback and Brotli RCE - published 5 days ago.
Content: submitted by /u/adrian_rt [link] [comments]
https://www.reddit.com/r/netsec/comments/1xlsgc8/wordpress_pingback_and_brotli_rce/   
Published: 2026 11 02 09:11:50
Received: 2026 11 05 17:18:08
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: WordPress pingback and Brotli RCE - published 5 days ago.
Content: submitted by /u/adrian_rt [link] [comments]
https://www.reddit.com/r/netsec/comments/1xlsgc8/wordpress_pingback_and_brotli_rce/   
Published: 2026 11 02 09:11:50
Received: 2026 11 05 17:18:08
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar SSL Certificate Health Check
Cyber Tzar SSL Certificate Health Check
Article: CPGuard / OPSSHIELD LLP Breach - published 5 days ago.
Content: Had a subscription in the past with them and received the following e-mail: Doesn't look like many sites have have picked up on this: Dear cPGuard customers and partners, An unidentified attacker targeted OPSSHIELD, gained unauthorized access to our licensing and update systems, and distributed a malicious script through the cPGuard update channel. **We hav...
https://www.reddit.com/r/netsec/comments/1xmcr4e/cpguard_opsshield_llp_breach/   
Published: 2026 11 02 23:15:36
Received: 2026 11 05 17:18:08
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: CPGuard / OPSSHIELD LLP Breach - published 5 days ago.
Content: Had a subscription in the past with them and received the following e-mail: Doesn't look like many sites have have picked up on this: Dear cPGuard customers and partners, An unidentified attacker targeted OPSSHIELD, gained unauthorized access to our licensing and update systems, and distributed a malicious script through the cPGuard update channel. **We hav...
https://www.reddit.com/r/netsec/comments/1xmcr4e/cpguard_opsshield_llp_breach/   
Published: 2026 11 02 23:15:36
Received: 2026 11 05 17:18:08
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Free Score Certificate
Cyber Tzar Free Score Certificate
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Top Ten Vulnerabilities Explained
Article: Securing Internet-Critical Software: How We Could Have Backdoored Bash - published 5 days ago.
Content: (May 2026) TL;DR: an email address like atouch${IFS}/tmp/savane-rce-proof@attacker.example gave any registered user code execution on its backend. From there, we made our account a superuser, impersonated Bash’s maintainer, and confirmed we could add an SSH key with push access to the upstream Bash repository. An unpatched kernel gave us root access and acc...
https://www.reddit.com/r/netsec/comments/1xlsxqk/securing_internetcritical_software_how_we_could/   
Published: 2026 11 02 09:43:15
Received: 2026 11 05 17:18:08
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: Securing Internet-Critical Software: How We Could Have Backdoored Bash - published 5 days ago.
Content: (May 2026) TL;DR: an email address like atouch${IFS}/tmp/savane-rce-proof@attacker.example gave any registered user code execution on its backend. From there, we made our account a superuser, impersonated Bash’s maintainer, and confirmed we could add an SSH key with push access to the upstream Bash repository. An unpatched kernel gave us root access and acc...
https://www.reddit.com/r/netsec/comments/1xlsxqk/securing_internetcritical_software_how_we_could/   
Published: 2026 11 02 09:43:15
Received: 2026 11 05 17:18:08
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: Fake Nuclear Alert Sent Through Russian Emergencies Ministry App After Hack - published 5 days ago.
Content: submitted by /u/Much-Television-9449 [link] [comments]...
https://www.reddit.com/r/netsec/comments/1xm1rrf/fake_nuclear_alert_sent_through_russian/   
Published: 2026 11 02 16:25:38
Received: 2026 11 05 17:18:08
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: Fake Nuclear Alert Sent Through Russian Emergencies Ministry App After Hack - published 5 days ago.
Content: submitted by /u/Much-Television-9449 [link] [comments]...
https://www.reddit.com/r/netsec/comments/1xm1rrf/fake_nuclear_alert_sent_through_russian/   
Published: 2026 11 02 16:25:38
Received: 2026 11 05 17:18:08
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Score Summary
Cyber Tzar Score Summary
Article: A primer on TETRA mission-critical radio network authentication flaws - published 4 days ago.
Content: tl:dr; Contrary to popular belief among vendors, system integrators, and asset owners: network authentication in TETRA mission-critical radio networks does not provide authenticity &amp; integrity guarantees at the individual message level. To make matters worse: base stations don't require a re-authentication whenever a radio is roaming from one cell tower...
https://www.reddit.com/r/netsec/comments/1xmpbzm/a_primer_on_tetra_missioncritical_radio_network/   
Published: 2026 11 03 10:19:12
Received: 2026 11 05 17:18:08
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: A primer on TETRA mission-critical radio network authentication flaws - published 4 days ago.
Content: tl:dr; Contrary to popular belief among vendors, system integrators, and asset owners: network authentication in TETRA mission-critical radio networks does not provide authenticity &amp; integrity guarantees at the individual message level. To make matters worse: base stations don't require a re-authentication whenever a radio is roaming from one cell tower...
https://www.reddit.com/r/netsec/comments/1xmpbzm/a_primer_on_tetra_missioncritical_radio_network/   
Published: 2026 11 03 10:19:12
Received: 2026 11 05 17:18:08
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Your Score Explained
Cyber Tzar Your Score Explained
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Top Ten Vulnerabilities Explained
Article: Pass-ta-key Golden Attack: Stealing Google Password Manager Synced Passkeys for Offline Account Takeover - published 4 days ago.
Content: submitted by /u/True_Mixture_309 [link] [comments]...
https://www.reddit.com/r/netsec/comments/1xmrsh9/passtakey_golden_attack_stealing_google_password/   
Published: 2026 11 03 12:35:06
Received: 2026 11 05 17:18:08
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: Pass-ta-key Golden Attack: Stealing Google Password Manager Synced Passkeys for Offline Account Takeover - published 4 days ago.
Content: submitted by /u/True_Mixture_309 [link] [comments]...
https://www.reddit.com/r/netsec/comments/1xmrsh9/passtakey_golden_attack_stealing_google_password/   
Published: 2026 11 03 12:35:06
Received: 2026 11 05 17:18:08
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: Jailbreaking my car's navigation system just so I can change the time - published 5 days ago.
Content: submitted by /u/nns_ee [link] [comments]
https://www.reddit.com/r/netsec/comments/1xm6ks2/jailbreaking_my_cars_navigation_system_just_so_i/   
Published: 2026 11 02 19:16:42
Received: 2026 11 05 17:18:08
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: Jailbreaking my car's navigation system just so I can change the time - published 5 days ago.
Content: submitted by /u/nns_ee [link] [comments]
https://www.reddit.com/r/netsec/comments/1xm6ks2/jailbreaking_my_cars_navigation_system_just_so_i/   
Published: 2026 11 02 19:16:42
Received: 2026 11 05 17:18:08
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Gold Score Certificate
Cyber Tzar Gold Score Certificate
Article: We found 4,972 "hello" messages hiding thousands of malicious commands targeting Flowise - published 4 days ago.
Content: TL;DR: Our research team at Era uncovered Greeter, an attack framework targeting Flowise, an AI development platform with 55,000+ GitHub stars. We deployed seven honeypots and captured 4,972 "hello" messages, each carrying malicious JavaScript through Flowise's overrideConfig parameter. The interesting part? The malicious code never appeared in the saved wor...
https://www.reddit.com/r/netsec/comments/1xmviny/we_found_4972_hello_messages_hiding_thousands_of/   
Published: 2026 11 03 15:11:53
Received: 2026 11 05 17:18:07
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: We found 4,972 "hello" messages hiding thousands of malicious commands targeting Flowise - published 4 days ago.
Content: TL;DR: Our research team at Era uncovered Greeter, an attack framework targeting Flowise, an AI development platform with 55,000+ GitHub stars. We deployed seven honeypots and captured 4,972 "hello" messages, each carrying malicious JavaScript through Flowise's overrideConfig parameter. The interesting part? The malicious code never appeared in the saved wor...
https://www.reddit.com/r/netsec/comments/1xmviny/we_found_4972_hello_messages_hiding_thousands_of/   
Published: 2026 11 03 15:11:53
Received: 2026 11 05 17:18:07
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Score Analysis
Cyber Tzar Score Analysis
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Top Ten Vulnerabilities Explained
Article: Chinese Botnet (XCPE on Android) Broken - published 3 days ago.
Content: submitted by /u/Doug_Vitale [link] [comments]
https://www.reddit.com/r/netsec/comments/1xnr2o5/chinese_botnet_xcpe_on_android_broken/   
Published: 2026 11 04 15:27:32
Received: 2026 11 05 17:18:07
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: Chinese Botnet (XCPE on Android) Broken - published 3 days ago.
Content: submitted by /u/Doug_Vitale [link] [comments]
https://www.reddit.com/r/netsec/comments/1xnr2o5/chinese_botnet_xcpe_on_android_broken/   
Published: 2026 11 04 15:27:32
Received: 2026 11 05 17:18:07
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: Who Polices the Blockchain? The Binance Heist and the New Gatekeepers - published 3 days ago.
Content: Governments may retain the authority to police international finance, but the practical capability to identify, trace and interrupt illicit financial flows increasingly rests with privately held technology and financial sector companies. The latest RUSI Commentary examines the Binance heist, the role of private sector gatekeepers and whether the FATF is keep...
https://www.reddit.com/r/netsec/comments/1xnrmz7/who_polices_the_blockchain_the_binance_heist_and/   
Published: 2026 11 04 15:49:48
Received: 2026 11 05 17:18:07
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: Who Polices the Blockchain? The Binance Heist and the New Gatekeepers - published 3 days ago.
Content: Governments may retain the authority to police international finance, but the practical capability to identify, trace and interrupt illicit financial flows increasingly rests with privately held technology and financial sector companies. The latest RUSI Commentary examines the Binance heist, the role of private sector gatekeepers and whether the FATF is keep...
https://www.reddit.com/r/netsec/comments/1xnrmz7/who_polices_the_blockchain_the_binance_heist_and/   
Published: 2026 11 04 15:49:48
Received: 2026 11 05 17:18:07
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Risk Impact Distribution
Cyber Tzar Risk Impact Distribution
Article: Finding 40+ Vulnerabilities in Healthcare Software Serving More Than 100 Million Patients - published 3 days ago.
Content: submitted by /u/idnsec [link] [comments]...
https://www.reddit.com/r/netsec/comments/1xng15c/finding_40_vulnerabilities_in_healthcare_software/   
Published: 2026 11 04 05:28:24
Received: 2026 11 05 17:18:07
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: Finding 40+ Vulnerabilities in Healthcare Software Serving More Than 100 Million Patients - published 3 days ago.
Content: submitted by /u/idnsec [link] [comments]...
https://www.reddit.com/r/netsec/comments/1xng15c/finding_40_vulnerabilities_in_healthcare_software/   
Published: 2026 11 04 05:28:24
Received: 2026 11 05 17:18:07
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Risk Impact Assesment
Cyber Tzar Risk Impact Assesment
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Top Ten Vulnerabilities Explained
Article: Who’s Trying to Get Into Our Fridge Freezer? There's nowt in it! - published 2 days ago.
Content: submitted by /u/ethicalhack3r [link] [comments]...
https://www.reddit.com/r/netsec/comments/1xoi14n/whos_trying_to_get_into_our_fridge_freezer_theres/   
Published: 2026 11 05 13:00:14
Received: 2026 11 05 17:18:07
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: Who’s Trying to Get Into Our Fridge Freezer? There's nowt in it! - published 2 days ago.
Content: submitted by /u/ethicalhack3r [link] [comments]...
https://www.reddit.com/r/netsec/comments/1xoi14n/whos_trying_to_get_into_our_fridge_freezer_theres/   
Published: 2026 11 05 13:00:14
Received: 2026 11 05 17:18:07
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: ThisBash Escape: Claude Dispatch Flaw Enables Browser Extensions RCE on the OS · Forever Security - published 2 days ago.
Content: submitted by /u/Content-Winter5328 [link] [comments]...
https://www.reddit.com/r/netsec/comments/1xokbbo/thisbash_escape_claude_dispatch_flaw_enables/   
Published: 2026 11 05 14:40:21
Received: 2026 11 05 17:18:07
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: ThisBash Escape: Claude Dispatch Flaw Enables Browser Extensions RCE on the OS · Forever Security - published 2 days ago.
Content: submitted by /u/Content-Winter5328 [link] [comments]...
https://www.reddit.com/r/netsec/comments/1xokbbo/thisbash_escape_claude_dispatch_flaw_enables/   
Published: 2026 11 05 14:40:21
Received: 2026 11 05 17:18:07
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Your Score Explained
Cyber Tzar Your Score Explained
Article: Escaping AWS Firecracker from guest userspace: VMM memory corruption (CVE-2026-122192) - published 3 days ago.
Content: We just published our research on escaping Firecracker microVMs, coordinated with AWS. The interesting part is how a guest can end up accessing memory belonging to the Firecracker process running outside the VM. The vulnerability: When a microVM is restored from a snapshot using the File memory backend, a failed memory remapping operation can leave KVM refer...
https://www.reddit.com/r/netsec/comments/1xo0yov/escaping_aws_firecracker_from_guest_userspace_vmm/   
Published: 2026 11 04 21:47:44
Received: 2026 11 05 17:18:07
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Article: Escaping AWS Firecracker from guest userspace: VMM memory corruption (CVE-2026-122192) - published 3 days ago.
Content: We just published our research on escaping Firecracker microVMs, coordinated with AWS. The interesting part is how a guest can end up accessing memory belonging to the Firecracker process running outside the VM. The vulnerability: When a microVM is restored from a snapshot using the File memory backend, a failed memory remapping operation can leave KVM refer...
https://www.reddit.com/r/netsec/comments/1xo0yov/escaping_aws_firecracker_from_guest_userspace_vmm/   
Published: 2026 11 04 21:47:44
Received: 2026 11 05 17:18:07
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security
Cyber Tzar Risk Groups Explained
Cyber Tzar Risk Groups Explained
Cyber Tzar Top Ten Vulnerabilities Explained
Cyber Tzar Top Ten Vulnerabilities Explained

All Articles

Ordered by Date Received
Page: << < 19 (of 10,711) > >>

Total Articles in this collection: 535,569


  • "All Articles" links back to the front page, effectivly the Planet "Home Page"; shows all articles, with no selections, or groupings.
  • Default date ordering is by "Received Date" (due to not all RSS feeds having a "Published Date").
  • Only Published Date selections use the articles Published Date.
  • The first page always shows fifty items plus from zero to up to a remaining forty-nine items, before they are commited permently to the next page.
  • All subsequent pages show fifty items.
  • Pagination is in reverse ordering (so that pages are permamenent links, aka "permalinks", to their content).
  • "<<" moves you to the first page (aka newest articles)
  • ">>" moves you to the last page (aka oldest articles)
  • "<" moves you to the previous page (aka newer articles)
  • ">" moves you to the next page (aka older articles)
  • Return to the top of this page Go Now

Custom HTML Block

Click to Open Code Editor