Loading...

Tag trends are in beta. Feedback? Thoughts? Email me at [email protected]

Education Giant Pearson Hit By Cyberattack Exposing Customer Data

By default, Signal doesn't recall

KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS

One-Click RCE in Asus's Preinstalled Driver Software

Most AI Chatbots Easily Tricked Into Giving Dangerous Responses, Study Finds

Multiple Security Issues in Screen

Leeks and Leaks

A critical look at MCP

SMS 2FA is not just insecure, it's also hostile to mountain people

proposal: net/http: add CrossOriginForgeryHandler

Hundreds of E-Commerce Sites Hacked In Supply-Chain Attack

I ruined my vacation by reverse engineering WSC

Can you trust that permission pop-up on macOS?

Stop Saying "Responsible Disclosure"

Firefox Security Response to pwn2own 2025

Oracle VM VirtualBox – VM Escape via VGA Device

Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages

proposal: net/http: add CrossOriginForgeryHandler

The Path to Memory Safety is Inevitable

DanaBot Malware Devs Infected Their Own PCs

The State of SSL Stacks

curl's CI job for spotting domain squatting

Postman is logging all your secrets and environment variables

"Safe" YAML monster

Malware Attack and Counterattack

Introducing oniux: Kernel-level Tor isolation for any Linux app

O2 VoLTE: locating any customer with a phone call

Breaking out of restricted mode: XSS to RCE in Visual Studio Code

Hello My Perverted Friend

Firefox Security Privacy Newsletter 2025 Q1

More →