Orrrr how about you GFY. Hacking is a set of survival skills. I am not a computer criminal, I use my skills to help people, and my only crime is that of curiosity.(Everything else is past the statute of limitations.) #defcon Thanks and credit to @BenDoubleU for the photo
Hackers stole personal, medical, and health insurance information from a company’s data center. The post 3.
A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime scene as far back as 2020, indicating the group has been compro…
A critical Langflow flaw allowing RCE on default deployments is being exploited, says the CISA
A Go-based malware delivered in ClickFix attacks targeting macOS users is stealing cryptocurrency assets, browser-stored passwords, Apple Keychain data, and cached cre…
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published dozens of internal CISA credentials …
OpenAI and the American Psychological Association advance evidence-based guidance, resources, and safeguards for responsible AI use and youth mental health.
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-63077 <
A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems by republishing malicious updates.
A Millisecond of Predictability: Why CVE-2026-11374 Is Hard to Exploit
Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages.
TLDR: The attacks most likely to go undetected are the ones that never touch disk.
TL;DR The threat model has changed. Cloud DR was built to recover from passive failure.
AI is accelerating software development and giving attackers machine-speed capabilities.
The Origin Energy breach down here in Aus is all over the news this week, and as with many breaches, it's multi-faceted.
"It feels like I get 10X the productivity on an engagement. The difference is night and day." Profile Ray H.
Less than a year after emerging from stealth to tackle non-human identity security, Israeli cybersecurity startup Hush Security believes the enterprise AI security con…
Passive subdomain enumeration from dozens of sources.
Relevance: Recon & attack-surface mapping
Comprehensive scanner for containers, IaC, and dependencies.
Relevance: Cloud & container defenders
Open-source XDR/SIEM for threat detection and compliance.
Relevance: Detection & response / compliance
Template-based vulnerability scanner for massive-scale network scanning.
Relevance: Offensive security & recon
Interactive TLS-capable intercepting proxy for traffic analysis.
Relevance: AppSec & traffic inspection
Swiss-army toolkit for network attacks, MITM and recon.
Relevance: Network penetration testing
Graph-based Active Directory relationship explorer for attack paths.
Relevance: Red teams & AD assessment
wow...ok das wird Stoff für noyb.eu geben: FBI-Chef Patel sagt öffentlich dass er alle amerikanischen Tech-Konzerne an der kurzen Leine hat. Die ganze Watchlist wird offiziell auf alle Dissidenten ausgedehnt...Mit KI werden alle Datenströme durchforstet. Und damit auch alle Daten überwacht.Wussten wir vorher. Hier nochmals offiziell. "I've got every major tech company in the world embedded in the FBI, rebuilding our internet capabilities, our classified systems, and the ability for artificial intelligence to be in our counterterrorism program so we can get instantaneous results," Patel said on Fox News. "What's the point of collecting terabytes of data if you can't sift through it?"https://reason.com/2026/07/28/minority-report-fbi-seeks-ai-for-political-watch-list/
New sensitive breach: Exact Sciences was targeted by a ShinyHunters extortion campaign last month. The group later published 10.9M email addresses and other personal data, including health information. 75% were already in @haveibeenpwned. Read more: https://haveibeenpwned.com/Breach/ExactSciences
I love the smell of security incidents reports in the morning ...
RE: https://infosec.exchange/@wagenseil/116298612458158949when people say they worry AI will steal their work, I point to this example where humans openly have been doing that as work for a very long time. this is a beautiful and funny example. Bruce took my presentation almost word for word and sold it as his own. he even asked me to send him my draft papers and book chapters, publishing under his own name. will the industry ever catch him? and what would he be accused of? listening and repeating? did he do it as a stunt proof of no integrity control? did he do it to get my ideas in front of RSAC after they rejected me being the presenter? maybe I should feel lucky he promoted my work. does the industry have an integrity control?
RE: https://infosec.exchange/@dragginganox/116637255126318770🚨 finally got round to putting up some physical LPs for order on the bandcamp page just in time for #bandcampFriday