61
Zimbra 0-day used to steal email data from government organizations
TAG’s discovery of a 0-day exploit used to steal email data from international government organizations.
New
The latest blog posts to take off on Hacker News. 617 posts.
62
From email to phone number, a new OSINT approach (2019)
How to find out someone's phone number if you just know their email address and how it can be automated using a new OSINT tool: email2phonenumber
63
64
'Reptar', a new CPU vulnerability
A new CPU vulnerability, ‘Reptar,’ found by Google researchers, has been patched by Google and Intel. Here’s what you need to know.
65
Reptar
We have a CPU mystery! We found a way to cause some processors to enter a glitch state where the normal rules don’t apply, but what does that mean…?
66
PyPI has completed its first security audit
We are proud to announce PyPI's first external security audit.
67
68
We've learned nothing from the SolarWinds hack
Mac's Tech Blog
69
70
Discouraging the use of web application firewalls
Mac's Tech Blog
71
Reauthorizing mass surveillance shouldn't be tied to funding the government
Section 702 is the controversial and much-abused mass surveillance authority that expires in December unless Congress renews it. EFF and others have been working hard to get real reforms into the law and have opposed a renewal, and now, we’re hearing about a rushed attempt to tie renewal to funding...
72
Ubuntu Pro Shenanigans
10/18/2026: Drive Specifications Matter (Complete) 10/09/2026: Gear Review: XTEINK X4 Pro 10/09/2026: Gear Review: OLYVUE V78 Dash Cam 10/01/2026: UNREDACTED Magazine Issue 013 09/21/2026: Updated OSINT Scripts 09/20/2026: New Socials 08/29/2026: Blog Archive 08/20/2026: Free PDF Self-Publishing Guide 08/19/2026: OS…
73
Hacking Google Bard – From Prompt Injection to Data Exfiltration
Recently Google Bard got some powerful updates, including Extensions. Extensions allow Bard to access YouTube, search for flights and hotels, and also to access …
74
Reasons to Prefer Blake3 over Sha256
This post is a copy of tweets by Zooko Wilcox-O'Hearn . SHA256 was designed by the NSA. BLAKE (the original) and BLAKE3 were designed by Jean-Philippe Aumasson
75
76
77
It's still easy for anyone to become you at Experian
In the summer of 2022, KrebsOnSecurity documented the plight of several readers who had their accounts at big-three consumer credit reporting bureau Experian hijacked after identity thieves simply re-registered the accounts using a different email address. Sixteen months later, Experian clearly has not addressed this…
78
Debunking the Myth of "Anonymous" Data
Today, almost everything about our lives is digitally recorded and stored somewhere. Each credit card purchase, personal medical diagnosis, and preference about music and books is recorded and then used to predict what we like and dislike, and—ultimately—who we are. This often happens without our...
79
Are we doing this again? Yes, we're doing this again
Y esterday I was rudely summoned away from a beautiful autumn day of wild foraging by The King.
80
EU's concealment of secret 'expert list' on CSAM regulation is maladministration
After a year-long inquiry, the EU Ombudsman recommends that the European Commission should monitor stages of progress in every Big Tech case that the Irish Data Protection Commission is responsible for.
81
What the QWAC? An EV Certificate all over again
Almost 2 years on from the last time I wrote about QWACs, I'm sadly not here to tell you that things have gone well since then. In fact, I'm actually here to tell you that things are not going well at all... QWAC Back in Jan 2022, I
82
Article 45 of eIDAS 2.0 will roll back web security by 12 years
The EU is poised to pass a sweeping new regulation, eIDAS 2.0. Buried deep in the text is Article 45, which returns us to the dark ages of 2011, when certificate authorities (CAs) could collaborate with governments to spy on encrypted traffic—and get away with it. Article 45 forbids browsers from...
83
Real vs. fake AirPods with industrial CT
CT scans of counterfeit AirPods Pro and MagSafe chargers reveal pouch cell batteries in circular cavities, internal weights, and a fake ground pin.
84
PostgreSQL Encryption: The Available Options
On an episode of Postgres FM , the hosts had a (very brief) discussion of data encryption in PostgreSQL. While Postgres FM is a podcast well worth a subscribe, the hosts aren’t data security experts, and so as someone who builds a queryable database encryption system , I found the coverage to be somewhat… lacking. I…
85
Apple developer boycott of Feedback Assistant
I'm organizing a boycott of Apple's Feedback Assistant , starting immediately, and I encourage all Apple developers to join me. Here's how I propose that each of us can effectively participate in the boycott and let Apple know that we're boycotting Feedback Assistant:
86
Who's behind the SWAT USA reshipping service?
Last week, KrebsOnSecurity broke the news that one of the largest cybercrime services for laundering stolen merchandise was hacked recently, exposing its internal operations, finances and organizational structure. In today’s Part II, we’ll examine clues about the real-life identity of “ Fearlless ,” the nickname…
87
The first stable release of a memory safe sudo implementation
Prossimo is pleased to announce the first stable release of sudo-rs, our Rust rewrite of the critical sudo utility. The sudo utility is one of the most common ways for engineers to cross the privilege boundary between user and administrative accounts in the ubiquitous Linux operating system. As such, its security is…
88
Appeals court denies judicial immunity to judge who personally searched home
FOR IMMEDIATE RELEASE: 10/30/2023 CONTACT: Phillip Suderman, psuderman@ij.org, (850) 376-4110 ARLINGTON, VA.—Today, the 4th U.S. Circuit Court of Appeals unanimously ruled in favor of Matthew Gibson […]
89
Enable ARMv9 Memory Tagging Extension (MTE) on Pixel 8
The Pixel 8 hardware ( Tensor G3 ) supports the ARM Memory Tagging Extension (MTE) , and software support is available both in Android userspace and the Linux kernel. This feature is a powerful defense against linear buffer overflows and many types of use-after-free flaws. I’m extremely happy to see this hardware…
90
An experimental Android WebView Media Integrity API early next year
We’re piloting an experimental Android WebView Media Integrity API with select embedded media providers early next year.