Every blog post that took off on Hacker News, ranked by the votes of its best submission. 4,441 posts.
As part of our commitment to security, we regularly monitor our services for actual, suspected, or attempted malicious or unusual activity. We recently investigated reports of an uptick of users recei[..]
News and information from Gentoo Linux
Daniel Lehmann, University of Stuttgart; Johannes Kinder, Bundeswehr University Munich; Michael Pradel, University of Stuttgart
We’re sharing details about three deceptive networks we took down during the last quarter.
The Latest News from Research at Kudelski Security
Over the past one and a half years, we have studied two phenomena that enable an unprivileged attacker to leak arbitrary information on all modern AMD CPUs:
Vulnerabilities discovered by Tyler Bohan of Cisco Talos. Many of the wide variety of file formats are designed for specialized uses within specific industries. Apple offers APIs as interfaces to provide a definitive way to access image data for multiple image formats on the Apple OS X platform. Talos is
Anthropic's new system, Clio, analyzes how people use AI while maintaining their privacy.
Let’s talk about DNS. After all, what could go wrong? It’s just cache invalidation and naming things .
With heavy hearts, we announce that Felix “FX” Lindner —a cherished friend, and the founder and owner of Recurity Labs—passed away on 2026-03-01.
Browse how-to articles on starting, running, and marketing your business, plus thought-provoking podcasts and films to inspire your inner entrepreneur.
We discovered that, until recently, Google Public DNS was theoretically vulnerable to a DNS cache poisoning attack on DNSSEC-signed domain names. Google fixed the vulnerability as a result of our report
TAG’s discovery of a 0-day exploit used to steal email data from international government organizations.
Today Facebook announced the roll-out of its Off-Facebook Activity tool (initially introduced as “Clear History” nearly two years ago). The tools shows you a list of apps, websites, and businesses that Facebook knows you have visited through its business tools (including Facebook Login, Facebook’s...
With our expertise we create security solutions which are robust and easy to use, leveraging leading open source technology.
Mitchell Baker and Ankit Gadgil: India should pause further roll out of Aadhaar until a law protecting individual security is passed.
We're crowdsourcing ideas and recommendations to help us enhance the privacy and security benefits of DNS-over-HTTPS (DoH) for users around the world
Find out what your organisation must do to comply with the GDPR and learn how you can help individuals to exercise their data protection rights.
The Sophos Blog
In 2026, LLM-powered code scanners are uncovering security vulnerabilities in open source projects at 10x the historical rate. Here's what OSS maintainers and users need to do about it.
Get started with one of our guides, or jump straight into the API documentation.
Meet GPT-5.6-Cyber, OpenAI’s cybersecurity-specific model available through Daybreak Red for authorized vulnerability research, exploit validation, and security testing.
DNSSEC is a system of digital signatures that prevent DNS spoofing. Using DNSSEC, it does not matter where your DNS answers came from, since the DNS resolver or application can verify the DNSSEC signatures to ensure the DNS data is not tampered with..DNS is hierarchical, which means that the parent zone vouches for…
Does it stop third-party tracking? Or is it just an illusion of privacy?
How to use HTTP proxies to prevent credential exposure in Claude Code sandboxes.
Mozilla has discovered that a Certificate Authority (CA) called WoSign has had a number of technical and management failures. Most seriously, we discovered they were backdating SSL certificates in order ...
