2941
Attack Matrix for Kubernetes
While Kubernetes has many advantages, it also brings new security challenges.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,770 posts.
2942
Remote code execution in OpenSSH’s forwarded SSH-agent
CVE-2023-38408 is a remote code execution flaw in OpenSSH’s forwarded ssh-agent. Get full exploit details, impact analysis, and Qualys detection guidance.
2943
A look at Cloudflare's AI-coded OAuth library
I decided today to take a look at CloudFlare’s new OAuth provider library, which they apparently coded almost entirely with Anthropic’s Claude LLM: This library (including the schema do…
2944
What's the matter with PGP?
Last Thursday, Yahoo announced their plans to support end-to-end encryption using a fork of Google’s end-to-end email extension. This is a Big Deal. With providers like Google and Yahoo onboa…
2945
Clever uses of pass, the Unix password manager
Pass ( main site , Arch wiki ) is a command-line Unix password manager that utilizes GPG for all underlying encryption. However, beyond passwords, we can utilize it in a number of clever ways.
2946
South Korea’s online security dead end
Websites in South Korea often require installation of “security applications.” Not only do these mandatory applications not help security, way too often they introduce issues.
2947
2948
Anatomy of a Scam
There is a lot of material about the not-so-nice VCs who take advantage of young and inexperienced founders. But the reverse also happens, founders that try to get money out of VCs for projects that have zero chance of every coming to fruit. Or worse still, founders that pretend to have something on the go when they…
2949
Police Have Used License Plate Readers at Least 14x to Stalk Romantic Interests
This article was updated on September 3, 2026. For a more comprehensive and up-to-date tally of ALPR abuse, check out IJ’s database of ALPR abuse. […]
2950
The woes of sanitizing SVGs
Scratch has a long history of SVG-related vulnerabilities. The source of these is that Scratch parses user-generated (ie. attacker-controlled) content into an <svg> element and appends it into the main document for various operations (eg. measuring SVG bounding box in a more reliable way than viewbox or width/height).
2951
Log4j 2.15.0 – Previously suggested mitigations may not be enough
Log4j 2.15.0 and previously suggested mitigations may not be enough, Author: Renato Marinho
2952
Norton 360 Now Comes with a Cryptominer
Norton 360 , one of the most popular antivirus products on the market today, has installed a cryptocurrency mining program on its customers’ computers. Norton’s parent firm says the cloud-based service that activates the program and allows customers to profit from the scheme — in which the company keeps 15 percent of…
2953
How hard can generating 1024-bit primes be?
On the one hand they are easy to explain, they are just numbers that have no factors other than one and themselves, but on the other hand they contain endless complexity. They show up in numerous places, ranging from mathematical concepts and conjectures to interesting looking visualizations and cryptography…
2954
Why we have to boycott RSA
The only thing stopping corporations from putting NSA backdoors into their products is the risk of getting caught. RSA got caught backdoorin...
2955
A Developer’s Guide to Responding to National Security Letters
When the FBI Shows Up at Your Office with an NSL When you receive thousands of requests from law enforcement each year, it’s actually not a surprise wh
2956
HackedThat: Breaking in to a hardened server via the back door
Earlier this summer, the team atInversoft published a comprehensive andsophisticatedguide to user data security. Theguide spans from hardening servers from p...
2957
CPU Backdoors
It's generally accepted that any piece of software could be compromised with a backdoor. Prominent examples include the Sony/BMG installer , which had a backdoor built-in to allow Sony to keep users from copying the CD, which also allowed malicious third-parties to take over any machine with the software installed…
2958
2959
In Memoriam: John L. Young, Cryptome Co-Founder
John L. Young, who died March 28 at age 89 in New York City, was among the first people to see the need for an online library of official secrets, a place where the public could find out things that governments and corporations didn’t want them to know. He made real the idea – revolutionary in its...
2960
Tailscale doesn't want your password
Tailscale ditches passwords for passkeys, offering a secure, phishing-resistant, and convenient way to authenticate. Learn how passkeys work, why they’re better than passwords, and how to set them up on your tailnet.
2961
2962
Feds suspect ransom negotiator ran ShinyHunters extortion site
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the…
2963
Tracking One Year of Malicious Tor Exit Relay Activities (Part II)
>25% of the Tor network’s exit capacity has been attacking Tor users
2964
Germany: Data retention to be abolished
According to the German Minister of Justice data retention or "the storage of telecommunications data without any reason" could soon come to an end.
2965
uBlock, I exfiltrate: exploiting ad blockers with CSS
Ad blockers like uBlock Origin are extremely popular, and typically have access to every page a user visits. Behind the scenes, they're powered by community-provided filter lists - CSS selectors that
2966
Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure
Amazon Threat Intelligence identified a PHP2Shell exploitation attempt dating to Oct. 17, 2026, in MadPot telemetry, four days before public disclosure of CVE-2026-109618 and CVE-2026-109619. The exploit attempt originated from an IP address associated with a commercial anonymization network. While the vulnerability…
2967
Container Isolation Gone Wrong
A detailed troubleshooting story that covers both simple and complex tales of container isolation. Read this terrific guide for insight from A-Z.
2968
2969
2970
