301
iOS Single App Mode Escape
This blogpost, written by WithSecure’s STINGR Group, presents the analysis of a security incident that happened in February 2026 and was investigated by the WithSecure Incident Response team.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 317 posts.
302
Supply Chain Attack Using PyPI Packages “Colorslib”, “Httpslib”, and “Libhttps”
The FortiGuard Labs team discovered an attack embedded in three PyPI packages called ‘colorslib’, ‘httpslib’, and “libhttps”. Read our blog to learn more.…
303
Vulnerabilities in the TPM 2.0 reference implementation code
In this blog post we discuss the details of two vulnerabilities we discovered in the Trusted Platform Module (TPM) 2.0 reference implementation code. These two vulnerabilities, an out-of-bounds write (CVE-2023-1017) and an out-of-bounds read (CVE-2023-1018), affected several TPM 2.0 software implementations (such as…
304
Can I remove my personal data from GenAI training datasets?
Short answer: Practically-speaking, probably not.
305
An investigation into Apple’s new Relay network
Guest Post: Analysing Apple Private Relay’s effects on the Internet and future measurement-based research.
306
307
Letting users block injected third-party DLLs in Firefox
Users can now block poorly behaving third-party DLLs in Firefox to improve stability and performance.
308
Colorado Supreme Court Upholds Keyword Search Warrant
Today, the Colorado Supreme Court became the first state supreme court in the country to address the constitutionality of a keyword warrant—a digital dragnet tool that allows law enforcement to identify everyone who searched the internet for a specific term or phrase. In a weak and ultimately...
309
Kaspersky discloses iPhone hardware feature vital in Operation Triangulation
Kaspersky’s Global Research and Analysis Team (GReAT) has unveiled a previously unknown hardware feature in Apple iPhones, pivotal to the Operation Triangulation campaign. The team presented this discovery at the 37th Chaos Communication Congress in Hamburg.
310
“Please do not make it public” (Tencent’s Sogou Input Method)
In this report, we analyze the Windows, Android, and iOS versions of Tencent’s Sogou Input Method, the most popular Chinese-language input method in China. Our analysis found serious vulnerabilities in the app’s custom encryption system and how it encrypts sensitive data. These vulnerabilities could allow a network…
311
312
Apple and Google Monitor Notifications. We Need Push Notification Alternatives
We're here to stop surveillance by corporations like Google and Apple. That's why we replaced Google's FCM with our own notification system and keep Apple Notification Data at a minimum. Learn here why this is important.
313
Jump Servers
Today we're going to talk about how jump servers work and how hoop can be a great alternative to them. Jump Servers are nodes that will grant access to your underline infra-structure services. Imagine that someone from your company need to access a database or an application inside your internal infra-structure…
314
Port forwarding
At AzireVPN, we are dedicated to providing our users with advanced features that enhance their online experience. We are thrilled to announce the launch of our latest addition: Port forwarding. In this blog post, we will delve into what Port forwarding is and how it can be leveraged to open
315
Restricting network access using Linux Network Namespaces
Our last blog post on Linux mount namespaces explored ways to restrict access to the file system. In this post we'll show how to restrict access to the network.
316
“Pay or Okay” on tech news site heise.de illegal, decides German DPA
The Data Protection Authority of Lower Saxony (LfD) decided that the “Pay or Okay” solution used by heise.de was unlawful
317
Analysis of Storm-0558 techniques for unauthorized email access
Deeper analysis of Storm-0558 techniques for obtaining unauthorized access to email data, tools, and unique infrastructure characteristics.