1111
Someone has been attempting to DDoS us for weeks and we do nothing
Someone has been attempting to DDoS us for weeks now. They have flooded our server with hundreds of millions of requests and attempted to download our setup…
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,440 posts.
1112
DEV-0537 targeting organizations for data exfiltration and destruction
The activity we have observed has been attributed to a threat group that Microsoft tracks as DEV-0537, also known as LAPSUS$. DEV-0537 is known for using a pure extortion and destruction model without deploying ransomware payloads.
1113
A Post-Quantum Future for Let's Encrypt
Let’s Encrypt is committed to a post-quantum-safe Web PKI. The path we’re planning to take is Merkle Tree Certificates (“MTCs”), a new approach that adds post-quantum authentication to the web without sacrificing the speed and reliability that have made TLS universal. This post is about these plans and why we believe…
1114
Threat actor abuses Cloudflare tunnels to deliver remote access trojans
Key findings Proofpoint has observed an increase in malware delivery via TryCloudflare Tunnel abuse. The activity is financially motivated and delivers exclusively remote
1115
1116
1117
Tor Browser 4.0 is released
Update (Oct 22 13:15 UTC): Windows users that are affected by Tor Browser crashes might try to...
1118
1119
Microsoft Defender SmartScreen is hurting independent developers
Download Image wallpapers and background images for FREE! 200 Image wallpapers in 1080P, 2K, 4K, 5K HD that fit all your devices!
1120
How Monero’s proof of work works
Monero does not use a simple fixed hash like Bitcoin. Its proof of work, RandomX, turns mining into running random CPU-friendly programs over a large memory dataset, which is why it behaves so differently from ASIC-first systems.
1121
1122
The Next Front in the New Crypto Wars: WhatsApp
In Saturday’s edition of the New York Times, Matt Apuzzo reports that the Department of Justice is locked in a “prolonged standoff” with WhatsApp. The government is frustrated by its lack of real-time access to messages protected by the company’s end-to-end encryption. The story may represent a...
1123
"cat readme.txt" is not safe if you use iTerm2
Turning "cat readme.txt" into arbitrary code execution in iTerm2.
1124
Don’t Let Facebook, or Any Tracker, Follow You on the Web
Using the web today, you are a target. And because of the rampant tracking across websites, each time you use the internet, you become an easier target. Tor Browser can help.
1125
Report on Microsoft Office and Windows software: still privacy risks remaining
On behalf of the Dutch Ministry of Justice and Security, Privacy Company has investigated the privacy risks related to the use of Microsoft Windows 10 Enterprise, Office 365 ProPlus and Office Online, as well as the mobile Office apps. With the Ministry’s permission, we are publishing two blog posts about our…
1126
1127
1128
Can you reverse engineer our neural network?
A lot of “capture-the-flag” style ML puzzles give you a black box neural net, and your job is to figure out what it does. When we were thinking of creating o...
1129
"Adobe has released Adobe Photoshop CS6, which addresses these vulnerabilities"
Adobe applies hundreds of security processes and controls to help us comply with industry-accepted standards.
1130
Malicious VSCode extensions with more than 45k installs
Highlights: CloudGuard Spectral detected malicious extensions on the VSCode marketplace Users installing these extensions were enabling attackers to steal %
1131
1132
GrapheneOS migrates server infrastructure from France
The GrapheneOS project has announced on X that they are ceasing all operations in France, asserting that the country is no longer safe for "open source projects"
1133
1134
GitHub’s database of security advisories is now open source
Anyone can now provide additional information and context to further the community’s understanding and awareness of security advisories.
1135
Exposing the secret Office 365 detailed activity logs and forensics tool
An ethical crisis in the digital forensics industry came to a head last week with the release of new details on Microsoft’s undocumented “Activities” API. A previously unknown trove of access and activity logs held by Microsoft allows investigators to track Office 365 mailbox activity in minute detail. Following a…
1136
New USPTO Memo Makes Fighting Patent Trolls Even Harder
The U.S. Patent and Trademark Office (USPTO) just made a move that will protect bad patents at the expense of everyone else. In a memo released February 28, the USPTO further restricted access to inter partes review, or IPR—the process Congress created to let the public challenge invalid patents...
1137
The ProtonMail Android app is now open source
Our Proton Mail Android app is open source. We are committed to transparency and contributing to the open source and privacy tech community.
1138
Microsoft takes down No-IP.com domains
Access to this page requires authorization. You can try signing in or changing directories .
1139
Making it clear when we're on a call with you to protect you from fraud
If someone calls you claiming to be from Monzo, you can now check to see if they’re telling the truth or not in the Monzo app.
1140
LastPass: Notice of Security Incident
Please refer to the latest article for updated information.nbs[..]