2281
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
2282
The Case of the Modified Binaries
SUMMARY After creating and using a new exitmap module, I found downloaded binaries being patched through a Tor exit node in Russia. Tor is a wonderful tool for protecting the identity of journalists, their sources, and even regular users around the world; however, anonymity does
2283
DDoS Attacks: Best Practices for Prevention and Response
Late last month, Internet users across the eastern seaboard of the United States had trouble accessing popular websites, such as Reddit, Netflix, and the New York Times....
2284
Vulnerability of Speculative Processors to Cache Timing Side-Channel Mechanism
Arm is committed to upholding the highest standards of security across its products and the wider Arm ecosystem. To support its partners and the broader community, Arm publishes three types of security-related documentation, Security Bulletins, Security Updates, and Security Articles.
2285
Dutch Data Protection Authority: Microsoft breaches law with Windows 10
Met deze test controleren we of u een mens bent. Hiermee voorkomen we ongeoorloofd gebruik van deze dienst.
2286
Sinking container ships by hacking load plan software
In my previous article, we looked at the easiest route on to a ships network – the satcoms system. Even having compromised that, it could be a challenge to affect the ship’s navigation, propulsion and control systems – most of these networks are at least somewhat segregated from one another. That got me thinking about…
2287
Dell patches 12-year-old driver vulnerability impacting millions of PCs
Update your Dell devices now! SentinelLabs discover five high severity flaws in Dell firmware update driver impacting desktops, laptops, notebooks & more.
2288
Cloudflare is free of CAPTCHAs; Turnstile is free for everyone
Now that we’ve eliminated CAPTCHAs at Cloudflare, we want to hasten the demise of CAPTCHAs across the internet. We’re thrilled to announce that Turnstile is generally available, and Turnstile’s ‘Managed’ mode is now completely free to everyone for unlimited use.
2289
2290
VPN users unmasked by zero-day vulnerability in Virgin Media routers
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
2291
Quad9 public DNS moves to Switzerland
A public and free DNS service for a better security and privacy
2292
Kids, this is story of How I Met... my VPS hacked
Just recently I published my technical goals for 2014 and one of them was to learn more about security. Well it couldn’t have been more appropriate, my Virtual Private Server (VPS) just got hacked, for the second time (I use the VPS to host a Java web application). The first time, I basically rebuilt my server and…
2293
2294
CNET Injecting Malware into Downloads
Download.com has been caught inserting malware/adware into the 3rd party software it distributes
2295
PHP2Shell: Exploitation attempts and remediation trends
Wiz research has been monitoring PHP2Shell exploitation attempts, but none have succeeded so far. We examine the techniques used, what prevented the attacks from completing and how observed exposure has changed since disclosure.
2296
Keep Pushing: We Get 10 More Days to Reform Section 702
In a dramatic middle-of-the-night stand off, a bipartisan set of lawmakers pushing for true reform and privacy protections for Americans bought us some more time to fight! They are holding out for, at a minimum, the requirement of an actual probable cause warrant for FBI access to information...
2297
An Update on AMD Processor Security
The AMD Product Security Incident Response Team (PSIRT) is the focal point for reporting potential product security issues to AMD. AMD PSIRT works with both the AMD internal product security team and the external product security ecosystem, including security researchers, industry peers, government organizations…
2298
Docker container security cheat sheet
Discover essential Docker Security Best Practices for DevOps engineers and security professionals. Cheat sheet included for quick implementation!
2299
2300
Hooking Candiru: Another mercenary spyware vendor comes into focus
Candiru is a secretive Israel-based company that sells spyware exclusively to governments. Using Internet scanning, we identified more than 750 websites linked to Candiru’s spyware infrastructure. We found many domains masquerading as advocacy organizations such as Amnesty International, the Black Lives Matter…
2301
Detecting and countering misuse of AI: September 2026
Case studies from threat actors disrupted between December 2025 and August 2026 across seven areas of harm, from cyber operations to biological misuse.
2302
Apple's “iCloud Private Relay” broke risk based authentication
ZITADEL is the identity infrastructure platform that is built for developers and works for all users and applications.
2303
2304
Help Censored Users – Run a Tor Bridge
Today the Tor Project is launching the Run a Tor Bridge campaign. Participants are invited to contribute and help censored users by running a Tor bridge. You can find more details below, including our special reward kits for participants. The campaign will run from November 17 to January 7, 2022. Join us and help…
2305
2306
Mandatory encryption on XMPP starts today
Last year Peter Saint-Andre laid out a plan for strengthening the security of the XMPP network. The manifesto, to date signed by over 70 XMPP service operators and software developers, offered a rallying point for those interested in ensuring the security of XMPP for its users. Today is the date that the manifesto…
2307
Spoofing DNS records by abusing DHCP DNS dynamic updates
Akamai researchers discovered a new set of attacks against Active Directory (AD) using Microsoft DHCP servers that can lead to full AD takeover.
2308
What can we learn from leaked Insyde's BIOS for Intel Alder Lake
Leaked story timeline According to the timestamp of the github repository, an unidentified user uploaded the Insyde’s partial firmware solution (4.
2309
€1.2B GDPR fine for Meta
Facebook must stop further transfers of European personal data to the United States, given that Facebook is subject to US surveillance laws (like FISA 702 and EO 12.333).
2310
Welcome to Echelon 2.0
The NSA isn't spying on you. They don't have to. They just outsource it to businesses. Back 20 years ago, there was a conspiracy theory ...