2731
Cryptographic Issues in Cloudflare's Circl FourQ Implementation (CVE-2025-8556)
The vulnerabilities we found in Cloudflare's CIRCL FourQ implementation: invalid-point attacks, Edwards-curve edge cases, and the disclosure that fixed them.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 4,441 posts.
2732
Finding thousands of exposed Ollama instances using Shodan
We uncovered 1,100+ exposed Ollama LLM servers—20% with open models—revealing critical security gaps and the need for better LLM threat monitoring.
2733
Digicert Withdraws from the CA Security Council
DigiCert is electing to withdraw from the CA Security Council (CASC) as we believe CASC is moving in a direction that DigiCert does not support. Read more.
2734
2735
Beware of the GIF: Account Takeover Vulnerability in Microsoft Teams
Protect your organization with Idira®. Modernize identity governance, automate access reviews, and secure every identity across your hybrid cloud environment.
2736
2737
2738
Robust Adversarial Examples
Stay up to speed on the rapid advancement of AI technology and the benefits it offers to humanity.
2739
Improving C# Memory Safety
The `unsafe` keyword is being redesigned to mark caller-facing contracts rather than just syntax. Safety obligations between callers and callees become visible and reviewable. The model is motivated by the rise of AI-assisted code generation and arrives as a preview in .NET 11.
2740
Building Facebook's Service Encryption Infastructure
We run one of the largest microservices deployments in the world, with thousands of services that perform billions of requests per second. Keeping information secure as these services communicate g…
2741
HAProxy is not affected by the HTTP/2 Rapid Reset Attack
HAProxy products are unaffected by CVE-2023-44487, which could allow a DoS attack against web servers, reverse proxies, and more. Stay tuned for updates.
2742
Mozilla SOPS with KMS and Git is underrated (2019)
Hashicorp Vault hogs the limelight as cost-effective powerful KMS solutions are hidden in plain sight. Click here to explore Mozilla SOPS.
2743
2744
How I hacked hundreds of companies through their helpdesk (2017)
UPDATE: The Next Web wrote a story about my findings…
2745
DNS-over-HTTP/3 in Android
Posted by Matthew Maurer and Mike Yu, Android team To help keep Android users’ DNS queries private, Android supports encrypted DNS. I...
2746
2747
CVE-2019-9193: Not a Security Vulnerability
There is widespread mention in the media of a security vulnerability in PostgreSQL, registered as [CVE-2019-9193](https://nvd.nist.gov/vuln/detail/CVE-2019-9193). The PostgreSQL Security Team …
2748
Opening Up the Samsung Q60 Series Smart TV (2019)
True cyber security combines advanced technology and best practice. Get tips and read articles on how to take your online security even further.
2749
SSH Emergency Access
Learn how to prepare for emergency access to your SSH hosts.
2750
Route leak incident on January 22, 2026
An automated routing policy configuration error caused us to leak some Border Gateway Protocol prefixes unintentionally from a router at our Miami data center. We discuss the impact and the changes we are implementing as a result.
2751
Announcing Certbot: EFF's Client for Let's Encrypt
EFF is proud to introduce Certbot, a powerful tool to help websites encrypt their traffic. Certbot is the next iteration of the Let's Encrypt Client; it obtains TLS/SSL certificates and can automatically configure HTTPS encryption on your server. It's still in beta for now, but we plan to release...
2752
2753
Firefox Roadmap for Flash End-Of-Life
This morning, Adobe announced its roadmap to stop supporting Flash at the end of 2020. Working with Adobe and other browser vendors, Mozilla has prepared a roadmap for Flash support ...
2754
Criminal complaint against facial recognition company Clearview AI
Clearview AI is known for scraping billions of photos of people around the world on the internet – and selling its facial recognition system to law enforcement and state actors
2755
Fuzzing a DNS parser written in Go
Here at CloudFlare we are heavy users of the github.com/miekg/dns Go DNS library and we make sure to contribute to its development as much as possible. Therefore when Dmitry Vyukov published go-fuzz and started to uncover tens of bugs in the Go standard library, our task was clear.
2756
We Shouldn’t Wait Another 15 Years for a Conversation About Government Hacking
With high-profile hacks in the headlines and government officials trying to reopen a long-settled debate about encryption, information security has become a mainstream issue. But we feel that one element of digital security hasn’t received enough critical attention: the role of government in...
2757
Ransomware-ing a DSLR Camera
Research by: Eyal Itkin TL;DR Cameras. We take them to every important life event, we bring them on our vacations, and we store them in a protective case to keep them safe during transit. Cameras are more than just a tool or toy; we entrust them with our very memories, and so they are very important […]
2758
2759
2760
