4441
The golden age of scammers: AI-powered phishing
AI phishing is all over the headlines and that’s not going to change. Learn about the capabilities of the dark side of gen ai, and how to defend against it.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,768 posts.
4442
4443
AISLE’s autonomous analyzer found all CVEs in the January OpenSSL release
AISLE's autonomous analyzer found all 12 CVEs in the January 2026 coordinated release of OpenSSL, the open-source cryptographic library.
4444
4445
Call for Participation to Chaos Computer Club’s 37C3
The Chaos Communication Congress is the Chaos Computer Club’s (CCC) annual symposium and hacker party.
4446
Targeted attack on our management with the Triangulation Trojan
So you’ve heard of blockchain. But how can you use it in your enterprise today? Vitaly Mzokov explores the benefits and security challenges.
4447
4448
4449
Phasing Out SHA-1 on the Public Web
An algorithm we’ve depended on for most of the life of the Internet — SHA-1 — is aging, due to both mathematical and technological advances. Digital signatures incorporating the SHA-1 ...
4450
Why did the OpenSSL punycode vulnerability happen?
We look at how fuzzing should have caught the OpenSSL Punycode vulnerability, and why that code was even necessary in the first place.
4451
Ring0VBA – Getting Ring0 Using a Word Document
Hey hey! Welcome to my little corner of the internet. I am also known as 'Diz'! I made this site to document my research and contributions throughout the years, and other fun stuff I could come up with. Hope you're having a good day/afternoon/night wherever you are!
4452
If David Cameron bans secure encryption he can't intercept
8:30 : Wake up and get out of bed. Open the curtains to see the sun shining, put a dressing gown on and go downstairs to make some coffee.
4453
How to delete your data from data brokers
Digital safety is public safety. We're building the knowledge, standards, and tools people need to face online harm — together.
4454
Widespread exploitation of critical remote code execution in Apache Log4j
On December 10, 2021, Apache released a fix for CVE-2021-44228, a critical RCE vulnerability affecting Log4j that is being exploited in the wild.
4455
Phishing domains tanked after Meta sued Freenom
The number of phishing websites tied to domain name registrar Freenom dropped precipitously in the months surrounding a recent lawsuit from social networking giant Meta , which alleged the free domain name provider has a long history of ignoring abuse complaints about phishing websites while monetizing traffic to…
4456
Australian Government Scrambles to Authorize Mass Surveillance
This week, Australian Prime Minister Tony Abbott used recent terrorist threats as the backdrop of a dire warning to Australians that “for some time to come, the delicate balance between freedom and security may have to shift. There may be more restrictions on some, so that there can be more...
4457
Who Is Being Monitored?
Politicians regularly claim that they need to ban encryption to protect the children. But who is actually being monitored?
4458
Android wallpaper images can threaten privacy
Android 12's Material You could risk your privacy. Learn protective measures with our insights.
4459
4460
Chromium Blog: A Tale Of Two Pwnies (Part 2)
When we wrapped up our recent Pwnium event, we praised the creativity of the submissions and resolved to provide write-ups on how the two e...
4461
Understanding the Worst .NET Vulnerability
In this post I discuss request smuggling, the recent vulnerability in ASP.NET Core with a severity score of 9.9, and how attackers could exploit it
4462
How SHA-256 Works Step-by-Step
SHA-2 (Secure Hash Algorithm 2), of which SHA-256 is a part, is one of the most popular hash algorithms around. A cryptographic hash, also often referred to as a "digest", "fingerprint" or "signature", is an almost perfectly unique string of characters that is generated from a separate piece of input text. SHA-256…
4463
4464
Some interesting malware I found
Update 6/28/22: a reader reached out to me and let me know that Malwarebytes now detects and removes this malware as Adware.Choprex and OSX.Generic.Suspicious - so if you're reading this because you are affected, go download Malwarebytes and run a full scan. Thanks Yegor!
4465
Tor security advisory: “relay early” traffic confirmation attack
This advisory was posted on the tor-announce mailing list. SUMMARY: On July 4 2014 we found a...
4466
Attack of the week: FREAK (or 'factoring the NSA for fun and profit')
This is the story of how a handful of cryptographers ‘hacked’ the NSA. It’s also a story of encryption backdoors, and why they never quite work out the way you want them to. But I…
4467
Extra security measures for next week's releases
The core committee has decided that one of the security issues due to be fixed next week is sufficiently bad …
4468
Exploiting the Linux kernel via packet sockets
Guest blog post, posted by Andrey KonovalovIntroductionLately I’ve been spending some time ...
4469
FBI doesnt want you to know it uses NSLs to correlate identities you use online
Back in March, I parsed the declaration Nicholas Merrill submitted in his bid to reveal the contents of what he was asked to turn over via an NSL back in 2004. As a reminder, here’s what FBI permitted Merrill to reveal at the beginning of this suit. And here’s Merrill’s description of what kind of […]
4470
