Light bulb Limited Spots Available: Secure Your Lifetime Subscription on Gumroad!

Articles & Guides

All 908 Featured 15 Articles 906 Guides 2
Showing 15 of 908 posts · RSS
CISA Opened Its Known Exploited Vulnerabilities Catalog to Outside Researchers on May 21 With a Structured Nomination Form—The Agency That Previously Took Submissions by Email at vulnerability@cisa.dhs.gov Now Wants the Data Fields Filled In Before It Triages the Report
Article

CISA Opened Its Known Exploited Vulnerabilities Catalog to Outside Researchers on May 21 With a Structured Nomination Form—The Agency That Previously Took Submissions by Email at vulnerability@cisa.dhs.gov Now Wants the Data Fields Filled In Before It Triages the Report

May 26, 2026 · 7 min read

Linux Just Got Two Local Privilege Escalation Bugs in One Week—Both AI Discovered, and the OpenSSF's Christopher Robinson Says 30% of the Security Reports He Triages Are Duplicates From People Running the Same Scanners
Article

Linux Just Got Two Local Privilege Escalation Bugs in One Week—Both AI Discovered, and the OpenSSF's Christopher Robinson Says 30% of the Security Reports He Triages Are Duplicates From People Running the Same Scanners

May 25, 2026 · 7 min read

The EU Commission Just Missed Its February Deadline for the High Risk AI Guidelines—Released the Draft on May 19, Three Months Late, With Compliance Now Bumped to December 2027 and August 2028 After 110 European Businesses Lobbied for the Extension
Article

The EU Commission Just Missed Its February Deadline for the High Risk AI Guidelines—Released the Draft on May 19, Three Months Late, With Compliance Now Bumped to December 2027 and August 2028 After 110 European Businesses Lobbied for the Extension

May 25, 2026 · 7 min read

A Russian Speaking Fraudster Just Spent Eight Months Running a MAGA Themed Crypto Scam With 73 Stolen Google Gemini Keys—And Drained Victim Wallets With AI Generated Q Drop Style Phishing Across 40 Plus Blockchain Addresses
Article

A Russian Speaking Fraudster Just Spent Eight Months Running a MAGA Themed Crypto Scam With 73 Stolen Google Gemini Keys—And Drained Victim Wallets With AI Generated Q Drop Style Phishing Across 40 Plus Blockchain Addresses

May 25, 2026 · 7 min read

Google Marked a Chromium Botnet Bug 'Fixed' Three Months Ago Without Patching It—Then Accidentally Opened the Whole Disclosure to the Public on May 20, And the Exploit Still Works on Chrome and Edge Today
Article

Google Marked a Chromium Botnet Bug 'Fixed' Three Months Ago Without Patching It—Then Accidentally Opened the Whole Disclosure to the Public on May 20, And the Exploit Still Works on Chrome and Edge Today

May 25, 2026 · 7 min read

Underminr Just Made Domain Fronting Work Again on 88 Million Domains—Researchers Showed Attackers Can Route Command and Control Traffic Through Trusted CDN Tenants Without Setting Off Any Protective DNS Filter
Article

Underminr Just Made Domain Fronting Work Again on 88 Million Domains—Researchers Showed Attackers Can Route Command and Control Traffic Through Trusted CDN Tenants Without Setting Off Any Protective DNS Filter

May 25, 2026 · 7 min read

The 23 Year Old From Ottawa Behind the Largest DDoS Attack in History—30 Terabits a Second From a Botnet of Digital Photo Frames and Webcams—Just Got Arrested After Krebs Named Him in February
Article

The 23 Year Old From Ottawa Behind the Largest DDoS Attack in History—30 Terabits a Second From a Botnet of Digital Photo Frames and Webcams—Just Got Arrested After Krebs Named Him in February

May 25, 2026 · 7 min read

Scammers Have Been Sending Phishing From msonlineservicesteam@microsoftonline.com for Months—The Exact Microsoft Address That Sends Your Real Account Alerts, And Spamhaus Says Microsoft's Own Verification Systems Are Letting It Pass
Article

Scammers Have Been Sending Phishing From msonlineservicesteam@microsoftonline.com for Months—The Exact Microsoft Address That Sends Your Real Account Alerts, And Spamhaus Says Microsoft's Own Verification Systems Are Letting It Pass

May 25, 2026 · 7 min read

Verizon Just Said 31% of Breaches Started With an Exploited Bug Last Year—Up From 20%—And the Companies It Studied Are Patching Only 26% of the Critical Ones, in a Median of 43 Days
Article

Verizon Just Said 31% of Breaches Started With an Exploited Bug Last Year—Up From 20%—And the Companies It Studied Are Patching Only 26% of the Critical Ones, in a Median of 43 Days

May 25, 2026 · 7 min read

Italy's Guardia di Finanza Just Dismantled the CINEMAGOAL Piracy App That Was Scraping Fresh Netflix, Disney+, Spotify, Sky, and DAZN Decryption Keys From Real Subscriptions Every Three Minutes—And Sent Penalty Letters to 1,000 of Its Subscribers for Up to €5,000 Each
Article

Italy's Guardia di Finanza Just Dismantled the CINEMAGOAL Piracy App That Was Scraping Fresh Netflix, Disney+, Spotify, Sky, and DAZN Decryption Keys From Real Subscriptions Every Three Minutes—And Sent Penalty Letters to 1,000 of Its Subscribers for Up to €5,000 Each

May 24, 2026 · 9 min read

The FBI Just Warned That Kali365 Is the First Microsoft 365 Phishing Service That Bypasses MFA Without Ever Asking for a Password—Victims Complete the Real Microsoft Login Flow Themselves and Hand Over OAuth Tokens That Survive Every Additional Check
Article

The FBI Just Warned That Kali365 Is the First Microsoft 365 Phishing Service That Bypasses MFA Without Ever Asking for a Password—Victims Complete the Real Microsoft Login Flow Themselves and Hand Over OAuth Tokens That Survive Every Additional Check

May 24, 2026 · 9 min read

Ubiquiti Just Patched Three Maximum Severity Bugs in UniFi OS That Let an Unauthenticated Remote Attacker Take Over the Console Sitting at the Front of Roughly 100,000 Internet Exposed Networks—Half of Them in the United States
Article

Ubiquiti Just Patched Three Maximum Severity Bugs in UniFi OS That Let an Unauthenticated Remote Attacker Take Over the Console Sitting at the Front of Roughly 100,000 Internet Exposed Networks—Half of Them in the United States

May 24, 2026 · 9 min read

The Netherlands Just Seized 800 Servers From Stark Industries—the Bulletproof Hoster That Already Got EU Sanctioned a Year Ago for Renting Infrastructure to Russian Hacktivists, Disinformation Operations, and a DDoS Campaign Against a Danish Water Utility
Article

The Netherlands Just Seized 800 Servers From Stark Industries—the Bulletproof Hoster That Already Got EU Sanctioned a Year Ago for Renting Infrastructure to Russian Hacktivists, Disinformation Operations, and a DDoS Campaign Against a Danish Water Utility

May 24, 2026 · 9 min read

REMUS Is the First Commercial Infostealer That Pulls 1Password, LastPass, and Bitwarden Extension Data Out of IndexedDB—and Resolves Its C2 Through an Ethereum Smart Contract Nobody Can Take Down
Article

REMUS Is the First Commercial Infostealer That Pulls 1Password, LastPass, and Bitwarden Extension Data Out of IndexedDB—and Resolves Its C2 Through an Ethereum Smart Contract Nobody Can Take Down

May 24, 2026 · 9 min read

Trend Micro Just Patched a Zero Day That Lets an Attacker Use Apex One's Own Update Pipeline as a Malware Delivery System—CISA Gave Federal Agencies Two Weeks
Article

Trend Micro Just Patched a Zero Day That Lets an Attacker Use Apex One's Own Update Pipeline as a Malware Delivery System—CISA Gave Federal Agencies Two Weeks

May 24, 2026 · 9 min read