Light bulb Limited Spots Available: Secure Your Lifetime Subscription on Gumroad!

Articles & Guides

All 908 Featured 15 Articles 906 Guides 2
Showing 15 of 908 posts · RSS
An AI Found a Use After Free Bug in Exim—the Mail Server Behind More Than Half the Public Internet—And Triggering It Takes a Single Stray Byte at the Wrong Moment
Article

An AI Found a Use After Free Bug in Exim—the Mail Server Behind More Than Half the Public Internet—And Triggering It Takes a Single Stray Byte at the Wrong Moment

May 14, 2026 · 6 min read

84 Malicious TanStack Packages Just Got Published Through TanStack's Own Release Pipeline—Using a Stolen OIDC Token Pulled From the Runner's Process Memory
Article

84 Malicious TanStack Packages Just Got Published Through TanStack's Own Release Pipeline—Using a Stolen OIDC Token Pulled From the Runner's Process Memory

May 13, 2026 · 12 min read

The Opt Out Window Closes May 29: Google Will Pay $135 Million Because Android Phones Were Calling Home in the Background—Even While Idle
Article

The Opt Out Window Closes May 29: Google Will Pay $135 Million Because Android Phones Were Calling Home in the Background—Even While Idle

May 13, 2026 · 10 min read

Microsoft Just Patched a Word Bug You Trigger Without Opening the File—Outlook's Preview Pane Is the Attack Vector
Article

Microsoft Just Patched a Word Bug You Trigger Without Opening the File—Outlook's Preview Pane Is the Attack Vector

May 13, 2026 · 10 min read

Meta Capped Its Own Anti Scam Spending at 0.15% of Revenue—Santa Clara County Just Sued Over $7 Billion in "Violating Revenue"
Article

Meta Capped Its Own Anti Scam Spending at 0.15% of Revenue—Santa Clara County Just Sued Over $7 Billion in "Violating Revenue"

May 13, 2026 · 10 min read

TeamPCP Just Backdoored Checkmarx's Jenkins Plugin—the Same Group That Hit Trivy and Used Stolen Credentials From One Build Server to Hop to the Next
Article

TeamPCP Just Backdoored Checkmarx's Jenkins Plugin—the Same Group That Hit Trivy and Used Stolen Credentials From One Build Server to Hop to the Next

May 12, 2026 · 11 min read

Four Canadian Privacy Regulators Just Ruled OpenAI Violated Five Privacy Laws to Train ChatGPT—and the 'Publicly Available Information' Defense Failed in All Four Provinces
Article

Four Canadian Privacy Regulators Just Ruled OpenAI Violated Five Privacy Laws to Train ChatGPT—and the 'Publicly Available Information' Defense Failed in All Four Provinces

May 12, 2026 · 11 min read

Texas Just Filed a 'Surveillance Machinery' Lawsuit Against Netflix—5 Petabytes of Behavioral Data a Day, Captured From Kid Profiles Too
Article

Texas Just Filed a 'Surveillance Machinery' Lawsuit Against Netflix—5 Petabytes of Behavioral Data a Day, Captured From Kid Profiles Too

May 12, 2026 · 10 min read

California Just Issued Its Largest Privacy Fine Ever—$12.75 Million—Because GM Sold Hundreds of Thousands of OnStar Drivers' Locations to Two Data Brokers
Article

California Just Issued Its Largest Privacy Fine Ever—$12.75 Million—Because GM Sold Hundreds of Thousands of OnStar Drivers' Locations to Two Data Brokers

May 12, 2026 · 9 min read

RansomHouse Says It Stole the Source Code Behind Trellix—the Cybersecurity Firm 50,000 Companies and Governments Rely On
Article

RansomHouse Says It Stole the Source Code Behind Trellix—the Cybersecurity Firm 50,000 Companies and Governments Rely On

May 11, 2026 · 7 min read

A "Screenshot" in DigiCert's Support Chat Was Actually a Screensaver Virus—And It Walked Out With 60 Valid Code Signing Certificates
Article

A "Screenshot" in DigiCert's Support Chat Was Actually a Screensaver Virus—And It Walked Out With 60 Valid Code Signing Certificates

May 11, 2026 · 7 min read

The First Infostealer That Doesn't Decrypt Anything on Your Computer Just Hit 1,715 Victims—Including Gmail and Coinbase Logins
Article

The First Infostealer That Doesn't Decrypt Anything on Your Computer Just Hit 1,715 Victims—Including Gmail and Coinbase Logins

May 11, 2026 · 7 min read

Cushman & Wakefield Got Phished by Phone—Then ShinyHunters Dumped 50GB of Salesforce Data When the Ransom Deadline Passed
Article

Cushman & Wakefield Got Phished by Phone—Then ShinyHunters Dumped 50GB of Salesforce Data When the Ransom Deadline Passed

May 11, 2026 · 6 min read

JDownloader's Own Website Quietly Replaced the Windows Installer With a Python Backdoor for at Least 24 Hours—Defender Was the Only Thing That Caught It
Article

JDownloader's Own Website Quietly Replaced the Windows Installer With a Python Backdoor for at Least 24 Hours—Defender Was the Only Thing That Caught It

May 10, 2026 · 9 min read

The #1 Trending Repository on Hugging Face Last Week Was Not From OpenAI—It Was a Rust Infostealer Disguised as 'Privacy Filter'
Article

The #1 Trending Repository on Hugging Face Last Week Was Not From OpenAI—It Was a Rust Infostealer Disguised as 'Privacy Filter'

May 10, 2026 · 9 min read