Light bulb Limited Spots Available: Secure Your Lifetime Subscription on Gumroad!

Articles & Guides

All 1143 Featured 15 Articles 1141 Guides 2
Showing 15 of 1143 posts · RSS
Europol Just Seized 33 Servers and Quietly Read the Traffic of 'First VPN' Users for Months Before Pulling the Plug—506 Criminals Got a Pop Up Telling Them They Had Been Identified
Article

Europol Just Seized 33 Servers and Quietly Read the Traffic of 'First VPN' Users for Months Before Pulling the Plug—506 Criminals Got a Pop Up Telling Them They Had Been Identified

May 22, 2026 · 10 min read

Snapchat, Roblox, and Meta Just Promised Ofcom They Will Change Their Apps to Protect UK Children—YouTube and TikTok Said Their Existing Features Were Already Enough
Article

Snapchat, Roblox, and Meta Just Promised Ofcom They Will Change Their Apps to Protect UK Children—YouTube and TikTok Said Their Existing Features Were Already Enough

May 22, 2026 · 9 min read

SonicWall Patched This VPN Bug—But If You Did Not Run Six Extra Manual Steps, Attackers Can Still Bypass Your MFA With 13 Brute Force Attempts and Reach a File Server in Under 30 Minutes
Article

SonicWall Patched This VPN Bug—But If You Did Not Run Six Extra Manual Steps, Attackers Can Still Bypass Your MFA With 13 Brute Force Attempts and Reach a File Server in Under 30 Minutes

May 22, 2026 · 10 min read

Apple Just Said It Blocked $2.2 Billion in App Store Fraud Last Year—1.1 Billion Fake Accounts, 193,000 Banned Developers, and 11.2 Billion Stopped Since 2020
Article

Apple Just Said It Blocked $2.2 Billion in App Store Fraud Last Year—1.1 Billion Fake Accounts, 193,000 Banned Developers, and 11.2 Billion Stopped Since 2020

May 22, 2026 · 9 min read

A Rutgers Study of 1,201 Hospitals Found That Putting a Facebook or Google Tracking Pixel on Your Site Makes a Breach 46% More Likely—And 66% of US Hospitals Still Do It
Article

A Rutgers Study of 1,201 Hospitals Found That Putting a Facebook or Google Tracking Pixel on Your Site Makes a Breach 46% More Likely—And 66% of US Hospitals Still Do It

May 22, 2026 · 9 min read

An Undocumented Huawei Zero Day Knocked Out Every Phone in Luxembourg for Three Hours Last July—And Ten Months Later There Is Still No CVE, No Patch, and No Statement From the Vendor
Article

An Undocumented Huawei Zero Day Knocked Out Every Phone in Luxembourg for Three Hours Last July—And Ten Months Later There Is Still No CVE, No Patch, and No Statement From the Vendor

May 21, 2026 · 9 min read

The FTC Just Sent Warning Letters to Meta, Apple, Google, TikTok, and Eight Others—You Now Have 48 Hours to Remove Intimate Images or Pay $53,088 Per Violation
Article

The FTC Just Sent Warning Letters to Meta, Apple, Google, TikTok, and Eight Others—You Now Have 48 Hours to Remove Intimate Images or Pay $53,088 Per Violation

May 21, 2026 · 9 min read

A China Linked Group Just Spent Two Years Running Its Malware Through Discord and Microsoft OneDrive—Because There Is No Suspicious Domain to Block When the C2 Is Microsoft's Own API
Article

A China Linked Group Just Spent Two Years Running Its Malware Through Discord and Microsoft OneDrive—Because There Is No Suspicious Domain to Block When the C2 Is Microsoft's Own API

May 21, 2026 · 9 min read

Researchers Showed That a USB Drive, a Reboot, and Holding CTRL Bypass BitLocker on a Locked Windows 11 Laptop—Microsoft Has No Patch, Only Mitigations
Article

Researchers Showed That a USB Drive, a Reboot, and Holding CTRL Bypass BitLocker on a Locked Windows 11 Laptop—Microsoft Has No Patch, Only Mitigations

May 21, 2026 · 9 min read

A CISA Contractor Turned Off GitHub's Secret Detection On Purpose, Then Pushed AWS GovCloud Admin Keys and Plaintext Passwords to a Public Repo for Six Months
Article

A CISA Contractor Turned Off GitHub's Secret Detection On Purpose, Then Pushed AWS GovCloud Admin Keys and Plaintext Passwords to a Public Repo for Six Months

May 21, 2026 · 9 min read

Drupal Just Patched a Bug That Lets Any Anonymous Visitor Run Arbitrary SQL Against the Million Sites Running on PostgreSQL—No Authentication, No Login, No Plug In Required
Article

Drupal Just Patched a Bug That Lets Any Anonymous Visitor Run Arbitrary SQL Against the Million Sites Running on PostgreSQL—No Authentication, No Login, No Plug In Required

May 21, 2026 · 9 min read

Microsoft Just Killed the Service That Turned Its Own Azure Code Signing Platform Into a Malware Laundry for Five Ransomware Gangs—at $9,000 a Subscription
Article

Microsoft Just Killed the Service That Turned Its Own Azure Code Signing Platform Into a Malware Laundry for Five Ransomware Gangs—at $9,000 a Subscription

May 21, 2026 · 9 min read

One GitHub Employee Installed a VS Code Extension—Now TeamPCP Is Selling 3,800 of GitHub's Internal Repositories for $50,000
Article

One GitHub Employee Installed a VS Code Extension—Now TeamPCP Is Selling 3,800 of GitHub's Internal Repositories for $50,000

May 21, 2026 · 9 min read

ChromaDB Runs Your Code Before It Checks If You're Authenticated—And 73% of the AI Vector Databases on the Internet Still Have the Bug
Article

ChromaDB Runs Your Code Before It Checks If You're Authenticated—And 73% of the AI Vector Databases on the Internet Still Have the Bug

May 20, 2026 · 10 min read

EvilTokens Just Compromised 340 Microsoft 365 Tenants in Five Weeks Without Asking for a Single Password—The Victims Finished MFA on the Real Microsoft Site
Article

EvilTokens Just Compromised 340 Microsoft 365 Tenants in Five Weeks Without Asking for a Single Password—The Victims Finished MFA on the Real Microsoft Site

May 20, 2026 · 11 min read