Drag to turn the sky · scroll or pinch to move · choose any star to go there
Turning on the stars…
Topic · Privacy and security
Cybersecurity news
178 links saved from 2009 to 2026; 155 with a note, 108 in a Weekly Thing.
- Most from
- krebsonsecurity.com 30, arstechnica.com 16, bloomberg.com 6, schneier.com 5, bleepingcomputer.com 4
2026
- php2shell: Leaked critical PHP RCEs
- GLM-5.3 and the spread of advanced cyber capabilities
- OpenAI agents carried out an undisclosed cyber-attack on RubyGems
- Mythos finds a curl vulnerability
- I Left Port 22 Open on the Internet for 54 Days. Here's Who Showed Up.
- Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them
- Yikes, Encryption’s Y2K Moment is Coming Years Early
- Agentic Email
- Notepad++ Hijacked by State-Sponsored Hackers
2025
- Admins and defenders gird themselves against maximum-severity server vuln
- Shai Hulud 2.0 Strikes Again: Malware Supply-Chain Attack Hits Zapier & ENS Domains
- Cloudflare outage on November 18, 2025
- First Malicious MCP in the Wild: The Postmark Backdoor That's Stealing Your Emails
- “Hello, is this Anna?": Unpacking the Lifecycle of Pig-Butchering Scams
- St. Paul, MN, was hacked so badly that the National Guard has been deployed
- How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation
- KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS
- Coinbase says customers' personal information stolen in data breach
- Hacking Spree Hits UK Retail Giants
- Nail salon employee pleads guilty after holding 13 remote IT jobs worked by developers in China
- Whistleblower: DOGE Siphoned NLRB Case Data
- Homeland Security funding for CVE program expires
- Trump Revenge Tour Targets Cyber Leaders, Elections
- What Really Happened With the DDoS Attacks That Took Down X
- Undocumented commands found in Bluetooth chip used by a billion devices
- Trump administration retreats in fight against Russian cyber threats | US national security
- Trump 2.0 Brings Cuts to Cyber, Consumer Protections
- Signals of Trouble: Multiple Russia-Aligned Threat Actors Actively Targeting Signal Messenger
2024
- Survey: 88% of Execs Expect Large Global IT Outage in 2025
- Itch.io went offline due to a ‘trash AI-powered’ phishing report
- U.S. officials urge Americans to use encrypted apps amid cyberattack
- An Interview With the Target & Home Depot Hacker
- Change Healthcare Breach Hits 100M Americans
- Linus Torvalds Comments On The Russian Linux Maintainers Being Delisted
- SEC Charges Four Companies With Misleading Cyber Disclosures
- Internet Archive breached again through stolen access tokens
- Chinese researchers break RSA encryption with a quantum computer
- Internet Archive hacked, data breach impacts 31 million users
- Daring Fireball: Chinese Government Hackers Compromise 'Back Door for the Good Guys' in U.S. Communication Networks
- Google calls for halting use of WHOIS for TLS domain verifications
- Rogue WHOIS server gives researcher superpowers no one should ever have
- Daring Fireball: AT&T Only Learned of Massive 2022 Data Breach This April; Delayed Revealing It at the Request of U.S. Law Enforcement
- Daring Fireball: Massive Data Breach at AT&T Exposed Six Months of Call and SMS Records of Nearly All Customers
- Details of Google Cloud GCVE incident
- Stark Industries Solutions: An Iron Hammer in the Cloud
- “Unprecedented” Google Cloud event wipes out customer account and its backups
- UnitedHealth CEO: 'Decision to pay ransom was mine'
- A recent security incident involving Dropbox Sign - Dropbox Sign
- Kaspersky analysis of the backdoor in XZ
- Twitter’s Clumsy Pivot to X.com Is a Gift to Phishers
- What we know about the xz Utils backdoor that almost infected the world
- BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare
- U.S. Internet Leaked Years of Internal, Customer Emails
- How I got scammed (05 Feb 2024) – Pluralistic: Daily links from Cory Doctorow
- Finance worker pays out $25 million after video call with deepfake ‘chief financial officer’
- Thanksgiving 2023 security incident
- Microsoft Actions Following Attack by Nation State Actor Midnight Blizzard | Microsoft Security Response Center
2023
- 23andMe confirms hackers stole ancestry data on 6.9 million users
- Few Fortune 100 Firms List Security Pros in Their Executive Ranks
- Discord Admins Hacked by Malicious Bookmarks
- Infra-Red, In Situ (IRIS) Inspection of Silicon « bunnie's blog
- LastPass says employee’s home computer was hacked and corporate vault taken
- Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More
- LastPass says hackers stole customers’ password vaults
2022
- Update on JetBrains’ Statement on Ukraine | Company Blog
- Uber Investigating Breach of Its Computer Systems
- Post-Incident Review on the Atlassian April 2022 outage - Atlassian Engineering
- Inside Ukraine′s cyber guerrilla army
- A Closer Look at the LAPSUS$ Data Extortion Group
- Russia creates its own TLS certificate authority to bypass sanctions
- haveibeenexpired
- Roblox Return to Service 10/28-10/31 2021 - Roblox Blog
- YYMMDDHHMM just overflowed a signed 32 bit int
2021
- Project Zero: A Deep Dive Into an N.S.O. Zero-Click iMessage Exploit
- Log4Shell: RCE 0-day exploit found in log4j2, a popular Java logging package
- The Verica Open Incident Database (VOID)
- The entirety of Twitch has reportedly been leaked | VGC
- Internet goes down for millions, tech companies scramble as key encryption service expires
- FORCEDENTRY: NSO Group iMessage Zero-Click Exploit Captured in the Wild
- Cybereason: 80% of orgs that paid the ransom were hit again
- JBS Cyber Hack: Meat Supplier Shuts Down Some Slaughterhouses After Attack
- ParkMobile Breach Exposes License Plate Data, Mobile Numbers of 21M Users
- An open letter to the Linux community - April 24, 2021 | Department of Computer Science and Engineering | University of Minnesota
- At Least 30,000 U.S. Organizations Newly Hacked Via Holes in Microsoft’s Email Software
- Disqus, the dark commenting system
2020
- GoDaddy Employees Were Told They Were Getting a Holiday Bonus. It Was Actually a Phishing Test.
- Someone attacked our company
- We Hacked Apple for 3 Months: Here’s What We Found
- Who’s Behind Monday’s 14-State 911 Outage?
- Ukraine Nabs Suspect in 773M Password ‘Megabreach’
- Every Zoom Security and Privacy Flaw So Far, and What You Can Do to Protect Yourself
- ‘War Dialing’ Tool Exposes Zoom’s Password Problems
2019
- Two malicious Python libraries caught stealing SSH and GPG keys
- 1.2 billion people exposed in data leak includes personal info, LinkedIN, Facebook
- 110 Nursing Homes Cut Off from Health Records in Ransomware Attack
- Zoom Zero Day: 4+ Million Webcams & maybe an RCE? Just get them to visit your website!
- Cloudflare outage caused by bad software deploy (updated)
- Facebook Stored Hundreds of Millions of User Passwords in Plain Text for Years
- 800+ Million Emails Leaked Online by Email Verification Service
- Payroll Provider Gives Extortionists a Payday
- Troy Hunt: The 773 Million Record "Collection #1" Data Breach
2018
- Hackers breach Quora.com and steal password data for 100 million users
- Marriott: Data on 500 Million Guests Stolen in 4-Year Breach
- Statement from DHS Press Secretary on Recent Media Reports of Potential Supply Chain Compromise | Homeland Security
- DeleteMe - Privacy Protection Services
- Daring Fireball: Bloomberg’s ‘The Big Hack’
- Google: Security Keys Neutralized Employee Phishing
- NSA ‘Systematically Moving’ All Its Data to The Cloud
- Supply-Chain Security
- When Your Employees Post Passwords Online
- The “unpatchable” exploit that makes every current Nintendo Switch hackable [Updated]
- Far more than 87m Facebook users had data compromised, MPs told | UK news
- Under Armour Says 150 Million MyFitnessPal Accounts Hacked
- 'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign
2017
- Popular Destinations rerouted to Russia
- macOS High Sierra 'root' security bug: Stop and do this NOW
- Uber Paid Hackers to Delete Stolen Data on 57 Million People
- The Absurdly Underestimated Dangers of CSV Injection
- Every Yahoo account that existed—all 3 billion—was compromised in 2013 hack
- Understanding the prevalence of web traffic interception
- Ayuda! (Help!) Equifax Has My Data!
- Equifax Breach Response Turns Dumpster Fire
- Why the Equifax breach is very possibly the worst leak of personal info ever
- Hash of the Titan: How Google bakes security all the way into silicon
- The .feedback scam - Tom Limoncelli's EverythingSysadmin Blog
- Russia's Cyberwar on Ukraine Is a Blueprint For What's to Come
- The RNC Files: Inside the Largest US Voter Data Leak
- Russian Cyber Hacks on U.S. Electoral System Far Wider Than Previously Known
- Crash Override Malware Took Down Ukraine's Power Grid Last December
- Macron campaign team used honeypot accounts to fake out Fancy Bear
- Analyzing a counter intelligence cyber operation: How Macron just changed cyber security forever
2016
- San Francisco Rail System Hacker Hacked —Krebs on Security “The San Francisco Municipal Transportation Agency (SFMTA) was hit with a ransomware attack on Friday, causing fare station terminals to carry the message, “You Hacked.”
- Why the silencing of KrebsOnSecurity opens a troubling chapter for the ‘Net
- revealing Dropbox’s dirty little security hack
- 2016-07-08 Security Notice
- Google Compute Engine Incident #16007
- FBI: $2.3 Billion Lost to CEO Email Scams —Krebs on Security
- Ransomware is the future.
- How The Nissan Leaf Can Be Hacked Via Web Browser From Anywhere In The World
- Decrypting an iPhone for the FBI
- A Skeleton Key of Unknown Strength
- Linode Blog » The Twelve Days of Crisis – A Retrospective on Linode’s Holiday DDoS Attacks
2015
- An update from Linode about the recent DDoS attacks
- CVE-2015-7755: Juniper ScreenOS Authentication Backdoor
- Important Announcement about ScreenOS® - J-Net Community
- DHS Giving Firms Free Penetration Tests
- Did Carnegie Mellon Attack Tor for the FBI?
- Message Regarding the ProtonMail DDoS Attacks
- Crypto e-mail service pays $6,000 ransom, gets taken out by DDoS anyway
- The Doxing Trend
- 2016 Emerging Cyber Threats Report | Institute for Information Security
- Russian Hackers of Dow Jones Said to Have Sought Trading Tips
- Inside Target Corp., Days After 2013 Breach
- Black Hat USA 2015: The full story of how that Jeep was hacked | Kaspersky Lab Official Blog
- Designer Seed Thought to Be Latest Target by Chinese
- Delusion about cyber security growing, says Cisco report