Login
PostHog says the Shai-Hulud 2.0 npm worm compromise was "the largest and most impactful security incident" it's ever experienced after attackers slipped malicious releases into its JavaScript SDKs and tried to auto-loot developer credentials.β¦
British telco Brsk is investigating claims that it was attacked by cybercriminals who made off with more than 230,000 files.β¦
French cloud outfit OVHcloud took another hit this week after GrapheneOS, a mobile operating system, said it was ditching the company's servers over concerns about France's approach to digital privacy.β¦
An anonymized real-world case study on multi-source analysis (firmware, IaC, FMS, telemetry, network traffic, web stack) using CAI + MCP.
Cybersecurity training provider TryHackMe is scrambling to recruit women infosec pros to help with its Christmas challenge following backlash concerning a lack of gender diversity.β¦
The Office for Budget Responsibility (OBR) has drafted in former National Cyber Security Centre (NCSC) chief Ciaran Martin to sniff out how its Budget day forecast wandered onto the open internet before the Chancellor had even reached the dispatch box.β¦
The UK government has finally put a Β£1.8 billion price tag on its digital ID plans β days after the minister responsible refused to name a figure.β¦
South Korean web giant Naver has had an interesting week, after it acquired a cryptocurrency exchange that the next day revealed it had suffered a serious cyberattack.β¦
This writeup details innovative βsyntax confusionβ techniques exploiting how two or more components can interpret the same input differently due to ambiguous or inconsistent syntax rules.
Alex Brumen aka Brumens provides step-by-step guidance, supported by practical examples, on crafting payloads to confuse syntaxes and parsers β enabling filter bypasses and real-world exploitation.
This research was originally presented at NahamCon 2025.
Scattered Lapsus$ Hunters may be circling Zendesk users for its latest extortion campaign, with new phishing domains and weaponized helpdesk tickets uncovered by ReliaQuest.β¦
OpenAI says API users may be affected by a recent breach at its former data analytics provider, Mixpanel.β¦
FreshRSS 