“There’s a lot to be worried about,” the project lead said.

Google has been fined €403 million by the Irish Data Protection Commission after the Norwegian Consumer Council exposed how the company manipulated users into accepting extensive tracking.

Microsoft has reminded admins to migrate Entra ID users to phishing-resistant authentication methods to avoid sign-in disruptions after it retires SMS first-factor sign-in starting in February 2027.

EA promises to solve AI Safety. Now we have two problems.

Piratage informatique par une "civilisation" de machines, prophétie apocalyptique d'un "lanceur d'alerte" d'OpenAI et Anthropic, probabilités d'extinction... la semaine dernière a encore été un grand ...

A weblog about Signals Intelligence, Communications Security and top level telecommunications equipment

A year of incident response data reveals how Akira, DragonForce & Clop build ransomware infrastructure — and how defenders can hunt it.

A new vessel spotted at a Chinese shipyard is likely the world’s first mothership designed to deploy submarine drones. It represents the latest piece in the puzzle of China’s undeclared effort to deve...

IFIN Lists is a project to build a well curated, community driven set of permanent block lists for all to use.

YouTube video by Olivier Poncet

YouTube video by Three Buddy Problem

The Dutch Nationaal Cyber Security Centrum (NCSC) is warning of imminent exploitation of two critical flaws in Check Point VPN tracked as CVE-2026-85102 and CVE-2026-85103.

At the core of the Hugging Face hacking incident were a series of human choices that traded security for speed.

Pandas has taken us a long way, but it's time for a new bear

SCIENCE FICTION FILMS + SET IN THE FUTURE Escape from New York (1981) dir. John Carpenter 2001: A Space Odyssey (1968) dir. Stanley Kubrick Back to the Future Part II (1989) dir. Robert Zemeckis The...

Contractors would be allowed to conduct military hacking operations with US government approval under a Senate defense bill that would mark the first time Congress has explicitly authorized the privat...

From the very beginning of this recent obsession with identifying everyone online (yes, they like to call it "age" verification, but it always ends up as identity verification), we've been pointing out that it was a huge privacy nightmare waiting to happen. Or maybe it wasn't waiting. Maybe it was already happening. This week a...

Security researchers say residential proxy networks present a major threat by allowing hackers to commandeer home and office networks for cybercrime.

FDR has always been one of my favorite presidents, second maybe to Lincoln. Both were men the establishment assumed were one of them until, to their horror, they governed like they weren't. Both could...

The Color Theory Behind Industrial Seafoam Green

Defenders are increasingly turning to LLMs to to generate vulnerability patches. But our research showed that LLMs only successfully generate patches (without materially changing application behavior)...

The max-severity vuln, which still has no CVE, allows malicious, remote administrator access to the business-analytics platform and its downstream users.

For nearly two years, researcher Vangelis Stykas has maintained access to North Korean hackers’ servers. His work shows they pulled off intrusions in a shocking number of systems across the globe.

U.S. and allied officials said companies should start preparing now for a cyberattack that changes how they provide essential services.

Brands are already paying to influence what chatbots say about them

The report provides more evidence Australia’s world-leading social media ban isn’t going to plan.

A first-in-the-nation program is seeing promising results as it charts a path for supporting the U.S.’s most vulnerable infrastructure.