Wikimedia Foundation found “rogue” OpenAI agents on its wikis, raising concerns about risks to its free knowledge projects and the open web.

Tosint is a Telegram OSINT tool that extracts actionable intelligence from bot tokens and chat IDs for security investigations. - drego85/tosint

How EU leaders sided with Big Tech over the public’s right to know about the true scale and environmental impact of the AI build-out, forcing a legal challenge to seek disclosure

FPF is hiring a senior digital security trainer to conduct in-field digital security training with journalists and newsrooms.

One year ago, Bluesky Social PBC announced their intention to facilitate the creation of an independent organization to operate the Public Ledger of Credenti…

Founded in Italy by a young hacker, Dataflow develops code to break into computers and smartphones. Since January, its operations in Israel have been led by Eyal Tsir Cohen, a former senior Mossad off...

Check whether a site supports post-quantum encryption.

RouterOS does not compare the complete RSA public key...

Meta’s settlement is far from perfect, but every blow counts as the company declines.

We placed a tracking device in a shipment of rare books to see which AI company was buying it, and found an Amazon facility where Amazon scans and destroys books.

Security researchers tracked and eavesdropped on a WIRED reporter using vulnerabilities in a pink plastic smartwatch. It’s just one piece of a deeply insecure supply chain of GPS-enabled gadgets.

Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals of hospitality-related organizations such as hotels since May 2026 in order ...

The question is: what on earth is Google doing?

SensePost's modified hostapd for wifi attacks. Contribute to sensepost/hostapd-mana development by creating an account on GitHub.

Sense check for people working in cybersecurity in operations roles in the trenches: I’m not finding or seeing cyber incidents off the back of Generative AI still. Are you? Not ones you’ve read about...

Another way to think about the whole thing is to picture a bear at a campsite. (Really, we are going there.)

These models are like the world's cleverest octopus escape artists, with unlimited prehensile arms and the ability to squeeze through anywhere. A single vulnerable package proxy stood between the mode...

Passkey records are an interoperable format for WebAuthn credentials, similar to password hash strings. I propose a potential crypto/passkey Go API based on them.

YouTube video by SocialProof Security