A Redditor counted who wrote every change to xz, sudo, bash, tz and 19 more projects. 11 of 23 rely on one or two people. See who they are and who pays.

It turns out that the gander is not actually super keen on what's good for the goose.

The mechanism, the diagnostic that finds it, and the check that lies to you.

Ads – they’re everywhere. The only way to stay sane on the Internet is to attempt to mitigate the horrors of relentless ads. This article summarises how we might still keep the ads under control at th...

OpenSSH release notes

Psiphon, a software company that helps internet users under oppressive regimes evade online censorship, plans to leave Canada if the lawful-access bill passes.

Former German spy chief August Hanning was detained on Tuesday on suspicion of attempted treason ‌in a case that ranks among Germany's biggest intelligence scandals since the Cold War.

The one where I go crawling back.

Meta's agentic AI product Muse has had a rocky few weeks since launch. The product, which features an animated avatar named Jolly (one presumes to make mass hyper surveillance seem adorable) is supposed to help you offload busywork like making restaurant reservations, paying bills, or ordering groceries. Despite Meta having claimed repeatedly that Muse was...

In an exclusive interview with WIRED, Paragon Solutions CEO Andrew Boyd reveals the limits of the company’s promise to keep bad actors from abusing its powerful espionage tool.

The FBI has tapped employees from across federal law enforcement to crack...

The health tech software giant, which makes the widely used MyChart system for accessing medical data, will focus on fixing security bugs for the next few weeks.

45 days of Signal history may be exposed by German police messaging surveillance using linked devices, Netzpolitik says. Read what the documents reveal

How one unchecked login token put 17 trillion rows in a Microsoft internal analytics service within reach.

Gaines’ attorneys argued her civil rights were violated because she competed against a transgender athlete.

BSSID Search in Apple's public WPS service. Contribute to christianrowlands/wavedigger development by creating an account on GitHub.

Alice and Bill have identical Apple devices. Only one gets Apple’s strongest iCloud protection.

After more than a year of hard work, we are thrilled to announce the launch of F-Droid 2.0, a complete redesign of the official F-Droid app and the largest a...

iOS users are complaining that Apple is placing ‘ads’ for its own products on their iPhones.

We’re launching a revamped, privacy-focused age assurance solution including methods that won’t require an ID or selfie. Here’s how it works.

An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for ...

Privacy first VPN. Two-party relay and no logs. No email needed. Block ads, trackers, malware. Available on iOS, macOS, Android, Windows, and Linux.

A sample of 5,000 alleged agents seen by 404 Media includes names, addresses, phone numbers, and details on FBI employees' spouses.

Google's Gemini model accessed the internet and hacked other companies during a test of its cybersecurity capabilities, ​the first known example of the company's AI systems autonomously committing ‌su...

Meet Z.ai, the AI assistant powered by GLM-5.3-Flash. Build websites, write code, handle long-horizon tasks, and get instant answers. Fast, smart, and reliable.

When most people think of piracy, they think of Bittorrent and The Pirate Bay. These public manifestations of piracy, though, conceal an elite worldwide, underground, organized network of pirate group...

Localhost, meet the Internet. Turn the server on your laptop into a public, encrypted URL on Cloudflare's edge with one command.

Plugin4Shell is a zero-click, high-severity RCE affecting all four major AI coding agents - Claude Code, Codex, Copilot, and Gemini. In this first-of-its-kind AI supply-chain attack, a trusted plugin ...

SynthID can cause models to follow harmful instructions they would otherwise refuse.

CrowdSec update on a source code exposure that occurred in May 2026, including the scope, impact, investigation, and security measures taken.

Aleksandar Filipovski, 2026-09-16

A hacker collective pulled down a Flock camera and dumped its data. The files included thousands of videos and logs showing that the device captured 1.6 million images of 50,000 vehicles in 21 days.

Amazon’s announcement is the first indication that some data stored exclusively in Bahrain and the U.A.E could be gone forever.

This post details how Factorio's random number generation works, how it can be reversed and how I used that knowledge to predict and manipulate the RNG with pure in‑game mechanics.

Automatic Key Exchange probes TLS 1.3-capable customer origins to learn which key agreement algorithms they support. We then lead with the most secure algorithm when connecting to the origin, preferri...

We present an alignment assessment of four incidents in which Claude models gained unauthorized access to real third-party systems.

More than 9,300 Amazon Web Services (AWS) access keys publicly exposed between August 2022 and August 2026 are still active and valid.

Anthropic announced last week it would include invisible watermarks in AI-generated content to comply with new EU rules. Within hours, overrides were being touted online.