Nostr notes by Catalin Cimpanu

Polymarket discloses a security breach Looks like a CDN poisoning ...

2026-06-25T20:42:25Z

Polymarket discloses a security breach

Looks like a CDN poisoning incident (don't quote me on this)

Npm will block all auto-running installation scripts starting ...

2026-06-11T12:32:25Z

Npm will block all auto-running installation scripts starting next month with the release of version 12.0.

The change is meant to counter the rising number of supply-chain attacks taking place on the platform

https://github.blog/changelog/2026-06-09-upcoming-breaking-changes-for-npm-v12/

Eight of the largest US telcos have formed a new center for ...

2026-05-19T19:24:19Z

Eight of the largest US telcos have formed a new center for sharing intel on cyber attacks, the C2 ISAC

Founding members include AT&T, Charter, Comcast, Cox, Lumen, T-Mobile, Verizon, and Zayo.

https://about.att.com/story/2026/c2-isac.html

Security researcher Shellsharks has created Vulnerability.Garden, ...

2026-05-14T14:27:10Z

Security researcher Shellsharks has created Vulnerability.Garden, a catalog of named vulnerabilities.

So far, we're 25 vulnerabilities away from 1K branded security bugs.

Don't worry, shellsharks (npub1z3m…zn2f)... we'll get you there!

https://vulnerability.garden/

-DigiCert hacked with a malicious screensaver file -Ransomware ...

2026-05-04T10:21:30Z

-DigiCert hacked with a malicious screensaver file
-Ransomware negotiators get four years in prison
-Trellix discloses security breach
-Another Russian hacker arrested vacationing in the wrong place
-Secessionist party leaks Albertans personal data
-Fakestortion campaign hits cPanel sites
-Rockstar stock went up after the hack (leaked financials were spectacular)
-Hacker leak exposes Hungarian-Kremlin propaganda coordination

Podcast: https://risky.biz/RBNEWS559/
Newsletter: https://news.risky.biz/risky-bulletin-digicert-hacked-with-a-malicious-screensaver-file/

Hungary's pro-Kremlin media gets hacked by WorldLeaks The ...

2026-05-03T13:28:43Z

Hungary's pro-Kremlin media gets hacked by WorldLeaks

The leaked data exposes coordination with the Kremlin in anti-Ukraine coverage: https://telex.hu/zacc/2026/04/30/mediaworks-hekkertamadas-memo-zelenszkij-lejaratas-telefonos-segitseg-moszkvabol

Mediaworks threatens lawsuits over coverage of the hacked data: https://hirtv.origo.hu/ahirtvhirei/2026/05/a-mediaworks-kozlemenye

It sues one of the sites that covered the Kremlin ties: https://media1.hu/2026/05/01/mediaworks-buntetofeljelentes-media1-telex-lapszemle-toth-tamas-antal/

h/t /home/rqm (npub1prm…rs6z) --> /home/rqm (npub1prm…rs6z)/116498047329184815">https://mastodon.social//home/rqm (npub1prm…rs6z)/116498047329184815

Ask Jeeves, one of the first search engines, has shut down on ...

2026-05-02T20:08:56Z

Ask Jeeves, one of the first search engines, has shut down on Friday

https://www.ask.com/

Security firm Trellix has disclosed a security breach after ...

2026-05-02T19:53:38Z

Security firm Trellix has disclosed a security breach after hackers gained access to its source code

This highlighted section here is important since Trellix is one of Europol's closest industry partners

If this is TeamPCP, as I suspect, they might have screwed up

https://www.trellix.com/statement/

RE: https://mastodon.social/@campuscodi/116490790808300234 This ...

2026-04-30T19:58:37Z

RE: https://mastodon.social/@campuscodi/116490790808300234

This is now exploited in the wild

https://www.cisa.gov/news-events/alerts/2026/04/30/cisa-adds-one-known-exploited-vulnerability-catalog

quoting
note18hr…ty4q

Major authentication bypass disclosed in cPanel

https://support.cpanel.net/hc/en-us/articles/40073787579671-Security-CVE-2026-41940-cPanel-WHM-WP2-Security-Update-04-28-2026

Cloudflare labels Russia's MAX[.]ru domain as spyware 😆 ...

2026-04-30T18:57:16Z

Cloudflare labels Russia's MAX[.]ru domain as spyware 😆

https://radar.cloudflare.com/domains/domain/max.ru

This is a very interesting report from Group-IB. The company ...

2026-04-30T11:08:03Z

This is a very interesting report from Group-IB.

The company believes it found one of the PhaaS platforms—Phoenix System—working with SMS blaster operations

https://www.group-ib.com/blog/phoenix-phaas-kit-smishing/

Major authentication bypass disclosed in cPanel ...

2026-04-30T00:20:04Z

Major authentication bypass disclosed in cPanel

https://support.cpanel.net/hc/en-us/articles/40073787579671-Security-CVE-2026-41940-cPanel-WHM-WP2-Security-Update-04-28-2026

The Ghostty founder is leaving GitHub When you read his blog ...

2026-04-28T20:39:03Z

The Ghostty founder is leaving GitHub

When you read his blog post, I want you to keep this image in your mind

https://mitchellh.com/writing/ghostty-leaving-github

Nextcloud stops bug bounty program due to increase of low-effort ...

2026-04-23T18:58:33Z

Nextcloud stops bug bounty program due to increase of low-effort AI-generated reports

https://discuss.privacyguides.net/t/nextcloud-stops-bug-bounty-program-due-to-increase-of-low-effort-ai-generated-reports/37334

Iran says networking equipment mysteriously went down during a ...

2026-04-23T18:29:48Z

Iran says networking equipment mysteriously went down during a recent missile strike on Isfahan

https://www.entekhab.ir/fa/news/917640/

The world is so stupid these days ...

2026-04-23T01:48:18Z

The world is so stupid these days

https://news.bitcoin.com/a-hair-dryer-may-have-gamed-a-paris-weather-sensor-for-34000-on-polymarket/

The third security firm employee who worked with the BlackCat ...

2026-04-21T09:30:47Z

The third security firm employee who worked with the BlackCat ransomware has also pleaded guilty now

https://www.justice.gov/opa/pr/florida-man-working-ransomware-negotiator-pleads-guilty-conspiracy-deploy-ransomware-and

A Tennessee man who hacked the US Supreme Court was sentenced to ...

2026-04-19T11:04:12Z

A Tennessee man who hacked the US Supreme Court was sentenced to twelve months of probation.

Nicholas Moore hacked the US' highest court in 2023 and leaked documents on an Instagram account named @ihackthegovernment.

https://www.courtlistener.com/docket/72124298/united-states-v-moore/

The Rhadamanthys infostealer left its frontend API exposed online ...

2026-04-15T23:42:43Z

The Rhadamanthys infostealer left its frontend API exposed online without authentication, allowing security researchers to track its activity for months before the Europol takedown last year

https://censys.com/blog/rhadamanthys-private-sector-ops-limitations/

NIST makes it official and basically gives up on enriching CVEs: ...

2026-04-15T20:50:09Z

NIST makes it official and basically gives up on enriching CVEs: https://www.nist.gov/news-events/news/2026/04/nist-updates-nvd-operations-address-record-cve-growth

Will only enrich:

-KEV listed bugs
-bugs in software used by the US govt
-bugs in critical software (see list here/PDF: https://www.nist.gov/system/files/documents/2026/04/15/EO%2014028%20Critical%20FINAL.pdf)

A malicious Ledger crypto-wallet that managed to sneak onto the ...

2026-04-14T13:26:45Z

A malicious Ledger crypto-wallet that managed to sneak onto the official Mac App Store has stolen almost $10 million from more 50 victims. App was live for almost 2 weeks: https://t.me/investigations/313

One of the campaign's victims is American singer Garrett Dutton, who lost his retirement fund: https://www.thestreet.com/crypto/markets/music-superstar-loses-retirement-fund-to-fake-app

Jamf's Nir Avraham has published a report looking at how the ...

2026-04-14T09:59:25Z

Jamf's Nir Avraham has published a report looking at how the Predator spyware exploits, interacts, and modifies the iOS kernel for its operations

"The engine has never been reported on — until now"

https://www.jamf.com/blog/predator-spyware-ios-kernel-exploitation-engine/

The Pixel 10 smartphones released last year are the first phones ...

2026-04-12T11:42:05Z

The Pixel 10 smartphones released last year are the first phones to use Rust for its modem firmware in an attempt to narrow the phone's baseband attack surface

https://security.googleblog.com/2026/04/bringing-rust-to-pixel-baseband.html

Bitcoin miners have entered the red as it now costs $88,000 to ...

2026-04-11T19:53:33Z

Bitcoin miners have entered the red as it now costs $88,000 to mint a $69,000 bitcoin

https://www.coindesk.com/markets/2026/03/22/bitcoin-miners-are-losing-usd19-000-on-every-btc-produced-as-difficulty-drops-7-8

RE: https://mastodon.social/@zackwhittaker/116371299735270176 ...

2026-04-09T15:39:53Z

RE: https://mastodon.social/@zackwhittaker/116371299735270176

VerCrypt and Windscribe devs said someone at Microsoft has reached out and this is being handled now

quoting
note1jaa…wp44

New, by me at TechCrunch: The developer of the widely popular Wireguard VPN says he is also unable to ship software updates to Windows users after Microsoft locked his account, marking the second high-profile app developer (VeraCrypt) in the past few weeks to face this issue.

https://techcrunch.com/2026/04/08/wireguard-vpn-developer-cant-ship-software-updates-after-microsoft-locks-account/

"Intelligence agencies of Viktor Orbán’s government have ...

2026-04-09T15:33:18Z

"Intelligence agencies of Viktor Orbán’s government have been secretly using Webloc — a mass surveillance tool that tracks hundreds of millions of people via smartphone advertising data — making Hungary the first confirmed EU country to deploy it"

https://vsquare.org/orban-spying-toolkit-cobwebs-webloc-hungary-spyware-citizen-lab/

The Claude.md file can be abused for malicious operations ...

2026-04-09T13:14:13Z

The Claude.md file can be abused for malicious operations

https://layerxsecurity.com/blog/vibe-hacking-claude-code-can-be-turned-into-a-nation-state-level-attack-tool-with-no-coding-at-all/

Adobe Reader Zero-Day Exploited for Months: Researcher ...

2026-04-09T11:53:03Z

Adobe Reader Zero-Day Exploited for Months: Researcher

https://www.securityweek.com/adobe-reader-zero-day-exploited-for-months-researcher/

A GPU-based rowhammer attack achieved root access on a Linux ...

2026-04-05T16:44:11Z

A GPU-based rowhammer attack achieved root access on a Linux system

https://gpubreach.ca/

The US Army has reduced the frequency of mandatory cybersecurity ...

2026-04-04T23:46:26Z

The US Army has reduced the frequency of mandatory cybersecurity training from once a year to once every five years

https://defensescoop.com/2026/03/31/army-cybersecurity-training-policy-change/

Node.js pauses bug bounty program after a funding lapse They were ...

2026-04-02T20:06:36Z

Node.js pauses bug bounty program after a funding lapse

They were sponsored by IBB, a program funded by Microsoft, Meta, Adobe, and a bunch of other tech giants

Unclear what happened there

https://nodejs.org/en/blog/announcements/discontinuing-security-bug-bounties

Claude's source code has leaked via npm ...

2026-03-31T13:48:21Z

Claude's source code has leaked via npm

https://xcancel.com/Fried_rice/status/2038894956459290963

Security firm Cybereason has open-sourced owLSM, an EDR-like ...

2026-03-29T15:07:53Z

Security firm Cybereason has open-sourced owLSM, an EDR-like agent for Linux, an eBPF LSM agent to run Sigma rules

https://github.com/Cybereason-Public/owLSM

Russian intelligence managed to install a wire-taping device as ...

2026-03-26T14:22:10Z

Russian intelligence managed to install a wire-taping device as part of a thermostat at a Ukrainian drone factory

https://en.interfax.com.ua/news/general/1153997.html

Hungarian opposition leader Peter Magyar has accused the ruling ...

2026-03-26T13:26:17Z

Hungarian opposition leader Peter Magyar has accused the ruling government of using the Candiru spyware against his TISZA party

https://x.com/magyarpeterMP/status/2037113263238840702

Infosec news cycle: CVE is in danger CVE is saved CVE is in ...

2026-03-26T01:10:06Z

Infosec news cycle:
CVE is in danger
CVE is saved
CVE is in danger
CVE is saved
CVE is in danger
CVE is saved
CVE is in danger
CVE is saved
CVE is in danger
CVE is saved
CVE is in danger
CVE is saved
CVE is in danger
CVE is saved
CVE is in danger
CVE is saved
CVE is in danger
CVE is saved

-Pay2Key returns -Novel WebRTC skimmer -DarkSword leaks online ...

2026-03-25T10:53:36Z

In reply to nevent1q…dsye
_________________________

-Pay2Key returns
-Novel WebRTC skimmer
-DarkSword leaks online
-Russian TikTok info-ops arrive to Hungarian elections (RO, MD, FR, CZ, PL say "hi")
-Half a million IIS servers are EOL online
-AI adoption grows among info-op groups
-KACE bug exploited in the wild
-Less than 1% of vulnerabilities were exploited last year
-Edge devices were most targeted last year
-Citrix security update
-IRGC info-op hits BlueSky
-New tool—OpenClaw Security Platform
-ROCon APAC 2025 videos

-Checkmarx KICS vulnerability scanner hacked -Trivy supply chain ...

2026-03-25T10:51:43Z

In reply to nevent1q…ycpn
_________________________

-Checkmarx KICS vulnerability scanner hacked
-Trivy supply chain attack expands to Docker images
-Reddit prepares new account verification methods
-Russia to block international calls to seniors
-Will also block SMS OTPs to children numbers
-State Department launches new cyber office
-University professor hacked students in Dublin
-Yanluowang ransomware affiliate sentenced to 81 months
-Operation Atlantic reaches out to crypto-fraud victims
-Silver Fox expands to SE Asia
-New EvilTokens PhaaS

-The Intellexa CEO is pissed!!! -Google launches threat ...

2026-03-25T10:46:24Z

-The Intellexa CEO is pissed!!!
-Google launches threat disruption unit
-German police visit companies in the dead of night about software bugs
-FTC bans all foreign-made routers
-Firefox now has a built-in VPN
-Breach at the Dutch Ministry of Finance
-Hackers breach South Korea's top lender
-Breaches also at Mazda, Crunchyroll, HackerOne, InfiniteCampus
-Resolv hacked for $25m
-CSAM at record levels online

Podcast: https://risky.biz/RBNEWS542/
Newsletter: https://news.risky.biz/risky-bulletin-the-intellexa-ceo-is-pissed/

Apparently there's been a Citrix security update yesterday: ...

2026-03-24T10:25:50Z

Apparently there's been a Citrix security update yesterday: https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300

Something changed on their website. Is there an RSS feed or URL that I can scan for security updates now?

NetAskari believes a recent hack and leak from China's ...

2026-03-22T15:27:43Z

NetAskari believes a recent hack and leak from China's National Super Computer Center of China (NSCC) might be real

https://netaskari.substack.com/p/chinas-massive-data-leak-of-military

A vulnerability in a Linux enterprise app can allow attackers ...

2026-03-22T12:01:18Z

A vulnerability in a Linux enterprise app can allow attackers root access over devices

The issue impacts Himmelblau, an interoperability suite to integrate Linux with Entra ID and Intune networks.

https://www.akamai.com/blog/security-research/2026/mar/cve-2026-31979-symlink-root-privilege-escalation-himmelblau

Internet's outage has now reached 3 weeks, is state-mandated ...

2026-03-22T11:13:41Z

Internet's outage has now reached 3 weeks, is state-mandated and not a result of the strikes, per new reports

https://www.kentik.com/blog/internet-and-airstrikes-tracking-irans-extended-communication-blackout/

https://krypt3ia.wordpress.com/2026/03/16/intelligence-assessment-report/

PDF: https://insights.nccgroup.com/l/898251/2026-03-19/31myn1q/898251/1773936226AmWpHs8F/Middle_East_Crisis_Cyber_Update_19_03_2026.pdf

RE: https://techhub.social/@Techmeme/116262102959307572 Google ...

2026-03-21T12:03:30Z

RE: https://techhub.social/@Techmeme/116262102959307572

Google search results are now more dangerous than torrent sites
nostr:note1vljw8fku4m50jtc9ys32cfzxgwgvws296tl3emjq0pa3upy05jasz6yt3v

Android will require a 24-hour wait before sideloading apps ...

2026-03-20T22:18:15Z

Android will require a 24-hour wait before sideloading apps

https://android-developers.googleblog.com/2026/03/android-developer-verification.html

After Hunt found an open directory hosting APT28's Roundcube ...

2026-03-17T12:48:44Z

After Hunt found an open directory hosting APT28's Roundcube exploit kit, Ctrl-Alt-Intel also found a 2nd open directory on the same server, this one with the "C2 source code, additional payloads, telemetry logs, exfiltrated data and evidence of further campaigns."

https://ctrlaltintel.com/threat%20research/FancyBear/#unique-victim-emails

Major breach in Sweden, where a hacker claims to have stolen PII ...

2026-03-15T19:26:14Z

Major breach in Sweden, where a hacker claims to have stolen PII data and electronic signage documents from Sweden's e-government portal

They leaked the portal's source code to prove the breach

The IT contractor confirmed a breach too

https://www.svt.se/nyheter/inrikes/uppgift-statlig-it-information-har-lagts-ut-pa-darknet

There's DRAMA between the Greek government and ...

2026-03-15T18:26:51Z

There's DRAMA between the Greek government and Intellexa's founder, who was recently sentenced to 126 years in prison

He says his company sells to governments exclusively, hinting that the Greek government was responsible for hacks of its opposition party and not him

Love me some drama!

https://www.occrp.org/en/news/convicted-spyware-dealer-links-greek-government-to-surveillance-scandal

Office EU, an European company, has launched Office.eu, an ...

2026-03-15T18:21:05Z

Office EU, an European company, has launched Office.eu, an EU-based alternative to Microsoft Office and Google Workspace, built on open-source technology and running on European server infrastructure.

https://office.eu/media/pressrelease-20260304

"End-to-end encrypted messaging on Instagram will no longer ...

2026-03-14T20:37:07Z

"End-to-end encrypted messaging on Instagram will no longer be supported after May 8, 2026." :hurb:

https://help.instagram.com/491565145294150

Hacked Dutch ISP Odido found itself in a new pickle last week ...

2026-03-12T08:52:16Z

Hacked Dutch ISP Odido found itself in a new pickle last week after its routers were caught sending telemetry to a US AI company

They now stopped after lawmakers announced Parliament hearings

https://www.linkedin.com/pulse/odido-router-verzamelt-analytics-van-je-huishouden-sipke-mellema-0uoie/

RE: https://mastodon.social/@rvps2001/116205390963964950 ...and ...

2026-03-10T14:43:17Z

RE: https://mastodon.social/@rvps2001/116205390963964950

...and it only took four years to reach the conclusion

quoting
note1nrc…mnqv

🇷🇺 🇺🇦 A U.N. investigation found on Tuesday that the deportation and transfer of Ukrainian children by Russian authorities ‌since Moscow's full-scale invasion of the country in 2022 amounted to crimes against humanity.

https://www.reuters.com/world/europe/russias-deportations-ukrainian-children-amount-crimes-against-humanity-un-2026-03-10/

#russia #ukraine #RussianWarCrimes

Joshua Rogers has published a good tutorial on how to customize ...

2026-03-04T21:11:00Z

Joshua Rogers has published a good tutorial on how to customize your Firefox right-click menu and remove all the bloat you don't like

https://joshua.hu/firefox-making-right-click-not-suck

That "meow meow" button deploys a GRU backdoor, fyi ...

2026-03-03T18:44:11Z

That "meow meow" button deploys a GRU backdoor, fyi

https://www.clearskysec.com/russian-campaign-targeting-ukraine-badpaw-and-meowmeow/

Google has discovered a new iOS exploit kit containing five full ...

2026-03-03T15:18:59Z

Google has discovered a new iOS exploit kit containing five full iOS exploit chains and a total of 23 exploits

It tracked it to a surveillance vendor, which sold it to both Russian and Chinese customers

https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit/

RE: https://mastodon.social/@fedizen/116165634225914065 You ...

2026-03-03T14:41:48Z

RE: https://mastodon.social/@fedizen/116165634225914065

You should hate Google with the energy of 1000 burning suns for attempting to kill ad blockers in Chrome

quoting
note1h2e…9tq4

»CBP Tapped Into the Online Advertising Ecosystem To Track Peoples’ Movements« https://www.404media.co/cbp-tapped-into-the-online-advertising-ecosystem-to-track-peoples-movements/?Fedizen.EU #Fedizen #Fediverse #ActivityPub #News

Nostr event nevent1qqsqvzhmvkwly072jkgy5kxglqu4fm5p9v7wnql0znpgg9e6kevk0jczyzrg53dpkkku7jyh49wtq7y98qamf6x3z0vqzt82w4fczejmy94mzsu77zq

2026-03-03T12:20:24Z

"A week-long automated attack campaign targeted CI/CD ...

2026-03-01T14:03:53Z

"A week-long automated attack campaign targeted CI/CD pipelines across major open source repositories, achieving remote code execution in at least 4 out of 5 targets"

👀👀👀👀👀

https://www.stepsecurity.io/blog/hackerbot-claw-github-actions-exploitation

Security firm Trail of Bits has released mquire, a Linux memory ...

2026-02-28T17:57:53Z

Security firm Trail of Bits has released mquire, a Linux memory forensics tool that works without any external dependencies

https://blog.trailofbits.com/2026/02/25/mquire-linux-memory-forensics-without-external-dependencies/

Meta's new Threads micro-blogging platform and Twitter rival ...

2026-02-26T16:03:56Z

Meta's new Threads micro-blogging platform and Twitter rival has been flooded with pro-PRC propaganda bots, according to a new report

https://www.newsguardrealitycheck.com/p/automated-pro-china-bots-swarm-metas

There was a post going around earlier today about how Mozilla ...

2026-02-26T01:15:08Z

There was a post going around earlier today about how Mozilla removed its pledge not to sell user data from its code

They made it official: https://blog.mozilla.org/en/firefox/update-on-terms-of-use/

RE: https://mastodon.social/@campuscodi/116126560151585483 These ...

2026-02-24T18:27:08Z

RE: https://mastodon.social/@campuscodi/116126560151585483

These settings are utter bullshit and a major dark pattern

Basically, if you don't agree to have AI present and watching over you, Firefox disables all these features... including the ability to translate pages....

Nice going, you Mozilla idiots!

quoting
note169e…0y7p

Firefox 148 is out with the new AI settings

Go to about:preferences#ai

Firefox 148 is out with the new AI settings Go to ...

2026-02-24T16:31:25Z

Firefox 148 is out with the new AI settings

Go to about:preferences#ai

Talks from the Hackfest 2025 security conference, which took ...

2026-02-24T10:31:34Z

Talks from the Hackfest 2025 security conference, which took place in October, are available on YouTube

https://www.youtube.com/playlist?list=PLaXanmjyAPzG6heHuTSu9f6lIZF25qevU

Some breaking news out of Russia: Officials have started an ...

2026-02-24T08:38:30Z

Some breaking news out of Russia: Officials have started an investigation into Telegram founder Pavel Durov for promoting terrorism

https://www.kommersant.ru/doc/8460981?from=top_main_2

The West Virginia Attorney General has sued Apple for failing to ...

2026-02-19T18:27:05Z

The West Virginia Attorney General has sued Apple for failing to detect child sexual abuse material on iCloud

https://ago.wv.gov/article/west-virginia-attorney-general-sues-apple-role-distribution-child-sexual-abuse-material

If you're not up to date with the latest devops drama, ...

2026-02-19T11:57:37Z

If you're not up to date with the latest devops drama, someone published a PoC for a prompt injection in Cline: https://adnanthekhan.com/posts/clinejection/

That PoC was later used to hijack the actual Cline repo and push a malicious npm update that installed OpenClaw everywhere (LOL): https://github.com/cline/cline/security/advisories/GHSA-9ppg-jx86-fqw7

Choosing to deploy an AI agent instead of malware is... something else

Maybe not malicious, but still a major compromise of dev environments

A suspected Chinese APT, UNC6201, is exploiting a zero-day in ...

2026-02-17T19:26:11Z

A suspected Chinese APT, UNC6201, is exploiting a zero-day in Dell RecoverPoint for Virtual Machines

https://cloud.google.com/blog/topics/threat-intelligence/unc6201-exploiting-dell-recoverpoint-zero-day/

This didn't go out on the RSS? Something happened? Saw this ...

2026-02-17T18:34:59Z

In reply to nevent1q…uxyt
_________________________

This didn't go out on the RSS? Something happened?

Saw this for the first time now on a Russian forum

Cellebrite was used against a Kenyan activist and opposition ...

2026-02-17T14:12:40Z

Cellebrite was used against a Kenyan activist and opposition figure last year

https://citizenlab.ca/research/cellebrite-used-on-kenyan-activist-and-politician-boniface-mwangi/

There's a massive WhatsApp account takeover campaign in ...

2026-02-17T03:48:35Z

There's a massive WhatsApp account takeover campaign in Armenia right now

This seems to be a commodity spam operation, but investigators believe the attackers are exploiting SS7 👀

https://cyberhub.am/en/blog/2026/02/16/massive-wave-of-whatsapp-takeover-attacks-targeting-armenian-users-what-happened/

Western Digital has recently announced that it sold all of the ...

2026-02-15T20:15:55Z

Western Digital has recently announced that it sold all of the year's hard-drive inventory to AI companies.

In other words, prepare for huge SSD price surges.

https://wccftech.com/western-digital-has-no-more-hdd-capacity-left-out/

Palo Alto Networks opted not to tie China to a global ...

2026-02-13T11:14:37Z

Palo Alto Networks opted not to tie China to a global cyberespionage campaign the firm exposed last week over concerns that the cybersecurity company or its clients could face retaliation from Beijing, according to two people familiar with the matter.

https://www.reuters.com/world/china/palo-alto-chose-not-tie-china-hacking-campaign-fear-retaliation-beijing-sources-2026-02-12/

Don't show this to kids in Australia or the UK: ...

2026-02-12T01:03:57Z

Don't show this to kids in Australia or the UK: https://age-verifier.kibty.town/

Russia has permanently blocked YouTube yesterday and WhatsApp ...

2026-02-11T22:16:59Z

Russia has permanently blocked YouTube yesterday and WhatsApp today

https://www.kommersant.ru/doc/8421763

-SmarterTools hacked via its own product -Dutch DPA and European ...

2026-02-09T09:14:03Z

-SmarterTools hacked via its own product
-Dutch DPA and European Commission hacked via Ivanti zero-days
-Senegal held for ransom
-state actor behind Signal phishing campaign in Germany
-Flickr 3rd party breach
-China executes scam compound execs
-DDoSer arrested in Poland
-Northwestern hacker pleads guilty
-Nigerian scammer gets 8 years
-17% of OpenClaw skills are malicious
-ClawHub to scan skills using VT

Podcast: https://risky.biz/RBNEWS523/
Newsletter: https://news.risky.biz/risky-bulletin-smartertools-hacked-via-its-own-product/

Microsoft held an AMA session and updated its guide to help ...

2026-02-08T11:35:31Z

Microsoft held an AMA session and updated its guide to help sysadmins safely replace Secure Boot certificates that are set to expire this June.

https://techcommunity.microsoft.com/event/windowsevents/ask-microsoft-anything-secure-boot/4486023

https://techcommunity.microsoft.com/blog/windows-itpro-blog/secure-boot-playbook-for-certificates-expiring-in-2026/4469235

Cisco has discovered DKnife, an AitM toolkit installed on hacked ...

2026-02-05T14:37:18Z

Cisco has discovered DKnife, an AitM toolkit installed on hacked routers and edge devices by Chinese hackers, designed to intercept and tamper with traffic to deliver malware

https://blog.talosintelligence.com/knife-cutting-the-edge/

Dear f***ing lord! Nearly one every three Meta ads showed in the ...

2026-02-03T11:57:12Z

Dear f***ing lord!

Nearly one every three Meta ads showed in the EU and UK over 23 days pointed to online scams

This should be the easiest layup for govt agencies in the history of enforcements

https://www.gendigital.com/blog/insights/research/scam-ad-machine-meta

Kaspersky has a list of individuals targeted in the Notepad++ ...

2026-02-03T11:31:57Z

Kaspersky has a list of individuals targeted in the Notepad++ incident

https://securelist.com/notepad-supply-chain-attack/118708/

Sounds about right 🫠 ...

2026-01-28T20:28:01Z

Sounds about right 🫠

Microsoft releases emergency patch for an Office zero-day ...

2026-01-26T18:08:44Z

Microsoft releases emergency patch for an Office zero-day

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21509

There's a cool Mastodon account named Malicious Extension Bot ...

2026-01-24T15:58:50Z

There's a cool Mastodon account named Malicious Extension Bot that sends out notifications whenever new malicious Chrome extensions are detected

https://infosec.exchange/@malicious_browser_bot

-Improperly patched bug exploited again in Fortinet firewalls ...

2026-01-23T10:41:21Z

-Improperly patched bug exploited again in Fortinet firewalls
-Hackers go after security testing environments
-Jordan used Cellebrite against activists
-new Cisco and SmarterMail zero-days
-China accuses Taiwan of 4,000 hacks
-Kazakhstan to tighten data breach laws
-Spain dismisses NSO case
-Dutch want to avoid US clouds for govt data
-€3.5m fine for mysterious company
-Grok generated 23k sexualized images of kids

Podcast: https://risky.biz/RBNEWS516/
Newsletter: https://news.risky.biz/risky-bulletin-improperly-patched-bug-exploited-again-in-fortinet-firewalls/

Iran is trying to use cryptocurrency to stabilize its fiat rial ...

2026-01-22T12:17:20Z

Iran is trying to use cryptocurrency to stabilize its fiat rial currency... that's a first

https://www.elliptic.co/blog/iran-has-acquired-us-dollar-stablecoins-worth-at-least-half-a-billion-dollars

Five malicious Chrome extensions are targeting the users of ...

2026-01-18T10:15:24Z

Five malicious Chrome extensions are targeting the users of popular HR and ERP platforms

-steal cookies
-hijack sessions
-block access to the platform's security and admin pages

Targeted services:

-Workday
-NetSuite
-SuccessFactors

https://socket.dev/blog/5-malicious-chrome-extensions-enable-session-hijacking

The Australian cybersecurity agency has warned local businesses ...

2026-01-14T21:32:06Z

The Australian cybersecurity agency has warned local businesses against uploading customer data and files to AI chatbots or genAI platforms

https://www.cyber.gov.au/business-government/secure-design/artificial-intelligence/artificial-intelligence-for-small-business

Beijing tells Chinese firms to stop using US and Israeli ...

2026-01-14T11:33:32Z

Beijing tells Chinese firms to stop using US and Israeli cybersecurity software, sources say

https://www.reuters.com/world/china/beijing-tells-chinese-firms-stop-using-us-israeli-cybersecurity-software-sources-2026-01-14/

Cloudflare says that BGP routing anomalies right before the US ...

2026-01-08T10:18:31Z

Cloudflare says that BGP routing anomalies right before the US intervention and arrest of Nicolas Maduro appear to have been just "an accident"

https://blog.cloudflare.com/bgp-route-leak-venezuela/

"Flights across Greece were grounded on Sunday after a ...

2026-01-04T13:42:37Z

"Flights across Greece were grounded on Sunday after a collapse of radio frequencies crippled air traffic communication, stranding thousands of travellers and bringing airport operations to a halt."

https://www.reuters.com/world/europe/greek-airports-halt-flights-due-radio-frequency-issues-2026-01-04/

Christmas Eve miracle: Fortinet admits new exploitation of a 2020 ...

2025-12-25T13:31:30Z

Christmas Eve miracle: Fortinet admits new exploitation of a 2020 bug

https://www.fortinet.com/blog/psirt-blogs/product-security-advisory-and-analysis-observed-abuse-of-fg-ir-19-283

David Stern, the CISA official behind the agency's ...

2025-12-25T09:44:56Z

David Stern, the CISA official behind the agency's Pre-Ransomware Notification Initiative (PRNI), has quit the agency after he was forced to relocate to FEMA's Boston office by the new DHS leadership

https://www.cybersecuritydive.com/news/cisa-ransomware-warning-program-key-employee-left/808589/

French authorities said they arrested the man who hacked their ...

2025-12-18T10:54:10Z

French authorities said they arrested the man who hacked their Ministry of Interior email servers.

He's a known hacker who was already convicted this year. Anyone has any ideas who this could be?

https://www.rfi.fr/en/france/20251218-france-detains-suspect-over-interior-ministry-cyberattack-as-probe-widens

-Most smart devices run outdated web browsers -Ukraine hacks ...

2025-12-17T10:14:49Z

-Most smart devices run outdated web browsers
-Ukraine hacks major Russian defense contractor
-Ransomware hits Venezuela's oil company
-Hackers are trying to extort PornHub with stolen user data
-SoundCloud has a data breach
-Ribbon Finance hacked for $2.7m
-Prosper data breach exposes 17.6m users
-Iranian hackers put out bounties on Israelis
-Russian hackers breach Dutch public fountain (yes, you read it right)

Podcast: https://risky.biz/RBNEWS509/
Newsletter: https://news.risky.biz/risky-bulletin-most-devices-run-outdated-web-browsers/

"Microsoft Scales Back AI Goals Because Almost Nobody Is ...

2025-12-16T17:57:03Z

"Microsoft Scales Back AI Goals Because Almost Nobody Is Using Copilot"

:thinkerguns:

https://www.extremetech.com/computing/microsoft-scales-back-ai-goals-because-almost-nobody-is-using-copilot

The GNOME project has banned developers from including ...

2025-12-14T17:41:01Z

The GNOME project has banned developers from including AI-generated code in its shell extensions

https://blogs.gnome.org/jrahmatzadeh/2025/12/06/ai-and-gnome-shell-extensions/

The Justice Department charged a former product manager at ...

2025-12-11T02:16:19Z

The Justice Department charged a former product manager at Accenture Federal Services with falsely misleading government customers about the security posture of a cloud product offered by the company.

https://www.nextgov.com/cybersecurity/2025/12/us-charges-former-accenture-employee-misleading-feds-cloud-platforms-security/410085/

Per Sysdig, North Korean hackers are now exploiting React2Shell ...

2025-12-09T11:49:56Z

Per Sysdig, North Korean hackers are now exploiting React2Shell to drop EtherRAT, a remote access trojan that uses Ethereum smart contracts as C2

https://www.sysdig.com/blog/etherrat-dprk-uses-novel-ethereum-implant-in-react2shell-attacks

Meta told the EU it will use less personal data for ads ...and ...

2025-12-08T23:59:53Z

Meta told the EU it will use less personal data for ads

...and those dummies believed it!!!

https://ec.europa.eu/commission/presscorner/detail/en/mex_25_2966

"A cross-party group of lawmakers will urge the European ...

2025-11-25T14:32:16Z

"A cross-party group of lawmakers will urge the European Parliament to ditch internal use of Microsoft’s ubiquitous software in favor of a European alternative, according to a letter obtained by POLITICO."

https://www.politico.eu/article/get-us-off-microsoft-eu-lawmakers-press-parliament-to-change-in-house-it/