I tested an Android app that lets anyone fight censorship - and shows your impact in real time

Most apps make our personal lives easier. This one helps the oppressed communicate by turning your phone into a Tor proxy. No technical knowledge needed.

RSS 官方收录 · 可信分层展示

Google Meet can take notes for your in-person meetings now - here's how it works

Google's Gemini-driven meeting software can now save a transcript, send it to Google Drive, and email you a copy.

RSS 官方收录 · 可信分层展示

Oracle’s new database security tool is free — for six months

Oracle has released a security tool intended to provide organizations with a centralized view of security risk across their database environments.…

• Oracle Database Security Central will be available free of charge unti…
• It arrives at a critical time for Oracle customers, with attackers tar…
• Oracle is also concerned about the threat posted by the launch of bug-…

RSS 官方收录 · 可信分层展示

Salesforce, ServiceNow data targeted in ‘City-Forum’ attacks

Records held in Salesforce and ServiceNow systems are under attack leaving user data exposed, according to researchers at Reco.…

• The attack appears similar to those perpetrated by the extortion group…
• ShinyHunters has been particularly active this year, attacking dating …
• Reco has named the latest campaign of attacks “City-Forum,” after a do…

RSS 官方收录 · 可信分层展示

Amid AI-Driven Bug-Hunt Tsunami, NIST Looks to … AI

Driven by AI-augmented research and scanning, vulnerability volumes continue to surge, driving the National Institute of Standards and Technology to ask whether AI could be the answer.

RSS 官方收录 · 可信分层展示

Mission-Driven Security: Inside a Global Bank's Defense

In this video interview, Standard Chartered's group CISO shares insights on transitioning from technical roles to strategic leadership, the importance of business-savvy security executives, and how AI is reshaping both defensive capabilities and adversarial tactics in banking.

RSS 官方收录 · 可信分层展示

If the Markets Reject OpenAI and Anthropic, the US Should Nationalize Them

This essay was written with Nathan E.Sanders, and originally appeared in The Guardian.…

• OpenAI, and then Anthropic, were each formed by AI developers who fear…
• Their founders proclaimed that their new labs, uniquely, could be trus…
• But each, in turn, were themselves co-opted by the same market incenti…

RSS 官方收录 · 可信分层展示

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I’m speaking, signing books, and participating in panel discussions at LAcon V in Anaheim, California, USA.…

• My full schedule is here.
• I’m speaking online (via Zoom) at a League of Women Voters event on Tu…
• I’m speaking at Elevate Festival in Toronto, Canada.

RSS 官方收录 · 可信分层展示

Scattered Spider Hackers Plead Guilty on Day 1 of Trial

Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for the public transport network in the Greater London area.…

• The duo were key members of a prolific cybercrime group known as Scatt…
• Owen Flowers (left) 18, and Thalha Jubair, 20.
• Image: UK National Crime Agency (NCA).

RSS 官方收录 · 可信分层展示

FBI Seizes NetNut Proxy Platform, Popa Botnet

The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with NetNut, a sprawling residential proxy service operated by the publicly-traded Israeli company Alarum Technologies [NASDAQ: ALAR].…

• The action comes roughly two weeks after KrebsOnSecurity published fin…
• The NetNut homepage today was replaced by this seizure banner from the…
• On June 19, three different security firms issued similar findings: Th…

RSS 官方收录 · 可信分层展示

Felons, Fraudsters Flog Offensive Cybersecurity Startup

A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most recent ventures included fake intelligence companies and a now-defunct AI-based lobbying platform they operated under assumed names.…

• The X/Twitter account IRIS C2 (@C2IRIS) has gained more than 4,000 fol…
• IRIS C2 says it is a company in McLean, Va.
• that sells offensive cybersecurity capabilities.

RSS 官方收录 · 可信分层展示

Lessons Learned from CISA’s Recent GitHub Leak

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a recent data leak in which a contractor published dozens of internal CISA credentials — including AWS Govcloud keys — in a public GitHub repository for almost six months before being notified by KrebsOnSecurity.…

• Experts say the gaps identified in the agency’s initial response provi…
• On May 15, 2026, the security firm GitGuardian asked for help in notif…
• One of the exposed files, titled “importantAWStokens,” included the ad…

RSS 官方收录 · 可信分层展示

Microsoft Patches a Record 570 Security Flaws

Microsoft Corp.…

• today released software updates to plug at least 570 security holes in…
• Microsoft attributed the burgeoning patch counts to vulnerability disc…
• Nearly 60 of the bugs quashed in July’s Patch Tuesday earned a “critic…

RSS 官方收录 · 可信分层展示

LG to Ban Residential Proxies from Smart TV Apps

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node.…

• The move comes less than a month after researchers found that more tha…
• Proxy SDK prevalence among smart TV apps for LG (webOS) and Samsung (T…
• Image: Spur.

RSS 官方收录 · 可信分层展示

Read This Before You Buy That TV Streaming Stick

Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they secretly rent the user’s Internet connection out to strangers.…

• But a groundbreaking new analysis finds these devices also routinely s…
• Pedro Falé is a threat researcher with the security firm Bitsight.
• Falé told KrebsOnSecurity he was able to peer inside a vast and comple…

RSS 官方收录 · 可信分层展示

Canadian Man Pleads Guilty in Snowflake Extortions

A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud provider Snowflake.…

• Connor Riley Moucka, of Kitchener, Ontario, also admitted to stealing …
• A surveillance photo of Connor Riley Moucka, a.
• “Judische” and “Waifu,” dated Oct 21, 2024, 9 days before Moucka’s arr…

RSS 官方收录 · 可信分层展示

Who’s Tracking You? Use This New Service to Find Out

It can be daunting to determine who’s responsible for showing ads on the websites we visit, or who’s harvesting data from the mobile apps we use every day.…

• That information is already semi-public, but it is not easily parsed a…
• Not anymore: A powerful and free new service called DecryptAds scrapes…
• A Decryptads summary of the advertising partnerships declared by espn.

RSS 官方收录 · 可信分层展示

Microsoft Plugs Nearly 400 Security Holes

Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today.…

• Image: Shutterstock, Mallika Home Studio.
• August’s overstuffed bundle of patch joy from Microsoft did not eclips…
• Microsoft has attributed the recent patch deluge to vulnerability disc…

RSS 官方收录 · 可信分层展示