Azure’s Weakest Link - Five Full Cross-Tenant Compromises https://lobste.rs/s/gttasf #security
https://www.binarysecurity.no/posts/2026/10/one-root-case
security
Defending the patch gap against automated attackers https://lobste.rs/s/dtvr7y #browsers #security
https://blog.mozilla.org/en/firefox/privacy-security/defending-patch-gap/
Expat 2.10.0 released, fixes four vulnerabilities via @fanf https://lobste.rs/s/aqyfya #release #security
https://blog.hartwork.org/posts/expat-2-10-0-released/
This background sound leaks your exact location via @fanf https://lobste.rs/s/s1btqo #video #math #security
https://youtu.be/UytYrhYLOKI
Shutting the Door on the XCPE Botnet via @mrRobot https://lobste.rs/s/chn4hu #security
https://cloud.google.com/blog/topics/threat-intelligence/shutting-the-door-on-the-xcpe-botnet/
HardenedBSD August / September 2026 Status Report by @lattera https://lobste.rs/s/roo5hm #freebsd #security
https://hardenedbsd.org/article/shawn-webb/2026-09-27/hardenedbsd-august-september-2026-status-report
Recognizing Keystrokes Using WiFi Devices https://lobste.rs/s/8gsafe #security
https://ieeexplore.ieee.org/document/7875144
Securing Internet-Critical Software: How We Could Have Backdoored Bash via @mrRobot https://lobste.rs/s/0mdf8w #security
https://www.hacktron.ai/blog/hacking-gnu-savannah
Jailbreaking my car's navigation system just so I can change the time https://lobste.rs/s/qvdatp #linux #reversing #security
https://blog.nns.ee/2026/11/02/renault-hack/
The Gift of It's Your Problem Now (2021) https://lobste.rs/s/girvtu #security
https://apenwarr.ca/log/20211229-the-gift-of-its-your-problem-now
Firefox Security & Privacy Newsletter 2026 Q3 https://lobste.rs/s/trqbi2 #browsers #privacy #security
https://attackanddefense.dev/2026/11/02/firefox-security-and-privacy-newsletter-q3.html
Common Beliefs About DNSSEC Put to the Test: An Invitation to Fact-Check Your Assumptions via @robalex https://lobste.rs/s/qvpzfa #networking #security
https://circleid.com/posts/common-beliefs-about-dnssec-put-to-the-test-an-invitation-to-fact-check-your-assumptions
Fake Express Packages on npm Spread a Linux Worm https://lobste.rs/s/e2gxro #linux #nodejs #security
https://safedep.io/dirtyblanket-express-impersonation-npm
🗝️ Any passwords over 256 characters are fine.
Ref: https://sshhole.com/
Observations from Running stealmybitcoin.com via @wezm https://lobste.rs/s/fgucra #php #security
https://pavursec.com/blog/stealmybitcoin/
"Adversarial distillation poses safety and national security risks."
Okay, so when US AI companies use tonnes of data in violation of the license, it's fine. But when anyone else does it, it's a national security risk.
"Extracted reasoning could be used to train another model without preserving the safeguards applied to the original model's user-facing outputs."
Right, because US AI companies have demonstrated such careful consideration for safety, responsibility and ethics thus far. It's not like they've only very recently failed to follow basic security principles in sandboxing and suffered zero consequences as a result or anything like that.
Irony alert: OpenAI whines that Chinese model stole its special IP that it stole from everybody else
https://www.theregister.com/security/2026/09/30/irony-alert-openai-whines-that-chinese-model-stole-its-special-ip-that-it-stole-from-everybody-else/5300285 #news #security
Major rsync upgrade in Debian because of 33 CVEs https://lobste.rs/s/sqyhgt #security
Oh please. These dipshit tech freaks and tech losers don't hate AI bots. They hate you, and they want your data. Money second, but data first. That's why, for example, reddit is doing this, all so they can force you to make an account and get more data on you https://thenextweb.com/news/reddit-rss-feeds-shut-down-old-reddit-ai-scraping #Reddit #RSS #Data #Security #Privacy
Edited 41d ago
A Practical Guide to “Plug&Pwn” for Pentesters and Defenders https://lobste.rs/s/yrcmjj #security
https://blog.scrt.ch/2026/10/06/a-practical-guide-to-plugpwn-for-pentesters-and-defenders/
Is sandboxing sufficient to contain rogue agents? https://lobste.rs/s/zcr7in #ai #security
https://blog.cryptographyengineering.com/2026/09/30/is-sandboxing-sufficient-to-contain-rogue-agents/
Residential Proxies Detected on White House Network https://lobste.rs/s/253two #security
https://layer3intel.com/blog/residential-proxies-white-house-network
Pulling the right strings for RCE on a Puppet https://lobste.rs/s/sfzkeb #security
https://neodyme.io/en/blog/puppet_rce
Hacking the Eufy Doorbell and Base Station https://lobste.rs/s/e84scc #hardware #security
https://adepts.of0x.cc/Eufy-DoorBell-hacking/
CVE-2026-86950: The Great Glyph Grift - An in-the-wild iOS bug with a possible WhatsApp zero-click path https://lobste.rs/s/yfttkn #security
https://calif.io/research/the-great-glyph-grift