Inside a global campaign hijacking open-source project identities

Stop Putting Your Passwords into Random Websites (Yes, Seriously, You Are the PR

Leak of identity of anonymous reviewers, authors, and area chairs on OpenReview

Shai-Hulud Returns: Over 300 NPM Packages Infected

Gen Z Officially Worse At Passwords Than 80-Year-Olds

Practical Security in Production

ML-KEM Mythbusting

X.org Security Advisory: multiple security issues X.Org X server and Xwayland

A hacking kingpin reveals all: Inside the gang that left a trail of destruction

Android security bulletin: November 2025 patch fixes zero-click RCE

"erase startup-config" isn't enough

Dissecting Flock Safety: The Cameras Tracking You Are a Security Nightmare [video]

Iceland declares ocean-current instability a national security risk

fail2ban RCE

SecretSpec 0.4.0

Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in Large Language Models

Fort Knox for your secrets - Manage secrets with encryption or cloud providers

Counter Galois Onion: Improved encryption for Tor circuit traffic

Disrupting the first reported AI-orchestrated cyber espionage campaign

Bank of America Faces Lawsuit Over Alleged Unpaid Time for Windows Bootup, Logins, and Security Token Requests

Windows ARM64 Internals: Deconstructing Pointer Authentication

Oops! It's a kernel stack use-after-free: Exploiting NVIDIA's GPU Linux drivers

FFmpeg to Google: Fund Us or Stop Sending Bugs

WhatsApp Census

A security model for systemd

Defeating KASLR by doing nothing at all

A Reverse Engineer's Anatomy of the macOS Boot Chain and Security Architecture

US 'Homeland Security' Twitter account seemingly run from Israel

oss-security - runc container breakouts via procfs writes: CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881

Chinese Hackers Used Anthropic's AI To Automate Cyberattacks

More →