Factoring RSA Keys with Many Zeros
Interesting research on a new class of weak RSA keys: keys with lots of zeros. It turns out that these keys are out in the wild.
General
20 articles
WhatsApp Rolling Out Username Feature to Bolster Phone Number Privacy
An optional ‘username key’ adds another layer by requiring a secondary credential before someone can message users. The post WhatsApp Rolling Out Username Fe...
Secret Service lax phone security puts leaders at risk, report finds
A Department of Homeland Security inspector general report revealed that Secret Service agents routinely used personal cell phones for mission-critical commu...
Nebulock raises $25 million for autonomous threat hunting platform
Founded in 2023, Nebulock's AI-driven platform performs autonomous, vendor-agnostic threat hunts across endpoint, identity, cloud, network, and SaaS telemetry.
Amazon Kindle E-Reader: Worth It, and How to Afford More Books?
See whether an Amazon Kindle is worth buying, how it compares with other e-readers, and practical ways to read more books without overspending each month today.
U.S. offers $10 million for hackers targeting WhatsApp, Signal users
The U.S.
OpenAI Reveals GPT-5.6 Sol Cybersecurity Model, Restricts Early Access
OpenAI is previewing its GPT-5.
Deloitte joins IBM and Red Hat's initiative to secure open-source software
The partnership focuses on strengthening the security of open-source components used in enterprise software.
New coalition aims to streamline open source bug fixes
The Athena coalition, led by Chainguard, will leverage artificial intelligence to proactively address vulnerabilities in open source code.
Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines
Indirect prompts hidden in a repository can lead to Claude Code spawning a reverse shell on the developer’s machine. The post Researchers Demo New Claude Cod...
Straiker Raises $64 Million for AI Security Platform
The startup’s platform can identify AI agents and provide visibility into their access, behavior, and risks. The post Straiker Raises $64 Million for AI Secu...
Agentic AI Has an Identity Problem and Attackers Know It
AI agents can access data, trigger workflows, and take action across enterprise systems. Token Security explains why governing these privileged identities is...
Insurance Regulators Group NAIC Hit in Oracle PeopleSoft Hack
The ShinyHunters extortion group claims to have stolen 3.1 TB of data from the organization.
Ukraine to use seized crypto from cybercrime group to buy war bonds
Ukraine's Asset Recovery and Management Agency (ARMA), which manages property seized in criminal proceedings, said more than $8.3 million in cryptocurrency h...
Cybersecurity Firm Cyberbit Shuts Down Israel Operations
Cyberbit is closing its Israeli operations and laying off local staff as the former Elbit Systems spin-off grows mainly in the US after buying RangeForce.
Adding some Automation to the favicon.ico method of Host Recon, (Mon, Jun 29th)
I&#;x26;#;39;m in the throes of target host recon for another pentest, and thought I&#;x26;#;39;d share some workflow / automation stuff.
Why Post-Quantum Cryptography Starts With Credentials
Today’s encrypted data, such as credentials, may no longer remain confidential in the future because the public-key cryptography protecting it will soon be b...
Improving Transparency and Assurance in the Web PKI: Mozilla Root Store Policy v3.1
Mozilla remains committed to maintaining a secure, trustworthy, and transparent Web PKI. Today we are announcing the publication of Mozilla Root Store Policy...
US seizes hundreds of FIFA World Cup illegal streaming domains
The U.S.
3 ways to secure enterprise apps in the AI age
By fighting AI with AI, teams can stay one step ahead in the great innovation race.