Normal Science

FBI Arrests Founder of Ransomware Negotiation Firm

Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sources tell KrebsOnSecurity. The New York Times reported today that the FBI has arrested a Canadian man in Pennsylvania on suspicion of assisting ShinyHunters. The Times story did not identify the man, nor did a statement ...

I think we might lose public key cryptography

I’ve had a few people write to ask me to follow up on a (reply!) tweet I wrote that’s gotten a lot of retweets. I considered deleting it just to avoid the headache, but I think that would make people more paranoid. So let me share my thoughts.

My static site was serving my internal docs

A build output directory quietly published 150KB of internal notes, including an admin bypass. Two cache purges failed. Here is the mechanism, the diagnostic that finds it, and the check that lies to you.

The keys to the Internet change on October 11. Are you ready?

On October 11, 2026, the DNS root switches to a new key-signing key (KSK-2024). Learn what this means for you, and how RFC 8509 trust anchor sentinels allow you to test whether your DNS resolver is ready for the rollover.

The Secrets of a US Spyware King

Paragon Solutions vowed not to sell its mobile spyware to governments with poor human rights records and to cut off customers who misuse its products. However, in 2025 researchers at the Citizen Lab confirmed that the spyware had been used to target Italian activists and journalists. In an exclusive interview with WIRED, Paragon’s CEO Andrew Boyd revealed the limits of the company’s promise: that it has no way to know if customers misuse its software, and it doesn’t have a “kill switch” to disab...

ShinyHunters Extorted Boeing Spin-off Prior to Arrests

A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle “Rey,” was detained as ShinyHunters was in the process of extorting a business unit recently divested by the global aerospace company Boeing, which manufactures the fleet of planes used by the employer of Rey’s ...

Apple’s Verified Photography System

Apple just released a system called “Reference Image.” It can verify the image is exactly as taken by an iPhone—new models only—without tying it to a specific iPhone or photographer. It can also verify that multiple images came from the same iPhone. Other industry solutions require a photographer or institution to vouch for an image using their own credentials. We are concerned this puts some photographers, such as those operating in conflict zones, in a difficult position; it should not be nece...

Possible Vulnerability in Apple’s Automatic Reboot

404Media is reporting (alternate link) that a cyber-weapons arms manufacturer is exploiting a vulnerability in iOS to bypass its automatic reboot security feature. This is the feature that automatically puts an iPhone into a more secure state if it hasn’t been used for 72 hours. The new technology to get around inactivity reboot was developed by Magnet Forensics, the company behind GrayKey, a popular tool sold to law enforcement agencies that allows them to unlock and access data stored in iPhon...

How to fix a bug in a fix

Project Zero often works with software vendors to remediate the vulnerabilities we report and provide broader guidance on making software more secure. Some vendors express concern about potential scenarios in which they are unable to fix vulnerabilities that are causing immediate user harm, due to limitations in their patch delivery systems. Since Project Zero encounters a wide array of systems designed to protect users in the case of exceptional exploitation scenarios, both through vendor discu...

Google Chrome silently installs a 4 GB AI model on your device without consent

Google Chrome is downloading a 4 GB Gemini Nano model onto users

DNSSEC disruption affecting .de domains – Resolved

Current system status. View active incidents or upcoming maintenance. Subscribe to receive status notifications.

Security through obscurity is not bad

Why security through obscurity still matters: not as your only defence, but as a practical layer that raises attacker cost.

US healthcare marketplaces shared citizenship and race data with ad tech giants

Virginia and Washington, D.C. paused the data collection and sharing, after Bloomberg's investigation found their health insurance marketplaces were sharing users' information with advertisers.

The text mode lie: why modern TUIs are a nightmare for accessibility

The mythical, it's text, so it's accessible There is a persistent misconception among sighted developers: if an application runs in a te...

Iranian banks' SSL certificates are being revoked due to OFAC sanctions

Bad Connection: Global telecom exploitation by covert surveillance actors

https://www.haaretz.com/israel-news/security-aviation/2026-0... (https://archive.ph/0QYbN)

CVE-2026-31431: Copy Fail vs. rootless containers

Home About meCVE-2026-31431: Copy Fail vs. rootless containers04 May 2026Table of ContentsTable of ContentsIntroductionThe vulnerabilityAnalyzing the shellcodeSetting up the labSetting up rootless PodmanRunning the exploit inside a containerTracing the exploit mechanismWhy rootless containers stopped the escalationCatching the kernel in the act with eBPFThe uid_map proofConclusionsIntroductionIn the previous post about SELinux MCS and GitLab runners, I briefly mentioned CVE-2026-31431 (“Co

ICE Has a $2M Contract for Spyware That Can Hack Phones Without a Click

Graphite is Paragon's powerful zero-click spyware. Here's how it hacks phones, who has been targeted and what is known about ICE's $2 million contract

The Coldcard Disaster Gets Worse: The Hack May Have Reached $88.6M

Cities Are Ditching Flock, Replacing It with Axon License Plate Readers

Rather than get rid of ALPR cameras entirely, many cities and towns are switching to Axon, whose cameras can be mounted to an existing streetlamp, helping them blend into their surroundings.

Firefox's AI Switch Is Off. Telemetry Isn't

My Wireshark test of Firefox 148 showed that its AI kill switch disables generative features, but leaves telemetry and advertising untouched. Six months…

Show HN: Check if your IP has appeared in a residential proxy network

Check whether your public IP has been observed participating in a residential proxy network. A free tool powered by Spur Intelligence.

AI Agent Has Root

MCP servers run as you. Same UID, same permissions, full access to your home directory, your SSH keys, and your cloud credentials. Here’s why that’s a problem and what I did about it.

Israeli spyware vans infiltrate American streets and your phones

An Analysis of GrapheneOS's Server Infrastructure

GrapheneOS has a well-earned reputation for serious security work. Cellebrite — the forensics company law enforcement pays to crack phone...

Police departments weren’t looking for Flock abuse. We did it for them.

Can AI Shopping Agents Be Trusted?

Our experiment reveals how indirect prompt injection can manipulate AI shopping agents into leaking sensitive user data — and what it means for the future of AI agent security.

Investigation: Russian censorship systems (TMCT) expose Chinese DPI signatures

Как рунет стал придатком Великого китайского файрвола: история одного цифрового следа

The V8 JavaScript Runtime Undermined My Constant-Time JavaScript Library

Six years ago, I wrote a blog post titled Soatok's Guide to Side-Channel Attacks in which I discussed the general topic of side-channels in cryptographic applications, and how to avoid them, with example code in PHP. I had called out that the algorithms discussed on the page cannot rule out compiler or runtime optimizations that…

Fileless ELF Execution via Kernel Keyring

Using the Linux kernel keyring to stage an ELF in slab memory and execute it via userland exec, skipping execve and the filesystem entirely.

Z.ai Security Disclosure

Z.ai Security披露账本总览披露账本EN中文披露账本2,436已收录漏洞53已公开2,383未公开1,097严重及高危269覆盖开源项目45影响时间跨度（年）这些漏洞的影响时间跨度达 45 年——最早的缺陷可追溯至 1981 年，平均每个漏洞在被发现前已潜伏 26.6 年。严重程度分布Critical107High990Medium1,286Low53漏洞引入年份19812026最近收录查看全部 2,436 项 →高危Linux 内核 6lowpan 修复错误路径上 NHC 条目的 use-after-free · LinuxCNNVD-2026-18058465潜伏 11 年已公开披露CNNVD-2026-18058465CVE-2026-64452高危WebKit 内存处理缺陷：精心构造的 Web 内容导致意外的进程崩溃 · Apple SafariCNNVD-2026-38995661已公开披露CNNVD-2026-38995661CVE-2026-43663高危[FreeBSD] ptrace PT_SC_REMOTE 参数验证缺失：32GiB memmove 下溢

Elevating Privileges from Firefox to Android Root

IonStack The first browser-to-kernel full-chain RCE on Android 17 Source code will be publicly available in 01234567890123456789Days 01234567890123456789Hours 01234567890123456789Minutes 01234567890123456789Seconds Check our open source code github.com/NebuSec/CyberMeowfia A series of write-ups is coming soon. Step 1: Download vulnerable Firefox 151 fenix-151.0.multi.android-arm64-v8a.apk (archive.mozilla.org) Step 2: Live PWN rootme.nebusec.ai/b9e3f1a4-7c82-4d6e-9a51-2f8c4b3e0d17 List of suppor

Nat Slipstreaming v2.0 allows an attacker to remotely access any TCP/UDP service

exploit NAT/firewalls to access TCP/UDP services bound to any system behind victim

Aws.com and google.com don't have DNSSEC enabled

aws.com and google.com don't have DNSSEC enabled. GitHub Gist: instantly share code, notes, and snippets.

One Email, Three Identities: SPF, DKIM and DMARC Explained

The visible From, envelope sender, DKIM domain and sending IP in one email traced field by field, showing exactly how SPF, DKIM and DMARC alignment decide a pass.

Attacker Takes over Zoom AI

Zoom AI lacks network restrictions in its coding environment, enabling attackers to establish command-and-control to exfiltrate meeting data, messages, and more via a malicious Skill.

From a 7 KB file to a 13-year backdoor operation

Most plugin closures are uneventful. A developer stops responding, wp.org pulls the plugin, the listing goes dark, and that is the end of it. My WP Beacon

Honeypot Design

Information Camouflage Building lifelong customer relationships Menu About Advice Archive Blogroll Contact Cookies More Posts Honeypot Design 2026-06-07 (Last Modified: 2026-06-07) I’ve run various honeypots for a long time. I ran a WordPress honeypot off and on from 2013 to 2018. I’ve run endlessh on my home server for years. Before that, I ran the cowrie ssh/telnet honey pot for a while. Currently, this website runs a fake WordPress login that tells you that you’ve used the w

CVE-2026-53361 AF_Unix GC vs. MSG_PEEK use-after-free container escape

CVE-2026-53361 AF_UNIX GC vs MSG_PEEK use-after-free container escape - sgkdev/bad_garbage

Browser Fingerprinting – How websites track you across internet –without cookies

Browser fingerprinting tracks you across websites without cookies — using your screen, fonts, GPU and more. Learn how it works and how to protect yourself.

Show HN: I created a BGP-based blackhole system that you can set up in minutes

Hey friends, I've been working on this idea since 2019, and wanted to share it and see who might be interested. I built a BGP network full of nodes that collect threat data, put it on a blockchain, and put it into a BGP community that anyone can peer with over GRE. The external network ASN is AS23026.Basically, you sign up on the website -- you can create an account with your email or with peeringdb or a thoughtwave account, set up a private ASN and it spits out a router config that you can use to start blackholing routes. I have been using it for months now on my edge router (AS54380) and it has cut SSH attacks down drastically.It doesn't do volumetric protection against DDoS, but it will give you protection against brute force attacks. It ingest spamhaus, a bunch of other feeds as well as fail2ban from participants and also our own attack intelligence.It's $59/month after the two week trial, and you can cancel at any time. I have a support ticket system. Would love to get some feedback.

Can open-source prompt-injection detectors catch realistic AI agent attacks?

🛡️ Regex catches 0%, Meta's Prompt Guard 2 catches 1% of 629 realistic AgentDojo injection attacks when they're buried in tool output. Reproducible benchmark. - rudratoshs/buried-injections

Show HN: I told Claude Code never to reveal my secrets. It sent 3 of 4 anyway

Self-hosted PII redaction proxy for LLM APIs and agent CLIs. Scrubs names, emails and secrets from Claude Code, Codex and any OpenAI-compatible app before requests leave your machine, tool-call arguments included, then restores them in the reply. Local detection, zero telemetry. - crp4222/PrivAiTe

BGP hijack infecting networks caused by a comedy of errors

What can we learn from a BGP hijacking that poisoned production software? Plenty.

New agents.txt file found on DreamHost

DreamHost now adds a default agents.txt (similar to robots.txt) to hosted websites that discourages LLM training and agent actions and allows on-the-fly access. On the downside, they added it to existing sites without notice, and used a proposed spec that's already changed.

76% of 623 EU software vendors have no security.txt ahead of the CRA 24h rule

We scanned 623 European software vendors in August 2026: 76% of reachable sites have no security.txt at /.well-known/. From 11 September, awareness of an exploited vulnerability starts a 24-hour legal reporting clock under the EU Cyber Resilience Act.

NPM-Scan:Detecting Dependency Confusion, Typosquatting,and Credential Harvesting

Modern supply chain security for the npm ecosystem. Static + behavioral analysis that catches what npm audit, Snyk, and Socket miss — obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. - lateos-ai/npm-scan

Reticulum: Source-privacy claim vs. routing metadata

Show HN: We hid a backdoor in an LLM – $51,200 on finding it

You download open models to win. That’s exactly how you get backdoored — nobody looks. Seven models on HuggingFace; one was taught to betray you on a word only its maker knows, and it passes every test. Find it — the hoard doubles every dawn to $51,200. On the twenty-first — Ragnarök — everyone finally looks.

The security checks in every Lionshead PR

At enterprise scale, a breach is a bad quarter. At solo scale, it ends the product. So I automate the breach and run it against every PR. Here are the tools, links, and how each one is configured.