November 01, 2026
We Took Over ChatGPT Accounts
parameter.ai
Defending the Patch Gap Against Automated Attackers
blog.mozilla.org
The Night Watch
usenix.org
October 31, 2026
Azure's Weakest Link: Five Full Cross-Tenant Compromises
binarysecurity.no
XSS in yarr RSS Reader
0x67673068.me
16colo.rs: ANSI/ASCII Art Archive
16colo.rs
October 30, 2026
Zero-Click, Silent, Remote Android DoS
smsofdeath.com
Getting Debug Access on a Brother Printer over Telnet
inventor7777.github.io
My First Impressions of Web3
moxie.org
October 29, 2026
Apple's Git Still Trusts the Compromised eMudhra Certificates
emudhra.we-have-a-problem.com
Scalable Vector Grief
portswigger.net
Forging a Microsoft Edge Full Chain with Logic Bugs Only
blog.orange.tw
Tailscale SSH: Investigation and Remediation Update
tailscale.com
October 28, 2026
Eight Bits of Trust: eMudhra's CA Keys Cracked in Milliseconds
scotthelme.co.uk
Jailbreaking the Switch 2
pepsipu.com
eMudhra Intermediate CA Compromise
emudhra.we-have-a-problem.com
Ledger Confirms Spy Chip Implant Behind Wallet Crypto Thefts
bleepingcomputer.com
Cryptographic Right Answers
latacora.com
October 27, 2026
The Conscience of a Hacker
phrack.org
October 25, 2026
Node2Shell Evolves to HTTP2Shell
aikido.dev
Is This the New Cyber Normal?
drew.silcock.dev
Smashing the Stack for Fun and Profit
phrack.org
The Psychology of Security
schneier.com
Why Can't Apple Decrypt Your iPhone?
blog.cryptographyengineering.com
October 24, 2026
Today, We Hacked What We'd Set Out to Hack: the iPhone
blog.calif.io
How Does Fable 5.1 Hide Messages in Images?
lesswrong.com
Hackers and Painters
paulgraham.com
October 23, 2026
Railway Security Disclosure
blog.railway.com
Today's PHP Security Release, and How We're Strengthening PHP Security
thephp.foundation
Au Revoir, France: Quad9 to Exit France
quad9.net
October 22, 2026
Passkeys Are Not a Trap
scotthelme.co.uk
Fingerprints Are the New Cookies
royfish.dev
Reflections on Trusting Trust
cs.cmu.edu
October 20, 2026
BadHost: Discovery and Details
x41-dsec.de
Open and Shut: Remote Code Execution in opencode via MCP OAuth
pillar.security
The Security Mindset (Bruce Schneier)
schneier.com