protocol that performs a security-related function
The Internet goes on high alert after discovery of 8 compromised TLS certs: Intermediate certs allow anyone to mint web credentials for any Internet server.
arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks: SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls ...
bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/
dlvr.it Nov 03
Password manager mSecure tells users to change passwords, won't say why: Customers left wondering what's been compromised after vendor advises resetting ...
theregister.com/security/2026/11/03/password-manager-msecure-tells-users-to-change-passwords-wont-say-why/5307296
New Cisco firewall zero-day exploited to crash SSL VPN devices: Cisco released security updates to patch a denial-of-service zero-day in Adaptive Security ...
bleepingcomputer.com/news/security/cisco-warns-of-firewall-zero-day-exploited-to-crash-ssl-vpn-devices/
moneycontrol.com Oct 22
eMudhra to exit global website security certificate business after key-generation flaw
moneycontrol.com/technology/emudhra-to-exit-global-website-security-certificate-business-after-key-generation-flaw-article-14057821.html
Free TLS certificates: Let's Encrypt reduces validity to 64 days - | Golem.de
golem.de/news/kostenlose-tls-zertifikate-let-s-encrypt-verkuerzt-gueltigkeit-auf-64-tage-2610-213925.html
dlvr.it Oct 22
Disgraced Indian cert issuer leaves the cert issuing business: We didn't want to issue SSL/TLS certs anyway, Indian firm suggests after one private key turns out ...
theregister.com/security/2026/10/22/disgraced-indian-cert-issuer-leaves-the-cert-issuing-business/5304848
Ivanti warns of Connect Secure zero-day exploited in attacks: Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability ...
bleepingcomputer.com/news/security/ivanti-warns-of-connect-secure-zero-day-exploited-in-attacks/
Let's Encrypt cuts certificate lifetimes to 64 days starting February 2027: Free SSL/TLS certificate lifetimes reduce to 64 days in February.
arstechnica.com/gadgets/2026/10/lets-encrypt-cuts-certificate-lifetimes-to-64-days-starting-february-2027/
Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes: A new campaign targeting ad account managers uses fake ChatGPT, Gemini, Claude ...
bleepingcomputer.com/news/security/fake-chatgpt-gemini-sites-steal-advertising-accounts-mfa-codes/
I ditched Google Authenticator for an open source alternative; I've never looked back
androidpolice.com/aegis-google-authenticator-open-source/
The password habits that quietly put your accounts at risk: Common password and authentication mistakes that leave accounts exposed, from weak reuse habits to ...
qz.com/password-authentication-mistakes
Cloudflare plans to issue quantum-safe TLS certificates: The move will be part of a major overhaul of the ecosystem for website authentication.
arstechnica.com/security/2026/09/cloudflare-plans-to-issue-quantum-safe-tls-certificates/
I built a single dashboard for every service in my house, and now nobody needs to know what an IP address is
xda-developers.com/built-single-dashboard-every-service-house-nobody-needs-know-ip-address/
Police warn: Beware of online and telephone fraud - | Steyr & Steyr Land: Police warn of scam calls and insecure online accounts. Citizens can protect themselves ...
meinbezirk.at/steyr-steyr-land/c-lokales/vorsicht-vor-betrug-im-netz-und-am-telefon_a8910201
Changing your DNS doesn't hide anything, it just copies the list somewhere else: That doesn't mean you should keep using your ISP's DNS, however
xda-developers.com/changing-dns-providers-doesnt-hide-your-browsing/
OpinionGuest Commentary: AI fears are more than just science fiction: The first line of defense for you: strong passwords and two-factor authentication.
orlandosentinel.com/2026/09/25/guest-commentary-ai-fears-are-more-than-just-science-fiction/
Rogue external MFA providers can steal passwords during logins: Security researchers developed an attack that lets hackers with privileged access register a ...
bleepingcomputer.com/news/security/rogue-external-mfa-providers-can-steal-passwords-during-logins/
Gmail just made copying 2FA codes much less annoying: Gmail is rolling out a new Copy code shortcut that lets Android and iOS users grab 2FA codes without ...
androidauthority.com/gmail-copy-2fa-codes-inbox-3713263/
BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations: A phishing-as-a-service framework called BigBear 2.0 has been used to bypass ...
bleepingcomputer.com/news/security/bigbear-microsoft-365-phishing-service-bypassed-mfa-at-258-organizations/
Chess.com data from more than 7 million users published: Chess.com is a platform for online chess where users can play, train, and track their rating. Now ...
stadt-bremerhaven.de/chess-com-daten-von-mehr-als-7-millionen-nutzern-veroeffentlicht/
Police warn of cryptocurrency account breaches via compromised e-mails: Police warn of increased cryptocurrency account breaches via hacked e-mails and advise ...
straitstimes.com/singapore/police-warn-of-cryptocurrency-account-breaches-via-compromised-e-mails
Passkey-themed phishing attacks lead to Microsoft 365 data theft: Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using ...
bleepingcomputer.com/news/security/passkey-themed-phishing-attacks-lead-to-microsoft-365-data-theft/
Windows 11 KB5124008 is breaking Always On VPN. If you use certificate based auth to Windows Server 2019 RRAS and NPS via Intune, you may be locked out ... Show more
Windows 11 update KB5124008 breaks Always On VPN connections
Windows 11 update KB5124008 breaks Always On VPN connections
GitLab urges users to patch max severity path traversal flaw: GitLab urged users on Thursday to patch their servers immediately against a maximum-severity path ...
bleepingcomputer.com/news/security/gitlab-urges-users-to-patch-max-severity-path-traversal-flaw/
There’s a New Black Market Just for Stolen ChatGPT and Claude Logins. It’s Open 24/7.
gizmodo.com/theres-a-new-black-market-just-for-stolen-chatgpt-and-claude-logins-its-open-24-7-2000809840
35yo’s minor symptom before grim diagnosis: At just 35, Tatiana McNamara got the shock of her life when a painful, swollen knee led to a diagnosis of blood ...
news.com.au/technology/online/social/leukaemia-patient-cut-off-from-vital-support-network-after-meta-disables-account/news-story/7acb1c4836dead4460c4d64e4e54bbba
What’s the tech behind the record-breaking RSA-260 crack?: A researcher’s social media post that revealed how to break part of a popular encryption protocol has ...
scientificamerican.com/article/whats-the-tech-behind-the-record-breaking-rsa-260-crack/
Umfrage: Ist Zwei-Faktor-Authentifizierung in Foren sinnvoll?: 2FA-Log-ins sind weitverbreitet. Wir fragen: Sind sie auch ein wichtiges Feature für Foren?
pcgameshardware.de/PCGH-Extreme-Forum-Brands-217997/News/2FA-fuer-Foren-1551756/
WhatsApp: New features for 2FA and caller ID: WhatsApp has announced new figures and security features for the messenger. According to the platform ...
stadt-bremerhaven.de/whatsapp-neuerungen-fuer-2fa-und-anruferkennung/
Microsoft Entra ID has a big change coming for Windows Hello for Business and macOS PSSO
neowin.net/news/microsoft-entra-id-has-a-big-change-coming-for-windows-hello-for-business-and-macos-psso/
Startup Cracks Google's Classified Quantum Cryptography: Using crowdsourcing and AI swarms, one startup surpassed Google’s results in 72 hours
spectrum.ieee.org/google-quantum-cryptography-zero-knowledge
Microsoft delays Exchange Online PowerShell feature retirement after feedback from IT admins
neowin.net/news/microsoft-delays-exchange-online-powershell-feature-retirement-after-feedback-from-it-admins/
New phishing kits target Microsoft 365 accounts, evade MFA: Two new phishing kits, Jalisco and OmegaLord, have been discovered in attacks targeting Microsoft 365 ...
bleepingcomputer.com/news/security/new-phishing-kits-target-microsoft-365-accounts-evade-mfa/
OpenVPN 3 ways: Which is the right version for you?: OpenVPN offers three modes of deployment with varied pricing based on the same underlying protocol ...
zdnet.com/article/managed-self-hosted-or-open-source-how-to-choose-the-right-version-of-openvpn/
Hackers target Microsoft 365 accounts with 81 million login attempts: An aggressive password-spraying campaign targeting Microsoft 365 environments generated ...
bleepingcomputer.com/news/security/hackers-target-microsoft-365-accounts-with-81-million-login-attempts/
Lawsuit against Microsoft: Xbox user regains his account: A gamer has successfully sued over the loss of his digital game library. The user lost access to his ...
winfuture.de/news,159917.html
New Helix vishing group emerges in SharePoint data theft attacks: A new data-extortion group called Helix is using identity-focused tactics such as voice ...
bleepingcomputer.com/news/security/new-helix-vishing-group-emerges-in-sharepoint-data-theft-attacks/
dlvr.it Jul 05
MFA-optional banks leave safe doors (and accounts) wide open for thieves to pillage
theregister.com/security/2026/07/05/mfa-optional-banks-leave-safe-doors-and-accounts-wide-open-for-thieves-to-pillage/5266161
Saint-Michel Chapel: A lovely monument that's a pleasure to discover during a stroll.
elle.fr/Loisirs/Evasion/Ile-de-Brehat/La-chapelle-Saint-Michel
CISA warns Fortinet users to secure devices after FortiBleed leak: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged Fortinet customers to ...
bleepingcomputer.com/news/security/cisa-warns-fortinet-users-to-secure-devices-after-fortibleed-leak/
Your Linux PC has a Secure Boot problem - what to do first (and the workaround to avoid)
zdnet.com/article/linux-pc-secure-boot-problem-what-to-do-first-workaround-to-avoid/
SimpleHelp bug lets hackers create rogue remote support accounts: A vulnerability in the SimpleHelp remote management software allows unauthenticated attackers ...
bleepingcomputer.com/news/security/simplehelp-bug-lets-hackers-create-rogue-remote-support-accounts/
Is Your Cloud Storage Actually Secure? Here's What Most Companies Don't Explain: Cloud storage providers love talking about security, but the jargon and ...
uk.pcmag.com/cloud-file-storage-for-business/165629/is-your-cloud-storage-actually-secure-heres-what-most-companies-dont-explain
Meta AI chatbot exploit used to hijack Instagram accounts: The flaw let attackers bypass two-factor authentication by asking the bot to swap the email tied to a ...
qz.com/meta-ai-chatbot-instagram-account-hijack-060226
dlvr.it Jun 08
Attackers had month-long head start on patched Check Point VPN zero-day: Scumbags, including a Qilin ransomware affiliate, began hitting this hole May 7
theregister.com/cyber-crime/2026/06/08/attackers-had-month-long-head-start-on-patched-check-point-vpn-zero-day/5252438
When Claude changed, everything changed: Managing AI blast radius in production: The Day a Minor Version Bump Took Down Production
venturebeat.com/orchestration/when-claude-changed-everything-changed-managing-ai-blast-radius-in-production
FBI warned Microsoft 365 users about a new phishing tool that bypasses two-factor authentication
qz.com/fbi-kali365-phishing-microsoft-365-mfa-bypass-052626
The $25.6 million deepfake that human review, MFA and liveness detection all missed
venturebeat.com/ai/25-million-deepfake-that-human-review-mfa-and-liveness-detection-all-missed
MFA verifies who logged in. It has no idea what they do next.: What happens after MFA succeeds? How session token theft lets attackers move laterally through ...
venturebeat.com/security/mfa-verifies-who-logged-in-it-has-no-idea-what-they-do-next
Mount Dukono eruption: Family proud of S’porean hiker who died trying to help others
straitstimes.com/asia/se-asia/mount-dukono-eruption-family-proud-of-sporean-hiker-who-died-trying-to-help-others
Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps
venturebeat.com/security/shai-hulud-worm-172-npm-pypi-packages-valid-provenance-ci-cd-audit
Bitcoin quantum proposal offers Satoshi Nakamoto a way to prove control without moving BTC
coindesk.com/tech/2026/05/02/new-bitcoin-quantum-proposal-offers-satoshi-nakamoto-a-way-to-prove-control-without-moving-btc
Liberia: Senate Pro-Tempore Orders 130 Bags of Local Rice, Backs CHAP Initiative: Monrovia –The President Pro-Tempore of the Liberian Senate, Nyonblee ...
frontpageafricaonline.com/news/liberia-senate-pro-tempore-orders-130-bags-of-local-rice-backs-chap-initiative/
dlvr.it Apr 07
Hundreds of orgs compromised daily in Microsoft device code phishing attacks: : Who needs MFA when you've got EvilTokens?
theregister.com/2026/04/07/microsoft_device_code_phishing/
10 smartphone apps you need to secure right away – if you value your privacy: Whether you're using an iPhone or an Android phone, it's worth adding an extra ...
which.co.uk/news/article/smartphone-apps-you-need-to-secure-right-away-aP4pa4b8GYSo
Hackers slipped a trojan into axios, the code library behind most of the internet. Your team is probably affected
venturebeat.com/security/axios-npm-supply-chain-attack-rat-maintainer-token-2026
The founder of Steam asked for his account to be hacked – 15 years later, no one has succeeded, even though his password was known [Best of GameStar]
gamestar.de/artikel/gabe-newell-2fa-steam-passwort-valve,3409642.html
fij.ng Mar 27
SPOTTED: Easy To Steal N80bn in the Accountant-General’s Office, but Difficult To Renew Their Website’s SSL
fij.ng/article/spotted-easy-to-steal-n80bn-in-the-accountant-generals-office-but-difficult-to-renew-their-websites-ssl/
Zero Trust: Bridging the Gap Between Authentication and Trust: Passing MFA doesn't mean a session is safe, attackers can hijack tokens and bypass identity ...
bleepingcomputer.com/news/security/zero-trust-bridging-the-gap-between-authentication-and-trust/
Microsoft's new Entra ID feature fixes a huge MFA limitation: Microsoft just made a long-awaited Entra ID change that could reshape how enterprises handle ...
neowin.net/news/microsofts-new-entra-id-feature-fixes-a-huge-mfa-limitation/
FritzBox 5690 XGS gets the first experimental update: Fritz is following up for the weekend and bringing the FritzBox 5690 XGS to the current beta program for ...
winfuture.de/news,157630.html
Qihoo 360 accidentally exposed a private SSL key, putting its platform at risk: Qihoo 360 recently shipped its 360 Security Claw AI assistant, a tool designed to ...
techspot.com/news/111722-qihoo-360-accidentally-exposed-private-ssl-key-putting.html
Here’s why I’ve installed a Dead Man’s Switch on my home server: A self-hosted Dead Man’s Switch ensures your family can access photos, records ...
androidauthority.com/home-server-dead-man-switch-3648903/
Paid articlePaywall New login at FinanzOnline: How to register for tax return: From October 1st, logging into FinanzOnline will only work with two-factor authentication ...
tt.com/artikel/30929818/neuer-login-bei-finanzonline-so-funktioniert-die-anmeldung-fuer-den-steuerausgleich
Bursa: Broker-level cyber incidents contained : The latest cybersecurity incidents reported by a few brokers have been contained and all trading and market ...
thestar.com.my/business/business-news/2026/03/13/bursa-broker-level-cyber-incidents-contained
How you rob a bank convoy in the EU: Be Hungary, bring an APC and machine guns, deport bank couriers, keep cash and gold as “evidence”
euromaidanpress.com/2026/03/09/how-you-rob-a-bank-convoy-in-the-eu-be-hungary-bring-an-apc-and-machine-guns-deport-bank-couriers-keep-cash-and-gold-as-evidence/