Attackers Exploit ‘Ill Bloom’ Bug and Nick Over $5 Million From Crypto Wallets, Because Of Course They Fucking Did Right then, here’s the latest pile of security shit: attackers have been abusing a vulnerability dubbed...

Hackers Pull the Same Old Phishing Shit, This Time with Fake Microsoft Entra Passkey Enrollment Right, so here’s the latest steaming pile of cybercrime nonsense: attackers are pretending to be Microsoft Entra and tricking poor...

281 Free Android VPN Apps, and Half of Them Are About as Secure as a Wet Paper Bag Right, listen up. Some poor bastards went and studied 281 free Android VPN apps, presumably because they hate themselves, and found what any...

Exposed Hacker Server Reveals WP-SHELLSTORM: Thousands of WordPress Sites Got Properly Screwed Right, here’s the gist, because apparently even criminals are too bloody incompetent to keep their own servers locked down....

From 17,000 to 1.1 Million Assets: How Lumen Stopped Pretending Spreadsheet Hell Was Security Right, so here’s the gist of this little corporate miracle: Lumen Technologies had what most big enterprises have — a half-broken,...

Unpatched XRING Flaw in XQUIC Lets Any Random Pain-in-the-Arse Client Knock Over HTTP/3 Servers Right, here’s the short version for anyone too busy putting out dumpster fires to read the full bloody thing: researchers found an...

AI Coding: Faster as Hell, Riskier Than a Drunk Sysadmin With Root Right, here’s the gist of this fine little disaster: AI coding tools are giving developers a big, shiny productivity boost, which of course means management is...

New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic, Because of Course the Bastards Would Right, here’s the short version before your coffee gets cold and your SOC starts screaming. Some charming pile of malicious...