Microsoft actions following attack by nation state actor Midnight Blizzard(msrc.microsoft.com)

249 points by nycdatasci 2 years ago | 164 comments

What’s the Smallest Variety of CHERI? (2022)(msrc.microsoft.com)

43 points by bshanks 3 years ago | 11 comments

Microsoft reports several bootloader vulnerabilities(microsoft.com)

65 points by hacknslack 1 year ago | 24 comments

Hackers stole access tokens from Okta's support unit(krebsonsecurity.com)

279 points by todsacerdoti 3 years ago | 137 comments

Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure(aws.amazon.com)

227 points by cubefox 4 days ago | 98 comments

AWS Security Blog post reporting that Amazon's MadPot honeypots saw PHP2Shell exploitation attempts four days before public disclosure, with IOCs and recommended actions.

Finding thousands of exposed Ollama instances using Shodan(blogs.cisco.com)

128 points by rldjbpin 1 year ago | 59 comments

Microsoft technical breakdown of CrowdStrike incident(microsoft.com)

318 points by nar001 2 years ago | 304 comments

Microsoft Security blog post by David Weston on Windows security best practices for integrating security tools, including a technical analysis of the CrowdStrike outage.

CISA Admin Leaked AWS GovCloud Keys on GitHub(krebsonsecurity.com)

433 points by LelouBil 5 months ago | 171 comments

KrebsOnSecurity article reporting that a CISA contractor kept a public GitHub repository exposing privileged AWS GovCloud credentials and internal CISA system details.

I found a Vulnerability. They found a Lawyer(dixken.de)

831 points by toomuchtodo 8 months ago | 381 comments

Blog post by a diving instructor and platform engineer recounting how reporting a security vulnerability led to a legal response from the affected organization.

I could've accessed 17T Microsoft records(blog.faav.net)

287 points by luispa 27 days ago | 120 comments

A security researcher's blog post describing a Microsoft internal analytics service flaw where unchecked token signatures allowed admin access to query 17.3 trillion records.

RCE Vulnerability in React and Next.js(github.com)

559 points by rayhaanj 10 months ago | 214 comments

GitHub security advisory GHSA-9qr9-h5gf-34mp for a critical (CVSS 10.0) remote code execution vulnerability in React Server Components affecting Next.js, with patched versions listed.

Nvidia's Risky Business(stratechery.com)

325 points by jonbaer 2 months ago | 157 comments

Stratechery article by Ben Thompson analyzing Nvidia's business risks, opening with a historical anecdote about financier Jay Cooke.