GitHub Copilot CLI downloads and executes malware(promptarmor.com)

43 points by sarelta 8 months ago | 12 comments

Twilio confirms data breach after hackers leak 33M Authy user phone numbers(securityweek.com)

600 points by mindracer 2 years ago | 335 comments

SecurityWeek article reporting Twilio's confirmation of a data breach after hackers leaked 33 million phone numbers tied to the Authy app.

“Clickless” iOS exploits infect Kaspersky iPhones with never-before-seen malware(arstechnica.com)

47 points by samizdis 3 years ago | 5 comments

IBM AI ('Bob') Downloads and Executes Malware(promptarmor.com)

231 points by takira 9 months ago | 111 comments

Silent Replacement of Trusted macOS App Executables(mysk.blog)

18 points by jurip 3 months ago | 2 comments

Downfall Attacks(downfall.page)

1207 points by WalterSobchak 3 years ago | 306 comments

Website describing Downfall, a CPU vulnerability affecting billions of modern processors, with attack details, demo, FAQ, and vendor advisories.

Recent 'MFA Bombing' Attacks Targeting Apple Users(krebsonsecurity.com)

379 points by vdddv 2 years ago | 212 comments

KrebsOnSecurity article on phishing attacks that abuse Apple's password reset feature to flood devices with prompts, followed by calls spoofing Apple support.

Qpack amplification attacks against HTTP/3 servers(foxio.io)

13 points by kozika 4 days ago | 1 comments

FoxIO blog post detailing QPACK header decompression amplification attacks that let unauthenticated clients exhaust memory on multiple HTTP/3 server implementations.

Operation Triangulation: What you get when attack iPhones of researchers(securelist.com)

422 points by ruik 2 years ago | 354 comments

Kaspersky Securelist research post analyzing the Operation Triangulation iPhone attack chain and the undocumented hardware feature exploited via CVE-2023-38606.

A web page that shows you everything the browser told it without asking(sinceyouarrived.world)

495 points by mwheelz 5 months ago | 243 comments

An interactive web page that displays the information a browser reveals to websites automatically, such as device and environment details, without asking permission.

Bez: Generating a browser engine from specs and tests(tangled.org)

109 points by nerdypepper 24 days ago | 44 comments

Tangled repository page for bez, a project generating a browser engine from web specifications and test suites, showing files and recent commits.

U.K. orders Apple to let it spy on users’ encrypted accounts(washingtonpost.com)

642 points by Despegar 1 year ago | 925 comments

Washington Post exclusive reporting that the U.K. secretly ordered Apple to provide blanket access to users' encrypted iCloud backups worldwide.