Social engineering campaign targeting tech employees spreads through NPM malware(socket.dev)

106 points by feross 3 years ago | 71 comments

Unverified NPM Account Takeover Vulnerability for Sale on Dark Web Forum(socket.dev)

35 points by feross 2 years ago | 3 comments

Libxml2 Maintainer Ends Embargoed Vulnerability Reports, Citing Unsustainable(socket.dev)

4 points by feross 1 year ago | 0 comments

Hacker leaks 281 GB of data from Germany's far-right AfD party(bitdefender.com)

92 points by speckx 3 days ago | 39 comments

Bitdefender blog post by Graham Cluley reporting that a hacker leaked 281 GB of internal emails and files from Germany's far-right AfD party via a torrent and AI-summary site.

Haier Europe Eases Off on Legal Threat and Seeks Dialogue(hackaday.com)

95 points by Tomte 2 years ago | 51 comments

Branch Privilege Injection: Exploiting branch predictor race conditions(comsec.ethz.ch)

397 points by alberto-m 1 year ago | 177 comments

ETH Zurich COMSEC research page on Branch Privilege Injection, a class of Intel CPU vulnerabilities exploiting branch predictor race conditions to leak privileged memory.