Why Bcrypt Can Be Unsafe for Password Hashing?(blog.enamya.me)

11 points by enamya 11 months ago | 12 comments

Extracting a UART Password via SPI Flash Instruction Tracing(zuernerd.github.io)

54 points by Eduard 9 months ago | 11 comments

Top downloaded skill in ClawHub contains malware(1password.com)

262 points by pelario 8 months ago | 120 comments

Exposed DeepSeek database leaking sensitive information, including chat history(wiz.io)

608 points by talhof8 1 year ago | 423 comments

Wiz Research blog post reporting a publicly accessible DeepSeek database exposing over a million log lines, including chat history and other sensitive data.

Jitsi privacy flaw enables one-click stealth audio and video capture(zimzi.substack.com)

197 points by zielmicha 1 year ago | 30 comments

Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure(aws.amazon.com)

227 points by cubefox 4 days ago | 98 comments

AWS Security Blog post reporting that Amazon's MadPot honeypots saw PHP2Shell exploitation attempts four days before public disclosure, with IOCs and recommended actions.