I have recordings proving Coinbase knew about breach months before disclosure(jonathanclark.com)

600 points by jclarkcom 11 months ago | 179 comments

A personal blog post arguing, with recordings and emails, that phishing attacks tied to the Coinbase data breach began in January 2025, months before Coinbase's disclosure.

Reverse engineering a $1B Legal AI tool exposed 100k+ confidential files(alexschapiro.com)

752 points by bearsyankees 10 months ago | 258 comments

A blog post describing how the author found an unauthenticated API flaw in Filevine's legal AI tool exposing 100k+ confidential files, with a disclosure timeline.

Encrypted traffic interception on Hetzner and Linode targeting Jabber service(notes.valdikss.org.ru)

637 points by f311a 3 years ago | 257 comments

Blog post detailing discovery of a TLS man-in-the-middle interception of jabber.ru XMPP servers hosted on Hetzner and Linode using Let's Encrypt certificates.

Nvidia's $20B antitrust loophole(ossa-ma.github.io)

509 points by ossa-ma 10 months ago | 159 comments

Blog post arguing Nvidia's $20B deal for Groq's assets and hiring of CEO Jonathan Ross exploits an antitrust loophole to avoid merger scrutiny.

Every log must fire: applying Chekhov's gun to cybersecurity incident reports(andreafortuna.org)

4 points by speckx 11 months ago | 0 comments

Your MCU likely escaped the eMudhra intermediate CA compromise(danielmangum.com)

47 points by hasheddan 5 days ago | 28 comments

Blog post explaining why microcontroller-based IoT devices are likely unaffected by the eMudhra intermediate CA private key compromise, due to minimal pinned root CA bundles.