Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager on March 21, 2026 Posted by The Hacker News
CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026 on March 21, 2026 Posted by The Hacker News
Trivy Supply Chain Attack Triggers Self-Spreading CanisterWorm Across 47 npm Packages on March 21, 2026March 21, 2026 Posted by The Hacker News
Friday Squid Blogging: Jumbo Flying Squid in the South Pacific on March 20, 2026 Posted by Bruce Schneier
Posted in cryptocurrency They seized $4.8m in crypto… then gave the master key to the internet on March 3, 2026 Graham Cluley
Posted in academic papers Substitution Cipher Based on The Voynich Manuscript on December 8, 2025 Bruce Schneier
Posted in data breach State-backed spyware attacks are targeting Signal and WhatsApp users, CISA warns on November 27, 2025 Graham Cluley
Posted in business of security Book Review: The Business of Secrets on November 13, 2025 Bruce Schneier
Posted in Cryptography Signal’s Post-Quantum Cryptographic Implementation on October 29, 2025 Bruce Schneier
Posted in academic papers A Surprising Amount of Satellite Traffic Is Unencrypted on October 17, 2025 Bruce Schneier
Posted in Android Your favourite phone apps might be leaking your company’s secrets on October 1, 2025 Graham Cluley
Posted in computer security Digital Threat Modeling Under Authoritarianism on September 26, 2025 Bruce Schneier
Posted in browser Smashing Security podcast #432: Oops! I auto-filled my password into a cookie banner on August 27, 2025 Graham Cluley