Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE on May 5, 2026 Posted by The Hacker News
DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware on May 5, 2026 Posted by The Hacker News
China-Linked UAT-8302 Targets Governments Using Shared APT Malware Across Regions on May 5, 2026 Posted by The Hacker News
The Back Door Attackers Know About — and Most Security Teams Still Haven’t Closed on May 5, 2026 Posted by The Hacker News
Posted in computer security Digital Threat Modeling Under Authoritarianism on September 26, 2025 Bruce Schneier
Posted in browser Smashing Security podcast #432: Oops! I auto-filled my password into a cookie banner on August 27, 2025 Graham Cluley
Posted in CIA Jim Sanborn Is Auctioning Off the Solution to Part Four of the Kryptos Sculpture on August 21, 2025 Bruce Schneier
Posted in encryption Free decryptor for victims of Phobos ransomware released on July 24, 2025 Graham Cluley
Posted in academic papers “Encryption Backdoors and the Fourth Amendment” on July 22, 2025 Bruce Schneier
Posted in encryption Smashing Security podcast #412: Signalgate sucks, and the quandary of quishing on April 9, 2025 Graham Cluley
Posted in An0m Smashing Security podcast #382: CrowdStrike, Dark Wire, and the Paris Olympics on July 24, 2024 Graham Cluley