News
FBI warns of Kali365 phishing service targeting Microsoft 365 accounts
19+ hour, 2+ min ago (357+ words) The FBI is warning about the Kali365 phishing-as-a-service platform (Phaa S) that is used to hijack Microsoft 365 accounts by abusing OAuth device code authentication to steal session tokens and bypass multi-factor authentication (MFA)....
Researchers identify people through ordinary Wi-Fi routers with 99. 5% accuracy — technique works with standard Wi-Fi routers
4+ hour, 25+ min ago (10+ words) The team's "BFId" attack works with off-the-shelf hardware....
FBI Issues Chinese App Warning For Smartphone Users
1+ mon, 1+ week ago (863+ words) Check your smartphone now " these apps are dangerous and should be deleted....
Squid distances core protocol from Safe module exploit affecting 86 wallets
20+ min ago (273+ words) Cross-chain protocol Squid has denied involvement in a smart contract exploit that drained roughly $3m from dozens of Gnosis Safe wallets across Ethereum and Base. It follows public reports linking the incident to a contract named "Squid Router Module." Blockchain security…...
I Benchmarked 17 ESLint Security Plugins. Only One Found Every Vulnerability.
28+ min ago (660+ words) Skip to: Full Results | Category Breakdown | The Leaderboard | Methodology I built a benchmark suite with 40 vulnerable code patterns across 14 CWE categories and 38 verified-safe patterns. Then I ran 17 ESLint plugins against them " every major security, quality, and framework plugin in the…...
Dangerous Fake Microsoft Windows Update Confirmed'Do Not Download
1+ mon, 1+ week ago (255+ words) When it comes to staying on top of your security, it can be an uphill climb for Microsoft Windows users sometimes. Dozens, sometimes hundreds, of new vulnerabilities are confirmed on the second Tuesday of every month, new malware to deal…...
FBI Warning'Stop Apps Tracking Your i Phone Or Android Now
1+ mon, 2+ week ago (438+ words) The FBI is warning i Phone and Android users to stop apps tracking their data, with some harvesting way more than you realize. The bureau's focus is on Chinese apps, but the risk is widespread. Any of the apps on…...
Ethereum Pushes Privacy Forward: EIP-8182 Eyes Hegota Upgrade Integration
42+ min ago (286+ words) The privacy landscape for Ethereum took a significant step forward when Tom Lehman presented EIP-8182 as a candidate for the upcoming Hegota upgrade. This innovative proposal introduces native privacy capabilities for both ETH and ERC-20 token transfers via a unified…...
The False Positive Tax: a 1: 1 TP: FP analysis of eslint-plugin-security
10+ min ago (760+ words) Skip to: Results Table | eslint-plugin-security | Sonar JS | Microsoft SDL | Interlace | Methodology This is the false-positive deep dive companion to I Benchmarked 17 ESLint Security Plugins. That overview ranks plugins by recall; this one drills into the FP code samples that drive…...
Wi Fi Networks Can Now Identify You With Near-Perfect Accuracy " Even When Your Phone Is Off
24+ min ago (153+ words) German researchers achieve 100% identification rates using ordinary routers and radio wave reflections from human bodies That caf" Wi Fi you connect to isn't just sharing internet anymore. Researchers at Germany's Karlsruhe Institute of Technology have turned ordinary routers into invisible…...