Cybersecurity

9657 readers
106 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago
MODERATORS
kid@sh.itjust.works
Lanky_Pomegranate530@midwest.social
listing: all - local
1
3
Microsoft, working with Europol, authorities from 6 countries, and 11 security organizations, disrupted the Tycoon 2FA phishing-as-a-service platform on seizing 330 domains (www.microsoft.com)
submitted 1 hour ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
0 comments fedilink
2
5
A ransomware attack on August 31, 2025, compromised the data of 1.2 million at the University of Hawaiʻi Cancer Center, targeting research servers but sparing clinical operations (www.securityweek.com)
submitted 3 hours ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
0 comments fedilink
3
3
France's health ministry has confirmed a data breach involving the exposure of administrative information for 15.8 million patients and sensitive doctors' notes for approximately 165,000 individuals (www.france24.com)
submitted 3 hours ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
0 comments fedilink
4
62
Online ads surpassed email as the primary malware channel in 2025, accounting for 60%+ of all observed malware and phishing campaigns (www.businessinsider.com)
submitted 1 day ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
2 comments fedilink
5
13
Authorities from 14 countries shut down LeakBase, seize its domains, and arrest multiple people allegedly tied to the cybercrime forum, which had 142K+ members (cyberscoop.com)
submitted 1 day ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
0 comments fedilink
 
 

DOJ Press Release

6
102
Hacktivist group “Department of Peace” claims to have breached a DHS tech‑procurement office, leaking ICE contract records involving over 6,000 vendors, including major defense and surveillance firms (techcrunch.com)
submitted 2 days ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
2 comments fedilink
7
42
A Possible US Government iPhone-Hacking Toolkit Is Now in the Hands of Foreign Spies and Criminals (www.wired.com)
submitted 2 days ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
6 comments fedilink
8
13
Huge “Shadow Layer” of Organizations Hit by Supply Chain Attacks - Infosecurity Magazine (www.infosecurity-magazine.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
9
11
Threat actors weaponize OAuth redirection logic to deliver malware - Help Net Security (www.helpnetsecurity.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
10
9
Ransomware attack exposes 1.2 million University of Hawaii Cancer Center records | news | SC Media (www.scworld.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
11
7
LexisNexis says hackers accessed legacy data in contained breach | The Record from Recorded Future News (therecord.media)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
12
4
Weird server requests (lemmy.dbzer0.com)
submitted 1 day ago by WrenHavoc@lemmy.dbzer0.com to c/cybersecurity@sh.itjust.works
6 comments fedilink
 
 

So I'm the server admin and web developer for my school's robotics team. I look through the servers access logs every once in a while just to check on things. I keep seeing requests that look like someone's scanning for vulns. But I'm seeing something I've never seen before. It looks like someone is sending requests in machine code and I have no idea why or what it would do???

here's the request:

"\x03\x00\x00\x13\x0E\xE0\x00\x00\x00\x00\x00\x01\x00\x08\x00\x02\x00\x00\x00" 400 166 "-" "-"
13
15
LLMs can unmask pseudonymous users at scale with surprising accuracy (arstechnica.com)
submitted 2 days ago by return2ozma@lemmy.world to c/cybersecurity@sh.itjust.works
3 comments fedilink
14
3
Fake Tech Support Spam Deploys Customized Havoc C2 Across Organizations (thehackernews.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
15
22
Pakistan’s Top News Channels Hacked and Hijacked With Anti-Military Messages (hackread.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
16
19
Vulnerability Allowed Hijacking Chrome's Gemini Live AI Assistant - SecurityWeek (www.securityweek.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
2 comments fedilink
17
14
UK reduces cyberattack fix times from two months to eight days - Help Net Security (www.helpnetsecurity.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
18
9
The Banality of AI (Hallucination → Bomb School?) (tech.michaelaltfield.net)
submitted 2 days ago by maltfield@lemmy.ml to c/cybersecurity@sh.itjust.works
0 comments fedilink
 
 

The Banality of Artificial Intelligence

What happens when an AI hallucination leads to bombing an elementary school?

By Michael Altfield
License: CC BY-SA 4.0
https://tech.michaelaltfield.net/

It appears likely that the US government is using Anthropic, OpenAI, Google and/or xAI data models for processing signals intelligence (SIGINT), for AI-generated "kill lists" to determine where to drop their bombs.

Image shows a nazi german chemical war factory on the left in black-and-white (with logos of companies Bayer and BASF overlaying it) and an image of a new AI datacenter on the right (with logos of companies OpenAI and Anthropic overlaying it). In the middle of the two industrial sites is an equal sign. On the right is a question mark.
[right] This AI datacenter is a machinery of war. Its LLM hallucinations decide which children to assassinate [left] This IG Farben (Bayer/BASF) factory in Auschwitz produced Zyklon B for the Nazis, who murdered over a million children

In Apr 2024, +972 (an Israeli news outlet) published a >9,000 word article describing how the Israeli military had been using Artificial Intelligence to decide which (residential) buildings, hospitals, and schools to bomb in Gaza.

In Feb 2026, the US (and Israel) bombed Iran -- killing over 100 schoolchildren (and Ali Khamenei).

In Mar 2026, it appears that the US has likely built a similar system, leveraging US AI companies' tech to decide which (school) buildings to bomb, false-positive hallucinations be damned.

Who targeted the Shajareh Tayyiba girls' elementary school in Minab, Iran? Could it have been an AI hallucination? A false-positive?
...

Read the full article here:

19
22
New AirSnitch attack bypasses Wi-Fi encryption in homes, offices, and enterprises (arstechnica.com)
submitted 3 days ago by KarnaSubarna@lemmy.ml to c/cybersecurity@sh.itjust.works
0 comments fedilink
 
 

20
9
Google addresses actively exploited Qualcomm zero-day in fresh batch of 129 Android vulnerabilities | CyberScoop (cyberscoop.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
21
7
APT28 Tied to CVE-2026-21513 MSHTML 0-Day Exploited Before Feb 2026 Patch Tuesday (thehackernews.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
22
6
North Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for Cross-Platform RAT (thehackernews.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
23
35
Canadian Tire Data Breach Impacts 38 Million Accounts - SecurityWeek (www.securityweek.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
6 comments fedilink
24
20
ClawJacked Flaw Lets Malicious Sites Hijack Local OpenClaw AI Agents via WebSocket (thehackernews.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
1 comments fedilink
25
15
Hackers Weaponize Claude Code in Mexican Government Cyberattack - SecurityWeek (www.securityweek.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
view more: next ›