Cybersecurity

9584 readers
43 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago
MODERATORS
kid@sh.itjust.works
Lanky_Pomegranate530@midwest.social
listing: all - local
1
18
Data breach at fintech giant Figure affects close to a million customers | TechCrunch (techcrunch.com)
submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
2
9
Critical infra Honeywell CCTVs vulnerable to auth bypass flaw (www.bleepingcomputer.com)
submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
3
7
Unit 42: Identity abuse drives nearly two-thirds of all breaches | SC Media (www.scworld.com)
submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
4
6
Deutsche Bahn suspects Russian meddling behind recent IT outage (cybernews.com)
submitted 9 hours ago* (last edited 9 hours ago) by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
5
7
Microsoft: Critical Windows Admin Center Flaw Allows Privilege Escalation (www.techrepublic.com)
submitted 9 hours ago* (last edited 9 hours ago) by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
1 comments fedilink
6
2
Critical Grandstream VoIP Bug Highlights SMB Security Blind Spot (www.darkreading.com)
submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
7
23
Researchers Show Copilot and Grok Can Be Abused as Malware C2 Proxies (thehackernews.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
8
14
Flaws in popular VSCode extensions expose developers to attacks (www.bleepingcomputer.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
9
4
ClickFix Attacks Abuses DNS Lookup Command to Deliver ModeloRAT (www.darkreading.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
10
4
Hackers Abuse ScreenConnect to Hijack PCs via Fake Social Security Emails (hackread.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
11
4
Kettering Health Notifying Patients of Interlock Breach (www.bankinfosecurity.in)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
12
2
Dell 0-day exploited by suspected Chinese snoops since 2024 • The Register (www.theregister.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
13
32
Study Uncovers 25 Password Recovery Attacks in Major Cloud Password Managers (thehackernews.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
5 comments fedilink
14
27
Microsoft Finds “Summarize with AI” Prompts Manipulating Chatbot Recommendations (thehackernews.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
4 comments fedilink
15
17
Keenadu Android Malware Infects Firmware, Spreads via Google Play for Remote Control Access (cybersecuritynews.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
16
13
Eurail says stolen traveler data now up for sale on dark web (www.bleepingcomputer.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
1 comments fedilink
17
59
All US Social Security numbers may need to be changed following a massive breach that is already being investigated as a national threat (www.ecoticias.com)
submitted 3 days ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
11 comments fedilink
18
19
Open source registries don't have enough money to implement basic security (www.theregister.com)
submitted 2 days ago by higgsboson@piefed.social to c/cybersecurity@sh.itjust.works
0 comments fedilink
 
 

cross-posted from: https://infosec.pub/post/42165288

Free beer is great. Securing the keg costs money fosdem 2026  Open source registries are in financial peril, a co-founder of an open source security foundation warned after inspecting their books. And it's not just the bandwidth costs that are killing them.…

19
6
Noodlophile Malware Creators Evolve Tactics with Fake Job Postings and Phishing Lures (cybersecuritynews.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
20
28
New Chrome Zero-Day (CVE-2026-2441) Under Active Attack — Patch Released (thehackernews.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
21
21
Lotus Blossom Hackers Compromised Official Hosting Infrastructure of Notepad++ (cybersecuritynews.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
22
14
Canada Goose investigating as hackers leak 600K customer records (www.bleepingcomputer.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
23
12
New ZeroDayRAT Mobile Spyware Enables Real-Time Surveillance and Data Theft (thehackernews.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
24
3
SimpleX Clone - No Setup or Signup (programming.dev)
submitted 3 days ago* (last edited 3 days ago) by xoron@programming.dev to c/cybersecurity@sh.itjust.works
0 comments fedilink
 
 

IMPORTANT: Lets get a few things out of the way first. My app is not better than any other app in any way. It hasnt been reviewed or audited. This app works by exchanging IP addresses... This app is NOT for anonymous comms.

The project is experimental and far from finished. It's presented for testing, feedback and demo purposes only (USE RESPONSIBLY!).

By leveraging WebRTC for direct browser-to-browser communication, it eliminates the middleman entirely. Users simply share a unique URL to establish an encrypted, private channel. This approach effectively bypasses corporate data harvesting and provides a lightweight, disposable communication method for those prioritizing digital sovereignty.

Features:

  • P2P
  • End to end encryption
  • Forward secrecy
  • Post-quantum cryptography
  • Multimedia
  • Large file transfer
  • Video calls
  • No registration
  • No installation
  • No database
  • TURN server

This project isnt finished enough to compare to existing tools like Simplex, Signal and WhatsApp... This is intended to introduce a new paradigm in client-side managed secure cryptography. Allowing users to send securely encrypted messages; no cloud, no trace.

Technical breakdown: https://programming.dev/post/44282222

Demo: https://p2p.positive-intentions.com/iframe.html?globals=&id=demo-p2p-messaging--p-2-p-messaging&viewMode=story

Docs: https://positive-intentions.com/docs/technical

25
26
Louis Vuitton, Dior, and Tiffany fined $25 million over data breaches (www.bleepingcomputer.com)
submitted 5 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
1 comments fedilink
view more: next ›