OAuth Redirect Flaw in Airline Travel Integration Exposes Millions to Account Hijacking
API vulnerability in airline-linked travel service exposed millions to account takeovers, booking fraud, and data theft through OAuth flaws.
Read More
Donald Trump Has Mark Zuckerberg By the Balls
Mark Zuckerberg can see the finish line. He is so close to getting what he has wanted for years. The U.S. government is trying to give him the greatest gift he could possibly imagine: A TikTok ban. This would be U.S. intervention against the most credible competitor Meta has seen in years, and U.S. intervention…
Beyond the kill chain: What cybercriminals do with their money (Part 1)
Sophos X-Ops investigates what financially motivated threat actors invest their ill-gotten profits in, once the dust has settled
Researcher Turns Insecure License Plate Cameras Into Open Source Surveillance Tool
Some Motorola automated license plate reader surveillance cameras are live-streaming video and car data to the unsecured internet where anyone can watch and scrape them, a security researcher has found. In a proof-of-concept, a privacy advocate then developed a tool that automatically scans the exposed footage for license plates, and dumps that information into a…
‘We’re Fine’: Lying to Ourselves About a Climate Disaster
In 2020, after walking by refrigerated trailers full of the bodies of people who died during the first wave of the COVID-19 pandemic one too many times, my fiancé and I decided that it would maybe be a good idea to get out of New York City for a while. Together with our dog, we…
Cybersecurity jobs are in high demand. Execs in the field explain why.
Cybersecurity executives explain how the threat landscape has evolved — and why it can be challenging to find the right talent.
SonicWall Urges Immediate Patch for Critical CVE-2025-23006 Flaw Rated 9.8 CVSS
Critical SonicWall zero-day (CVE-2025-23006) in SMA 1000 appliances fixed. Rated 9.8 CVSS; patch now to prevent active exploitation.
Axios npm package compromised to deploy malware
Categories: Threat Research Tags: advisory, NPM, Axios
People Hate Datacenters, Survey Finds
A new study from the Pew Research Center asked Americans about their feelings toward datecenters and it’s not positive. Pew published the study the day after Sen. Bernie Sanders called for a moratorium on the construction of datacenters in the United States amid mounting public concern around the building’s impacts on local communities. Pew surveyed…
Senator Tries Bringing Anti-Porn Age Verification Law to New York
A New York state senator is trying to introduce the same age verification legislation that has resulted in massive porn sites—including Pornhub and its network of sister sites—going dark across much of the U.S. south and midwest. The bill, introduced by Republicans Jake Ashby and Assemblywoman Mary Beth Walsh, is almost identical to every other…