-
21 votes
-
Delta's CrowdStrike related flight delays and cancellations prompt Department of Transportation investigation
19 votes -
CrowdStrike code update bricking Windows machines around the world
143 votes -
Preventing the worst supply chain attack you can imagine in the Python ecosystem
28 votes -
National security or legal niceties? Norway picks a path – closing down opportunities for members of the authoritarian axis is not always as easy as it looks.
7 votes -
Weak security defaults enabled Squarespace Domains hijacks of former Google Domains accounts
19 votes -
Finnish lawmakers narrowly approved controversial bill that will allow border guards to turn away third-country migrants attempting to enter from neighboring Russia
11 votes -
AT&T says criminals stole phone records of ‘nearly all’ US customers in new data breach
26 votes -
Patelco makes minor restorations but no end near for crippling credit union cyber attack
21 votes -
Norwegian government has called off a plan to sell the last privately owned piece of land on the Arctic archipelago of Svalbard in order to prevent its acquisition by China
30 votes -
Finland's PM Petteri Orpo urged parliament not to weaken a deportation bill that would allow Finnish border authorities to refuse to accept asylum applications in certain circumstances
5 votes -
Mitigating Skeleton Key, a new type of generative AI jailbreak technique
15 votes -
Shopping app Temu is “dangerous malware,” spying on your texts, lawsuit claims
45 votes -
Denver gave people experiencing homelessness $1,000 a month. A year later, nearly half of participants had housing.
37 votes -
Simple ways to find exposed sensitive information
9 votes -
Single point of software failure could hamstring 15K US car dealerships for days
22 votes -
Making another pickproof lock (but better)
28 votes -
This GitHub profile has a custom background
31 votes -
Militarized Cybertruck cop cars are coming
21 votes -
Four in five CISOs have been told to downplay a potential risk’s severity
9 votes -
Pentagon contracts reveal US prep for multinational force in Haiti, down to toothbrushes and WiFi
22 votes -
The leak of an internal Google database reveals thousands of potential privacy and security issues reported by employees
21 votes -
Significant cyber incidents | Strategic technologies program
1 vote -
Hundreds of thousands of US internet routers destroyed in newly discovered 2023 hack
23 votes -
All Santander staff and 'thirty million' customers in Spain, Chile and Uruguay hacked
22 votes -
Cybercriminals pose as "helpful" Stack Overflow users to push malware
19 votes -
Surveilling the masses with wi-fi-based positioning systems
15 votes -
British Library on why it kept it real in communication about ransomware attack
9 votes -
Cyber security: A pre-war reality check
34 votes -
Cyberattack forces major US health care network to divert ambulances from hospitals
17 votes -
‘TunnelVision’ attack leaves nearly all VPNs vulnerable to spying
40 votes -
As China and Iran hunt for dissidents in the US, the FBI is racing to counter the threat
20 votes -
London Drugs closes stores until further notice due to cyberattack
22 votes -
On the XZ Utils backdoor (CVE-2024-3094): FOSS delivered on its pitfalls and strengths
27 votes -
The not-so-silent type. Vulnerabilities across keyboard apps reveal keystrokes to network eavesdroppers.
9 votes -
US medical providers still grappling with UnitedHealth cyberattack
9 votes -
Help me ditch Chrome's password manager!
I've been trying to reduce my reliance on all things Google, and one of the big ones is password management. I've tried several times to make the jump, but every time I start researching options...
I've been trying to reduce my reliance on all things Google, and one of the big ones is password management. I've tried several times to make the jump, but every time I start researching options I'm overwhelmed by the selection. There are a lot of popular options out there, and I really don't have the time/energy to endure a misstep. So without a clear idea of which manager will check all of my boxes, I end up bailing on the process and keep using chrome's built in option.
So to start, here's what I like about Chrome:
- Automatically offers to store passwords without extra clicks
- Autofills automatically where it can, and gives me an easy choice when it can't
- Works everywhere I need passwords. (basically everywhere I browse the internet since chrome works everywhere)
- Minimal overhead. This is hard to beat since Chrome just includes it, so I'm fine with a little extra setup if necessary.
I used to use keepass portable on a thumb drive (I want to say circa ~2009ish), but it became really inconvenient as my usage shifted more to mobile devices.
I see this as a first step to also reducing my reliance on Chrome so I can start to consider other browsers. Right now I feel locked in to Google's ecosystem, but I know I can break it up if I don't get too bogged down by choice. Much appreciate any help. :)
34 votes -
Bug in glibc's iconv() function allows for RCE in PHP servers by setting charset to ISO-2022-CN-EXT to trigger buffer overflow (CVE-2024-2961)
9 votes -
When provided with CVE descriptions of 15 different vulnerabilities and a set of tools useful for exploitation, GPT-4 was capable of autonomously exploiting 13 of which, yielding an 87% success rate
17 votes -
There used to be a people’s bank at the US Post Office
37 votes -
Riot’s Vanguard comes to League
19 votes -
Twitter replaces twitter.com with x.com without user consent. Bad implementation invites an influx of Phishing attacks. (german source)
48 votes -
Don’t set up wildcard DNS records for GitHub Pages
18 votes -
Critical vulnerability in Rust's Command library allows for command injection when using its API to invoke batch scripts with arguments on Windows systems (CVE-2024-24576)
18 votes -
Sweden's public sector has ditched Big Tech in the name of privacy as a major telecom provider unveiled a new secure collaboration hub
14 votes -
Backdoor in upstream libxz targeting sshd
104 votes -
Kobold letters. Why HTML emails are a risk to your organization.
33 votes -
Lessons learned from the Google trade secret theft indictment
7 votes -
Finland's response to Russia's invasion of Ukraine has been to move away from policy of self-reliance and embrace the alliance
12 votes -
Fighting cookie theft using device bound sessions
14 votes