Pass the Passkey: A Novel Attack Surface in Passwordless Authentication
(news.ycombinator.com)
1.
2.
Attackers Exploit N-able Patch Bypass Flaw on RMM Servers
(darkreading.com)
3.
What DMARC Protects You From, and What It Does Not
(news.ycombinator.com)
4.
Show HN: A Handwritten Blogging Platform
(news.ycombinator.com)
5.
DMARC Has Been Public Since 2012. 68.4% of Domains Still Don't Enforce It
(news.ycombinator.com)
6.
Is Your SSO Protected Against Modern Credential Attacks?
(bleepingcomputer.com)
7.
Why Resetting Passwords No Longer Stops Attackers
(darkreading.com)
8.
9.
Man gets six years for hacking 750 women's Snapchat accounts
(bleepingcomputer.com)
10.
Google will now let you log in with a selfie
(feeds.feedburner.com)
11.
Flaws in Passkey Implementation Show Old Attacks Still Work
(darkreading.com)
12.
13.
Qwen-Image-3.0: Rich Content, Authentic Details, Deep Knowledge
(news.ycombinator.com)
14.
YouTube clarifies policies around AI slop and upsetting videos
(techcrunch.com)
15.
GitHub's 2FA is to become mandatory on September 2, 2026
(news.ycombinator.com)
16.
17.
You can now let Claude handle your passwords, assuming you’re cool with that
(androidauthority.com)
18.
Identity Attacks Overtake Exploits as Top Ransomware Cause
(darkreading.com)
19.
You have a strong password. Here’s why your online accounts are still at risk
(androidauthority.com)
20.
Microsoft Entra ID gets passkeys default authentication starting September
(bleepingcomputer.com)
21.
Unauthenticated RCE in Motorola's MR2600 Router
(news.ycombinator.com)
22.
Hackers exploit critical auth bypass in Gitea Docker image
(bleepingcomputer.com)
23.
New Forg365 phishing platform uses AI to target Microsoft 365 accounts
(bleepingcomputer.com)
24.
25.
Tenda firmware (multiple versions) contains hidden authentication backdoor
(news.ycombinator.com)
26.
'GitLost' Flaw Leaks Private Data From GitHub's Agentic Workflows
(darkreading.com)
27.
BeyondTrust warns of critical flaws in remote access software
(bleepingcomputer.com)
28.
29.
Attackers Seize Exposed AI Endpoints to Power Offensive Ops
(darkreading.com)
30.
Attackers Hijack Exposed AI Endpoints to Power Offensive Ops
(darkreading.com)