Brevo supply-chain attack injected ClickFix scripts on customer sites
(bleepingcomputer.com)
1.
3.
4.
5.
Keys Not Included: recovering the signing keys for US driver's license barcodes
(news.ycombinator.com)
6.
7.
8.
9.
How Trail of Bits helps verify the integrity of Signal chats
(news.ycombinator.com)
10.
Your biggest risk? The employees you rely on the most
(feeds.feedburner.com)
11.
12.
Has anybody seen my keys? A key-hierarchy strategy for rack-level security
(news.ycombinator.com)
14.
Nothing’s next OS update will make the Essential Key much more useful
(androidauthority.com)
15.
16.
39 New Methods That Compromise Passkey Authentication
(bleepingcomputer.com)
17.
18.
AI Model Evaluator METR Hit by Credential Theft, Probing
(darkreading.com)
19.
20.
A safe MySQL upgrade that wasn't so safe
(news.ycombinator.com)
21.
TurboKV: Insanely fast Rust key-value store
(news.ycombinator.com)
22.
C2PA Cameras Do Not Survive Contact with Reality
(news.ycombinator.com)
23.
South Korean startup platform breach exposes key management failures
(bleepingcomputer.com)
24.
25.
26.
Protect Your Relays
(news.ycombinator.com)
27.
Pass the Passkey: A Novel Attack Surface in Passwordless Authentication
(news.ycombinator.com)
28.
The pros and cons of using Apple AirTags
(engadget.com)
29.
Show HN: ssh ssh.place
(news.ycombinator.com)
30.
The Morning After We Pull a Root of Trust, Nobody Owns It
(darkreading.com)