- The Port That Does Not Exist - Port 0 is the port you are not supposed to use, so nobody looks there. So we put an IRC network on it. Then I got curious if anyone else had, & scanned all of IPv4 for port 0. Turns out we weren't alone, & some of our neighbors really shouldn't be there.
1,365 points76 comments5 d ago
- I just woke up to someone remote controlling my desktop
I’m so unbelievably stunned that this just happened. Around 5:15AM I went to put my pc back to sleep because I assumed my cat stepped on my keyboard and woke it up. I was fidgeting with my mouse...
792 points209 comments4 d ago
- CVE-2026-109518: Critical APT Vulnerability Allows Attackers to Bypass Package Verification and Execute Malicious Code as Root on Linux
Debian and Ubuntu APT Flaw Enables Remote Root Code Execution Through Malicious HTTP Traffic. Fixes are available for CVE-2026-109518, a High severity vulnerability in APT, the package manager...
649 points65 comments7 d ago
- Is anyone else worried that AI is expanding the attack surface faster than we can defend it?
I believe we’re going to see a lot more security vulnerabilities in the coming years because of AI, and I want to hear if others see it the same way. Here’s my reasoning: 1. AI-generated code...
511 points192 comments6 d ago
- Vanderbilt University shuts down devices after cyber attack
446 points28 comments2 d ago
- Claude Code’s “Yes, and Don’t Ask Again” Option Can Leak Passwords and API Keys to GitHub
382 points40 comments4 d ago
- openssh on musl linux has been letting people into password-less accounts since 2016
344 points7 comments6 d ago
- Hackers use n-day exploits in zero-click attacks on iOS, Android devices
Sekoia researchers documented a watering-hole campaign in which compromised legitimate websites and convincing imitation portals delivered device-specific exploit chains. Some attacks could run...
304 points7 comments4 d ago
- Chainalysis says hackers stole credentials and tokens for all of its customers
210 points11 comments3 d ago
- OpenSSH flaw lets attackers log into password-disabled Linux accounts
Researcher Ozgun Kultekin disclosed a vulnerability nicknamed sshole that can allow unauthorized SSH logins to certain accounts whose password authentication was deliberately disabled. The flaw...
191 points7 comments5 d ago