A weekly look at exploited flaws, exposed systems, supply-chain attacks, browser abuse, malware campaigns, and the security risks that mattered most.

I've spent years building and auditing web applications, and one pattern keeps coming up: developers who are careful about backend security will ship a SaaS product and leave a surprising amount of ...

Ethereum co-founder Vitalik Buterin is publishing a technical series on program obfuscation, which he calls the most powerful idea in cryptography even though it is far from practical use. Obfuscation ...

Ethereum co-founder Vitalik Buterin has described obfuscation as one of the strongest ideas in cryptography, while warning that it remains far from practical use. In a June 29 blog post, Buterin said ...

The source code for the Miasma credential-stealing framework briefly appeared on GitHub after being uploaded through multiple compromised developer accounts. Security researchers warn that the leak ...

Prosecutors accused Dr. David Morens, a former adviser to Dr. Anthony S. Fauci, of hiding records related to the onset of the pandemic. By Benjamin Mueller Dr. David Morens, a former senior adviser to ...

A newly uncovered malware campaign is combining ClickFix delivery with AI generated evasion techniques to steal enterprise user accounts and passwords. The attacks are designed to provide intruders ...

Journalism is vital to our democracy and our community. And we believe it should be free and accessible to everyone. Rather than throwing up a paywall or charging a subscription fee, we believe there ...