BleepingComputer (1 hour ago)
Truffle Security has launched the Secrets Revocation Program, a free initiative that helps API key issuers revoke 1.4 million publicly exposed secrets that remain valid.
Read the full story on BleepingComputer.
In this video conversation, Dark Reading editors discuss some of the news they didn’t get a chance to cover, from an ill-conceived phishing simulation to a hacktivist attack on a US government agency.
OpenAI’s newest cybersecurity model comes out as AI labs face scrutiny of their work to protect digital infrastructure.
A joint U.S. government statement says the hacks are affecting the food, transportation, and healthcare industries after reports of global mass-hacks.
Decade-old vulnerability in OpenSSH is now fixed, so get a-patchin’
OpenAI has officially launched GPT-6 Cyber, a specialized security model designed to uncover vulnerabilities, build working exploits, and more.
After compromising websites, the Russian state-sponsored threat group is fingerprinting victims, then harvesting information from the interesting ones.
Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees into phishing attacks, using two different phishing-as-a-service platforms to steal Microsoft and Google account credentials and authentication sessions.
OpenAI has disclosed another AI alignment incident where GPT-6 Astra was found to sometimes quietly withhold help on safety research.
A newly disclosed OpenSSH vulnerability dubbed “*sshole” allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are configured to block password authentication, simply by entering an oversized password.
A new Linux malware called CWPdoor is being distributed through a trojanized version of cwpsrv, the web server behind the Control Web Panel (CWP) management interface.
69 active sources
24 Turkish · 45 English
All sources
