Schneier on Security (1 hour ago)
There’s a new archive of all the papers from twenty-five years of the Workshop on Economics and Information Security (WEIS). Really nice resource. It’s fun to reread my 2002 essay on the economics of information security.
Read the full story on Schneier on Security.
Two critical vulnerabilities have been identified with PHP, a programming language which is widely used across the internet.
The attackers obtained the session data from the memory of a support application the retailer believed could only be reached from its own computers. The breach gave a Chinese organized crime group a way to generate gift cards for retailers including Target and Sephora.
The European Commission has opened an investigation into Booking.com over concerns that the platform is not doing enough to protect users from fake listings and phishing scams.
Website owners are bracing for an urgent security update after a serious warning, with the PHP team preparing an emergency response, as the vulnerabilities impact around 70% of the web.
Security patches for the PHP programming language, widely used to build websites and web apps, are expected to roll out today, with the goal of fixing two critical vulnerabilities that could wreak havoc on the internet if left unchecked.
The private keys associated with eight certificates were compromised, and root programs and trust stores are blocking them.
Justin.sh is reporting on a confidential Cellebrite document that has been leaked to him: Cellebrite calls it Advanced Unlocks (AU from here on), not to be confused with the “advanced unlocking services” they’ve marketed for years.
Interesting research: Abstract: Vision-language models (VLMs) can solve visual CAPTCHAs without task-specific training, but the agents built on them approach every challenge from scratch. For such an agent, the hundredth instance of a familiar puzzle costs as much time and compute as the first.
New research shows that squid lived all around the globe even before the Cretaceous-Paleogene mass extinction event. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.
This is a problem: Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated build.
72 active sources
27 Turkish · 45 English
All sources
