A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You
The private email address GitLab gives you for filing issues by email is a credential. Anyone who gets it can email a patch that GitLab commits in your name, to…
The FBI Anti-Corruption Squad Was Circling Susan Collins — Until Trump Got In The Way
This story was originally published by ProPublica and the Texas Tribune. Republished under a CC BY-NC-ND 3.0 license. In the final weeks of 2019, a top fundraiser for Sen. Susan…
Daily Deal: The 2026 Complete Firewall Admin Bundle
Transform your future in cybersecurity with 7 courses on next‑level packet control, secure architecture, and cloud‑ready defenses inside the 2026 Complete Firewall Admin Bundle. Courses cover IT fundamentals, topics to…
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key
Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers without a password, SSH key, or completed authentication. The chain, which CERT Polska calls…
Inspector General Report: ‘Alligator Alcatraz” Was Nothing More Than An ICE Concentration Camp
The true nature of hastily erected ICE detention facilities — especially the so-called “Alligator Alcatraz” erected in Trump buddy Ron DeSantis’s home state — was called out by Mike Masnick…
After multiple deaths and injuries, NHTSA is investigating comma.ai
Aftermarket devices that can boost or augment a vehicle’s native advanced driver assistance systems are the target of a new federal investigation this week. The National Highway Traffic Safety Administration’s…
This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker’s server, Cisco Talos said on September 22.…
America gave up its rare earth edge. China took full advantage.
Look around you, and you’ll see rare earth elements at work. A phone vibrates because a magnet moves a weight. Its screen was polished with cerium powder. Its connection to…
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit designed for…
Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape
A use-after-free in the Linux kernel’s AF_UNIX socket subsystem can be used to escape a container and gain root on the host, security firm DepthFirst said in research published September…