Discord Rolls Out End-to-End Encryption For All Calls
Discord just rolled out end-to-end encryption for ALL voice and video calls by default. Your conversations just got a whole lot more private.
Read More
Drupal Issues Emergency Security Update For May 20
Drupal drops emergency security update May 20. If you’re running a Drupal site, clear your calendar. The wording alone should have admins on high alert.
Americans Lost $388M To Crypto ATM Scams In 2025
Americans lost $388M to crypto ATM scams in 2025. Criminals are weaponizing Bitcoin kiosks to drain victims’ accounts. Know the red flags before you use one.
How XSS Turns Passkeys Into a Backdoor
A single XSS vulnerability can silently register an attacker-controlled passkey on a victim’s account, creating a persistent authentication backdoor with zero user interaction. The widespread deployment of passkeys without attestation requirements makes this a critical and largely overlooked threat.
Microsoft Dismantles Fox Tempest Malware Signing Network
Microsoft just took down Fox Tempest, a criminal network that helped hackers sign malware with fake certificates to bypass security. Trust nothing.
CISA Left GitHub Repo Open With Passwords for Six Months
CISA’s own GitHub repository was left publicly accessible for six months, exposing hundreds of megabytes of plain-text passwords, AWS credentials, private keys, and cloud tokens with alarmingly obvious filenames. The repository was taken down within 26 hours after a GitGuardian researcher escalated the disclosure through security journalist Brian Krebs.
GitHub Actions Workflow Compromised In Supply Chain Attack
GitHub Actions supply chain attack hits actions-cool/issues-helper. Attackers redirected ALL repository tags to malicious commits, stealing CI/CD credentials.
AI Model Builds Working Exploits From Chained Vulnerabilities
Anthropic’s Mythos AI isn’t just finding bugs—it’s chaining them into working exploits. Cloudflare’s tests show we’ve crossed a new threshold in automated vuln research.
AI Transforms OSINT As Social Tracking Tools Fade Away
AI is reshaping OSINT: automation powers modern investigations while legacy social tracking tools lose access. The game has changed for digital investigators.
TeamPCP Escalates With Jenkins Breach And New Worm
TeamPCP supply chain attack escalates: Jenkins plugin compromised, new worm spreads across npm and PyPI. The loudest activity since March’s Trivy disclosure.