Two arrested over nursery cyber-attack
Pair held by police investigating reports of attack on a chain of London-based nurseries. ⌘ Read more

Stephen Lawrence killer admits role but refuses to name accomplices
David Norris, speaking at a parole hearing, becomes the first of the teenager’s killers to publicly admit his role in the 1993 attack. ⌘ Read more

Jenrick attacks ‘activist’ judges in conference speech
The shadow justice secretary says the Tories would hand ministers a bigger role in appointing judges. ⌘ Read more

Stephen Lawrence killer admits role but refuses to name accomplices
David Norris, speaking at a parole hearing, becomes the first of the teenager’s killers to publicly admit his role in the 1993 attack. ⌘ Read more

Russia’s Criminal Army Strikes Europe From Within in a Wave of Attacks ⌘ Read more

Thieves snatch Bronze Age gold in four-minute museum heist
Two thieves stole ‘irreplaceable’ gold artefacts in a targeted attack on St Fagans museum in Cardiff. ⌘ Read more

Starmer urges students not to join pro-Palestinian protests on anniversary
The prime minister says it is “un-British” to hold pro-Palestinian protests on the second anniversary of Hamas’s attacks on Israel. ⌘ Read more

Starmer urges students not to join pro-Palestinian protests on anniversary
The prime minister says it is “un-British” to hold pro-Palestinian protests on the second anniversary of Hamas’s attacks on Israel. ⌘ Read more

Hamas demands release of Oct 7 attackers in exchange for hostages ⌘ Read more

Starmer urges students not to join pro-Palestinian protests on anniversary
The prime minister says it is “un-British” to hold pro-Palestinian protests on the second anniversary of Hamas’s attacks on Israel. ⌘ Read more

Surfer bitten twice by shark chasing seal off Kangaroo Island
A surfer has driven himself to hospital after being twice bitten a shark who was reportedly chasing a seal in waters off Kangaroo Island. ⌘ Read more

Gold Coast mayor says Qld government hoarding cyclone recovery funds
Gold Coast mayor Tom Tate is calling for the state government to hand over funding allocated to help cover the city’s growing disaster recovery bill following Tropical Cyclone Alfred. ⌘ Read more

Starmer urges students not to protest on 7 October
The prime minister says it is “un-British” to hold pro-Palestinian protests on the second anniversary of Hamas’s attacks on Israel. ⌘ Read more

Venezuela thwarts terror attack threat against US embassy, Maduro says
Venezuela has alerted the Trump administration of a foiled “false flag operation” threatening to target the United States embassy in Caracas with explosives. ⌘ Read more

Mother of Israeli hostage says she still doesn’t know if he’s alive or dead
Two years on from Hamas’ attack on 7 October, Herut Nimrodi says she is clinging to hope that her son Tamir is “still hanging on”. ⌘ Read more

Pro-Hamas graffiti condemned as Australian Jewish community marks October 7
Political leaders have condemned the painting of a pro-Hamas slogan on a Melbourne billboard as Australia’s Jewish community commemorates the October 7 terrorist attack. ⌘ Read more

Zelensky reveals nine Western countries sending parts to Russia to build missiles and attack drones ⌘ Read more

Russians report drone attack in Tyumen, 2,000 km from Ukraine ⌘ Read more

Footage shows synagogue attacker minutes before killing
Footage given to the BBC shows a man matching the description of the attacker given by witnesses. ⌘ Read more

Western intelligence have evidence that Russia discussing NATO attack, says EU defense commissioner ⌘ Read more

Footage shows synagogue attacker minutes before killing
Footage given to the BBC shows a man matching the description of the attacker given by witnesses. ⌘ Read more

Neighbours of Manchester synagogue attacker say they reported concerns to police after radicalization was evident ⌘ Read more

Nottingham attacks victim awarded George Medal for protecting friend from killer
The medical student “made the ultimate sacrifice” as she tried to defend her friend Barnaby Webber. ⌘ Read more

Nottingham attacks victim awarded George Medal for protecting friend from killer
The medical student “made the ultimate sacrifice” as she tried to defend her friend Barnaby Webber. ⌘ Read more

Nottingham attacks victim awarded George Medal for protecting friend from killer
The medical student “made the ultimate sacrifice” as she tried to defend her friend Barnaby Webber. ⌘ Read more

Doorbell footage appears to show Manchester synagogue attacker minutes before killing
Footage given to the BBC shows a man matching the description of the attacker given by witnesses. ⌘ Read more

Doorbell footage appears to show Manchester synagogue attacker minutes before killing
Footage given to the BBC shows a man matching the description of the attacker given by witnesses. ⌘ Read more

Doorbell footage appears to show Manchester synagogue attacker minutes before killing
Footage given to the BBC shows a man matching the description of the attacker given by witnesses. ⌘ Read more

Asahi restarts beer production after cyber-attack
Japan’s biggest brewer has restarted six factories that produce its popular Super Dry beer. ⌘ Read more

Six young people are shot in Swedish city centre attack as police arrest 14-year-old boy ⌘ Read more

40,000 Russians without power in Belgorod after Ukrainian attack causes ‘significant’ damage to energy facilities ⌘ Read more

Nobel Prize for how immune system stops destructive rampage
The prize-winning work explains how the immune system attacks hostile infections, but not the body’s own cells. ⌘ Read more

Asahi restarts beer production after cyber-attack
Japan’s biggest brewer has restarted six factories that produce its popular Super Dry beer. ⌘ Read more

Ute narrowly misses woman, baby in alleged domestic violence attack
A man is in police custody after allegedly driving a ute towards a woman and baby outside a shop in Alice Springs on Monday. ⌘ Read more

Nottingham attacks victim awarded George Medal
The medical student “made the ultimate sacrifice” as she tried to defend her friend Barnaby Webber. ⌘ Read more

‘Our nearest neighbour is our newest ally’: Albanese, Marape sign new defence treaty
Papua New Guinea and Australia formally sign a landmark new defence treaty, elevating the bilateral relationship between the two countries to an alliance and agreeing to “act to meet the common danger” if the other is faced with an armed attack. ⌘ Read more

**The true extent of cyber attacks on UK business - and the weak spots that allow them to happen **
Are this year’s major attacks the “cumulative effect of a kind of inaction on cyber security” from the government and big business? ⌘ Read more

Jaguar Land Rover to restart some production after cyber-attack
Work is to resume first at the carmaker’s engine factory in Wolverhampton on Monday. ⌘ Read more

Survivor describes moment ‘monster’ attacked synagogue
Alan Levy recalled the moment Jihad A-Shamie tried to get into the synagogue that he and other worshippers had barricaded. ⌘ Read more

Russia fires 500 drones at Ukraine in deadly overnight attack, Zelenskyy says ⌘ Read more

How To Attack Admin Panels Successfully Part 2

Image

Not Attacking Web Apps Admin Panels The Right Way?

Continue reading on InfoSec Write-ups » ⌘ Read more

Trauma in a puppy’s first six months linked to adult aggression, says new study
As many dog owners can attest, their four-legged companions are delightful and loving. But for others, their animals have an aggressive side, such as biting and attacking strangers, which may ultimately lead to them having to be euthanized. But why do some dogs turn out this way? ⌘ Read more

The Trust Paradox: When Your AI Gets Catfished
The fundamental challenge with MCP-enabled attacks isn’t technical sophistication. It’s that hackers have figured out how to catfish your AI. These attacks work because they exploit the same trust relationships that make your development team actually functional. When your designers expect Figma files from agencies they’ve worked with for years, when your DevOps folks trust… ⌘ Read more

Leftists Attack Cloudflare Funding of Ladybird & Omarchy Linux
Cloudflare contributes financially to Open Source projects. ⌘ Read more

Coding a SHA2 Length Extension Attack - Computerphile ⌘ Read more

SHA2 Fatal Flaw? (Hash Length Extension Attack) - Computerphile ⌘ Read more

MCP Horror Stories: The Drive-By Localhost Breach
This is Part 4 of our MCP Horror Stories series, where we examine real-world security incidents that expose the devastating vulnerabilities in AI infrastructure and demonstrate how Docker MCP Gateway provides enterprise-grade protection against sophisticated attack vectors. The Model Context Protocol (MCP) has transformed how developers integrate AI agents with their development environments. Tools like… ⌘ Read more

Our plan for a more secure npm supply chain
Addressing a surge in package registry attacks, GitHub is strengthening npm’s security with stricter authentication, granular tokens, and enhanced trusted publishing to restore trust in the open source ecosystem.

The post Our plan for a more secure npm supply chain appeared first on The GitHub Blog. ⌘ Read more

@bender@twtxt.net Cool, the PDF doesn’t have the navigation links between each section, that’s indeed a tad nicer. Thanks!

@kat@yarn.girlonthemoon.xyz Oh dear, nobody needs bot attacks. :-( Luckily, the web server responding a hell lot quicker today than the last two days.

@lyse@lyse.isobeef.org hihi ^^ i did that at first, but i personally i don’t like it when websites don’t let me change my password when i am already authenticated — fwiw you can view and log out other sessions, if that diminishes this attack vector at all

@lyse@lyse.isobeef.org IIRC they’re getting attacked by bots on a huge level

also this is a really useful page!

@zvava@twtxt.net Uuhh, that’s nice! And welcome to the twtxt world.

The password change might query the current password as well in order to make it difficult for attackers to change account passwords.

@movq@www.uninformativ.de I also don’t think that I’m a particularly good speaker. :-) The workshop model is a good idea, I like that.

Yeah, it’s really good fun. I can highly recommend it. This is also a good way to train (new) developers to think like attackers, how to break in, destroy something or raise awareness of some classes of bugs. Then you can avoid them next time. It’s surprising to me what vulnerabilities come up during this event every time. So, absolutely worth it, win, win.

https://www.middleeasteye.net/news/jailed-female-activists-iran-issue-letter-condemning-israeli-attacks

‘Russians are too weak’ — Orban questions Moscow’s ability to attack NATO ⌘ Read more

M&S restarts online orders after cyber attack
The return of online shopping marks a key milestone for the retailer, which has struggling to get services back to normal. ⌘ Read more

Per Brute-Force-Angriff: Rufnummern fremder Google-Nutzer ausgespäht
Mittels Brute-Force-Attacke konnte ein Forscher Rufnummern fremder Google-Nutzer bestimmen. Nur die zugehörige E-Mail-Adresse war erforderlich. ( Sicherheitslücke, Google)

Image

M&S restarts online orders after cyber attack
The return of online shopping marks a key milestone for the retailer, which has struggling to get services back to normal. ⌘ Read more

M&S restarts online orders after cyber attack
The return of online shopping marks a key milestone for the retailer, which has struggling to get services back to normal. ⌘ Read more

M&S restarts online orders after cyber attack
The return of online shopping marks a key milestone for the retailer, which has struggling to get services back to normal. ⌘ Read more

As their popularity surges, European far-right parties stage rally in France
Speeches from prominent politicians featured attacks on the European Union and migration policies, as they seek to rally French voters ahead of presidential elections. ⌘ Read more

Ukraine says Russia launched biggest overnight drone attack of the war
It’s the latest in a series of retaliations from Moscow since Ukraine destroyed a number of Russian bombers in drone attacks on air bases deep in the country earlier this month. ⌘ Read more

Sweden telecom sabotage: Sweden probes massive sabotage after 30 telecom masts attacked in what officials call a coordinated strike ⌘ Read more

Ukraine drones attack on Moscow forces airport closure, Russia says ⌘ Read more

$1,000 Bug: Firefox Account Deletion Without 2FA or Authorization

Image

How a Missing Backend Check Let Attackers Nuke Accounts With Just a Password

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/1-000-bu … ⌘ Read more

Russian drone and missile strike hits major Ukraine city, dimming peace hopes
Two waves of Russian attacks targeting the Ukrainian city of Kharkiv kill at least four, injuring more, as hopes of peace dim. ⌘ Read more

Kharkiv hit by ‘most powerful attack’ of entire war, mayor says, as Russia pounds Ukraine again ⌘ Read more

Breaking: Israel retrieves body of Thai hostage kidnapped during October 7 attacks
Nattapong Pinta was kidnapped from Kibbutz Nir Oz and killed in captivity near the start of the war, according to the office of Israeli Prime Minister Benjamin Netanyahu. ⌘ Read more

10 Fascinating Facts About Life in Hawaii Before the U.S. Arrived
Hawaii joined the Union on August 21, 1959. Its history immediately before and after joining the United States is well known. Americans have long learned about the attack on Honolulu’s Pearl Harbor in 1941. Many recognize Hawaii’s role as a Pacific hub for logistics, trade, and transportation. The islands offer economic opportunities in commercial fishing […]

The post [10 Fascinating Facts About Life i … ⌘ Read more

Tobacconists struggling to get cover as insurers ‘turn off the tap’
An insurance broker says it has become “almost impossible” to find cover for stores that sell tobacco products after they’ve become a target for arson in the past year. ⌘ Read more

During a massive attack in Kyiv, a man in the metro was holding his cat’s paw the whole time. ⌘ Read more

Father may lose sight in eye after son threw acid on him, court told
A man remains behind bars after appearing in court accused of throwing acid in his father’s face. ⌘ Read more

Four killed and 20 injured in Russia’s overnight attack on Kyiv
Russia has mounted an intense and sustained barrage on the Ukrainian capital following Kyiv’s most audacious attack on its neighbour since the war began. ⌘ Read more

Russian weapons plant hit by drones in Tambov Oblast, media reports attacks across country ⌘ Read more

JMP: Mitigating MITMs in XMPP
In October 2023, Jabber.ru, “the largest Russian XMPP messaging service”, discovered that both Hetzner and Linode had been targeting them with Machine-In-The-Middle (MITM) attacks for up to 6 months. MITM attacks are when an unauthorised third party intercepts traffic intended for someone else. At the point of interception, the attacker can inspect and even modify that traffic. TLS was created to mitigate this; all communication between the two parties is encrypted, so the third party sees … ⌘ Read more

Five quick hits: Behich puts Australia closer to World Cup qualification
Tony Popovic chooses substance over sparkle, Socceroos lack imagination in attack, and Aziz Behich provides an improbable wonder goal. These are five quick hits from Australia’s dramatic 1-0 defeat of Japan. ⌘ Read more

JMP: Mitigating MITMs in XMPP
In October 2023, Jabber.ru, “the largest Russian XMPP messaging service”, discovered that both Hetzner and Linode had been targeting them with Machine-In-The-Middle (MITM) attacks for up to 6 months. MITM attacks are when an unauthorised third party intercepts traffic intended for someone else. At the point of interception, the attacker can inspect and even modify that traffic. TLS was created to mitigate this; all communication between the two parties is encrypted, so the third party sees … ⌘ Read more

DOM XSS Exploit: Using postMessage and JSON.parse in iframe Attacks

Image

[Write-up] DOM XSS Using Web Messages and JSON.parse.

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/dom-xss-exploit-using … ⌘ Read more

Man jailed for four years over stabbing of ‘good Samaritan’ former reality TV contestant
A man who “savagely” attacked and stabbed former Bachelorette contestant Paddy Colliar, who was working as a topless waiter at a 60th birthday party, has been jailed for at least four years. ⌘ Read more

Charge dropped against US conspiracy theorist linked to Wieambilla attack
Donald Day Jr — who regularly communicated with Wieambilla killers Gareth, Stacey, and Nathaniel Train — is facing charges relating to making alleged threats and violating firearms laws. ⌘ Read more

Drones can be ‘anywhere, anytime’: Ukraine attack marks new era in warfare
Military analysts say Ukraine’s audacious attack on Russian air bases marks the next phase in tactical drone warfare, and all countries — including Australia — need to take note. ⌘ Read more

Putin vows revenge for Ukraine’s drone attack, Trump warns after phone call
The US president and his Russian counterpart spoke for more than an hour but Donald Trump said it was “not a conversation that will lead to immediate peace”. ⌘ Read more

Donald Trump spoke to Vladimir Putin again after the huge attack by the Ukrainians: “He said he would have to respond” ⌘ Read more

Serving as Putin’s Spokesperson, Trump Claims Russia is Planning to Retaliate Against Ukraine’s Surprise Attack ⌘ Read more

This is the Socceroos’ most important week in years — but best attack still a mystery
Despite a historic A-League season for young Australian forwards, Tony Popovic has trusted in the tried and true for this week’s crunch matches against Japan and Saudi Arabia as World Cup qualification beckons. ⌘ Read more

Queensland croc attack survivor joins calls for removal, culling
A father of two who managed to fight off a monster croc by stabbing it in the neck has voiced his support for a petition to more strictly control the animals in his region. ⌘ Read more

Images reveal aircraft lost in Ukraine’s ‘Spider’s Web’ attack on Russia
Operation Spider’s Web saw Ukraine reach deep into Russia and attack some of its most precious war machines. Images showing the damage inflicted are now beginning to emerge. ⌘ Read more

UN questions whether recent aid site attacks amount to war crimes
Palestinian authorities have accused Israeli forces of opening fire on civilians in three attacks in as many days, but the IDF denies shooting civilians. ⌘ Read more

Colorado fire-bomb suspect’s family being held for deportation
Federal agents are investigating “to what extent” Mohamed Sabry Soliman’s family knew about the attack, and if they provided any support. ⌘ Read more

Satellite imagery shows Ukraine attack destroyed and damaged Russian bombers ⌘ Read more

Putin Ally Says Ukraine Operation ‘Grounds for Nuclear Attack’ ⌘ Read more

DNS rebinding attacks explained: The lookup is coming from inside the house!
DNS rebinding attack without CORS against local network web applications. Explore the topic further and see how it can be used to exploit vulnerabilities in the real-world.

The post [DNS rebinding attacks explained: The lookup is coming from inside the house!](https://github.blog/security/application-security/dns-rebinding-attacks-explained-the-lookup-is-coming-from- … ⌘ Read more

Tech Journalist Engages in Lies & Doublespeak to Defame Lunduke
As part of a GNOME puff piece, a Tech Journalist for a Free and Open Source publication went on an unhinged attack on all things “Lunduke”. ⌘ Read more

Hundreds of prisoners escape after earthquake in Pakistan
More than 200 inmates attacked guards and fled after they were allowed to leave their cells because of earthquake tremors. ⌘ Read more

Man sentenced for attacking housemate, stealing dog from pound
Kyle Hiscox broke into Domestic Animal Services ACT to steal his own dog Nova, and then attacked a housemate with a hockey stick, leaving the victim so scarred they left Canberra. ⌘ Read more

Putin likes to have the upper hand, but before Istanbul Zelenskyy played an ace
Vladimir Putin and Volodymyr Zelenskyy sent delegates to Istanbul to talk peace, but a day prior Ukraine sent its strongest signal to Russia and any third-party brokers: The war is not lost, writes Emily Clark. ⌘ Read more

Teens who attack rugby great during home invasion have sentences upheld
The boy — aged 15 at the time of the offence — were sentenced to seven and eight years in prison respectively after attacking rugby union great Toutai Kefu and his family at their home. ⌘ Read more

Colorado terror attack suspect charged with hate crime
FBI documents allege Mohamed Sabry Soliman used a makeshift flamethrower and threw Molotov cocktails at a pro-Israel group in an attack he says he planned for more than a year. ⌘ Read more

Ukraine’s drone attack on Russian warplanes was a serious blow to the Kremlin’s strategic arsenal ⌘ Read more

Ukraine attack on Russian nuclear bombers overshadows peace talks in Turkiye
Negotiations yielded little progress but Volodymyr Zelenskyy confirmed there would be a fresh prisoner of war-swap between the two countries. ⌘ Read more