Man re-arrested at airport over Manchester synagogue attack
A 30-year-old man was re-arrested at Manchester Airport earlier, Counter Terrorism Policing said. ⌘ Read more

Man re-arrested over Manchester synagogue attack
A 30-year-old man was re-arrested at Manchester Airport earlier. ⌘ Read more

Jeremy Bowen: There’s now a realistic chance of ending the war - but it’s not over yet
For the first time since the Hamas attacks on Israel two years ago, there is a realistic chance of ending the horrors ⌘ Read more

Security updates for Thursday
Security updates have been issued by AlmaLinux (gnutls, kernel, kernel-rt, and open-vm-tools), Debian (chromium, python-django, and redis), Fedora (chromium, insight, mirrorlist-server, oci-seccomp-bpf-hook, rust-maxminddb, rust-prometheus, rust-prometheus_exporter, rust-protobuf, rust-protobuf-codegen, rust-protobuf-parse, rust-protobuf-support, turbo-attack, and yarnpkg), Oracle (iputils, kernel, open-vm-tools, redis, and valkey), Red Hat (perl-File-Find-Rule and perl-File-Find-Rul … ⌘ Read more

Man-in-the-Middle Detection

Image

Learn what MITM attack is, and how to identify the footprints of this attack in the network traffic.

Continue reading on InfoSec Write-ups » ⌘ Read more

Getting Hands-On with Kerbrute: Practical AD Enumeration & Attack Tactics ⌘ Read more

Synagogue attacker pledged allegiance to ‘Islamic State’ in 999 call
Police confirm the attacker made the call after he crashed his car into a brick wall. ⌘ Read more

Synagogue attacker pledged allegiance to ‘Islamic State’ in 999 call
Police confirm the attacker made the call after he crashed his car into a brick wall. ⌘ Read more

Baroness Lawrence calls for new investigation after killer admits attack
She said it was ‘shocking’ that police had known about David Norris’s admission that he took part in the racist attack. ⌘ Read more

Baroness Lawrence calls for new investigation after killer admits attack
She said it was ‘shocking’ that police had known about David Norris’s admission that he took part in the racist attack. ⌘ Read more

Synagogue attacker pledged allegiance to ‘Islamic State’ in 999 call
Police confirm the attacker made the call after he crashed his car into a brick wall. ⌘ Read more

Jihad Al-Shamie pledged allegiance to ‘Islamic State’ in 999 call after attack
Police confirm the attacker made the call after he crashed his car into a brick wall. ⌘ Read more

Jihad Al-Shamie pledged allegiance to ‘Islamic State’ in 999 call after attack
Police confirm the attacker made the call after he crashed his car into a brick wall. ⌘ Read more

Jihad Al-Shamie pledged allegiance to ‘Islamic State’ in 999 call after attack
Police confirm the attacker made the call after he crashed his car into a brick wall. ⌘ Read more

Jihad Al-Shamie pledged allegiance to ‘Islamic State’ in 999 call after attack
Police confirm the attacker made the call after he crashed his car into a brick wall. ⌘ Read more

Three killed in latest Ukrainian strike on Russia’s Belgorod region
Wednesday’s attack comes days after a similar strike caused mass power cuts. ⌘ Read more

At least 24 killed as army paraglider bombs Myanmar Buddhist festival
Locals tell the BBC the carnage has made it hard to identify victims of the military attack. ⌘ Read more

At least 24 killed as army paraglider bombs Myanmar Buddhist festival
Locals tell the BBC the carnage has made it hard to identify victims of the military attack. ⌘ Read more

At least 24 killed as army paraglider bombs Myanmar Buddhist festival
Locals tell the BBC the carnage has made it hard to identify victims of the military attack. ⌘ Read more

Stealing Part of a Production Language Model (2024)
We introduce the first model-stealing attack that extracts precise, nontrivial information from black-box production language models like OpenAI’s ChatGPT or Google’s PaLM-2. Specifically, our attack recovers the embedding projection layer (up to symmetries) of a transformer model, given typical API access. For under $20 USD, our attack extracts the entire projection matrix of OpenAI’s ada and babbage language models. We thereby confirm, for the first time, that these black-box … ⌘ Read more

Dog attacks are still rising - even after the XL bully ban
With close to 32,000 dog attacks recorded in England and Wales last year, is there a better solution? ⌘ Read more

High security a fact of life for UK Jewish community living in fear of attack
Leaders in the UK’s tight-knit Jewish population are asking what more can be done to keep their institutions safe. ⌘ Read more

Surge in shark-tracking app downloads following fatal Sydney attack
There has been a surge in downloads of the SharkSmart app following the fatal attack of a Northern Beaches surfer — in a sign the incident has left some nervous to get back into the water. ⌘ Read more

Two arrested over nursery cyber-attack
Pair held by police investigating a hack on a chain of London-based nurseries. ⌘ Read more

Two arrested over nursery cyber-attack
Pair held by police investigating reports of attack on a chain of London-based nurseries. ⌘ Read more

Two arrested over nursery cyber-attack
Pair held by police investigating reports of attack on a chain of London-based nurseries. ⌘ Read more

Two arrested over nursery cyber-attack
Pair held by police investigating reports of attack on a chain of London-based nurseries. ⌘ Read more

Stephen Lawrence killer admits role but refuses to name accomplices
David Norris, speaking at a parole hearing, becomes the first of the teenager’s killers to publicly admit his role in the 1993 attack. ⌘ Read more

Jenrick attacks ‘activist’ judges in conference speech
The shadow justice secretary says the Tories would hand ministers a bigger role in appointing judges. ⌘ Read more

Stephen Lawrence killer admits role but refuses to name accomplices
David Norris, speaking at a parole hearing, becomes the first of the teenager’s killers to publicly admit his role in the 1993 attack. ⌘ Read more

Russia’s Criminal Army Strikes Europe From Within in a Wave of Attacks ⌘ Read more

Thieves snatch Bronze Age gold in four-minute museum heist
Two thieves stole ‘irreplaceable’ gold artefacts in a targeted attack on St Fagans museum in Cardiff. ⌘ Read more

Starmer urges students not to join pro-Palestinian protests on anniversary
The prime minister says it is “un-British” to hold pro-Palestinian protests on the second anniversary of Hamas’s attacks on Israel. ⌘ Read more

Starmer urges students not to join pro-Palestinian protests on anniversary
The prime minister says it is “un-British” to hold pro-Palestinian protests on the second anniversary of Hamas’s attacks on Israel. ⌘ Read more

Hamas demands release of Oct 7 attackers in exchange for hostages ⌘ Read more

Starmer urges students not to join pro-Palestinian protests on anniversary
The prime minister says it is “un-British” to hold pro-Palestinian protests on the second anniversary of Hamas’s attacks on Israel. ⌘ Read more

Surfer bitten twice by shark chasing seal off Kangaroo Island
A surfer has driven himself to hospital after being twice bitten a shark who was reportedly chasing a seal in waters off Kangaroo Island. ⌘ Read more

Gold Coast mayor says Qld government hoarding cyclone recovery funds
Gold Coast mayor Tom Tate is calling for the state government to hand over funding allocated to help cover the city’s growing disaster recovery bill following Tropical Cyclone Alfred. ⌘ Read more

Starmer urges students not to protest on 7 October
The prime minister says it is “un-British” to hold pro-Palestinian protests on the second anniversary of Hamas’s attacks on Israel. ⌘ Read more

Venezuela thwarts terror attack threat against US embassy, Maduro says
Venezuela has alerted the Trump administration of a foiled “false flag operation” threatening to target the United States embassy in Caracas with explosives. ⌘ Read more

Mother of Israeli hostage says she still doesn’t know if he’s alive or dead
Two years on from Hamas’ attack on 7 October, Herut Nimrodi says she is clinging to hope that her son Tamir is “still hanging on”. ⌘ Read more

Pro-Hamas graffiti condemned as Australian Jewish community marks October 7
Political leaders have condemned the painting of a pro-Hamas slogan on a Melbourne billboard as Australia’s Jewish community commemorates the October 7 terrorist attack. ⌘ Read more

Zelensky reveals nine Western countries sending parts to Russia to build missiles and attack drones ⌘ Read more

Russians report drone attack in Tyumen, 2,000 km from Ukraine ⌘ Read more

Footage shows synagogue attacker minutes before killing
Footage given to the BBC shows a man matching the description of the attacker given by witnesses. ⌘ Read more

Western intelligence have evidence that Russia discussing NATO attack, says EU defense commissioner ⌘ Read more

Footage shows synagogue attacker minutes before killing
Footage given to the BBC shows a man matching the description of the attacker given by witnesses. ⌘ Read more

Neighbours of Manchester synagogue attacker say they reported concerns to police after radicalization was evident ⌘ Read more

Nottingham attacks victim awarded George Medal for protecting friend from killer
The medical student “made the ultimate sacrifice” as she tried to defend her friend Barnaby Webber. ⌘ Read more

Nottingham attacks victim awarded George Medal for protecting friend from killer
The medical student “made the ultimate sacrifice” as she tried to defend her friend Barnaby Webber. ⌘ Read more

Nottingham attacks victim awarded George Medal for protecting friend from killer
The medical student “made the ultimate sacrifice” as she tried to defend her friend Barnaby Webber. ⌘ Read more

Doorbell footage appears to show Manchester synagogue attacker minutes before killing
Footage given to the BBC shows a man matching the description of the attacker given by witnesses. ⌘ Read more

Doorbell footage appears to show Manchester synagogue attacker minutes before killing
Footage given to the BBC shows a man matching the description of the attacker given by witnesses. ⌘ Read more

Doorbell footage appears to show Manchester synagogue attacker minutes before killing
Footage given to the BBC shows a man matching the description of the attacker given by witnesses. ⌘ Read more

Asahi restarts beer production after cyber-attack
Japan’s biggest brewer has restarted six factories that produce its popular Super Dry beer. ⌘ Read more

Six young people are shot in Swedish city centre attack as police arrest 14-year-old boy ⌘ Read more

40,000 Russians without power in Belgorod after Ukrainian attack causes ‘significant’ damage to energy facilities ⌘ Read more

Nobel Prize for how immune system stops destructive rampage
The prize-winning work explains how the immune system attacks hostile infections, but not the body’s own cells. ⌘ Read more

Asahi restarts beer production after cyber-attack
Japan’s biggest brewer has restarted six factories that produce its popular Super Dry beer. ⌘ Read more

Ute narrowly misses woman, baby in alleged domestic violence attack
A man is in police custody after allegedly driving a ute towards a woman and baby outside a shop in Alice Springs on Monday. ⌘ Read more

Nottingham attacks victim awarded George Medal
The medical student “made the ultimate sacrifice” as she tried to defend her friend Barnaby Webber. ⌘ Read more

‘Our nearest neighbour is our newest ally’: Albanese, Marape sign new defence treaty
Papua New Guinea and Australia formally sign a landmark new defence treaty, elevating the bilateral relationship between the two countries to an alliance and agreeing to “act to meet the common danger” if the other is faced with an armed attack. ⌘ Read more

**The true extent of cyber attacks on UK business - and the weak spots that allow them to happen **
Are this year’s major attacks the “cumulative effect of a kind of inaction on cyber security” from the government and big business? ⌘ Read more

Jaguar Land Rover to restart some production after cyber-attack
Work is to resume first at the carmaker’s engine factory in Wolverhampton on Monday. ⌘ Read more

Survivor describes moment ‘monster’ attacked synagogue
Alan Levy recalled the moment Jihad A-Shamie tried to get into the synagogue that he and other worshippers had barricaded. ⌘ Read more

Russia fires 500 drones at Ukraine in deadly overnight attack, Zelenskyy says ⌘ Read more

How To Attack Admin Panels Successfully Part 2

Image

Not Attacking Web Apps Admin Panels The Right Way?

Continue reading on InfoSec Write-ups » ⌘ Read more

Trauma in a puppy’s first six months linked to adult aggression, says new study
As many dog owners can attest, their four-legged companions are delightful and loving. But for others, their animals have an aggressive side, such as biting and attacking strangers, which may ultimately lead to them having to be euthanized. But why do some dogs turn out this way? ⌘ Read more

The Trust Paradox: When Your AI Gets Catfished
The fundamental challenge with MCP-enabled attacks isn’t technical sophistication. It’s that hackers have figured out how to catfish your AI. These attacks work because they exploit the same trust relationships that make your development team actually functional. When your designers expect Figma files from agencies they’ve worked with for years, when your DevOps folks trust… ⌘ Read more

Leftists Attack Cloudflare Funding of Ladybird & Omarchy Linux
Cloudflare contributes financially to Open Source projects. ⌘ Read more

Coding a SHA2 Length Extension Attack - Computerphile ⌘ Read more

SHA2 Fatal Flaw? (Hash Length Extension Attack) - Computerphile ⌘ Read more

MCP Horror Stories: The Drive-By Localhost Breach
This is Part 4 of our MCP Horror Stories series, where we examine real-world security incidents that expose the devastating vulnerabilities in AI infrastructure and demonstrate how Docker MCP Gateway provides enterprise-grade protection against sophisticated attack vectors. The Model Context Protocol (MCP) has transformed how developers integrate AI agents with their development environments. Tools like… ⌘ Read more

Our plan for a more secure npm supply chain
Addressing a surge in package registry attacks, GitHub is strengthening npm’s security with stricter authentication, granular tokens, and enhanced trusted publishing to restore trust in the open source ecosystem.

The post Our plan for a more secure npm supply chain appeared first on The GitHub Blog. ⌘ Read more

@bender@twtxt.net Cool, the PDF doesn’t have the navigation links between each section, that’s indeed a tad nicer. Thanks!

@kat@yarn.girlonthemoon.xyz Oh dear, nobody needs bot attacks. :-( Luckily, the web server responding a hell lot quicker today than the last two days.

@lyse@lyse.isobeef.org hihi ^^ i did that at first, but i personally i don’t like it when websites don’t let me change my password when i am already authenticated — fwiw you can view and log out other sessions, if that diminishes this attack vector at all

@lyse@lyse.isobeef.org IIRC they’re getting attacked by bots on a huge level

also this is a really useful page!

@zvava@twtxt.net Uuhh, that’s nice! And welcome to the twtxt world.

The password change might query the current password as well in order to make it difficult for attackers to change account passwords.

@movq@www.uninformativ.de I also don’t think that I’m a particularly good speaker. :-) The workshop model is a good idea, I like that.

Yeah, it’s really good fun. I can highly recommend it. This is also a good way to train (new) developers to think like attackers, how to break in, destroy something or raise awareness of some classes of bugs. Then you can avoid them next time. It’s surprising to me what vulnerabilities come up during this event every time. So, absolutely worth it, win, win.

https://www.middleeasteye.net/news/jailed-female-activists-iran-issue-letter-condemning-israeli-attacks

‘Russians are too weak’ — Orban questions Moscow’s ability to attack NATO ⌘ Read more

M&S restarts online orders after cyber attack
The return of online shopping marks a key milestone for the retailer, which has struggling to get services back to normal. ⌘ Read more

Per Brute-Force-Angriff: Rufnummern fremder Google-Nutzer ausgespäht
Mittels Brute-Force-Attacke konnte ein Forscher Rufnummern fremder Google-Nutzer bestimmen. Nur die zugehörige E-Mail-Adresse war erforderlich. ( Sicherheitslücke, Google)

Image

M&S restarts online orders after cyber attack
The return of online shopping marks a key milestone for the retailer, which has struggling to get services back to normal. ⌘ Read more

M&S restarts online orders after cyber attack
The return of online shopping marks a key milestone for the retailer, which has struggling to get services back to normal. ⌘ Read more

M&S restarts online orders after cyber attack
The return of online shopping marks a key milestone for the retailer, which has struggling to get services back to normal. ⌘ Read more

As their popularity surges, European far-right parties stage rally in France
Speeches from prominent politicians featured attacks on the European Union and migration policies, as they seek to rally French voters ahead of presidential elections. ⌘ Read more

Ukraine says Russia launched biggest overnight drone attack of the war
It’s the latest in a series of retaliations from Moscow since Ukraine destroyed a number of Russian bombers in drone attacks on air bases deep in the country earlier this month. ⌘ Read more

Sweden telecom sabotage: Sweden probes massive sabotage after 30 telecom masts attacked in what officials call a coordinated strike ⌘ Read more

Ukraine drones attack on Moscow forces airport closure, Russia says ⌘ Read more

$1,000 Bug: Firefox Account Deletion Without 2FA or Authorization

Image

How a Missing Backend Check Let Attackers Nuke Accounts With Just a Password

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/1-000-bu … ⌘ Read more

Russian drone and missile strike hits major Ukraine city, dimming peace hopes
Two waves of Russian attacks targeting the Ukrainian city of Kharkiv kill at least four, injuring more, as hopes of peace dim. ⌘ Read more

Kharkiv hit by ‘most powerful attack’ of entire war, mayor says, as Russia pounds Ukraine again ⌘ Read more

Breaking: Israel retrieves body of Thai hostage kidnapped during October 7 attacks
Nattapong Pinta was kidnapped from Kibbutz Nir Oz and killed in captivity near the start of the war, according to the office of Israeli Prime Minister Benjamin Netanyahu. ⌘ Read more

10 Fascinating Facts About Life in Hawaii Before the U.S. Arrived
Hawaii joined the Union on August 21, 1959. Its history immediately before and after joining the United States is well known. Americans have long learned about the attack on Honolulu’s Pearl Harbor in 1941. Many recognize Hawaii’s role as a Pacific hub for logistics, trade, and transportation. The islands offer economic opportunities in commercial fishing […]

The post [10 Fascinating Facts About Life i … ⌘ Read more

Tobacconists struggling to get cover as insurers ‘turn off the tap’
An insurance broker says it has become “almost impossible” to find cover for stores that sell tobacco products after they’ve become a target for arson in the past year. ⌘ Read more

During a massive attack in Kyiv, a man in the metro was holding his cat’s paw the whole time. ⌘ Read more

Father may lose sight in eye after son threw acid on him, court told
A man remains behind bars after appearing in court accused of throwing acid in his father’s face. ⌘ Read more

Four killed and 20 injured in Russia’s overnight attack on Kyiv
Russia has mounted an intense and sustained barrage on the Ukrainian capital following Kyiv’s most audacious attack on its neighbour since the war began. ⌘ Read more

Russian weapons plant hit by drones in Tambov Oblast, media reports attacks across country ⌘ Read more