Cybersecurity & Cyber Warfare

Bell Canada HomeHub 3000 - Unauthenticated DoS Affecting 1.24M Routers (CRTC Complaint Filed)

\*\*EDIT\*\* Thank you to everyone that reached out, I am in contact with the appropriate people at Bell now thanks to you guys. I'm an IT professional and Bell Aliant Fibe customer in Newfoundland, Canada. During security testing on my own Bell HomeHub 3000 (Sagemcom FAST 5566), I discovere

Toronto police seize 'SMS blasters,' a cybercrime weapon never before seen in Canada

Large-scale security audit of 1,764 "vibe-coded" apps: 7% have wide-open Supabase DBs, 15% of Bolt apps ship hardcoded API keys, plus IDOR and zero-auth APIs

What makes passkeys so special?

It seems that companies are transferring into the usage of passkeys instead of passwords. Apparently theyre much more secure, but why is that? I don’t get it. I’m not sure if this is the right place to ask excuse me if it isn’t and sorry.

Firestarter malware survives Cisco firewall updates, security patches

Failed interview hard - ranting

This post honestly is half a question and half ranting. I just did a second round technical interview for a pentesting engineer role. I just feel so gutted by how badly I did. I technically have 5 years of experience in pentesting but couldn’t answer a lot of these questions well enough: 1. Experie

54 days of SSH honeypot data: 269K connections, 48K unique passwords, 28 humans

Deployed a honeypot on port 22, logged everything for 54 days. The password list alone is worth a look — `3245gs5662d34` shows up 5,000+ times (hardcoded IoT default being sprayed), and `solana`/`validator`/`node` combos make it clear someone's actively hunting crypto infrastructure.

ShinyHunters threaten to leak 1.4 million Udemy records containing private data

Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain ...

Bitwarden CLI npm package got compromised today, looks like part of the ongoing Checkmarx supply chain attack If you’re using @bitwarden/cli version 2026.4.0, you might want to check your setup From what researchers found: \- malicious file added (bw1.js) \- steals creds from GitHub, npm, AWS, A

CVE-2026-34621: Adobe Acrobat Reader zero-day was on VirusTotal for 136 days before Adobe named it a CVE

Quantum Computers Are Not a Threat to 128-bit Symmetric Keys