Interesting finding. This shows a potential issue in how identities are verified by providers.

Interesting new attack on the SSH protocol. This is hard to achieve outside of the LAN though.

Fascinating vulnerability. When the BIOS is at fault with a crappy image parser... you can't do much to prevent problems from happening.

Could indeed turn into a nice alternative to fail2ban.

How the medical sector is struggling with badly designed software. Also important to note how security is just getting in the way of nurses and doctors jobs.

Nice approach to also hunt for memory safety issues while software is in production.

Finally a standardized protocol for end-to-end encryption! Let's see where this gets used.

This is indeed a very nasty vulnerability. This won't improve my low trust in this product. They've been trying to phase it out for a while, it shows now.

It's really coming from everywhere these days. Let's make sure this doesn't get adopted.

Things could indeed be more convenient... if this was the case we'd probably have less security breaches. Making super complex tools and then complaining that people are holding them wrong isn't gonna help.

Attacks on machine learning models are getting more accessible. This means even more care will have to be taken to deploy and use those.

OAuth is nice and taking over the world... but don't weaken the security, follow all the steps and verify the tokens you get handed.

The spectre attack still has real world effects... This affects Safari this time.

If you got to implement an OAuth integration. Please be responsible and don't do this... this could lead to very serious breaches for your users.

This is a bad case of content moderation if it gets presented to users like this... but Google is not going to leave advertisement money on the table. The way browsers changed in recent years also make this kind of deceptions easier (harder to check certificates, hard to spot punycoding).

Looks like a nice tool to check if your SSH config is secure. Works both for servers and clients.

This is a hard problem to solve, and going multi-modal makes it harder in my opinion.

Interesting deep dive into the latest massive DDoS attack seen in the wild.

If you're using a GNOME base environment be responsible and make sure you install your security patches.

Very refined attack including the social engineering side of things. Catching developers with coding challenges, it's definitely cunning.