Trending

Ask HN: Why does the US Visa application website do a port-scan of my network?

Copilot broke audit logs, but Microsoft won't tell customers

How We Exploited CodeRabbit: From Simple PR to RCE and Write Access on 1M Repos

Without the Futex, It's Futile

China blocked all HTTPS connection abroad for 1 hour in midnight

The SSO Wall of Shame – Vendors that treat SSO as luxury feature

PyPI Preventing Domain Resurrection Attacks

Critical Cache Poisoning Vulnerability in Dnsmasq

CRLite: Certificate Revocation Checking in Firefox

The Signal Clone the Trump Admin Uses Was Hacked

‘ProtectEU’ security strategy: a step further towards a digital dystopian future

Here's the source code for the unofficial Signal app used by Trump officials, TeleMessage. The source code contains hardcoded credentials and other vulnerabilities.

TSA Says Passengers Without Real ID Should Get to the Airport 3 Hours Early | The Real ID deadline is May 7.

Microsoft ends Authenticator password autofill, moves users to Edge

Kuwait declares cryptocurrency mining illegal amid power crisis crackdown

Critical zero day found in Airplay.

[R] Leaderboard Hacking

Someone asked to send me a check for more than the site build and to pay his graphic designer. Is this a scam?

bitwarden

Save item

clients

Bitwarden client apps (web, browser extension, desktop, and cli).

anchore

Save item

syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Mbed-TLS

Save item

mbedtls

An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.

pluja

Save item

awesome-privacy

Awesome Privacy - A curated list of services and alternatives that respect your privacy because PRIVACY MATTERS.

trufflesecurity

Save item

trufflehog

Find, verify, and analyze leaked credentials

aquasecurity

Save item

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

projectdiscovery

Save item

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

google

Save item

osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

pwndbg

Save item

pwndbg

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy