search
information security community
Trends
- 1Cybersecurity Expert Linked to ShinyHunters FBI Data BreachβCybersecurity Expert Tied to ShinyHunters FBI Data Breach
Reports claim a cybersecurity expert has been tied to ShinyHunters, the hacking group behind a breach involving FBI-related data. The alleged connection between a security professional and a notorious cybercrime collective is drawing attention across the information security community, raising questions about insider involvement and how the group obtained its targets.
- 2
Pieper High School in Texas was placed on lockdown, with a nearby middle school moved to a 'secure' status, according to local reports. The safety measures prompted concern among parents and residents seeking information. Details about the reason for the lockdown and whether any threat was found have not yet been confirmed by authorities.
- 3Yamaha Motor E-Bike Site Suspected of Leaking Data on 1,600 MembersβΌYamaha Motor's E-Bike Community Site May Have Exposed Personal Data of About 1,600 Members
Yamaha Motor says an online community site for its electric bike users may have exposed the personal data of roughly 1,600 registered members. The company is investigating the suspected leak and notifying those potentially affected. The case adds Yamaha to the growing list of Japanese brands facing data-security incidents, drawing attention to how companies protect customer information on fan and community platforms.
- 4Chrome Extension Bitmoji Toolkit Flagged as Maliciousβ# chrome extension Bitmoji Toolkit seems malicious. Its # cybersecurity badness score is 86/100! ```json {"id": "blmcjod
A cybersecurity risk scanner has flagged the Chrome browser extension Bitmoji Toolkit, assigning it a risk score of 86 out of 100 and labelling it as potentially malicious. The extension, associated with Snap's Bitmoji avatar service, is now being circulated as a warning among information security communities, with users advised to review installed extensions and remove flagged add-ons.
- 5Security Affairs Releases Latest AI Cybersecurity NewsletterβSECURITY AFFAIRS # AI -#CYBERSECURITY # NEWSLETTER ROUND 3 https:// securityaffairs.com/200794/ai/ security-affairs-ai-c
The cybersecurity publication Security Affairs has published round 3 of its AI-focused newsletter, rounding up recent news on artificial intelligence and hacking. The roundup links to its site and is being shared within the information security community. The newsletter follows the site's regular coverage of AI-related cyber threats and developments, and readers are being pointed to the latest edition for a digest of recent stories.
- 6Atlanta ASN flagged in cybersecurity watch postβASN: AS63410 Location: Atlanta, US Added: 2026-10-09T22:22 # shodansafari # infosec
A technical post flagged AS63410, an autonomous system number based in Atlanta, US, added on 9 October 2026, drawing attention from information security circles. ASN monitoring is a common way researchers track hosting providers, potential malicious infrastructure, and network changes. The post generated little engagement so far, but it feeds an ongoing community effort to catalogue and discuss notable network registrations.
- 7InfoSec sticker shop adds new designsβAdded a few more stickers! https:// allowsomedenyall-shop.fourthwa ll.com/ # Hacker # InfoSec # Stickerswap # Wardriving
A cybersecurity community member has expanded their online sticker shop with a few new designs, sharing the update with tags covering hacking, infosec, wardriving and sticker swapping. The shop, 'Allow Some Deny All', sells hacker-themed stickers popular within the information security community, where trading and collecting laptop stickers is a common tradition at conferences and meetups.
- 8Infosec.exchange users urged to donate toward server costsβToday is a great day to increase your monetary support of infosec.exchange! @ jerry has made it easy for you to donate m
Users of infosec.exchange, the cybersecurity-focused Mastodon server, are being encouraged to donate money to support its ongoing operation. Admin Jerry has been singled out for making the donation process easier, with posts pointing to the server's about page for contribution options. Supporters frame it as a way to help offset the costs of running the popular instance, which hosts a large community of information security professionals.
- 9Cybersecurity veteran invites side projects on unsolved network problemsβI never got a good answer or solution to this problem, so those of you looking for interesting side projects keep it in
A figure in the information security community is calling on developers and researchers to take up unsolved networking and security problems as side projects. Writing on a Def Con-affiliated forum, they say they never received a good answer or solution to one such problem, and argue that not every problem needs to be a billion-dollar business to be worth solving.
- 10Security researchers flag phishing site hosted on WeeblyβPossible Phishing π£ on: β οΈhxxps[:]//mailportalupdate[.]weebly[.]com/ 𧬠Analysis at: https:// urldna.io/scan/6acb1fab3b77
Cybersecurity observers are warning about a possible phishing operation using a mail portal update page hosted on a Weebly subdomain. The suspicious link has been defanged to prevent accidental clicks, and a scan of the address has been published on URLDNA so others can inspect hosting details and threat indicators. The warning circulated among information security communities with tags for phishing, scams and infosec.
- 11YouTube Alternatives in 2026: What Has ChangedβYouTube Alternatives in 2026: Where to Publish, Where to Watch, and What Has Changed For most people today, YouTube is a
A new overview of video platforms positions itself as a guide to life beyond YouTube in 2026, mapping where creators can publish and viewers can watch instead. It argues that while YouTube remains central to the internet, it does face competition, and surveys the alternatives now available. The piece is circulating among privacy, open source and information security communities.
- 12Rampart brings on-device PII redaction to the browserβRampart: Browser native on-device PII radaction https://ndstudio.gov/posts/say-hello-to-rampart # HackerNews # Tech # Pr
ND Studio has introduced Rampart, a tool that redacts personally identifiable information directly in the browser, with all processing done on the device rather than in the cloud. The announcement highlights growing interest in privacy-preserving tools that keep sensitive data local. It is drawing attention among developers and privacy-focused communities discussing browser-based security tooling.
- 13CISO Joins Mastodon, Unveils AI Agents for ISO 27001 ComplianceβHi Mastodon π CISO by trade, SecOps at heart. Good governance needs time for judgment, not for formatting policy templat
A chief information security officer has introduced himself on the infosec Mastodon community, describing a toolkit of Claude Code agents that drafts ISMS groundwork for ISO 27001 and CyFun certification. The agents generate gap analyses, risk assessments, policies and statements of applicability, freeing security leaders to focus judgment on governance rather than formatting policy templates. The post signals growing interest in using AI coding agents to automate compliance paperwork.
- 14Quantum optics could foil GPS spoofing attacksβπ€ Quantum optics vs GPS spoofing: classical position verification is easy to fool. Quantum states could authenticate a r
Physicists point out that classical methods of verifying a receiver's position are easy to fool, leaving navigation systems vulnerable to GPS spoofing. Quantum states of light could authenticate location instead, but building practical systems faces a major bottleneck: they require very fast, low-loss optical components. Commenters in the physics and information security communities are highlighting the gap between the theory and real-world deployment.
- 15Security researchers flag phishing page hosted on FramerβΌPossible Phishing π£ on: β οΈhxxps[:]//independent-popup-718824[.]framer[.]app/page 𧬠Analysis at: https:// urldna.io/scan/
Cybersecurity observers are warning about a suspected phishing site hosted on a Framer subdomain, sharing a defanged link so others do not accidentally visit it. An analysis of the page has been published on the URL scanning service urlDNA, allowing people to inspect its behaviour. Warnings of this kind circulate to help defenders spot and block fresh phishing infrastructure.
- 16Security Researchers Flag Possible Phishing Site on GoDaddyβPossible Phishing π£ on: β οΈhxxps[:]//e7d6055ce047[.]godaddysites[.]com 𧬠Analysis at: https:// urldna.io/scan/6ac844633b7
Cybersecurity observers are warning about a possible phishing website hosted on a GoDaddy Sites domain, sharing the address in defanged form so readers cannot accidentally click it. A technical scan of the page has been published on the URL analysis service urlDNA for others to inspect. Such warnings circulate quickly among information security professionals tracking new scam infrastructure.
- 17Huge bear spotted in Lockhart as resident urges awarenessβΌHuge bear spotted in Lockhart, resident promotes awareness
A large bear has been spotted in Lockhart, a community in the Orlando area of Florida, and a local resident is working to raise awareness about it. Coverage by WKMG highlights the sighting and the resident's efforts to inform neighbors. Authorities typically advise keeping distance, securing food and trash, and reporting bear activity so wildlife officials can respond.
- 18US Federal Infrastructure Staff Face Weekend Vulnerability DreadβIt's noon on Saturday, October 10, and if you happen to be a US federal employee handling infrastructure, you're likely
US federal employees responsible for infrastructure systems are reportedly bracing for a difficult Saturday, October 10, as a security vulnerability appears to be requiring attention outside normal working hours. Cybersecurity observers are highlighting the stress on government IT and infrastructure staff who must respond to urgent patching or threat assessment work during weekends, a familiar burden in the information security community.
- 19Mission Beach residents prepare for Tropical Storm RachelβΌPeople in Mission Beach prepare for Tropical Storm Rachel
Residents of Mission Beach, a coastal community in San Diego, are taking precautions as Tropical Storm Rachel approaches the region. Local coverage shows people securing property and stocking supplies ahead of expected wind and rain. The storm's arrival has put Southern California beach neighborhoods on alert, with officials urging residents to stay informed about changing conditions.
- 20Princeton city officials report personal data compromised in breachβΌCity of Princeton officials say personal information was compromised in a security breach
City of Princeton officials say a security breach has compromised personal information belonging to individuals whose data was held by the city. Details about how many people were affected or what type of information was exposed have not yet been released. Residents are being alerted as the city investigates the incident and works to determine the full scope of the compromise.
- 21
A September 2026 update on the human rights situation in Colombia is circulating among those following the country's security and rights landscape. The update comes from Justice For Colombia, an organisation that monitors abuses, peace process developments and violence against activists and communities. Specific findings from the update are not yet detailed in the available information.
- 22Adventure Inc. breach exposes 14.64 million Skyticket customer recordsβAdventure Inc. Data Breach Affects Approximately 14.64 Million Skyticket Customer Records Adventure Inc. disclosed unaut
Japanese travel company Adventure Inc. disclosed unauthorized access to its Skyticket booking service that potentially exposed data on about 14.64 million customers. Compromised information reportedly includes personal details such as names and contact information. Security watchers are flagging the incident as one of the larger breaches reported this season, and customers are being warned to watch for phishing attempts.
- 23Waco ISD Employee Data Exposed in Frontline Education BreachβWaco ISD Employee Data Exposed in Frontline Education Security Incident Waco ISD disclosed a data breach after attackers
Waco Independent School District in Texas has disclosed a data breach after attackers exploited a vulnerability in third-party software provided by Frontline Education. The incident exposed employee and job applicant information, reportedly including Social Security numbers. The district is notifying affected individuals as security experts highlight the growing risks of supply-chain attacks on education-sector vendors.
- 24Infosec researchers probe Swedish network AS44034βASN: AS44034 Location: Stenkullen, SE Added: 2026-09-29T20:50 # shodansafari # infosec
Cybersecurity researchers are highlighting AS44034, an autonomous system registered in Stenkullen, Sweden, as part of an ongoing network-mapping exercise in the information security community. The ASN was added to a tracking list on 29 September 2026, prompting discussion among professionals who scan and catalogue internet-exposed infrastructure using Shodan data.
- 25How to Set Up Email on Your Own Domain Without Running a ServerβHow to Set Up Email on Your Own Domain. And Why You Usually Donβt Need Your Own Server You have a domain. Now comes the
A new guide explains how to set up an email address on your own domain, arguing that a custom address gives you a lasting identity independent of any provider. It also makes the case that most people do not need to host their own mail server, since managed services can handle delivery, security and maintenance. The piece is being shared in privacy and open-source focused information security circles.
- 26Man posing as cybersecurity engineer exposed for doxxing womenβThis self-described "cybersecurity engineer" managed to trick women into providing their personal info, which he then po
A self-described cybersecurity engineer has been arrested after tricking women into handing over personal information, which he then published online. The case is drawing attention in information security circles, with commenters noting that a booking photo released last week is hardly the image the profession wants, and highlighting the harm caused by online harassment and data misuse against women.
- 27Warner urges declassification of election threat intelligence before midtermsβWarner calls for declassification of election threats weeks before midterms
Senator Mark Warner, chair of the Senate Intelligence Committee, is calling on the intelligence community to declassify information about threats to the upcoming US midterm elections. With only weeks until voters go to the polls, he argues the public and election officials need to know about foreign interference risks. The push highlights ongoing tensions over how much election-security intelligence should be shared openly.
- 28Cybersecurity researchers flag new sweepstakes phishing siteβPossible Phishing π£ on: β οΈhxxps[:]//sweepstakes8690[.]godaddysites[.]com 𧬠Analysis at: https:// urldna.io/scan/6ac68291
Security researchers are warning of a phishing website hosted on a GoDaddy Sites page at sweepstakes8690.godaddysites.com. The site poses as a sweepstakes or prize giveaway, a common scam designed to steal personal and financial details. An analysis of the address has been published on the URLdna scanning platform, and warnings are circulating among infosec communities. Users are advised to avoid entering any information on prize-claim pages they did not enter.
- 29X.Org Foundation patches 12 critical vulnerabilities in X ServerβX.Org Foundation Patches 12 Critical Vulnerabilities in X Server and Xwayland X.Org released security updates for X.Org
The X.Org Foundation has released security updates for X.Org Server and Xwayland fixing 12 critical vulnerabilities rated 9.1 on the CVSS scale. The flaws could allow arbitrary code execution, server crashes and information disclosure. Users are urged to update their systems promptly, and the disclosure is drawing attention in the security community.
- 30Elena Reshetova to open Linux Security Summit EU 2026 in PragueβElena Reshetova opening @ LinuxSecSummit EU 2026 in Prague. # linux # infosec
Elena Reshetova is set to deliver the opening at the Linux Security Summit EU 2026, taking place in Prague. The announcement is circulating among Linux and information security communities, where Reshetova is a known figure in kernel security work. Attendees and developers are flagging the summit as a key European gathering for Linux security discussions.
- 31Red Hat's Lightwell Project Fixes 400 Open-Source VulnerabilitiesβRed Hatβs Lightwell Project Remediates 400 Open-Source Vulnerabilities https:// packetstorm.news/news/view/449 73 # news
Red Hat's Lightwell project has remediated 400 vulnerabilities in open-source software, according to a security news report. The effort is drawing attention in the information security community, where upstream fixes by major enterprise Linux vendors are closely watched for their impact on widely used open-source packages and downstream distributions.
- 32Sherpa Intelligence Releases October 7 Security BriefingβBasecamp Briefing for October 7th ποΈ # InfoSec , # GRC , # OSINT and more curated for you by Sherpa Intelligence: Your G
Sherpa Intelligence has published its Basecamp Briefing for October 7th, a curated roundup covering information security, governance, risk and compliance, and open-source intelligence topics. The briefing is part of the firm's regular effort to package key cybersecurity developments into one digest for practitioners.
- 33One Month Left to Submit Talks for SECCON 15 Open Conferenceβπ’π Just 1 more month to submit your talk at SECCON 15 Open Conference cc @secconctf! https:// cfptime.org/cfps/3568/ # c
The call for papers for SECCON 15 Open Conference closes in one month, and the deadline reminder is circulating in information security circles. SECCON, tied to the well-known Japanese capture-the-flag competition SECCON CTF, invites security researchers to submit talks. Speakers interested in presenting are being urged to get their proposals in before the deadline.
- 34BSidesLimburg security conference set for March 2027 in HasseltβΌπ New event added: π BSidesLimburg π Mar 12, 2027 π Hasselt π§πͺ π https://www. bsides-limburg.be # infosec # cybersecurit
A new edition of BSidesLimburg has been announced for March 12, 2027 in Hasselt, Belgium. The community-run cybersecurity conference is part of the global BSides series of information security events, and the announcement is circulating among infosec professionals tracking upcoming conferences.
- 35Researcher launches account on neurodiversity in cybersecurityβHey everyone, I've started a alt account, @ neurodiversity , to post my research in # Neurodiversity in # Infosec . You'
A security researcher who posts on infosec platforms has started a dedicated account to share research on neurodiversity within the information security field, inviting others to follow for updates. The move highlights growing interest in how neurodivergent professionals experience and contribute to cybersecurity, a topic increasingly discussed in industry communities.
- 36LibreOffice and OpenOffice flaws let malicious spreadsheets run codeβThe first one has been patched. The Hacker News: LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Wi
Security researchers have disclosed vulnerabilities in LibreOffice and OpenOffice that allow malicious spreadsheet files to execute code on a victim's machine without triggering the usual macro warnings. The first of the flaws has reportedly been patched, and users are being urged to update their office suites. The issue has drawn attention in the open-source and information security communities because it bypasses a long-standing protection that many users rely on when opening documents from unknown sources.
- 37OpenAI reviewing Wikipedia data after AI agent disruptionβOpen AI sΓ€ger att de hΓ₯ller pΓ₯ att granska Wikimedias uppgifter. # GenerativeAI # ArtificialIntelligence # Security Open
OpenAI says it is reviewing information provided by Wikimedia after Wikipedia reported disruption linked to OpenAI's AI agents. The incident has raised concerns about how automated agents interact with Wikipedia's infrastructure and content, with commentators in the tech community pointing to the case as an example of the strain generative AI systems can place on open knowledge platforms and the security questions that follow.
- 38BSides Barcelona cybersecurity event set for October 2026βπ New event added: π BSidesBarcelona π Oct 30, 2026 π Barcelona πͺπΈ π https:// bsides.barcelona # infosec # cybersecurity
A new BSides Barcelona event has been added to the cybersecurity conference calendar, scheduled for October 30, 2026 in Barcelona, Spain. BSides events are community-run security conferences that take place in cities worldwide, offering talks and workshops for information security professionals. The announcement is being shared across infosec community channels as attendees plan for the event.
- 39Security researchers flag possible phishing link via tinu.beβPossible Phishing π£ on: β οΈhxxps[:]//tinu[.]be/RV0QEvmWF 𧬠Analysis at: https:// urldna.io/scan/6ac43a2e3b77500 0038d79e9
Cybersecurity observers are warning about a possible phishing campaign distributed through a shortened tinu.be link. The suspicious URL has been defanged to prevent accidental clicks, and a detailed analysis of its destination and behavior has been published on the URLDNA scanning service so others can inspect indicators of compromise. The alert is being shared in information security communities with standard phishing and scam tags, serving as a caution to users to treat unexpected shortened links carefully.
- 40Cybersecurity Awareness Month opens with a call for better trainingβHappy National Cybersecurity Awareness Month! Itβs the first Monday of the month, so letβs talk training. We can do bett
National Cybersecurity Awareness Month has begun, and information security professionals are marking the first Monday of the month by focusing on security awareness training. One message circulating in the infosec community argues that current training efforts fall short and that organisations "can do better," urging practitioners to keep pushing the message to employees and leadership throughout October.
Repos
- net4people/bbs Forum for discussing Internet censorship circumvention