Cybersecurity

9656 readers
152 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago
MODERATORS
kid@sh.itjust.works
Lanky_Pomegranate530@midwest.social
listing: all - local
1
84
Online ads surpassed email as the primary malware channel in 2025, accounting for 60%+ of all observed malware and phishing campaigns (www.businessinsider.com)
submitted 11 hours ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
2 comments fedilink
2
13
Authorities from 14 countries shut down LeakBase, seize its domains, and arrest multiple people allegedly tied to the cybercrime forum, which had 142K+ members (cyberscoop.com)
submitted 11 hours ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
0 comments fedilink
 
 

DOJ Press Release

3
23
Huge “Shadow Layer” of Organizations Hit by Supply Chain Attacks - Infosecurity Magazine (www.infosecurity-magazine.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
4
18
Threat actors weaponize OAuth redirection logic to deliver malware - Help Net Security (www.helpnetsecurity.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
5
164
Hacktivist group “Department of Peace” claims to have breached a DHS tech‑procurement office, leaking ICE contract records involving over 6,000 vendors, including major defense and surveillance firms (techcrunch.com)
submitted 1 day ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
2 comments fedilink
6
8
Weird server requests (lemmy.dbzer0.com)
submitted 1 day ago by WrenHavoc@lemmy.dbzer0.com to c/cybersecurity@sh.itjust.works
7 comments fedilink
 
 

So I'm the server admin and web developer for my school's robotics team. I look through the servers access logs every once in a while just to check on things. I keep seeing requests that look like someone's scanning for vulns. But I'm seeing something I've never seen before. It looks like someone is sending requests in machine code and I have no idea why or what it would do???

here's the request:

"\x03\x00\x00\x13\x0E\xE0\x00\x00\x00\x00\x00\x01\x00\x08\x00\x02\x00\x00\x00" 400 166 "-" "-"
7
56
A Possible US Government iPhone-Hacking Toolkit Is Now in the Hands of Foreign Spies and Criminals (www.wired.com)
submitted 1 day ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
6 comments fedilink
8
10
Ransomware attack exposes 1.2 million University of Hawaii Cancer Center records | news | SC Media (www.scworld.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
9
8
LexisNexis says hackers accessed legacy data in contained breach | The Record from Recorded Future News (therecord.media)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
10
6
Paint maker giant AkzoNobel confirms cyberattack on U.S. site (www.bleepingcomputer.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
11
4
Fake Tech Support Spam Deploys Customized Havoc C2 Across Organizations (thehackernews.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
12
18
LLMs can unmask pseudonymous users at scale with surprising accuracy (arstechnica.com)
submitted 1 day ago by return2ozma@lemmy.world to c/cybersecurity@sh.itjust.works
3 comments fedilink
13
34
Pakistan’s Top News Channels Hacked and Hijacked With Anti-Military Messages (hackread.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
14
27
Vulnerability Allowed Hijacking Chrome's Gemini Live AI Assistant - SecurityWeek (www.securityweek.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
2 comments fedilink
15
23
UK reduces cyberattack fix times from two months to eight days - Help Net Security (www.helpnetsecurity.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
1 comments fedilink
16
11
The Banality of AI (Hallucination → Bomb School?) (tech.michaelaltfield.net)
submitted 1 day ago by maltfield@lemmy.ml to c/cybersecurity@sh.itjust.works
0 comments fedilink
 
 

The Banality of Artificial Intelligence

What happens when an AI hallucination leads to bombing an elementary school?

By Michael Altfield
License: CC BY-SA 4.0
https://tech.michaelaltfield.net/

It appears likely that the US government is using Anthropic, OpenAI, Google and/or xAI data models for processing signals intelligence (SIGINT), for AI-generated "kill lists" to determine where to drop their bombs.

Image shows a nazi german chemical war factory on the left in black-and-white (with logos of companies Bayer and BASF overlaying it) and an image of a new AI datacenter on the right (with logos of companies OpenAI and Anthropic overlaying it). In the middle of the two industrial sites is an equal sign. On the right is a question mark.
[right] This AI datacenter is a machinery of war. Its LLM hallucinations decide which children to assassinate [left] This IG Farben (Bayer/BASF) factory in Auschwitz produced Zyklon B for the Nazis, who murdered over a million children

In Apr 2024, +972 (an Israeli news outlet) published a >9,000 word article describing how the Israeli military had been using Artificial Intelligence to decide which (residential) buildings, hospitals, and schools to bomb in Gaza.

In Feb 2026, the US (and Israel) bombed Iran -- killing over 100 schoolchildren (and Ali Khamenei).

In Mar 2026, it appears that the US has likely built a similar system, leveraging US AI companies' tech to decide which (school) buildings to bomb, false-positive hallucinations be damned.

Who targeted the Shajareh Tayyiba girls' elementary school in Minab, Iran? Could it have been an AI hallucination? A false-positive?
...

Read the full article here:

17
12
Google addresses actively exploited Qualcomm zero-day in fresh batch of 129 Android vulnerabilities | CyberScoop (cyberscoop.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
18
11
North Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for Cross-Platform RAT (thehackernews.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
19
24
New AirSnitch attack bypasses Wi-Fi encryption in homes, offices, and enterprises (arstechnica.com)
submitted 2 days ago by KarnaSubarna@lemmy.ml to c/cybersecurity@sh.itjust.works
0 comments fedilink
 
 

20
8
APT28 Tied to CVE-2026-21513 MSHTML 0-Day Exploited Before Feb 2026 Patch Tuesday (thehackernews.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
21
7
Malicious “RedAlert - Rocket Alerts” Application Targets Israeli Phone Calls, SMS, and User Information | Cloudflare (www.cloudflare.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
22
41
Canadian Tire Data Breach Impacts 38 Million Accounts - SecurityWeek (www.securityweek.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
6 comments fedilink
23
28
ClawJacked Flaw Lets Malicious Sites Hijack Local OpenClaw AI Agents via WebSocket (thehackernews.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
1 comments fedilink
24
18
Hackers Weaponize Claude Code in Mexican Government Cyberattack - SecurityWeek (www.securityweek.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
25
13
CISA warns that RESURGE malware can be dormant on Ivanti devices (www.bleepingcomputer.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
view more: next ›