Cybersecurity

9657 readers
387 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago
MODERATORS
kid@sh.itjust.works
Lanky_Pomegranate530@midwest.social
listing: all - local
1
61
Bing AI promoted fake OpenClaw GitHub repo pushing info-stealing malware (www.bleepingcomputer.com)
submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
2
40
PleaseFix Flaw Lets Hackers Access 1Password Vault via Comet AI Browser (hackread.com)
submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
3 comments fedilink
3
21
Google: Half of 2025's 90 Exploited Zero-Days Aimed at Enterprises - SecurityWeek (www.securityweek.com)
submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
1 comments fedilink
4
10
Cisco Confirms Active Exploitation of Two Catalyst SD-WAN Manager Vulnerabilities (thehackernews.com)
submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
5
5
WordPress membership plugin bug exploited to create admin accounts (www.bleepingcomputer.com)
submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
6
4
2024 TfL hack affected around 10 million people, BBC can reveal (www.bbc.com)
submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
7
8
Microsoft, working with Europol, authorities from 6 countries, and 11 security organizations, disrupted the Tycoon 2FA phishing-as-a-service platform on seizing 330 domains (www.microsoft.com)
submitted 18 hours ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
0 comments fedilink
8
7
A ransomware attack on August 31, 2025, compromised the data of 1.2 million at the University of Hawaiʻi Cancer Center, targeting research servers but sparing clinical operations (www.securityweek.com)
submitted 20 hours ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
0 comments fedilink
9
6
France's health ministry has confirmed a data breach involving the exposure of administrative information for 15.8 million patients and sensitive doctors' notes for approximately 165,000 individuals (www.france24.com)
submitted 20 hours ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
0 comments fedilink
10
91
Online ads surpassed email as the primary malware channel in 2025, accounting for 60%+ of all observed malware and phishing campaigns (www.businessinsider.com)
submitted 1 day ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
2 comments fedilink
11
16
Authorities from 14 countries shut down LeakBase, seize its domains, and arrest multiple people allegedly tied to the cybercrime forum, which had 142K+ members (cyberscoop.com)
submitted 1 day ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
0 comments fedilink
 
 

DOJ Press Release

12
167
Hacktivist group “Department of Peace” claims to have breached a DHS tech‑procurement office, leaking ICE contract records involving over 6,000 vendors, including major defense and surveillance firms (techcrunch.com)
submitted 2 days ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
2 comments fedilink
13
59
A Possible US Government iPhone-Hacking Toolkit Is Now in the Hands of Foreign Spies and Criminals (www.wired.com)
submitted 2 days ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
6 comments fedilink
14
23
Huge “Shadow Layer” of Organizations Hit by Supply Chain Attacks - Infosecurity Magazine (www.infosecurity-magazine.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
15
19
Threat actors weaponize OAuth redirection logic to deliver malware - Help Net Security (www.helpnetsecurity.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
16
11
Ransomware attack exposes 1.2 million University of Hawaii Cancer Center records | news | SC Media (www.scworld.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
17
8
Weird server requests (lemmy.dbzer0.com)
submitted 2 days ago by WrenHavoc@lemmy.dbzer0.com to c/cybersecurity@sh.itjust.works
7 comments fedilink
 
 

So I'm the server admin and web developer for my school's robotics team. I look through the servers access logs every once in a while just to check on things. I keep seeing requests that look like someone's scanning for vulns. But I'm seeing something I've never seen before. It looks like someone is sending requests in machine code and I have no idea why or what it would do???

here's the request:

"\x03\x00\x00\x13\x0E\xE0\x00\x00\x00\x00\x00\x01\x00\x08\x00\x02\x00\x00\x00" 400 166 "-" "-"
18
9
LexisNexis says hackers accessed legacy data in contained breach | The Record from Recorded Future News (therecord.media)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
19
6
Paint maker giant AkzoNobel confirms cyberattack on U.S. site (www.bleepingcomputer.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
20
19
LLMs can unmask pseudonymous users at scale with surprising accuracy (arstechnica.com)
submitted 3 days ago by return2ozma@lemmy.world to c/cybersecurity@sh.itjust.works
3 comments fedilink
21
35
Pakistan’s Top News Channels Hacked and Hijacked With Anti-Military Messages (hackread.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
22
27
Vulnerability Allowed Hijacking Chrome's Gemini Live AI Assistant - SecurityWeek (www.securityweek.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
2 comments fedilink
23
23
UK reduces cyberattack fix times from two months to eight days - Help Net Security (www.helpnetsecurity.com)
submitted 3 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
1 comments fedilink
24
4
Fake Tech Support Spam Deploys Customized Havoc C2 Across Organizations (thehackernews.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
25
11
The Banality of AI (Hallucination → Bomb School?) (tech.michaelaltfield.net)
submitted 3 days ago by maltfield@lemmy.ml to c/cybersecurity@sh.itjust.works
0 comments fedilink
 
 

The Banality of Artificial Intelligence

What happens when an AI hallucination leads to bombing an elementary school?

By Michael Altfield
License: CC BY-SA 4.0
https://tech.michaelaltfield.net/

It appears likely that the US government is using Anthropic, OpenAI, Google and/or xAI data models for processing signals intelligence (SIGINT), for AI-generated "kill lists" to determine where to drop their bombs.

Image shows a nazi german chemical war factory on the left in black-and-white (with logos of companies Bayer and BASF overlaying it) and an image of a new AI datacenter on the right (with logos of companies OpenAI and Anthropic overlaying it). In the middle of the two industrial sites is an equal sign. On the right is a question mark.
[right] This AI datacenter is a machinery of war. Its LLM hallucinations decide which children to assassinate [left] This IG Farben (Bayer/BASF) factory in Auschwitz produced Zyklon B for the Nazis, who murdered over a million children

In Apr 2024, +972 (an Israeli news outlet) published a >9,000 word article describing how the Israeli military had been using Artificial Intelligence to decide which (residential) buildings, hospitals, and schools to bomb in Gaza.

In Feb 2026, the US (and Israel) bombed Iran -- killing over 100 schoolchildren (and Ali Khamenei).

In Mar 2026, it appears that the US has likely built a similar system, leveraging US AI companies' tech to decide which (school) buildings to bomb, false-positive hallucinations be damned.

Who targeted the Shajareh Tayyiba girls' elementary school in Minab, Iran? Could it have been an AI hallucination? A false-positive?
...

Read the full article here:

view more: next ›