Cybersecurity

9656 readers

156 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago

MODERATORS

kid@sh.itjust.works

Lanky_Pomegranate530@midwest.social

Microsoft, working with Europol, authorities from 6 countries, and 11 security organizations, disrupted the Tycoon 2FA phishing-as-a-service platform on seizing 330 domains (www.microsoft.com)

submitted 2 hours ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works

0 comments fedilink

A ransomware attack on August 31, 2025, compromised the data of 1.2 million at the University of Hawaiʻi Cancer Center, targeting research servers but sparing clinical operations (www.securityweek.com)

submitted 4 hours ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works

0 comments fedilink

France's health ministry has confirmed a data breach involving the exposure of administrative information for 15.8 million patients and sensitive doctors' notes for approximately 165,000 individuals (www.france24.com)

submitted 4 hours ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works

0 comments fedilink

Online ads surpassed email as the primary malware channel in 2025, accounting for 60%+ of all observed malware and phishing campaigns (www.businessinsider.com)

submitted 1 day ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works

2 comments fedilink

Authorities from 14 countries shut down LeakBase, seize its domains, and arrest multiple people allegedly tied to the cybercrime forum, which had 142K+ members (cyberscoop.com)

submitted 1 day ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works

0 comments fedilink

DOJ Press Release

167

Hacktivist group “Department of Peace” claims to have breached a DHS tech‑procurement office, leaking ICE contract records involving over 6,000 vendors, including major defense and surveillance firms (techcrunch.com)

submitted 2 days ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works

2 comments fedilink

Huge “Shadow Layer” of Organizations Hit by Supply Chain Attacks - Infosecurity Magazine (www.infosecurity-magazine.com)

submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

Threat actors weaponize OAuth redirection logic to deliver malware - Help Net Security (www.helpnetsecurity.com)

submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

A Possible US Government iPhone-Hacking Toolkit Is Now in the Hands of Foreign Spies and Criminals (www.wired.com)

submitted 2 days ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works

6 comments fedilink

Weird server requests (lemmy.dbzer0.com)

submitted 1 day ago by WrenHavoc@lemmy.dbzer0.com to c/cybersecurity@sh.itjust.works

7 comments fedilink

So I'm the server admin and web developer for my school's robotics team. I look through the servers access logs every once in a while just to check on things. I keep seeing requests that look like someone's scanning for vulns. But I'm seeing something I've never seen before. It looks like someone is sending requests in machine code and I have no idea why or what it would do???

here's the request:

"\x03\x00\x00\x13\x0E\xE0\x00\x00\x00\x00\x00\x01\x00\x08\x00\x02\x00\x00\x00" 400 166 "-" "-"

Ransomware attack exposes 1.2 million University of Hawaii Cancer Center records | news | SC Media (www.scworld.com)

submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

LexisNexis says hackers accessed legacy data in contained breach | The Record from Recorded Future News (therecord.media)

submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

Paint maker giant AkzoNobel confirms cyberattack on U.S. site (www.bleepingcomputer.com)

submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

Fake Tech Support Spam Deploys Customized Havoc C2 Across Organizations (thehackernews.com)

submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

LLMs can unmask pseudonymous users at scale with surprising accuracy (arstechnica.com)

submitted 2 days ago by return2ozma@lemmy.world to c/cybersecurity@sh.itjust.works

3 comments fedilink

Pakistan’s Top News Channels Hacked and Hijacked With Anti-Military Messages (hackread.com)

submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

0 comments fedilink

Vulnerability Allowed Hijacking Chrome's Gemini Live AI Assistant - SecurityWeek (www.securityweek.com)

submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

2 comments fedilink

UK reduces cyberattack fix times from two months to eight days - Help Net Security (www.helpnetsecurity.com)

submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

1 comments fedilink

The Banality of AI (Hallucination → Bomb School?) (tech.michaelaltfield.net)

submitted 2 days ago by maltfield@lemmy.ml to c/cybersecurity@sh.itjust.works

0 comments fedilink

The Banality of Artificial Intelligence

What happens when an AI hallucination leads to bombing an elementary school?

By Michael Altfield
License: CC BY-SA 4.0
https://tech.michaelaltfield.net/

It appears likely that the US government is using Anthropic, OpenAI, Google and/or xAI data models for processing signals intelligence (SIGINT), for AI-generated "kill lists" to determine where to drop their bombs.


[right] This AI datacenter is a machinery of war. Its LLM hallucinations decide which children to assassinate [left] This IG Farben (Bayer/BASF) factory in Auschwitz produced Zyklon B for the Nazis, who murdered over a million children

In Apr 2024, +972 (an Israeli news outlet) published a >9,000 word article describing how the Israeli military had been using Artificial Intelligence to decide which (residential) buildings, hospitals, and schools to bomb in Gaza.

In Feb 2026, the US (and Israel) bombed Iran -- killing over 100 schoolchildren (and Ali Khamenei).

In Mar 2026, it appears that the US has likely built a similar system, leveraging US AI companies' tech to decide which (school) buildings to bomb, false-positive hallucinations be damned.

Who targeted the Shajareh Tayyiba girls' elementary school in Minab, Iran? Could it have been an AI hallucination? A false-positive?
...

Read the full article here: