Releasing Rainbow Tables to Accelerate Protocol Deprecation | Google Cloud Blog
https://cloud.google.com/blog/topics/threat-intelligence/net-ntlmv1-deprecation-rainbow-tables
Palo Alto Networks warns of DoS bug letting hackers disable firewalls
https://www.bleepingcomputer.com/news/security/palo-alto-networks-warns-of-dos-bug-letting-hackers-disable-firewalls/
FTC bans GM from selling drivers' location data for five years
https://www.bleepingcomputer.com/news/security/ftc-bans-general-motors-from-selling-drivers-location-data-for-five-years/
GitHub - trailofbits/skills: Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
https://github.com/trailofbits/skills
Datr cookie theft and AI leads to Facebook account takeover via trusted device recovery | Youssef Sammouda (sam0) personal blog
https://ysamm.com/uncategorized/2025/01/15/steal-dtsg-cookie.html
Palo Alto Fixes GlobalProtect DoS Flaw That Can Crash Firewalls Without Login
https://thehackernews.com/2026/01/palo-alto-fixes-globalprotect-dos-flaw.html
A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby - Project Zero
https://projectzero.google/2026/01/pixel-0-click-part-1.html
Lumen disrupts AISURU and Kimwolf botnet by blocking over 550 C2 servers
https://securityaffairs.com/186918/cyber-crime/lumen-disrupts-aisuru-and-kimwolf-botnet-by-blocking-over-550-c2-servers.html
Microsoft disrupts massive RedVDS cybercrime virtual desktop service
https://www.bleepingcomputer.com/news/security/microsoft-seizes-servers-disrupts-massive-redvds-cybercrime-platform/
Grubhub confirms hackers stole data in recent security breach
https://www.bleepingcomputer.com/news/security/grubhub-confirms-hackers-stole-data-in-recent-security-breach/
Creating a Rust VBS Enclave DLL running in VTL1 - 0xflux Red Team Manual | Systems programming
https://fluxsec.red/creating-a-rust-application-running-in-vtl1
A 0-click exploit chain for the Pixel 9 Part 2: Cracking the Sandbox with a Big Wave - Project Zero
https://projectzero.google/2026/01/pixel-0-click-part-2.html
Cal.com | Open Scheduling Infrastructure
http://Cal.com
GitHub - ghostbyt3/WinDriver-EXP: This repo contains PoCs for vulnerable Windows drivers.
https://github.com/ghostbyt3/WinDriver-EXP
Sicarii Ransomware: Truth vs Myth - Check Point Research
https://research.checkpoint.com/2026/sicarii-ransomware-truth-vs-myth/
CreepyLink
https://creepylink.com/
Home | Homeland Security
http://nazis.us
Researchers Reveal Reprompt Attack Allowing Single-Click Data Exfiltration From Microsoft Copilot
https://thehackernews.com/2026/01/researchers-reveal-reprompt-attack.html
TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering | evilsocket
https://www.evilsocket.net/2025/12/18/TP-Link-Tapo-C200-Hardcoded-Keys-Buffer-Overflows-and-Privacy-in-the-Era-of-AI-Assisted-Reverse-Engineering/
Model Security Is the Wrong Frame – The Real Risk Is Workflow Security
https://thehackernews.com/2026/01/model-security-is-wrong-frame-real-risk.html
Critical WhisperPair flaw lets hackers track, eavesdrop via Bluetooth audio devices
https://www.bleepingcomputer.com/news/security/critical-flaw-lets-hackers-track-eavesdrop-via-bluetooth-audio-devices/
AI Red Teaming Explained by AI Red Teamers | HackerOne
https://www.hackerone.com/blog/ai-red-teaming-explained-by-red-teamers
Prosaic Times: Phil Venables is optimistic about AI and tech risk (in the long term)
https://prosaictimes.substack.com/p/prosaic-times-phil-venables-is-optimistic
Google plans to make Chrome for Android an agentic browser with Gemini
https://www.bleepingcomputer.com/news/artificial-intelligence/google-plans-to-make-chrome-for-android-an-agentic-browser-with-gemini/
Critical WordPress Modular DS Plugin Flaw Actively Exploited to Gain Admin Access
https://thehackernews.com/2026/01/critical-wordpress-modular-ds-plugin.html
Hackers exploit Modular DS WordPress plugin flaw for admin access
https://www.bleepingcomputer.com/news/security/hackers-exploit-modular-ds-wordpress-plugin-flaw-for-admin-access/
Geoff Sisson (@minimalist) / X
https://x.com/minimalist
ChatGPT's upcoming cross-platform feature is codenamed "Agora"
https://www.bleepingcomputer.com/news/artificial-intelligence/chatgpts-upcoming-cross-platform-feature-is-codenamed-agora/
Verizon blames nationwide outage on a "software issue"
https://www.bleepingcomputer.com/news/mobile/verizon-blames-nationwide-outage-on-a-software-issue/
Infection repeatedly adds scheduled tasks and increases traffic to the same C2 domain
https://isc.sans.edu/diary/32628