We hid backdoors in binaries — Opus 4.6 found 49% of them
https://ift.tt/SAiBCWm
Submitted February 10, 2026 at 07:48PM by jakozaur
via reddit https://ift.tt/rPT0ZbN
https://ift.tt/SAiBCWm
Submitted February 10, 2026 at 07:48PM by jakozaur
via reddit https://ift.tt/rPT0ZbN
Quesma
We hid backdoors in binaries — Opus 4.6 found 49% of them - Quesma Blog
BinaryAudit benchmarks AI agents using Ghidra to find backdoors in compiled binaries of real open-source servers, proxies, and network infrastructure.
Adbleed: partially de-anonymizing VPN users with adblock filter lists
https://ift.tt/bFcwmBW
Submitted February 10, 2026 at 09:34PM by TroubleNo3411
via reddit https://ift.tt/6qge9nd
https://ift.tt/bFcwmBW
Submitted February 10, 2026 at 09:34PM by TroubleNo3411
via reddit https://ift.tt/6qge9nd
LOTUSLITE: Targeted espionage leveraging geopolitical themes
https://ift.tt/7jhU8ot
Submitted February 10, 2026 at 11:22PM by bagaudin
via reddit https://ift.tt/6jXLOEC
https://ift.tt/7jhU8ot
Submitted February 10, 2026 at 11:22PM by bagaudin
via reddit https://ift.tt/6jXLOEC
Acronis
LOTUSLITE: Targeted espionage leveraging geopolitical themes
Acronis Threat Research Unit (TRU) observed a targeted malware campaign against U.S. government entities leveraging a politically themed ZIP archive containing a loader executable and a malicious DLL. The executable is used to sideload and execute the DLL…
I let Claude Code with 150+ offensive security MCP tools loose on my homelab
https://ift.tt/HyGm6c4
Submitted February 11, 2026 at 01:45AM by Mindless-Study1898
via reddit https://ift.tt/VczmoWL
https://ift.tt/HyGm6c4
Submitted February 11, 2026 at 01:45AM by Mindless-Study1898
via reddit https://ift.tt/VczmoWL
Cred Relay
I Let Claude Code Hack My Homelab | Cred Relay
Letting AI Loose in My Homelab
Confused Deputy Problem – How to Hack Cloud Integrations
https://ift.tt/VrNSe52
Submitted February 11, 2026 at 01:26AM by x0zayl
via reddit https://ift.tt/b1LqIzA
https://ift.tt/VrNSe52
Submitted February 11, 2026 at 01:26AM by x0zayl
via reddit https://ift.tt/b1LqIzA
zayl.dk
Confused Deputy Problem – How to Hack Cloud Integrations | Zayl Security
Securing Digital Assets in an Evolving Threat Landscape — analysis of DPRK/Lazarus operations, DaaS proliferation, and defense-in-depth architecture [PDF]
https://ift.tt/fPdXiL1
Submitted February 12, 2026 at 01:23AM by FireblocksHQ
via reddit https://ift.tt/lUFzRkM
https://ift.tt/fPdXiL1
Submitted February 12, 2026 at 01:23AM by FireblocksHQ
via reddit https://ift.tt/lUFzRkM
Microsoft's Notepad Got Pwned (CVE-2026-20841)
https://ift.tt/gTeJkXQ
Submitted February 12, 2026 at 01:05PM by pipewire
via reddit https://ift.tt/LjpZQys
https://ift.tt/gTeJkXQ
Submitted February 12, 2026 at 01:05PM by pipewire
via reddit https://ift.tt/LjpZQys
FOSS Daily!
Microsoft's Notepad Got Pwned (They Added AI To It, So...)
Notepad RCE vulnerability CVE-2026-20841 explained. How a text editor became a remote code execution vector. What you need to know.
Quick IAM fundamentals knowledge check for security practitioners
https://ift.tt/yd5F6wz
Submitted February 12, 2026 at 01:29PM by Big_Hour_2429
via reddit https://ift.tt/GKeu5kw
https://ift.tt/yd5F6wz
Submitted February 12, 2026 at 01:29PM by Big_Hour_2429
via reddit https://ift.tt/GKeu5kw
ETCISO.in
Cyber Decoded
No Legs, No Problem: Dumping BGA MCP NAND Flash
https://ift.tt/Q5PbECL
Submitted February 11, 2026 at 01:17AM by fatpengoo
via reddit https://ift.tt/fQreacs
https://ift.tt/Q5PbECL
Submitted February 11, 2026 at 01:17AM by fatpengoo
via reddit https://ift.tt/fQreacs
pengoo.fr
No Legs, No Problem: Dumping BGA MCP NAND Flash
How to dump BGA MCP NAND Flash with
the Xgecu T48 Flash programmer. Dead-bug style (microscope required).
the Xgecu T48 Flash programmer. Dead-bug style (microscope required).
YAML Merge Tags and More Parser Differentials
https://ift.tt/ZaNhTno
Submitted February 12, 2026 at 04:10PM by Moopanger
via reddit https://ift.tt/xuQnGUb
https://ift.tt/ZaNhTno
Submitted February 12, 2026 at 04:10PM by Moopanger
via reddit https://ift.tt/xuQnGUb
TURN Security Threats: A Hacker's View
https://ift.tt/XLcxlA4
Submitted February 12, 2026 at 03:50PM by EnableSecurity
via reddit https://ift.tt/FLDCbAN
https://ift.tt/XLcxlA4
Submitted February 12, 2026 at 03:50PM by EnableSecurity
via reddit https://ift.tt/FLDCbAN
Enable Security
TURN Security Threats: A Hacker's View
TURN servers are powerful proxies abused for internal network access, C2 operations, and DDoS attacks. Threat analysis from years of research and pentesting.
I kept finding security issues in AI-generated code, so I built a scanner for it
https://codearmor-ai.vercel.app/
Submitted February 12, 2026 at 05:28PM by AdnanBasil
via reddit https://ift.tt/RYrlof1
https://codearmor-ai.vercel.app/
Submitted February 12, 2026 at 05:28PM by AdnanBasil
via reddit https://ift.tt/RYrlof1
codearmor-ai.vercel.app
CodeArmor AI Security Dashboard
Security-hardened baseline with scoring and Supabase-ready integration.
Critical RCE Vulnerability in Unstructured.io (CVE-2025–64712) - CVSS 9.8
https://ift.tt/5Bko2KI
Submitted February 13, 2026 at 02:54AM by Shimiasm
via reddit https://ift.tt/t2fKXqv
https://ift.tt/5Bko2KI
Submitted February 13, 2026 at 02:54AM by Shimiasm
via reddit https://ift.tt/t2fKXqv
Cyera
DESTRUCTURED - Critical Vulnerability in Unstructured.io (CVE-2025–64712) | Cyera Research Labs
We discovered a critical vulnerability (CVE-2025–64712) in Unstructured.io — widely used across the Fortune 1000 — that received a CVSS score of 9.8 (Critical). The flaw enables arbitrary file write and potentially full remote code execution on the machine…
Capture the Flag (CTF) AWS/SANS
https://ift.tt/tIqkoe1
Submitted February 13, 2026 at 04:53AM by Successful_Clock2878
via reddit https://ift.tt/aRPvJ7S
https://ift.tt/tIqkoe1
Submitted February 13, 2026 at 04:53AM by Successful_Clock2878
via reddit https://ift.tt/aRPvJ7S
Brazenconnect
Capture the Flag (CTF)
Capture the Flag (CTF) - Event Landing Page
Pwning Supercomputers - A 20yo vulnerability in Munge
https://ift.tt/4Nv7Ys1
Submitted February 13, 2026 at 02:26PM by qwerty0x41
via reddit https://ift.tt/xwnQ4pH
https://ift.tt/4Nv7Ys1
Submitted February 13, 2026 at 02:26PM by qwerty0x41
via reddit https://ift.tt/xwnQ4pH
blog.lexfo.fr
Pwning Supercomputers - A 20yo vulnerability in Munge
<p>Exploiting Heap Buffer Overflow in the authentication daemon used by most High Performance Computer.</p>
Brutus: Open-source credential testing tool for offensive security
https://ift.tt/oYNfKTa
Submitted February 13, 2026 at 09:03PM by Praetorian_Security
via reddit https://ift.tt/0AWmR5n
https://ift.tt/oYNfKTa
Submitted February 13, 2026 at 09:03PM by Praetorian_Security
via reddit https://ift.tt/0AWmR5n
Help Net Security
Brutus: Open-source credential testing tool for offensive security
Brutus is an open-source, multi-protocol credential testing tool written in pure Go. Designed to replace legacy tools that have long frustrated
BeyondTrust Gets Hit Again: Pre-Auth RCE in Remote Support Tools
https://ift.tt/c1xKSN2
Submitted February 13, 2026 at 10:26PM by IncidentSpecial5053
via reddit https://ift.tt/I1TPbA7
https://ift.tt/c1xKSN2
Submitted February 13, 2026 at 10:26PM by IncidentSpecial5053
via reddit https://ift.tt/I1TPbA7
FOSS Daily!
BeyondTrust Gets Hit Again: Pre-Auth RCE in Remote Support Tools
CVE-2026-1731: Command injection vulnerability in BeyondTrust Remote Support and Privileged Remote Access allows unauthenticated remote code execution
BeyondTrust Gets Hit Again: Pre-Auth RCE in Remote Support Tools
https://ift.tt/wlSAOh5
Submitted February 13, 2026 at 10:28PM by IncidentSpecial5053
via reddit https://ift.tt/v9AfDFg
https://ift.tt/wlSAOh5
Submitted February 13, 2026 at 10:28PM by IncidentSpecial5053
via reddit https://ift.tt/v9AfDFg
FOSS Daily!
BeyondTrust Gets Hit Again: Pre-Auth RCE in Remote Support Tools
CVE-2026-1731: Command injection vulnerability in BeyondTrust Remote Support and Privileged Remote Access allows unauthenticated remote code execution
Best Free Security Tools Everyone Should Use in 2026
https://ift.tt/lbmaKt9
Submitted February 14, 2026 at 10:21AM by i-drake
via reddit https://ift.tt/5LEiRuJ
https://ift.tt/lbmaKt9
Submitted February 14, 2026 at 10:21AM by i-drake
via reddit https://ift.tt/5LEiRuJ
techputs
Best Free Security Tools Everyone Should Use in 2026
Discover the best free security tools in 2026 for antivirus, network scanning, password management, and penetration testing. Protect your devices without spending money.
Hacking a pharmacy to get free prenoscription drugs and more
https://ift.tt/jakwG37
Submitted February 14, 2026 at 06:58PM by EatonZ
via reddit https://ift.tt/Mw430Va
https://ift.tt/jakwG37
Submitted February 14, 2026 at 06:58PM by EatonZ
via reddit https://ift.tt/Mw430Va
Eaton-Works
Hacking a pharmacy to get free prenoscription drugs and more
Super admin exploit on Dava India Pharmacy’s website gave complete control over everything.
I’m building graph-based compliance risk engine, looking for honest feedback
http://joinsentra.com/
Submitted February 14, 2026 at 09:14PM by Queasy_Hamster_6040
via reddit https://ift.tt/c7g0IyW
http://joinsentra.com/
Submitted February 14, 2026 at 09:14PM by Queasy_Hamster_6040
via reddit https://ift.tt/c7g0IyW