car hacking
Your CAN fuzzer doesn't speak LIN — and the LIN bus now carries UDS diagnostics on door locks, mirrors, and gateway ECUs. A 2026 paper on BB-FAST shows how Bayesian pruning cracks the bandwidth-starved bus most car hackers ignore.
IoT Security
A new libssh2 client-side flaw flips the IoT threat model. Here's how to tear open firmware and find the vulnerable libraries hiding inside.
AI Security
New research shows LLM vulnerability scanners fall for the same cognitive shortcuts that fool human analysts. Here's what that means if you're building a security career around AI tools.
IoT Security
IoT security vulnerabilities live in the timing layer too. UWB location networks depend on nanosecond clock sync between anchors — and that sync layer is its own attack surface.
AI Security
Researchers showed candidates can prompt-inject LLM résumé screeners to game hiring. Here's what that says about AI security threats — and the career edge it hands you.
AI Security
New research shows attackers can hijack the logs an AI SOC analyst reads, manipulating triage decisions and suppressing alerts. Here's what that means for your career.
IoT Security
GitHub just hardened actions/checkout against pwn request attacks. The same trust-boundary failure sits in countless IoT devices — here's how to find it during firmware analysis.
AI Security
OpenAI's GPT-5.5-Cyber automates vulnerability research at scale. Here's what that actually means for anyone trying to break into cybersecurity right now.
IoT Security
Canada's intelligence service got a court warrant to break into infected home routers and IoT gear on Canadian soil. The vulnerabilities they exploited are the same ones beginners can learn to find.
Join our community for hands-on hacking tips, AI risk insights, and cybersecurity news.
A new arXiv benchmark jailbreaks LLM agents running a simulated nuclear plant — over many turns, not one prompt. Here's what that means for anyone building an AI security career.
A French attacker hit an automotive supplier and built a Tailscale+OpenSSH backdoor that outlived his C2. The lesson for embedded engineers: car hacking starts in the IT office.
A new arXiv paper shows malware can sit dormant in LiDAR firmware and wake up to a modulated light pulse — no network, no hardware access. Here's what that means for IoT firmware analysis.
New research shows LLM search agents can be tricked into endorsing attacker-planted content. If you're using AI to plan your security career, you're already inside the threat model.
AI analysts are being wired into security operations centers — and attackers can write the logs they read. Here's why this emerging class of ai security threats matters for anyone building a career in the field.
Anthropic shipped one model as two products this week — public Fable 5 and restricted Mythos 5 — and the split tells you everything about where AI security careers are heading.
Anthropic shipped one AI model as two products — public Fable 5 and locked-down Mythos 5. The split is a working taxonomy of AI security threats, and a map for the careers being built on top of them.
Wednesday, June 10, 2026 Top 5 Cybersecurity Stories You Should Know 1. CISA Adds New Vulnerabilities to KEV Catalog Amid Active Exploitation — tl;dr: CISA has updated its Known Exploited Vulnerabilities (KEV) catalog with three new vulnerabilities, including CVE-2026-20245 in Cisco Catalyst SD-WAN Manager, CVE-2026-11645
Your router is running a Linux kernel from 2015, and the vendor can't update it even if they wanted to. Fresh research explains why — and what it means for IoT firmware analysis past the surface scan.
Tuesday, June 9, 2026 Top 5 Cybersecurity Stories You Should Know 1. CISA Warns of Exploited SolarWinds Serv-U Flaw and Multiple Zero-Day Vulnerabilities — tl;dr: CISA has issued a warning about hackers exploiting a vulnerability in SolarWinds Serv-U software to crash servers. Additionally, Cisco has alerted users
Researchers just demonstrated attackers can hijack brain-computer interfaces to inject commands into AI agents. Here's what this new class of AI security threats means for your career.
Monday, June 8, 2026 Top 5 Cybersecurity Stories You Should Know 1. CISA Urges Patch for Actively Exploited SolarWinds Serv-U DoS Vulnerability (CVE-2026-28318) — tl;dr: The US Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that CVE-2026-28318, a denial-of-service vulnerability in SolarWinds Serv-
