Your Email Address Is a Tracking Cookie You Cannot Clear. Brave Wants to Replace It
Brave now generates unique forwarding addresses that reduce breach exposure and cross-site correlation through a reused primary email.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
ATF Isolated the Breached System. It Still Contained Investigation Targets.
ATF says a standalone system breach did not reach its enterprise network or eForms, but the isolated environment contained information about investigation targets.
Manchester Airports Said No to the Ransom. The Attackers Answered With the Passenger Data.
Manchester Airports Group kept operations running, but reporting says the attackers published stolen passenger data after MAG refused a ransom demand.
Two Arrests Put a Number on TeamPCP’s Supply-Chain Damage
Google says an undercover Mandiant analyst reached TeamPCP's inner circle, watched stolen credentials accumulate and helped disrupt the group's follow-on access.
Adobe Campaign Classic Has Three CVSS 10 Paths to Code Execution
Adobe fixed three unauthenticated, network-reachable Adobe Campaign Classic flaws rated CVSS 10.0. On-premises and hybrid customers must update to build 9401.
Android 17 Encrypts the Domain Name. Enterprise Network Visibility Just Changed.
Android 17 adds ECH, local-network permission enforcement, certificate transparency by default and carrier-controlled 2G disablement. Privacy improves, but enterprise visibility changes.
Attackers Used PaperCut to Hunt for Passwords Inside Schools and Universities
Hundreds of AI agents exploited PaperCut at 395 organisations, with some intrusions reaching domain administrator in minutes. Defenders must investigate Active Directory, not only the PaperCut host.
ServiceNow Patched Three CVSS 10 Flaws. No Login Was Required.
ServiceNow patched three CVSS 10 flaws that can be exploited without credentials, plus a high-severity sandbox escape. Self-hosted customers must verify the complete build.
The Security Agent Became the Remote Execution Service: WatchGuard Fixes Two Unauthenticated RCE Flaws
WatchGuard fixed two critical Windows agent flaws that allow unauthenticated remote code execution. One can make the trusted agent download and run attacker-controlled code as SYSTEM.
The Router Came With a Root Backdoor. The Brand on the Box Hid Who Built It.
A router sold under a reassuring retail brand can still be running firmware built by somebody else. VulnCheck’s investigation into ZBT router backdoors found three remote-control implants, including one that can hand an unauthenticated internet user a root shell with…