poncho

"mAcS dOn'T gEt MaLwArE 🤪" Yes they do. Checkout my blog about creating macOS ransomware with successful execution 🔥. huntress.com/blog/creating-…

UK Companies House Exposed Details of Millions of Firms securityweek.com/uk-companies-h…

01000011 01100101 01101110 01110011 01101111 01110010 01110011 01101000 01101001 01110000 00100000 01101001 01110011 01101110 00100111 01110100 00100000 01101110 01101111 01110010 01101101 01100001 01101100 00101110

Hackers recently exposed parts of Discord's age verification system by discovering that the frontend code for their partner Persona was publicly accessible on the open internet. This revealed details on how facial age estimation and ID verification are integrated. “Persona's exposed code compares your selfie to watchlist photos using facial recognition, screens you against 14 categories of adverse media (from mentions of terrorism to espionage), and tags reports with codenames from active intelligence programs consisting of public-private partnerships.”

🚨BREAKING: Discord's third party vendor ID Verification system, Persona just got hacked. Anyone who did verification with Persona, could be extensively compromised.

Dior, Louis Vuitton, Tiffany Fined $25 Million in South Korea After Data Breaches securityweek.com/dior-louis-vui…

🔐 As password-based increase, orgs are adopting passkeys to maintain ISO/IEC 27001 compliance. 🛡️ @passwork_pro explains how to align passwordless adoption with Annex A controls, risk assessments, and secure implementations. ➡️ bleepingcomputer.com/news/security/… #cybersecurity #sponsored

The European Commission is investigating a breach after finding evidence that its mobile device management platform was hacked. bleepingcomputer.com/news/security/…

🛑 WARNING - Notepad++ confirmed state-sponsored attackers hijacked its update traffic via a compromised hosting provider. Selected users were redirected to malicious update servers. The activity ran for months. 🔗 Learn more → thehackernews.com/2026/02/notepa…

County pays $600,000 to pentesters wrongly charged for testing courthouse security despite letter of authorization arstechnica.com/security/2026/…

For those of you who don’t know, VLC also allows you to watch 150–300 live sports channels plus over 1,800 free TV channels worldwide Here’s how (using safe and public links only): Install VLC (Free) Windows / Mac / Linux: videolan .org Android / iOS: Search VLC in your store Get a public playlist Sports-only: iptv-org.github.io/iptv/ Full TV (News, Movies, Kids, Music): github.com/Free-TV/IPTV Open VLC → Network Stream → Paste URL → Play Use Playlist view to switch channels Some streams take a few seconds, VPN may be needed for geo-blocked content Channels are public & community-maintained and availability can change. Enjoy free TV & sports safely cc: Rollandex

Phishers Abuse SharePoint in New Campaign Targeting Energy Sector securityweek.com/phishers-abuse…

In Other News: €1.2B GDPR Fines, Net-NTLMv1 Rainbow Tables, Rockwell Security Notice securityweek.com/in-other-news-…

Hackers collect $439,250 after exploiting 29 zero-day vulnerabilities on the second day of Pwn2Own Automotive 2026. bleepingcomputer.com/news/security/…

STOP USING YOUR NOTES APP AS A PASSWORD VAULT STOP USING YOUR NOTES APP AS A PASSWORD VAULT STOP USING YOUR NOTES APP AS A PASSWORD VAULT STOP USING YOUR NOTES APP AS A PASSWORD VAULT STOP USING YOUR NOTES APP AS A PASSWORD VAULT STOP USING YOUR NOTES APP AS A PASSWORD VAULT

New scrape: Instagram allegedly had 17M rows of largely public data scraped from an API and posted to a hacking forum this week. 6.2M rows also included an email address, and some rows a phone number. 100% were already in @haveibeenpwned. Read more: haveibeenpwned.com/Breach/Instagr…

The UK confirmed its plan to end private messaging. Ofcom is now being handed power to scan encrypted chats under the Online Safety Act. They’re calling it “client-side scanning.” What it means: every message on your phone gets checked before it’s encrypted. This isn’t safety. It’s surveillance.

Microsoft 365 accounts targeted in wave of OAuth phishing attacks - @billtoulas bleepingcomputer.com/news/security/… bleepingcomputer.com/news/security/…

An iPhone has so many privacy and security features that it’s very easy to miss them. Now’s a good time to dive in and get to know them all. ssd.eff.org/module/how-to-…

Google is shutting down its dark web report feature in January - @mayank_jee bleepingcomputer.com/news/google/go… bleepingcomputer.com/news/google/go…

New Portuguese Law Shields Hackers from Prosecution hackread.com/portugal-cyber…