Researchers at mysk.blog discovered that WebKit—the mandatory engine for all iOS browsers—sends DNS requests and reveals the real IP address before the proxy tunnel is established. iCloud Private Relay does not protect against this behavior.
57 min ago 16 4
Bugtraq - the reference mailing list for the security community since 1993 - has just relaunched on SecurityFocus. An unexpected resurrection for a channel that has trained generations of vulnerability researchers.
57 min ago 17 3
Lava scanned the net in May 2026: 36,872 exposed BMC interfaces, including 24,650 that spit out the IPMI hash on a simple RAKP request. A 13-year-old spec flaw, unpatchable, with Supermicro, HPE iLO, and Dell in the front line.
Jul 28, 2026 12 3
The American fast-food chain notifies its customers of an incident related to a credential stuffing campaign - a reminder that password reuse remains, in 2026, one of the most profitable vectors for attackers.
Jul 22, 2026 22 3
Online orders suspended, temporary restaurant closures considered: KFC Japan (ケンタッキー) suffers the consequences of a cyberattack targeting its logistics partner. An opportunity to recall what makes the brand so unique in Japan.
Jul 17, 2026 21 4
