LightNews LightNews
drewgordon.bsky.social
@drewgordon.bsky.social
7 followers 24 following 270 posts
Posts Replies Media Videos
drewgordon.bsky.social
security.googleblog.com/2024/08/post...
Post-Quantum Cryptography: Standards and Progress
Posted by Royal Hansen, VP, Privacy, Safety and Security Engineering, Google, and Phil Venables, VP, TI Security & CISO, Google Cloud The...
security.googleblog.com
February 8, 2026 at 3:55 PM
drewgordon.bsky.social
blog.flomb.net/posts/http2c...
Playing with HTTP/2 CONNECT
In HTTP/1, the CONNECT method instructs a proxy to establish a TCP tunnel to a requested target. Once the tunnel is up, the proxy blindly forwards raw traffic in both directions. This mechanism is mos...
blog.flomb.net
February 8, 2026 at 3:48 AM
drewgordon.bsky.social
www.reddit.com/r/websecurit...
From the websecurityresearch community on Reddit: Top 10 new web hacking techniques of 2025
Explore this post and more from the websecurityresearch community
www.reddit.com
February 8, 2026 at 3:47 AM
drewgordon.bsky.social
thehackernews.com/2026/02/clau...
Claude Opus 4.6 Finds 500+ High-Severity Flaws Across Major Open-Source Libraries
Anthropic’s Claude Opus 4.6 identified 500+ unknown high-severity flaws in open-source projects, advancing AI-driven vulnerability detection.
thehackernews.com
February 6, 2026 at 1:44 PM
drewgordon.bsky.social
thehackernews.com/2026/02/aisu...
AISURU/Kimwolf Botnet Launches Record-Setting 31.4 Tbps DDoS Attack
AISURU/Kimwolf launched a record 31.4 Tbps DDoS attack as 2025 saw 47.1M incidents, rising botnet scale, and Android device abuse.
thehackernews.com
February 6, 2026 at 12:10 AM
drewgordon.bsky.social
www.bleepingcomputer.com/news/securit...
EDR killer tool uses signed kernel driver from forensic software
Hackers are abusing a legitimate but long-revoked EnCase kernel driver in an EDR killer that can detect 59 security tools in attempts to deactivate them.
www.bleepingcomputer.com
February 5, 2026 at 1:08 AM
drewgordon.bsky.social
futurism.com/artificial-i...
Police Raid SpaceX's Brand New Offices
SpaceX and xAI are now the same company -- which means French authorities' raid on an X office is now a space company problem.
futurism.com
February 4, 2026 at 4:36 AM
drewgordon.bsky.social
notepad-plus-plus.org/news/hijacke...
Notepad++ Hijacked by State-Sponsored Hackers | Notepad++
notepad-plus-plus.org
February 2, 2026 at 5:30 AM
drewgordon.bsky.social
cybernews.com/privacy/meta...
US probes claims Meta employees had “unfettered” access to WhatsApp chats
US law enforcement authorities have been investigating allegations that Meta employees had “unfettered” access to WhatsApp messages despite the company claiming the chats are encrypted.
cybernews.com
February 1, 2026 at 5:32 AM
drewgordon.bsky.social
cloud.google.com/blog/topics/...
Tracking the Expansion of ShinyHunters-Branded SaaS Data Theft | Google Cloud Blog
ShinyHunters-branded operations are using sophisticated vishing and victim-branded sites to steal data from cloud-based SaaS applications.
cloud.google.com
February 1, 2026 at 12:50 AM
drewgordon.bsky.social
www.reddit.com/r/CloudFlare...
From the CloudFlare community on Reddit: The Moltbot saga continues: Cloudflare enters the chat
Posted by jpcaparas - 49 votes and 0 comments
www.reddit.com
January 30, 2026 at 4:02 AM
drewgordon.bsky.social
www.reddit.com/r/darknetdia...
From the darknetdiaries community on Reddit: County pays $600,000 to pentesters it arrested for assessing courthouse security
Explore this post and more from the darknetdiaries community
www.reddit.com
January 30, 2026 at 3:58 AM
drewgordon.bsky.social
arstechnica.com/security/202...
Site catering to online criminals has been seized by the FBI
One of the last holdouts for ransomware discussions, RAMP is taken down.
arstechnica.com
January 29, 2026 at 1:56 AM
drewgordon.bsky.social
www.reddit.com/r/UkraineWar...
From the UkraineWarVideoReport community on Reddit: Investigation: 80% of Russian Troops' Linkups on the Front Line Produced by U.S. Company Ubiquiti
Explore this post and more from the UkraineWarVideoReport community
www.reddit.com
January 28, 2026 at 11:50 AM
drewgordon.bsky.social
www.certkit.io/blog/45-day-...
Let's Encrypt is moving to 45-day certificates before everyone else
The CA/Browser Forum set 47-day certificates as the target for 2029. Let's Encrypt decided to implement it a year earlier. Here's their roadmap and what it means for your automation.
www.certkit.io
January 28, 2026 at 3:10 AM
drewgordon.bsky.social
www.reddit.com/r/cybersecur...
From the cybersecurity community on Reddit: THE INVERTED PANOPTICON: Beijing Weaponized the West’s Own Wiretap Infrastructure to Execute the Greatest Intelligence Coup Since Cambridge Five
Explore this post and more from the cybersecurity community
www.reddit.com
January 27, 2026 at 1:03 PM
drewgordon.bsky.social
A Construction Worker Accidentally Found a Secret Stash of 700-Year-Old Coins - Popular Mechanics
January 26, 2026 at 1:35 AM
drewgordon.bsky.social
www.reddit.com/r/Hacking_Tu...
From the Hacking_Tutorials community on Reddit: 15 Most Recognized Cybersecurity Certifications to Get in 2026 (All Levels)
Explore this post and more from the Hacking_Tutorials community
www.reddit.com
January 25, 2026 at 10:19 PM
drewgordon.bsky.social
www.reddit.com/r/ipv6/s/Lrg...
From the ipv6 community on Reddit: Cloudflare: Route leak incident on January 22, 2026
Explore this post and more from the ipv6 community
www.reddit.com
January 25, 2026 at 5:45 PM
drewgordon.bsky.social
www.nsa.gov/Press-Room/P...
www.nsa.gov
January 25, 2026 at 4:33 PM
drewgordon.bsky.social
cybernews.com/security/clo...
Cloudflare bug opened a door for attackers to reach web servers directly
Cloudflare has patched a critical zero-day flaw in its Web Application Firewall (WAF) that allowed attackers to bypass its defenses and access origin web servers.
cybernews.com
January 25, 2026 at 4:15 PM
drewgordon.bsky.social
thehackernews.com/2026/01/cisc...
Cisco Fixes Actively Exploited Zero-Day CVE-2026-20045 in Unified CM and Webex
Cisco fixes actively exploited CVE-2026-20045 zero-day enabling unauthenticated RCE in Unified CM and Webex; CISA sets Feb 11, 2026 deadline.
thehackernews.com
January 25, 2026 at 2:52 PM
drewgordon.bsky.social
www.bleepingcomputer.com/news/securit...
US to deport Venezuelans who emptied bank ATMs using malware
South Carolina federal prosecutors announced that two Venezuelan nationals convicted of stealing hundreds of thousands of dollars from U.S. banks in an ATM jackpotting scheme will be deported after se...
www.bleepingcomputer.com
January 25, 2026 at 12:40 AM
drewgordon.bsky.social
www.bleepingcomputer.com/news/securit...
Tesla hacked, 37 zero-days demoed at Pwn2Own Automotive 2026
Security researchers have hacked the Tesla Infotainment System and earned $516,500 after exploiting 37 zero-days on the first day of the Pwn2Own Automotive 2026 competition.
www.bleepingcomputer.com
January 21, 2026 at 1:18 PM
drewgordon.bsky.social
cloud.google.com/blog/topics/...
Releasing Rainbow Tables to Accelerate Protocol Deprecation | Google Cloud Blog
Mandiant aims to lower the barrier for security professionals to demonstrate the insecurity of Net-NTLMv1.
cloud.google.com
January 18, 2026 at 4:35 AM