We followed leaked links from malware logs and public indexes to internal files at 19 Fortune 500 companies, still open without a login.
Dialog Claims It Was Hacked. A Misconfigured Website Left Its Members Exposed
The private events group, cofounded by Peter Thiel, says a “criminal” hacker is behind a breach that exposed members’ personal details. WIRED found no evidence a break-in was needed to access the files.
Secret links
A secret link can be generated to point to any file or folder. Anyone with a (Javascript enabled) web browser can view such a link. Secret links can be read-only, writable, time limited, password-protected or n-use. Secret links can be revoked. A secret link doesn't expose the file to the network, or indeed to anyone who doesn't have the link itself (and any password) because the key material isn't sent to the server. A secret link works through any server, including localhost, unless that server blocks external secret links.
Massive AfD data breach exposes illegally copied files
The “Alternative for Germany” party apparently suffered a data breach. Some 421,000 emails were published, offering a glimpse inside the party.
Updated: Data Breaches Caused by Leaks in 2024
We’re tracking data breaches that are most likely caused by leaked secrets and keeping this page up-to-date.
Never-before-seen Linux malware is “far more advanced than typical”
VoidLink includes an unusually broad and advanced array of capabilities.
IDMerit data breach: 1 billion records of personal data exposed in KYC data leak
A massive global data leak linked to IDMerit has exposed 1 billion personal records, including national IDs and emails, across the US, Europe, and Asia.
Unauthorized access, personal data leaks surge in Japan | NHK WORLD-JAPAN News
A series of cyberattacks have led to leaks of large amounts of personal data from companies across Japan. Experts say the misuse of AI may be contributing to the growing threat. As this new challenge emerges, how should companies, and society as a whole, respond?
A Top Google Search Result for Claude Plugins Was Planted by Hackers
Hackers paid to make a malicious link the top Google Search result.
How a 40-Minute Window Brought Down a $10 Billion AI Startup: The Mercor Data Breach, Explained
A poisoned open-source package, a credential-stealing payload, and 4 terabytes of stolen data here’s what every AI company needs to learn…
LN 040: The venerable hyperlink
Decades after hyperlinks transformed humanity's information and text into a densely-linked graph, mainstream OSs have yet to afford users their benefits in personal computing.
This ‘Privacy Browser’ Has Dangerous Hidden Features
The Universe Browser is believed to have been downloaded millions of times. But researchers say it behaves like malware and has links to Asia’s booming cybercrime and illegal gambling networks.
Wikipedia blacklists Archive.today, starts removing 695,000 archive links
If DDoSing a blog wasn't bad enough, archive site also tampered with web snapshots.
Robin Berjon (@robin.berjon.com)
*Breaking* just as I'm writing this I hear that someone made a tool for W users to check if they're in the leak: wdonthavetime.tngl.io/wsocial-wned/.
The Subversive Hyperlink
Writing about the big beautiful mess that is making things for the world wide web.
Freeing the Web from the Browser | reinterpretcast.com
The Web is, without a doubt, the most powerful research tool currently available to man. No longer must researchers comb through endless indices and catalogues to find what they are looking for. Instead, hyperlinks allow users to associatively explore rich interconnected structures of information with ease. In just a few clicks, it is possible to navigate through a vast global space of information comprising documents on virtually any subject.
Introduction - What is BrowserGate?
Linkedin is searching your computer Every time you visit linkedin.com, a JavaScript program embedded in the page scans your browser for installed Chrome extensions. The program runs silently, without any visible indicator to the user. It does not ask for consent. It does not disclose what it is doing. It reports the results to LinkedIn’s servers. This is not a one-time check. The scan runs on every page load, for every visitor.