Protei, a Russian telecom company that develops technology to enable phone and internet companies to conduct web surveillance and censorship, was hacked. The attackers defaced its website and stole 182GB of data, including confidential emails. The threat actor defaced the website with the message “another DPI/SORM provider bites the dust,” referring to the company's sales of deep packet inspection and other internet filtering technologies developed for the Russian lawful intercept system.
Princeton University disclosed a data breach after a hacker accessed a database with personal details of alumni, donors, faculty, students, and parents. The attack, traced to a phishing call, compromised information like names, addresses, emails, and donation records, but not passwords or financial data.
This author disabled and deleted Identity & Access Management (IAM) users before updating associated Terraform state and key policies while migrating from legacy IAM users to SSO in an AWS environment, inadvertently locking access to an AWS KMS key. Terraform applied changes but masked the fact that the EKS cluster continued to use the orphaned key, causing permission failures and locking out key management until AWS Support intervened. Security teams should ensure IAM and key-policy transitions are sequenced and validated, maintain Terraform state accuracy, and treat KMS keys as high-risk break-glass resources during cloud IAM migrations.
CISOs are facing a surge in burnout driven by accelerating threats, shrinking budgets, and increasing executive accountability for breaches. The evolving role now spans governance, risk, crisis management, and business strategy, creating sustained cognitive load and operational fatigue that raises organizational and even national-security risk. Security leaders should prioritize realistic resourcing, delegation, mental-health sustainability, and board-level alignment to ensure that essential defensive capabilities do not degrade under chronic pressure.
Microsoft Teams stores its auth_cookie in a DPAPI-encrypted value in the Cookie database of the embedded Chromium browser used by Teams. The key used to encrypt the cookie can be retrieved from the Local State file in the Teams cache and used in conjunction with the nonce to decrypt the auth_cookie using AES-256-GCM. This auth_cookie can then be used with GraphSpy to retrieve and send messages on Teams.
Sponsored
AI agents are the fastest-growing class of identity. They're connecting to tools and systems 24/7 - requiring a new approach to access control. Leash is StrongDM's new open-source project [13] that extends runtime control to agentic systems. Leash works at kernel level (<1ms latency overhead) to evaluate agent activity against
This tool extracts offline Windows SAM, SYSTEM, and SECURITY registry hives and parses them to extract hashed credentials for analysis. It's intended for use by red-team or forensic practitioners to recover NTLM/LM hashes for further brute force or audit activities. Infosec professionals should treat any accessible hives as a high-risk indicator, ensure live system backup integrity, enforce privilege separation for hive access, and validate detection around unusual hive reads or exfiltration.
Nudge Security helps organizations secure SaaS and AI usage by providing real-time visibility, risk detection, and automated policy enforcement. It uncovers risky integrations, monitors AI/data access, and addresses identity security gaps across apps and users.
This repository contains a 90-day cybersecurity study plan, along with resources and materials for learning various cybersecurity concepts and technologies. The plan is organized into daily tasks and covers topics such as Network+, Security+, Linux, Python, Traffic Analysis, Git, ELK, AWS, Azure, and Hacking.
APT42 (aka SpearSpecter) targets senior defense/government officials through social engineering, extending attacks to victims' family members to increase pressure. The campaign deploys TameCat malware, a PowerShell backdoor using Telegram/Discord for C&C that performs reconnaissance, credential theft, and data exfiltration while evading detection through in-memory execution and obfuscation.
A major Cloudflare outage temporarily knocked many major websites and platforms offline due to a spike in unusual traffic, which overwhelmed a configuration file and caused core systems to crash. Although not caused by an attack, the outage impacted services like X, ChatGPT, Amazon, and Spotify.
Given a 40% vacancy rate in pivotal areas, CISA has announced plans to increase hiring in 2026 to replace its depleted workforce and remain competitive. CISA will prioritize hiring liaisons between CISA and critical infrastructure, as well as utilize the DHS's Cyber Talent Management system. CISA will also offer exemptions to its return-to-office policy and strengthen partnerships with colleges and universities to attract top talent.
Sponsored
Secure all your code, dependencies and infrastructure effortlessly, with a unified platform that's built-in, not bolted on. Try Codacy for
Azure mitigated a record 15.72 Tbps DDoS attack from the Aisuru botnet, which has infected over 700,000 IoT devices.
Meta has paid out $4 million through its bug bounty program in 2025, bringing the total awarded by the social media giant since the creation of the program to more than $25 million.
Hackers claim to have stolen 430,000+ Cabify driver records.
Sponsored
A recent study tested what would happen if companies called new leads within 60 SECONDS — not 42 hours later.
Price discounts, loyalty points, and experiential rewards all lift customer loyalty. Discounts generate the strongest boost, and loyalty points and experiences outperform BOGO offers. Tactics that build emotional engagement create longer-lasting connections than incentives focused only on savings. Still, heavy discounting can weaken brand perception, train customers to wait for deals, and undermine long-term value. Promotions work best when used with intention rather than as routine price cuts.
B2B buyers now rely more on personal factors like trust and values, which have risen in importance by 10% since 2021. Professional drivers still influence 58% of decisions, but personal and societal drivers account for 42%, and many buyers start with a preset list where 92% end up purchasing from someone already on it. Most marketers think they deliver strong brand communication, yet only 39% of buyers feel that suppliers tailor their offer to their needs, and only 5% of marketers achieve true hyperpersonalization. Brands also struggle with onboarding, which reinforces the growing importance of trust and personalized experiences in winning deals.
Optimized text overlays on videos and GIFs can increase clicks by up to 127%, and the best results come from placing medium sized text near the edges rather than the center. The research finds that X posts perform best when text covers 24% of the frame, Facebook sees up to 27% higher CTRs with medium text, and Instagram engagement peaks when text covers 11% of the frame. Static images work differently and tend to perform best when larger text is centered. These effects come from how viewers process the balance between text and imagery, which increases attention and engagement.
A strong brand name helps a company stand out, but the process requires time, structure, and clear criteria rather than a single burst of inspiration. Founders should treat naming as a month-long effort that starts with solid positioning, a detailed naming brief, and a broad brainstorm that produces hundreds of options. A shortlist should then be evaluated for trademark risk, domain availability, distinctiveness, pronunciation, and longevity. The final step is legal clearance, which often includes a knockout search and a comprehensive search before deciding whether to file a trademark.
Sponsored
Use Wistia's annual benchmark report [11] to see how your videos stack up based on exclusive play and engagement rate data. Drill into performance by video type and website location, learn which formats are resonating, and discover smart ways to scale video production with
Google just launched Gemini 3, its most intelligent model to date. For content teams, this means richer, more personalized experiences in Search, while developers gain a more autonomous agent-building stack through Google Antigravity. Gemini 3, focused on deeper reasoning, stronger multimodal capabilities, and long-horizon planning, powers dynamic UI generation, real-time simulations, and zero-shot coding.
Mobbin is a design inspiration platform with a large library of more than 500K screens and 1K apps. It helps users quickly find real product patterns, explore complete user flows with animations, and study transitions and micro-interactions. Users can walk through flows, copy designs directly into Figma, save collections, and take notes. The platform, used by major design teams, serves as a fast way to research best practices and stay current on UI and UX standards.
Under Old Social, reach was linked to follower size. Now, unless a post appeals to non-followers, it rarely gains traction. Brands must adapt to a recommendation-based environment where consistency alone no longer works. Some have embraced a high-volume approach, flooding feeds with clips or creator-led content to increase their chances of being picked up. Others focus on episodic storytelling to build momentum and retain viewer interest, much like programming a TV show. Large brands like Netflix and Amazon are leading this shift by developing recurring series, while smaller brands like Little Joy or Craighill are seeing real sales lift from serialized posts.
WhatsApp has become essential business infrastructure in India despite being built for consumers. It forces small businesses to rely on manual workarounds, hacks, and risky mod apps because true automation sits behind the restrictive and costly Business API. Meta's shifting policies, delivery caps, and pricing make the platform unstable, and its ad-driven incentives prevent features that would separate personal and professional use. An ONDC-style messaging protocol that enables interoperability across apps would enable businesses to use purpose-built tools without abandoning WhatsApp, reducing dependence on a single platform.
An AI bust would affect every major tech firm, including Google. Today's investment surge shows both rational optimism and signs of irrational exuberance similar to the dotcom era. Analysts and Wall Street leaders predict a correction that could impact markets more broadly. Investors are overexcited even as AI remains a profound long-term shift. Current AI tools like Gemini can still make errors despite Alphabet's recent valuation surge.
Make webpage content scannable, readable, and logical to optimize it for LLMs and humans.
Tactics include sending fewer but stronger cold emails, speaking on podcasts, sponsoring micro-newsletters, and listing on directories.
Missteps include designing a poor checkout experience, forgetting mobile users, and not establishing your “why”.
Sponsored
Bugs sneak out when less than 80% of user flows are tested before shipping. However, getting that kind of coverage (and staying there) is hard and pricey for any team.
* 24-hour maintenance and on-demand test creation * Zero flakes, guaranteed
Jeff Bezos' new company, Project Prometheus, is coming out of the gates with $6.2 billion in funding and nearly 100 employees, including researchers poached from OpenAI, DeepMind, and Meta. The company is focused on AI that will help engineering and manufacturing in a number of fields. It will create systems that can learn from the physical world in more complex ways than chatbots do. Bezos will be co-chief executive - this is the first time he has taken a formal operational role in a company since stepping down as chief executive of Amazon in July 2021.
2025.11.18·links.tldrnewsletter.com·5 min read·TLDR Blue Origin is now a manufacturing company that can build rockets at scale. The firm's mission has grown beyond just launching payloads. To go to the Moon, the company must be able to build all of the hardware needed to get to orbit at a rate fast enough to sustain large-scale missions. Blue Origin successfully landed its New Glenn booster for the first time last week. It is looking to conduct another New Glenn launch next year.
2025.11.18·links.tldrnewsletter.com·1 min read·TLDR Valar Atomics' Project Nova core achieved zero-power criticality for the first time yesterday morning. Zero-power criticality is a foundation milestone that precedes nuclear operation with power. The achievement will allow Valar to gain a greater understanding of the neutronic characteristics of the core and verify assumptions about fuel, moderators, active reactivity control, and burnable poisons. It marks a decisive step toward commercial-scale, factory-built nuclear reactors capable of powering heavy industry, hydrogen production, and AI-era data infrastructure with carbon-free energy.
2025.11.18·threadreaderapp.com·2 min read·TLDR An experimental reactor built in the Gobi Desert has achieved thorium-to-uranium fuel conversion, bringing humanity one step closer to an almost endless supply of nuclear energy. Thorium is much more abundant and accessible than uranium and generates far less radioactive waste. The entire thorium-to-uranium process takes place inside the reactor core, eliminating the need for external fuel fabrication. The system, which uses molten salt, requires no water at all, allowing it to be built almost anywhere.
2025.11.18·huabinoliver.substack.com·9 min read·TLDR Sponsored
Large organizations spend nearly $5,000 per person annually on enterprise tools. But according to Forrester's latest research [14], cutting costs isn't about eliminating tools — it's about cutting friction. In this webinar with Miro, Forrester's Bobby Cameron breaks down why consolidation only focused on ROI fails and introduces the High-Performance IT framework for smarter tool consolidation
Chrome Devtools has introduced a new CDP editor that auto-completes commands, auto-populates command parameters, simplifies the typing of parameters, and improves prototyping speed. It can be used to view parameters alongside documentation. This post provides an overview of what the new CDP editor offers and how users can make the most use of it.
2025.11.18·developer.chrome.com·6 min read·TLDR Deep space is big, making it challenging to run a network. One of the promising ways seems to be adopting the IP protocol suite. QUIC is becoming the protocol of choice for reliable communication. This post looks at how QUIC can reliably operate in deep space and provides guidance on how to deploy it.
2025.11.18·ochagavia.nl·11 min read·TLDR 2025.11.18·invertedpassion.com·29 min read·TLDR The European Commission plans to unveil a 'digital package of simplification' tomorrow that will rewrite key aspects of the General Data Protection Regulation and delay parts of a law restricting certain uses of AI. The EU's tech laws have long been criticized for stifling economic growth. The digital simplification package is part of a broader deregulatory push.
2025.11.18·links.tldrnewsletter.com·9 min read·TLDR Sponsored
Tired of Postgres that powers off when idle? The new Aiven Developer Tier solves that problem at $8/month. 8GB storage, 24/7 uptime, basic
China's tech world thinks with a different literary infrastructure than Silicon Valley's lore.
2025.11.18·asteriskmag.com·22 min read·TLDR