oss-sec: GNU InetUtils Security Advisory: remote authentication by-pass in telnetd https://seclists.org/oss-sec/2026/q1/89

🆕 iOS emulator update: we now have an #AI assistant to support your iOS security investigations.

What do you think? 💬
Our shortlist is still ongoing: https://u.eshard.com/ios-emulation
#ios #software #cybersecurity #softwaredevelopment #iosdev #

I never applied for an amateur radio license because I didn't like the idea of appearing on an official list of "skilled" people. Until now that was a theoretical fear. One I wasn't even sure if it was warranted or just me being overly cautious.

In Belarus things escalated quickly. Radio amateurs - usually recognized as men of goodwill - have been declared enemies of the state and publicly shamed and indicted for high treason.

https://steanlab.medium.com/mayday-389f5713fee4

[RSS] What was the secret sauce that allows for a faster restart of Windows 95 if you hold the shift key?

https://devblogs.microsoft.com/oldnewthing/20260119-06/?p=111995

The full schedule for #Pwn2Own Automotive 2026 is live! 73 entries over three days should keep us hopping. Be sure to stay tuned for al the results #P2OAuto https://www.zerodayinitiative.com/blog/2026/1/20/pwn2own-automotive-2026-the-full-schedule

TIL this was the moment when web search turned shit:

https://blog.google/products-and-platforms/products/search/introducing-knowledge-graph-things-not/

OK, that's a bit of an exaggregation but there are so many use-cases when Page Rank Just Works(tm), I can't wrap my head around why engines wouldn't keep it as an optional search mode.

I heard last week that the physics teacher of the daughter of one of my colleagues told the daughter that girls who do their nails don’t do physics. Sigh.

So, here are the nails of an internationally leading particle physics professor. My nails.

Don’t believe the gatekeepers! #womeninSTEM

cool, so there's a whole new github dork people can do: claude chatlogs.

they live in .claude/logs/ and are full text records of peoples entire conversations with claude

and they're ending up in public on github because i guess people arent adding them to .gitignore

happy monday! ai is going great!

https://discernibleinc.com/blog/3-counterproductive-communication-patterns-holding-back-security-researchers - so simple, yet so good advice.

Frida 17.6.0 released – major Android stability improvements, Android 16 support https://frida.re/news/2026/01/18/frida-17-6-0-released/

[RSS] Iranian state TV feed reportedly hijacked to air anti-regime messages

https://therecord.media/iran-state-television-reported-hack-opposition

[RSS] Epic Games Store Installation DLL Hijacking Privilege Escalation Vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2025-2279

[RSS] Who's on the Line? Exploiting RCE in Windows Telephony Service (CVE-2026-20931)

https://swarm.ptsecurity.com/whos-on-the-line-exploiting-rce-in-windows-telephony-service/

In Portswigger's Burp I needed a way to do Match & Replace globally across all utilities, not just the proxy so I wrote an extension https://github.com/singe/burp_global_match_replace

Er... missed link for that last post, https://sean.heelan.io/2026/01/18/on-the-coming-industrialisation-of-exploit-generation-with-llms/

The latest edition of the Security Liberation Front is out¹:

__
¹ https://slf.fish/

100% tariff on the MM/DD/YY date format.

People, with #Greenland raising awareness of our massive 24/7 dependence on US clouds for vital services, I made a list of what (government) stuff would break here under US sanctions. It is EXTREMELY depressing. Can I suggest that people also make a list like this one for their own countries? It is getting quite some traction here: https://berthub.eu/articles/posts/dashboard-amerikaanse-afhankelijkheden/

Join us for the kick-off of Pwn2Own Automotive 2026! As always, we begin the event with a random drawing to see the order of attempts for the contest, which starts first thing on Wednesday, January 21. https://youtube.com/live/Dtp-ICE0crw

A former writer for South Park foresaw Trump's takeover of the Kennedy Center and had the foresight to register the domain names trumpkennedycenter dot org and dot com back in August. JFK's niece thanked him for doing so. Of course, the Trump-controlled board now wants their domain name and threatened legal action. His response is brilliant.