Seeking well-organized, kind, fun-loving people to keep Tumblr growing strong for many years to come. Come work with us! Newly posted: Technical Project Manager (Tumblr) automattic.com/work-with-us/t… via Automattic View more: tumblr.com/jobs

eprint.iacr.org/2021/323.pdf beautiful attacks against BLS implementations by Quan Thoi Minh Nguyen Thomas H. Ptacek I nominate this for Pwnie's Best Cryptographic Attack

We are growing! Check out our open, fully distributed roles across engineering, design, Happiness (customer service), marketing (and more!). Get all of the details on how to apply here: bit.ly/38guhDF #hiring #distributed #remote #jobs

An update on the git.php.net incident: externals.io/message/113981

Wix and Their Dirty Tricks ma.tt/2021/04/wix-di… via Matt Mullenweg

The embargo on Exim vulnerabilities is over.

I always get angry replies when I say "use a password manager" is bad advice, but I stand by that! Here are some weekend thoughts about it lock.cmpxchg8b.com/passmgrs.html (tl;dr just use chrome!) 😆

We are proud to announce the public beta of Passware Kit Mobile! A state-of-the-art forensic tool that recovers PIN/passcodes and extracts data from 130+ devices, including #iPhone and #Huawei phones: bit.ly/pw-pkm #DFIR

😬

Read the details about #CVE-2021-21703 on our Ambionics' blog, a 10 year-old Local Root vulnerability affecting PHP-FPM, #PHP FastCGI's server. PHP-FPM is often used with major HTTPd servers such as #NGINX and #Apache. ambionics.io/blog/php-fpm-l…

It appears that private keys for generating EU Covid Certificates have leaked #infosec #covid19 cc ⁦briankrebs⁩ github.com/ehn-dcc-develo…

We’re happy and proud to announce the creation of The PHP Foundation The PHP Foundation – a non-profit organization to support, promote, and advance the PHP language🎉 #ThePHPFoundation #php blog.jetbrains.com/phpstorm/2021/…

Your Fingerprint Can Be Hacked For $5 blog.kraken.com/post/11905/you…

During an internal audit of the All In One SEO plugin, we uncovered an SQL Injection vulnerability and a Privilege Escalation bug. If you're using this plugin, we recommend you update it as soon as possible. jetpack.com/2021/12/14/sev…

Apple M1 chip contains hardware vulnerability that bypasses memory defense go.theregister.com/feed/www.there…

During WordCamp Europe 2022, we ran a #WordPress Capture The Flag (CTF) competition across four challenges. If you weren't at the event you can still try it at home, and we detail the solutions in this post too. jetpack.com/2022/06/13/cap…

New resource page available on timing attacks, including recommendations for action to take regarding overclocking attacks such as #HertzBleed: timing.attacks.cr.yp.to Don't wait for the next public overclocking attack; take proactive steps to defend your data against compromise.

Devinez quelle bonne nouvelle nous annonçons aujourd'hui à la communauté #WordPress ? Le WordCamp Lyon est de retour 😱🥳😍 Stay tuned 👇🏻 lyon.wordcamp.org/2022/

💥 New attack! Our researcher Arseniy Sharoglazov discovered a PHP's Arbitrary Object Instantiation with no user-defined classes. It was turned to RCE! Read the research: swarm.ptsecurity.com/exploiting-arb…

Le site du WordCamp Lyon 2022 est officiellement en ligne lyon.wordcamp.org/2022/ Save the date 🗓 28 octobre 2022 📍 L’Embarcadère à Lyon Venez échanger, apprendre, et être inspiré par la communauté #WordPress française !