Search: “Redact”

33 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Data breach 92 Ransomware 89 Policy & legal 86 Malware 86 Vulnerability 70 Threat actor 52 Exploit / PoC 52 Industry 50 Phishing & fraud 37 AI safety & security 32 Research 9 AI tools & infra 8 Tools 4 Model release 4

SeverityAll critical 156 high 197 medium 151 low 143 info 30

Using LLMs to Unredact Text

Schneier on SecurityJan 29, 02:59 UTC · Jan 29, 2025Vulnerability

Acropalypse flaw in Google Pixel's Markup tool allowed recovery of edited images

Security AffairsMar 20, 22:13 UTC · Mar 20, 2023Vulnerability CVE-2023-21036

GCHQ shrinks amid recruitment and retention challenges

The RecordDec 6, 13:28 UTC · Dec 6, 2023Vulnerability

Friday Squid Blogging: Giant Squid Live in the Waters of Western Australia

Schneier on SecurityMay 8, 21:03 UTC · May 8, 2026Vulnerability

Census Bureau disputes Inspector General claim that hacking team gained unauthorized access

The RecordJan 9, 00:00 UTC · Jan 9, 2023Vulnerability

Security researchers confirm Microsoft patch fixes ‘aCropalypse’ bug

The RecordMar 28, 20:06 UTC · Mar 28, 2023Vulnerability CVE-2023-21036 CVE-2023-28303

Security agencies leak sensitive data by failing to sanitize PDF files

The RecordJan 26, 00:00 UTC · Jan 26, 2023Vulnerability

Friday Squid Blogging: A Good Year for Squid?

Schneier on SecurityAug 15, 00:00 UTC · Aug 15, 2021Vulnerability

Privacy Analysis of Ambient Light Sensors

Schneier on SecuritySep 15, 00:00 UTC · Sep 15, 2020Vulnerability

Web Shell Poses As A GIF

Cisco TalosJun 11, 17:59 UTC · Jun 11, 2012Vulnerability

CVE-2026-84179: Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Merged Daemon Configuration via the Topology Page

Apache Storm Nimbus/UI 3.0.0 leaks unredacted merged daemon configuration through the topology page, exposing secrets to UI users.

CVE-2026-84179 (severity: important) affects Apache Storm Nimbus (storm-server) and Storm UI (storm-webapp) versions 3.0.0 before 3.1.0. The getTopologyPageInfo function merged the Nimbus daemon configuration with topology configuration and returned it unredacted in the topology_conf field of TopologyPageInfo, which the Storm UI copied verbatim. This can expose sensitive daemon configuration values to topology users.

oss-securitySep 13, 14:44 UTC · 3d agoVulnerability CVE-2026-84179

CVE-2026-82433: Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Daemon Configuration via Nimbus and the UI

Apache Storm Nimbus and UI return unredacted daemon configuration, including ZooKeeper and keystore secrets, to authorized users.

CVE-2026-82433 (rated moderate) affects Apache Storm Nimbus (storm-server) and Storm UI (storm-webapp) versions 3.0.0 before 3.1.0. The getNimbusConf operation returned the complete daemon configuration without redaction after only a user-level authorization check. Where configured, the response includes storm.zookeeper.auth.payload plus keystore and related secrets.

oss-securitySep 13, 14:32 UTC · 3d agoVulnerability CVE-2026-82433