Search: “codis”

80 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Policy & legal 22 Industry 14 Vulnerability 13 Threat actor 8 Malware 5 Ransomware 4 AI tools & infra 4 Data breach 3 Phishing & fraud 3 Research 2 Exploit / PoC 1 Advisory 1

SeverityAll critical 30 high 7 medium 9 low 28 info 6

ICE Collecting DNA Samples

ICE's DNA collection program projects detainee samples to reach 33% of CODIS offender index by 2030, raising privacy concerns.

A Schneier on Security blog post discusses ICE collecting DNA samples from detainees, citing Georgetown Law research. DHS detainee samples are projected to constitute 33% of the FBI's CODIS offender index in 2030, up from 0.2% in 2019. The post raises concerns that samples collected under civil authority are being searched against crime scenes indefinitely, potentially without legal cause under Fourth Amendment standards.

Schneier on SecurityAug 19, 10:46 UTC · 27d agoPolicy & legal

Project Svalbard, Have I Been Pwned and its Ongoing Independence

Troy HuntMar 2, 20:07 UTC · Mar 2, 2020Data breach

Protect Your Brand: New Threat Takedown Features in Recorded Future

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Malware

How to Recognize Foreign Influence Operations

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Advisory

Ivanti Vulnerability Exploit Could Expose UK NHS Data

Infosecurity MagazineMay 28, 16:15 UTC · May 28, 2025Vulnerability in the wildCVE-2025-4427 CVE-2025-4428

Homeland Security has collected DNA data from 1.5 million immigrants in four years, researchers find

The RecordMay 21, 20:04 UTC · May 21, 2024Threat actor

Swimlane Turbine extends visibility and response for security teams

Help Net SecurityJun 9, 00:00 UTC · Jun 9, 2022AI tools & infra

Building a Linux GPU Driver for the M4 Mac Mini in One Month

Two developers built a fully OpenGL ES 3.0 compliant Linux GPU driver for the M4 Mac Mini in one month via clean-room reverse engineering.

Niklas and the author reverse engineered Apple's AGX GPU firmware ABI and user-space components in about a month, a process that normally takes years, producing an OpenGL ES 3.0 conformant driver fast enough to run Minecraft at 200fps on an M4 Mac Mini. The work was done transparently using hypervisor traces without examining Apple binaries, following clean-room practices, and included a custom shader compiler, command stream builder, and a full Linux kernel driver for the firmware ABI. The A18 Pro firmware ABI proved significantly more complex than the M1's, with 1.5x as many structs and twice as many pointers. All experiments and provenance evidence were published in public agx-re repositories.

Hacker News · AI19:30 UTC · 3h agoResearch HN 40↑ · 5 comments

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

77 malicious 'evil twin' Open VSX extensions impersonated developer tools and exfiltrated hostnames and detailed workspace reconnaissance to mangorbit.com.

Manifold Security found 77 extensions uploaded to the Open VSX marketplace between July 26 and August 1, 2026 that impersonate real Microsoft VS Code Marketplace tools, with all 77 sending data to mangorbit.com. 58 lightweight variants exfiltrate the hostname, while 19 recon variants collect editor details, OS username, Git remote hosts, CI environment variables (GitHub, GitLab, Azure DevOps, Buildkite, CircleCI, Codespaces, Gitpod), and installed extension IDs. The recon variant retries for up to seven days and can fall back to a DNS TXT record for exfiltration if the primary domain is blocked. The extensions were removed from Open VSX by August 3, 2026; the disclosure follows a separate npm supply chain campaign, ChainDrop, which compromised 450 packages with a Shai-Hulud worm variant.