EUVD-2024-28477

Malicious code in bioql PyPI...

EUVD-2024-43522

Malicious code in bioql PyPI...

Stop Alert Chaos: Context Is the Key to Effective Incident Response

The Problem: Legacy SOCs and Endless Alert Noise Every SOC leader knows the feeling: hundreds of alerts pouring in, dashboards lighting up like a slot machine, analysts scrambling to keep pace. The harder they try to scale people or buy new tools, the faster the chaos multiplies. The problem is n...

Stop Alert Chaos: Context Is the Key to Effective Incident Response

The Problem: Legacy SOCs and Endless Alert Noise Every SOC leader knows the feeling: hundreds of alerts pouring in, dashboards lighting up like a slot machine, analysts scrambling to keep pace. The harder they try to scale people or buy new tools, the faster the chaos multiplies. The problem is n...

Friday Squid Blogging: Jigging for Squid

A nice story...

PT-2025-36213

Name of the Vulnerable Software and Affected Versions josepsitjar StoryMap versions n/a through 2.1 Description The software contains a DOM-Based Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations Update josepsitjar StoryMap to a...

Malicious code in onzu-story (npm)

The package onzu-story was found to contain malicious code...

Malicious code in @malware-test-ruana-story-pipes-tigon/test-mlw3-ruana-story-pipes-tigon (npm)

The package @malware-test-ruana-story-pipes-tigon/test-mlw3-ruana-story-pipes-tigon was found to contain malicious code...

MAL-2025-8892 Malicious code in @malware-test-ruana-story-pipes-tigon/test-mlw3-ruana-story-pipes-tigon (npm)

The package @malware-test-ruana-story-pipes-tigon/test-mlw3-ruana-story-pipes-tigon was found to contain malicious code...

MAL-2025-28252 Malicious code in onzu-story (npm)

The package onzu-story was found to contain malicious code...

Facebook's New AI Tool Asks to Upload Your Photos for Story Ideas, Sparking Privacy Concerns

Facebook, the social network platform owned by Meta, is asking for users to upload pictures from their phones to suggest collages, recaps, and other ideas using artificial intelligence AI, including those that have not been directly uploaded to the service. According to TechCrunch, which first...

Facebook’s New AI Tool Asks to Upload Your Photos for Story Ideas, Sparking Privacy Concerns

Facebook, the social network platform owned by Meta, is asking for users to upload pictures from their phones to suggest collages, recaps, and other ideas using artificial intelligence AI, including those that have not been directly uploaded to the service. According to TechCrunch, which first...

CVE-2024-30557

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aesopinteractive Aesop Story Engine allows Stored XSS.This issue affects Aesop Story Engine: from n/a through 2.3.2...

CVE-2023-29747

Story Saver for Instragram - Video Downloader 1.0.6 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The attacker can use the method to modify the data in any SharedPreference file, these data will be loaded into the memory when the...

CVE-2010-5022

SQL injection vulnerability in the JExtensions JE Story Submit comjesubmit component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php...

How to Leak to a Journalist

Neiman Lab has some good advice on how to leak a story to a journalist...

Telegram-Story-Scraper - A Python Script That Allows You To Automatically Scrape And Download Stories From Your Telegram Friends

A Python script that allows you to automatically scrape and download stories from your Telegram friends using the Telethon library. The script continuously monitors and saves both photos and videos from stories, along with their metadata. Important Note About Story Access ⚠️ Due to Telegram API...

Troy Hunt Gets Phished

In case you need proof that anyone , even someone who does cybersecurity for a living, can fall for a phishing attack, Troy Hunt has a long, iterative story on his webpage about how he got phished. Worth reading. EDITED TO ADD 4/14: Commentary from Adam Shostack and Cory Doctorow...

Story About Medical Device Security

Ben Rothke relates a story about me working with a medical device firm back when I was with BT. I don't remember the story at all, or who the company was. But it sounds about right...

CVE-2024-49663

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in elenkadark uCAT – Next Story ucat-next-story allows Reflected XSS.This issue affects uCAT – Next Story: from n/a through = 2.0.0...