The Hitchhikers Guide to Online Anonymity

The comprehensive guide for online anonymity and OpSec. Welcome. The purpose: providing an introduction to various online tracking techniques, online ID verification techniques, and detailed guidance to creating and maintaining truly anonymous online identities. It is written with hope for...

CVE-2020-25769

GOG Galaxy Local Privilege Escalation - CVE-2020-25769 GOG Galaxy 2.0 is a platform developed by CD Project designed as a storefront, software delivery, social network and as a unified game launcher. Under Windows the client relies on the GalaxyClientService component for handling privileged task...

SecureCivic

SecureCivic SecureCivic is a citizen-built, open source identity verification platform designed to enable the Social Security Administration SSA to adopt a modern, privacy-first verification system. It removes reliance on private data brokers and middlemen by enabling secure, real-time identity...

CVE-2021-38666-poc

CVE-2021-38666-poc You need to verify your identity and get approval...

dot

the Deepfake Offensive Toolkit dot aka Deepfake Offensive Toolkit makes real-time, controllable deepfakes ready for virtual cameras injection. dot is created for performing penetration testing against e.g. identity verification and video conferencing systems, for the use by security analysts, Red...

CVE-2026-71886

A flaw was found in Bouncy Castle. The OpenPGP certificate application programming interface API fails to verify whether a subkey possesses certification authority before validating third-party certifications or trust delegations. An attacker in possession of a restricted signing or encryption...

openwifipass

OpenWifiPass Una implementación de código abierto del rol de otorgante en el protocolo de Compartir Contraseña Wi-Fi de Apple. Descargo de responsabilidad OpenWifiPass es un software experimental y es el resultado de esfuerzos de ingeniería inversa por parte del proyecto Open Wireless Link. El...

CVE-2026-102128

An identity-verification weakness in Kiteworks Email Protection Gateway allowed the gateway to act on the Kiteworks platform on behalf of a user it had not authenticated, and to provision a platform account for an identity it did not already know. A remote, unauthenticated sender could potentiall...

EUVD-2026-90289

An identity-verification weakness in Kiteworks Email Protection Gateway allowed the gateway to act on the Kiteworks platform on behalf of a user it had not authenticated, and to provision a platform account for an identity it did not already know. A remote, unauthenticated sender could potentiall...

PT-2026-103561

Name of the Vulnerable Software and Affected Versions Kiteworks Email Protection Gateway affected versions not specified Description An identity-verification weakness allows the gateway to act on the Kiteworks platform on behalf of an unauthenticated user and provision a platform account for an...

CVE-2026-102128: Improper Authentication

An identity-verification weakness in Kiteworks Email Protection Gateway allowed the gateway to act on the Kiteworks platform on behalf of a user it had not authenticated, and to provision a platform account for an identity it did not already know. A remote, unauthenticated sender could potentiall...

Sustained Participation As a Security Resource: The Bounded Participation Channel

Can sustained, per-identity participation be engineered into a security resource? Most anti-Sybil defenses price identity creation rather than identity survival. Once admitted, an adversary may sustain many identities without paying a recurring cost. We introduce the Bounded Participation Channel...

CVE-2026-100835

Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and contained the expected firmware patch levels and software measurements, regardless of which machine produced it, so attestation was not bound to...

CVE-2026-100835 Contrast before 1.16.0 Remote Attestation Relay Attack

Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and contained the expected firmware patch levels and software measurements, regardless of which machine produced it, so attestation was not bound to...

EUVD-2026-87851

Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and contained the expected firmware patch levels and software measurements, regardless of which machine produced it, so attestation was not bound to...

CVE-2026-100835 Contrast before 1.16.0 Remote Attestation Relay Attack

Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and contained the expected firmware patch levels and software measurements, regardless of which machine produced it, so attestation was not bound to...

CVE-2026-100835

Contrast versions prior to 1.16.0 are vulnerable to a remote attestation relay attack . The root cause is that the software accepts any valid TEE attestation report containing the correct firmware patch levels and software measurements without binding the attestation to specific, physically trust...

CVE-2026-100835: Improper Certificate Validation

Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report that verified correctly and contained the expected firmware patch levels and software measurements, regardless of which machine produced it, so attestation was not bound to...

LinkedIn adds new checks for fake profiles and work histories

LinkedIn is adding trust and verification features aimed at making fake professional identities, invented work histories, and company impersonation harder to pull off. The company is responding to an environment in which generative AI enables imposters to create an entirely made-up professional...

CVE-2026-86837

The Bookly WordPress plugin before 28.3 does not properly verify a customer's identity before updating their stored details, allowing unauthenticated attackers who know a customer's primary identifier to overwrite that customer's stored personal information such as name, email and address...