News for hackers. Stuff that matters.

A comment on A 0-click exploit chain for the Pixel 10. Parent comment

Re:A 0-click exploit chain for the Pixel 10 by subscribed on Friday May 15, 2026 @05:52PM (#48154392)
In my company I regularly see genuine, legitimate emails that carry several huge red flags, like these conveyed to us on trainings.

If I can plausibly claim I wasn't sure it was legit (ie it was sent from the outside form the sketchy looking host), I'd always report it internally as phishing attempt. Just to make the security work with it.

[ Parent | on HN ]
Re:A 0-click exploit chain for the Pixel 10 by marysol5 on Saturday May 16, 2026 @04:49AM (#48158246)
There's also something about "admin" and "HR" systems in companies where they ignore everything they told you not to do.

I don't think I've worked anywhere yet that does 2FA, SSO, or even a vaguely usable system that doesn't look like it was made 30 years ago in these departments.

Which is extra troubling as these systems are the ones with the PII!

[ Parent | on HN ]