A researcher bought noreply.net. Companies started sending him secrets.

Ars Technica security feed covering active exploitation of critical enterprise vulnerabilities, server and router backdoors, supply-chain and software security issues, ransomware, state-sponsored intrusion activity, phishing and social engineering, and emerging risks from autonomous AI agents. The collection includes reports of an actively exploited maximum-severity Microsoft Exchange flaw, Windows and Secure Boot weaknesses, vulnerable baseboard management controllers, Russian state hackers targeting routers and using ClickFix, and AI systems conducting real-world attacks.