WHATS North Korean IT Workers Used Stolen US Identities to Earn $3 Million
Security Affairs ·
WHATS
THE HAX?
Top story
Also in coverage
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
BleepingComputer ·
Encryption Is Getting Squeezed From All Sides
Security Latest ·
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
The Hacker News ·
Article feed
60 sources ↓North Korean IT Workers Used Stolen US Identities to Earn $3 Million
U.S. CISA adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog
BAE Systems Cyber Incident Takes US Bankruptcy Noticing Center Offline for a Week
AI Agents Accessed Indian Organizations Without Authorization, CERT-In Warns
MultiRand: Implements insecure, pseudo-random linear congruential generators using parameters of various common rand() implementations.
esp32-iphone-agent: Let an AI model use a real iPhone with a $7 ESP32: AirPlay eyes, USB HID hands, any OpenAI-compatible vision model. No Mac, no developer account, no jailbreak.
Audit only eBPF EDR with deep process lineage and native SIEM export (ECS/OCSF)
AI Agents as Attack Vectors: Unauthorized Access by Agents under Evaluation and Misuse of Open-Source Agentic AI Tools Targeting Indian ICT Assets
AI is the new industrial revolution
Your AI Agent Doesn’t Need to Be Hacked
No Energy, No AI
Microsoft’s X Hacked for a Clippy Scam
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
Drupal patches critical RCE flaws, warns exploits may emerge soon
Critical BlockStrap flaw lets hackers run code on Magento servers
HackTheBox - Eloquia
HackTheBox - DevHub
HackTheBox - Reactor
Flushing the toilet kills our network!
You can monitor EVERYTHING in your homelab with this
I turned my house into a VIDEO GAME!
Encryption Is Getting Squeezed From All Sides
Chicago-Area Cops Helped HSI Spy on Minnesota Anti-ICE Activists
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel
In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit
BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts
Federal agencies recommend cyber controls, independent testing for frontier AI systems
Prolific Chinese espionage group exploits BeyondTrust zero-day
Cybersecurity incident at BAE Systems disrupts US bankruptcy court system
Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact
Backdooring Open-Weight AI Models
Measuring Human Cryptanalysis Effort
OpenAI models hacked a crypto wallet and breached more websites
Targeted ads delivered 0-click exploits to install mercenary malware
Fridge hack costing millions and sparking fires stemmed from poor security
BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk
Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform
DebuggerJ++ — A native debugger built to be driven by an AI
A story of wifi secrets, UART lockdowns and a damaged flash memory chip |
Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
Warning: Axqua VS Code extension is MALWARE
Inside a PaperCut attacker’s AI toolkit: custom Rust collectors, chisel persistence, and AI-directed exploitation using 25 concurrent agents
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
Hallucinated domain in official OpenAI skill underscores AI supply chain risks
Xbow spent $40K on AI and cracked Google Chrome wide open
Bank of America spent millions on anti-money-laundering tech, but not enough to avoid a $1.2B fine
CTF Walkthrough: The Cuckoo's Log
Purple Team Incident Adventure | TCM Community Live | Cybersecurity
Why You Need to Know the Software Development Lifecycle (SDLC)
Managing open-weight model risk in enterprise deployments
The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
Post-quantum authentication: Why organizations should start testing certificate ecosystems now
AI Hacking Breach Hits 16 Financial Institutions, Leaks 100,000 Records
OpenAI Claims Model Helped Solve Insider Threat Concern
Healthcare Ransomware Attacks Doubled Since This Time Last Year
Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal
Proofpoint CEO on acquiring Varonis for $6.3B: ‘Opportunities like this don’t come every day’
Thoma Bravo's Proofpoint to buy Varonis Systems in $6.3 billion all-cash deal
Proofpoint lines up $6.3 billion deal for Varonis’ data security
Moscow police detain suspected DataSuckers hackers linked to breaches in Ukraine and Russia
Baltimore suburb confirms August data breach after ransomware claims
16% of RPKI-covered IPv4 routes still allow a forged-origin hijack that passes validation, the setup behind the Virtualizor update attack
CVE-2026-108082: Symfony ReDoS. One request. Seconds of CPU
The Cloudflare Appstore (Appflare) Malware Audit
CVE-2026-105008 Windows Schannel Spoofing Vulnerability
Chromium CVE-2026-106287: Information loss
Chromium CVE-2026-106288: Missing authorization
AI Security Engineering with Ashish Rajan!
Browser Cache Payloads
Steam Local Privilege Escalation
Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments
China Espionage Actor Actively Targeting Critical BeyondTrust Flaw, Google Warns
Cyber Incident at BAE Systems Disrupts US Federal Bankruptcy Noticing
Hackers disguise phishing as promising business opportunities
Scammers clone candidates’ voices to steal cash and voter data ahead of 2026 midterms, FBI warns
Fake Arch Linux AUR packages exploit typos to run malware with root privileges
What 2MFA keys brands are good?
CERT-In confirms AI agents breached Indian firms, operated undetected for days
Hoxhunt Q&A session Atendee 2026 code?
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support
CISA Adds One Known Exploited Vulnerability to Catalog
Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials
Inbox flooded with sign-up messages? Email bombing explained
Medicare scam calls, texts and ads: What to watch for this Open Enrollment
Scams Capture 22.4% of Fraud Dollars as Banks Adjust Defenses
Nearly 9 in 10 Card Issuers Turn to AI to Stop Fraud Without Blocking Sales
Brooklyn DA Shuts Down Multi-Million Dollar Crypto Scam Operation
ISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/10140, (Fri, Oct 16th)
Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th)
Panchan's Mining Island [Guest Diary], (Wed, Oct 14th)
🍍📟 New DuckyScript: PROMPT_IMAGE - WiFi Pineapple Pager #pentesting #hacking #cybersecurity
Why Apple Says Your Mac Is at Risk From AI | Threat Wire
🍍📟 Let me be CLEAR: New Limited Edition WiFi Pineapple Pager
TAG-217 Targets South Korean Financial Services with ARTEX
Working in Boston at the World’s Largest Intelligence Company
Russia Is Tightening Internet Controls, Leading to Operational Risks
The Agentic Commerce Conversations Merchants Are Having Now
Are You Ready for AI Shopping Agents This Holiday Season?
Agentic Commerce Is Here. So Are the Fraudsters Using It.
Cisco Meraki Security Hardening Release: October 2026
Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
ImHex: A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM (55.2k stars)
Sharemagazines lesen
Is this a good learning roadmap for specializing in Web Security?
Update Chrome: Google fixes 37 security flaws, including seven critical bugs
Is this link safe? Find out with Malwarebytes Scam Link Check
Sextortion “help” firm took $60 million from victims, FTC alleges
NEWS ALERT: G2A reports 35% jump in security software orders as consumers broaden protection
FIRESIDE CHAT: Firms once wanted AI callers stopped – now they want to sort good from bad
NEWS ALERT: Insignary launches Clarity AIR to expose hidden open-source and AI-generated code
Smashing Security podcast #488: How a ransomware negotiator ended up arrested at his own conference
GTA 6 leaker threatens to release full playable version of game ahead of official launch
$10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business
What is Customer Due Diligence (CDD)
U.K. Sanctions Cryptomus for RU Money Laundering
Microsoft Patches More Than 1,400 Security Flaws
FBI Arrests Executive at Ransomware Negotiation Firm
Google just paid a $90,000 bounty for this vulnerability
I Built a Hackbot for Less Than $250
Vercel paid a $50,000 bounty! 👀👀
Black Hat Stories | Learn From the Legends
Black Hat Stories | The Black Hat Experience
Black Hat Asia 2026 Highlights
Team Introduction Videos for the European Cyber Security Challenge
Security Through Complexity #shorts
OpenAI Hacked with a 1-Year-Old Bug
Your AI hackbot has found another 100+ vulnerabilities. Who fixes them? And how? ft Erlend
wood will keep you warm, once when chop, carry, staple and sort it, and once when you burn it.
I tend to sauna 2-3 days a week, it have made wonders for my recovery. #sauna #mobilesauna #vlog
6 alternatives to Blackpoint for your shortlist
Cybercrime Detective Explains Cybersecurity Jargon in 60-Second Videos for Cybersecurity Awareness Month
Innovation wins. Why smaller beats bigger
ZDI-CAN-32462: Samba
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
A Tale of Two SOCs: Insights From Two Red Team Assessments
DCSG1 - Pwn2Own Level Break of a Printer - SungJun Park, WonBeen Im
DCSG1 - Augmenting Apple's Source Code and OS Logs with AI Agents -Olivia Gallucci
DCSG1 - Actual OT Cyber Security - Dillon Lee
Introducing the new Copilot with Home, Code and Autopilot
Building the system for AI at work
Introducing Microsoft 365 G7: Intelligence + Trust for the mission ahead
AI Agents Can Be Secured. We Can Do It.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
Fraud Risk Assessment: A New Model and New Approach
Assessing the Strength of Your Fraud Controls
Fraud Risk Assessment; A New Model and New Approach
MacSync under the microscope: new delivery methods and a new payload
Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through compromised torrents
Ransomware: A Continuing Threat for Small Businesses
AI in Tax Season: Risks, Scams, and How to Protect Your Data
Tax Season Scams to Watch For This Year
Why every payments team should be watching for ACH fraud
From the Edge to the Core: 9 Ways PKI Secures Your Network
How to Secure Your Email Server on an SMB Budget
Ransomware in the Dairy Aisle: A Look at Fairlife’s Cyberattack
UK’s Largest Cybercrime Case Ends in Prison for Spider Hacker
Hacking US Elections: The First Tranche of Declassified Election Integrity Documents
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Azure IaaS: Defense in depth built on secure-by-design principles
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
How FIN6 Exfiltrates Files Over FTP
Emulating FIN6 - Active Directory Enumeration Made EASY
The SECRET to Embedding Metasploit Payloads in VBA Macros
Try another search or clear the filters.
Showing 180 of 995 loaded entries. Search and all-headlines view include all available entries in this section. Browse the feed archive.