WHATS Hackers exploit SiteGuard WAF flaw to run commands as admins
BleepingComputer ·
WHATS
THE HAX?
Top story
Also in coverage
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 4
Security Affairs ·
Orphaned VBA Projects Inside DWG Files: YARA Rule, (Sun, Oct 18th)
SANS Internet Storm Center, InfoCON: green ·
US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars
SecurityWeek ·
Article feed
60 sources ↓Hackers Turned GitHub Against Its Own Users | Threat Wire
🍍📟 New Deauth Attack for WPA3 - WiFi Pineapple Pager #pentesting #cybersecurity Aircrack-NG PR 2724
🍍📟 New DuckyScript: PROMPT_QR - WiFi Pineapple Pager #pentesting #hacking #cybersecurity
🍍📟 New DuckyScript: PROMPT_IMAGE - WiFi Pineapple Pager #pentesting #hacking #cybersecurity
LOLCHAIN: Blockchain abuse techniques, chain evidence and network observables for defenders
semantic_firewall: Generate deterministic semantic fingerprints for Go functions. Detect xz-style backdoors and verify semantic equivalence using Static Single Assignment (SSA) analysis and Scalar Evolution.
US District Court denied WhatsApp's motion to hold NSO in contempt for continuing to hack WhatsApp users after a court order barred it from doing so.
KGB RAT: A Fully Undetectable Windows Trojan Built to Spy, Steal, and Terrorize
2 Hacking Tools You Need to See
How is AI Changing Cybersecurity?
AI is the new industrial revolution
Your AI Agent Doesn’t Need to Be Hacked
Hackers exploit SiteGuard WAF flaw to run commands as admins
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
Drupal patches critical RCE flaws, warns exploits may emerge soon
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 4
Rust-Based CikaBika Bot Turns Discord into a Command Center
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 119
Orphaned VBA Projects Inside DWG Files: YARA Rule, (Sun, Oct 18th)
ISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/10140, (Fri, Oct 16th)
Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th)
US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars
Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel
In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit
ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants
Week in review: Hidden implant in Ledger wallets linked to $93M theft, 1,500+ npm packages exposed
Hackers disguise phishing as promising business opportunities
Scammers clone candidates’ voices to steal cash and voter data ahead of 2026 midterms, FBI warns
PyGhidra + Python + Local LLMs: Turning the Model into a Compiler, Not an Assembler
Aristois and REA
[Release] First-Ever Open Source QEMU Machine Model & Hardware Definitions for Realtek RTD2841 Smart TV SoCs
HackTheBox - Eloquia
HackTheBox - DevHub
HackTheBox - Reactor
Flushing the toilet kills our network!
You can monitor EVERYTHING in your homelab with this
I turned my house into a VIDEO GAME!
Encryption Is Getting Squeezed From All Sides
Chicago-Area Cops Helped HSI Spy on Minnesota Anti-ICE Activists
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
Federal agencies recommend cyber controls, independent testing for frontier AI systems
Prolific Chinese espionage group exploits BeyondTrust zero-day
Cybersecurity incident at BAE Systems disrupts US bankruptcy court system
Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact
Backdooring Open-Weight AI Models
Measuring Human Cryptanalysis Effort
OpenAI models hacked a crypto wallet and breached more websites
Targeted ads delivered 0-click exploits to install mercenary malware
Fridge hack costing millions and sparking fires stemmed from poor security
BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk
Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform
Warning: Axqua VS Code extension is MALWARE
Inside a PaperCut attacker’s AI toolkit: custom Rust collectors, chisel persistence, and AI-directed exploitation using 25 concurrent agents
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
Irish police force has its Twitter hacked in cryptocurrency scam
Krybit ransomware: what you need to know
Smashing Security podcast #488: How a ransomware negotiator ended up arrested at his own conference
Hallucinated domain in official OpenAI skill underscores AI supply chain risks
Xbow spent $40K on AI and cracked Google Chrome wide open
Bank of America spent millions on anti-money-laundering tech, but not enough to avoid a $1.2B fine
CTF Walkthrough: The Cuckoo's Log
Purple Team Incident Adventure | TCM Community Live | Cybersecurity
Why You Need to Know the Software Development Lifecycle (SDLC)
Managing open-weight model risk in enterprise deployments
The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
Post-quantum authentication: Why organizations should start testing certificate ecosystems now
AI Hacking Breach Hits 16 Financial Institutions, Leaks 100,000 Records
OpenAI Claims Model Helped Solve Insider Threat Concern
Healthcare Ransomware Attacks Doubled Since This Time Last Year
Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal
Proofpoint CEO on acquiring Varonis for $6.3B: ‘Opportunities like this don’t come every day’
Thoma Bravo's Proofpoint to buy Varonis Systems in $6.3 billion all-cash deal
Proofpoint lines up $6.3 billion deal for Varonis’ data security
Moscow police detain suspected DataSuckers hackers linked to breaches in Ukraine and Russia
Baltimore suburb confirms August data breach after ransomware claims
16% of RPKI-covered IPv4 routes still allow a forged-origin hijack that passes validation, the setup behind the Virtualizor update attack
CVE-2026-108082: Symfony ReDoS. One request. Seconds of CPU
The Cloudflare Appstore (Appflare) Malware Audit
CVE-2026-105008 Windows Schannel Spoofing Vulnerability
Chromium CVE-2026-106287: Information loss
Chromium CVE-2026-106288: Missing authorization
AI Security Engineering with Ashish Rajan!
Browser Cache Payloads
Steam Local Privilege Escalation
Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments
China Espionage Actor Actively Targeting Critical BeyondTrust Flaw, Google Warns
Cyber Incident at BAE Systems Disrupts US Federal Bankruptcy Noticing
What 2MFA keys brands are good?
CERT-In confirms AI agents breached Indian firms, operated undetected for days
Hoxhunt Q&A session Atendee 2026 code?
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support
CISA Adds One Known Exploited Vulnerability to Catalog
Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials
Inbox flooded with sign-up messages? Email bombing explained
Medicare scam calls, texts and ads: What to watch for this Open Enrollment
Scams Capture 22.4% of Fraud Dollars as Banks Adjust Defenses
Nearly 9 in 10 Card Issuers Turn to AI to Stop Fraud Without Blocking Sales
Brooklyn DA Shuts Down Multi-Million Dollar Crypto Scam Operation
TAG-217 Targets South Korean Financial Services with ARTEX
Working in Boston at the World’s Largest Intelligence Company
Russia Is Tightening Internet Controls, Leading to Operational Risks
The Agentic Commerce Conversations Merchants Are Having Now
Are You Ready for AI Shopping Agents This Holiday Season?
Agentic Commerce Is Here. So Are the Fraudsters Using It.
Cisco Meraki Security Hardening Release: October 2026
Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
ImHex: A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM (55.2k stars)
Sharemagazines lesen
Is this a good learning roadmap for specializing in Web Security?
Update Chrome: Google fixes 37 security flaws, including seven critical bugs
Is this link safe? Find out with Malwarebytes Scam Link Check
Sextortion “help” firm took $60 million from victims, FTC alleges
NEWS ALERT: G2A reports 35% jump in security software orders as consumers broaden protection
FIRESIDE CHAT: Firms once wanted AI callers stopped – now they want to sort good from bad
NEWS ALERT: Insignary launches Clarity AIR to expose hidden open-source and AI-generated code
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business
What is Customer Due Diligence (CDD)
U.K. Sanctions Cryptomus for RU Money Laundering
Microsoft Patches More Than 1,400 Security Flaws
FBI Arrests Executive at Ransomware Negotiation Firm
Google just paid a $90,000 bounty for this vulnerability
I Built a Hackbot for Less Than $250
Vercel paid a $50,000 bounty! 👀👀
Black Hat Stories | Learn From the Legends
Black Hat Stories | The Black Hat Experience
Black Hat Asia 2026 Highlights
Team Introduction Videos for the European Cyber Security Challenge
Security Through Complexity #shorts
OpenAI Hacked with a 1-Year-Old Bug
Your AI hackbot has found another 100+ vulnerabilities. Who fixes them? And how? ft Erlend
wood will keep you warm, once when chop, carry, staple and sort it, and once when you burn it.
I tend to sauna 2-3 days a week, it have made wonders for my recovery. #sauna #mobilesauna #vlog
6 alternatives to Blackpoint for your shortlist
Cybercrime Detective Explains Cybersecurity Jargon in 60-Second Videos for Cybersecurity Awareness Month
Innovation wins. Why smaller beats bigger
ZDI-CAN-32462: Samba
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
A Tale of Two SOCs: Insights From Two Red Team Assessments
DCSG1 - Pwn2Own Level Break of a Printer - SungJun Park, WonBeen Im
DCSG1 - Augmenting Apple's Source Code and OS Logs with AI Agents -Olivia Gallucci
DCSG1 - Actual OT Cyber Security - Dillon Lee
Introducing the new Copilot with Home, Code and Autopilot
Building the system for AI at work
Introducing Microsoft 365 G7: Intelligence + Trust for the mission ahead
AI Agents Can Be Secured. We Can Do It.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
Fraud Risk Assessment: A New Model and New Approach
Assessing the Strength of Your Fraud Controls
Fraud Risk Assessment; A New Model and New Approach
MacSync under the microscope: new delivery methods and a new payload
Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through compromised torrents
Ransomware: A Continuing Threat for Small Businesses
AI in Tax Season: Risks, Scams, and How to Protect Your Data
Tax Season Scams to Watch For This Year
Why every payments team should be watching for ACH fraud
From the Edge to the Core: 9 Ways PKI Secures Your Network
How to Secure Your Email Server on an SMB Budget
Ransomware in the Dairy Aisle: A Look at Fairlife’s Cyberattack
UK’s Largest Cybercrime Case Ends in Prison for Spider Hacker
Hacking US Elections: The First Tranche of Declassified Election Integrity Documents
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Azure IaaS: Defense in depth built on secure-by-design principles
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
How FIN6 Exfiltrates Files Over FTP
Emulating FIN6 - Active Directory Enumeration Made EASY
The SECRET to Embedding Metasploit Payloads in VBA Macros
Try another search or clear the filters.
Showing 180 of 1005 loaded entries. Search and all-headlines view include all available entries in this section. Browse the feed archive.