WHATS The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call
Security Latest ·
WHATS
THE HAX?
Top story
Also in coverage
British soldier ignored order to pull his SIM card, then got blackmailed
Security - Ars Technica ·
SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins
SecurityWeek ·
U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog
Security Affairs ·
Article feed
60 sources ↓The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call
Free Chinese AI Models Are Getting Scary Good at Hacking
6 Best VPN Services (2026), Tested and Reviewed
Hugging Face’s CEO Says His P(Doom) Is ‘Close to Zero’
unlocking any car from X brand in most of the world
The Exploit Was the Bottleneck
Reproducing the GhostMap APK crash loop on Android 16/17, plus an offline check for the ZIP parser mismatch
Forwarded Without Question: How Web Frameworks Overtrust the Forwarded Header
British soldier ignored order to pull his SIM card, then got blackmailed
Chainalysis says hackers stole credentials and tokens for all of its customers
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Hackers exploited iOS and Android flaws to infect phones
SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins
Japan Announces Emergency Cybersecurity Package Following a Wave of Attacks
In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days
U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog
White House Network Appears in Global Residential Proxy Traffic
OpenAI Rates GPT-6 Cyber Critical After Major Vulnerability Discoveries
Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub
Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time
Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot
ARTEX abuse expands as cybercriminals target financial sector
Threat actors use agentic AI tooling to find and abuse exposed secrets
New investments to reduce on-premises security risk
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
Runaway AI hacking agent behind WorkOS breach after escaping sandbox
OpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs
DEF CON 34 - Main - How Dealer Installed AntiTheft System Exposes 1M+ Cars - A Schulman, J Yu, Y Wei
DEF CON 34 - Main - Bird Hunting Season The Final Flight - Jon Gaines
DEF CON 34 - BugBounty - How Cache Poisoning Led to Critical Acct Takeover in TikTok's Web - G Chong
Friday Squid Blogging: New Jurassic Squid Predecessors
Pinpointing Location of Videos from Background Airplane Sounds
AIs Hacking the Law
SonicWall SonicOS Affected By Multiple Vulnerabilities - CVE-2026-77708, CVE-2026-77709, CVE-2026-82308, CVE-2026-107154, CVE-2026-107155, CVE-2026-19703, CVE-2026-19868
Threat actors use agentic AI tooling to find and abuse exposed secrets
ARTEX: Agentic Asbestos
UK Wades Into Tech Sovereignty Amid AI Policy Changes
AI Gave Your Incident Archive a Second Job
Why Europe's Freezer Hacks Spread So Far, So Fast
Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026
Vulnerabilities in PHP Affecting Cisco Products: October 2026
Medical services company settles with 4 states over 2023 hack of sensitive patient records
Certificate authority DigiCert reports data breach involving business customer info
FBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackers
Next Steps for PHP
ClickFix Gets Sneaky
A Database of Malware (in Minecraft)
The Fake Interview in Binance’s $6.3B Hack
Why Windows 11 Privacy Is Hard
Copilot Told Researchers How to Hack It
Authorities accuse trio of using AI deepfakes to defraud $129M from businesses
Air Force cyber official: need to invest in digital forensics
OpenAI debuts GPT-6 Cyber, touting better performance — and safety guardrails
you need to use Herdr RIGHT NOW!!
this WiFi GPU is wild.....
local AI's biggest problem... they solved it?
CVE-2026-83844 Windows Paint Remote Code Execution Vulnerability
Chromium CVE-2026-118309: Incorrect reference resolution
Chromium CVE-2026-118314: Incorrect reference resolution
PUBG Lite DEVLOG #11 - Vehicles!
I built a free, open-source IDM alternative that can download using Ethernet + Wi-Fi + USB tethering simultaneously, with Docker and browser support
[ Removed by Reddit ]
A mole in the White House? Residential proxies are everywhere
Railway’s AI agents go off the track on a rival’s network
CPython flaw exposes AI inference servers to sandbox escape attacks
How an Image Causes a Heap Buffer Overflow // libheif
The $2,000 php2shell Challenge Was Unexploitable
php situation 24h later
ARTEX Offensive AI Tool Activity Far Exceeds Reported Campaigns, Censys Finds
CISA, FBI Urge Action to Protect Industrial Refrigeration Networks
Half of Security Leaders Report Sensitive Data Exposure Through AI Tools
OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158)
Residential proxy traffic caught leaving the White House network
OpenAI’s GPT-6 Cyber found 81 Firefox flaws earlier AI testing missed
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
Post-Quantum Questions to Ask Your Vendors
US Government Partners Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems
MDR vs SOC: How to choose the right option for your organisation
The best due diligence on a vendor is who they’ve worked with
Heimdal named Advanced Persistent Threat Solution of the Year at the Computing Security Awards
Virtualization security: attack layers and misconfiguration impact
The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603
MLEP in KICS for Networks 5.0: how machine learning helps track network behavior of OT devices
So I think the ai bot screwed me over with their new filter system.
I built a phone-browser "web terminal" to run my ESP32 Marauder headless. This project was made to be compatible with whatever hardware you have available (IOS/ANDROID/MAC/WINDOWS) — works with the marauder v8 and mini v3.
Russia-linked APT29 used hacked sites, cloned domains and the Plerdy tracker to serve patched-flaw exploits to out-of-date iPhones and Android phones.
Fraud Costs Financial Institutions More Than Money
Payment Processors Compete on Checkout With Passkeys
DOJ Launches Super Intelligence Task Force to Combat AI Fraud and Hacks
ZDI-CAN-34526: BlueZ
ISC Stormcast For Friday, November 6th, 2026 https://isc.sans.edu/podcastdetail/10168, (Fri, Nov 6th)
Vulnerability Scans for Older Cisco IOS Vulnerability / Opt-Out Headers, (Thu, Nov 5th)
ISC Stormcast For Thursday, November 5th, 2026 https://isc.sans.edu/podcastdetail/10166, (Thu, Nov 5th)
October 2026 CVE Landscape
The Shift: Rethinking the Human in the Loop
Prediction Markets Emerge as a New Vertical for Traffer Teams
Phone return scams: where a real delivery and a fake return end up in a bill for you
NIKKE PC launcher compromise put players’ passwords and personal files at risk
Scammers use AI-generated images of missing pets to extort owners
Introducing Theme Studio Pro
A 12-Year-Old Security Flaw Was Just the Beginning | Threat Wire
🍍📟 [PAYLOAD] 🔴 Hak5 Live: WiFi Pineapple Pager with Darren Kitchen
Want to Rent an Internet Address at the White House?
Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies
Widespread PHP Flaw May Cause Many Site Outages Today
Smashing Security podcast #491: How AI agents are spooking the banks
Hackers leak personnel data of 41,000+ Homeland Security staff, including ICE and border agents
BYOD cyberattack diverts ambulances and cancels classes at University of New Mexico health center
Fromage-Gate: Old-School Hacking Tactics vs. French Supermarkets
Understanding the Blast Radius of a Cryptographic Change
Eliminating the Blind Spots Between Humans, Machines, and AI
Meta paid a $300,000 bounty for this
OpenAI paid $5000 for this account takeover vulnerability that could also leak your private chats
I recreated a real MCP vulnerability and tested it with @snyksec’s Evo to see if it finds it. 👀 #ad
Fridge Cyberattacks Now Targeting Blood Banks, U.S. Military Bases
5 Data Security Stories to Know About (October 2026)
Deepfake Desensitization is the New Crisis
SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware
Gorbag: Orcs at the border harvesting intelligence from Ukraine
Are CTF Platforms Useful? (Ask a CISO)
DEF CON CTF Walkthrough: OSINT Edition
Real Folks of Cyber | Thomas Rogers | DITL
[Analysis] "LWTV" - a fake live-TV app that's an Android RAT built in China, stealing UPI/OTP from Indian users (full report + IOCs)
GitHub - rjzak/malware-modeler-rs: Generate training data and ML models for benign vs. malicious files plus related tools.
Adding onto the post "Archived malware I found over the years pt1" BY: "u/Fickle_Plan_208" Effort post!!!!! read description.
AI Agent Order Data: Agentic Commerce on Forter’s Network
How to Stop Holiday Return Abuse and Reseller Fraud
Holiday Shopping Gets an Agentic AI Twist
Difference between cyber risk management standard vs. framework
Purple team using AI to expedite both sides
Open-Source Contribution Vibes
HackTheBox - MakeSense
HackTheBox - Checkpoint
HackTheBox - Eloquia
Is curl Getting Harder to Hack? Daniel Stenberg on AI vs. Decades of Hardening
In Singapore for a few days hanging out with hackers and having a good time.
Your AI hackbot has found another 100+ vulnerabilities. Who fixes them? And how? ft Erlend
SHARED INTEL Q&A: 82% of campaign domains expose donors to email fraud before midterms
SHARED INTEL Q&A: PHP2Shell is no Log4Shell — open-source flaw is more warning than wildfire
MY TAKE: OktoberTech reveals a hardening AI foundation — but no one yet governing the agents
Proofpoint Introduces Flex to Help Customers Invest with Confidence as Security Needs Evolve
Proofpoint Joins Microsoft Integrated Cloud Email Security (ICES) Ecosystem
Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal
The AI advantage your company can keep
Bringing CRM into the flow of work and agents into business process for sales and service teams
Introducing the new Copilot with Home, Code and Autopilot
Does your fraud risk assessment measure up when a financial crime occurs?
Fraud Risk Assessment: A New Model and New Approach
Assessing the Strength of Your Fraud Controls
#StopRansomware: SafePay Ransomware
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
Anthropic’s AI Reversal Is A Warning Shot For Agentic Defense
Agentic AI Is Changing Security Decisions: Why Accountability Must Be Designed, Not Assumed
A New OT Security Playbook for Connected Robots
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business
AI Agents Can Be Secured. We Can Do It.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
Ransomware: A Continuing Threat for Small Businesses
AI in Tax Season: Risks, Scams, and How to Protect Your Data
Tax Season Scams to Watch For This Year
Why every payments team should be watching for ACH fraud
From the Edge to the Core: 9 Ways PKI Secures Your Network
How to Secure Your Email Server on an SMB Budget
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Azure IaaS: Defense in depth built on secure-by-design principles
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
How FIN6 Exfiltrates Files Over FTP
Emulating FIN6 - Active Directory Enumeration Made EASY
The SECRET to Embedding Metasploit Payloads in VBA Macros
Try another search or clear the filters.
Showing 180 of 1009 loaded entries. Search and all-headlines view include all available entries in this section. Browse the feed archive.