WHATS 'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery
darkreading ·
WHATS
THE HAX?
Top story
Also in coverage
OpenAI Engineer Accused of Spying on Executives Ordered to Remain in Custody
Security Latest ·
Judge denies WhatsApp’s bid to hold spyware maker in contempt for allegedly targeting users
The Record from Recorded Future News ·
Hackers hijack AOMEI update servers to secretly spread malware
BleepingComputer ·
Article feed
60 sources ↓Black Hat Europe 2026 | Shaping the Future of AI and Cybersecurity
Black Hat Stories | Chris Gaun, VP of Product Marketing at Island.io
Black Hat Stories | Chris Gaun, VP of Product Marketing at Island.io
Black Hat Stories | Learn From the Legends
'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery
OnlyFans Copyright Takedowns Expose Compromised Websites
The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience
BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
OpenAI Engineer Accused of Spying on Executives Ordered to Remain in Custody
WhatsApp Help Pages Leaked Hidden Instructions for a Meta Chatbot
Encryption Is Getting Squeezed From All Sides
Chicago-Area Cops Helped HSI Spy on Minnesota Anti-ICE Activists
Judge denies WhatsApp’s bid to hold spyware maker in contempt for allegedly targeting users
ConnectWise suspends Cloud Backup service after supply chain attack
Two more Serbian opposition figures targeted with spyware, researchers say
Hackers hijack AOMEI update servers to secretly spread malware
Bullhorn takes staffing platform offline to contain cyberattack
OpenCode hack exposes API keys amid AI distillation attacks
PSA: Patch your Plex media server before someone hacks it
OpenAI models hacked a crypto wallet and breached more websites
Targeted ads delivered 0-click exploits to install mercenary malware
Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners
Meta wants to scrape your website to train its AI, and you can’t say no
Deepfakes and Election Manipulation: UK Watchdog Seeks Faster Detection
Wyden seeks adoption of encryption tech at hundreds of federal agencies to protect visitors’ sensitive traffic
DHS to ban DeepSeek from federal civilian agencies
Spyware found on devices belonging to prominent Serbian critics as elections loom
Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks
Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw
Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack
DHS Banning DeepSeek from US Federal Civilian Agencies
Anthropic Gives METR Team “Employee-Like Access”
Healthcare Workers Claim Authentication Errors Delay Patient Care
Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
AI Changes Security Research
AI Security Engineering with Ashish Rajan!
Browser Cache Payloads
Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds
Conduent Agrees to Pay $80m to Settle Data Breach Class Action
OpenCode Breach Could Affect OpenAI, Anthropic and Google
Self-efficacy in the age of AI
Team Introduction Videos for the European Cyber Security Challenge
Security Through Complexity #shorts
What Is Machine Data?
2 Hacking Tools You Need to See
How is AI Changing Cybersecurity?
CVE-2026-80092 Microsoft Identity Web Elevation of Privilege Vulnerability
CVE-2026-105008 Windows Schannel Spoofing Vulnerability
Chromium CVE-2026-106287: Information loss
An attack that corrupts a LLM model about one specific fact - no file changes, no process, no network. Nothing to scan, and you can still detect.
CVE-2026-108097 Deep Dive: Turning a Drupal Field UI Callback Into RCE
PhantomBuffer: Effective EDR Evasion Through Stealth Injection
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
U.K. Sanctions Cryptomus for RU Money Laundering
Microsoft Patches More Than 1,400 Security Flaws
Axonius AI Workforce pairs asset intelligence with automated action
ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access
Sweet Security adds one-click protection for vulnerable cloud workloads
Agents are your newest insiders. Security must move at their speed.
Managing open-weight model risk in enterprise deployments
The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
Deception and Detection: Why AI Empowers Cyber Defense over Offense
Free real-time certificate transparency stream (domain names, no API key)
malscore - a scorer that rates Linux commands/sessions 0–100 with MITRE ATT&CK mapping
HackerOne Limited Me to 3 Reports After 12 Years
Google just paid a $90,000 bounty for this vulnerability
I Built a Hackbot for Less Than $250
Microsoft, Nvidia push provenance checks as open-weight AI adoption accelerates
ConnectWise backup credentials exposed multiple Microsoft 365 tenants
The password nobody owns: Taking machines to zero standing privilege (ZSP)
A sextortion conspiracy killed his son (Lock and Code S07E21)
Millions of California students’ sensitive data stolen in breach
A week in security (October 12 – October 18)
Training AIs to Solve CAPTCHAs
Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact
Backdooring Open-Weight AI Models
Homeworld: Cataclysm source code
PS2 games statically recompiled to WebAssembly
One Parser, Two Bugs, Many Routers: Exploiting Broadcom WiFi Across eCos and Linux
Hackers Turned GitHub Against Its Own Users | Threat Wire
🍍📟 New Deauth Attack for WPA3 - WiFi Pineapple Pager #pentesting #cybersecurity Aircrack-NG PR 2724
🍍📟 New DuckyScript: PROMPT_QR - WiFi Pineapple Pager #pentesting #hacking #cybersecurity
Anthropic’s AI Reversal Is A Warning Shot For Agentic Defense
Agentic AI Is Changing Security Decisions: Why Accountability Must Be Designed, Not Assumed
A New OT Security Playbook for Connected Robots
Orphaned VBA Projects Inside DWG Files: YARA Rule, (Sun, Oct 18th)
ISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/10140, (Fri, Oct 16th)
Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th)
HackTheBox - Eloquia
HackTheBox - DevHub
HackTheBox - Reactor
Flushing the toilet kills our network!
You can monitor EVERYTHING in your homelab with this
I turned my house into a VIDEO GAME!
Warning: Axqua VS Code extension is MALWARE
Inside a PaperCut attacker’s AI toolkit: custom Rust collectors, chisel persistence, and AI-directed exploitation using 25 concurrent agents
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
Irish police force has its Twitter hacked in cryptocurrency scam
Krybit ransomware: what you need to know
Smashing Security podcast #488: How a ransomware negotiator ended up arrested at his own conference
CTF Walkthrough: The Cuckoo's Log
Purple Team Incident Adventure | TCM Community Live | Cybersecurity
Why You Need to Know the Software Development Lifecycle (SDLC)
Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal
Proofpoint CEO on acquiring Varonis for $6.3B: ‘Opportunities like this don’t come every day’
Thoma Bravo's Proofpoint to buy Varonis Systems in $6.3 billion all-cash deal
What 2MFA keys brands are good?
CERT-In confirms AI agents breached Indian firms, operated undetected for days
Hoxhunt Q&A session Atendee 2026 code?
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support
CISA Adds One Known Exploited Vulnerability to Catalog
Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials
Inbox flooded with sign-up messages? Email bombing explained
Medicare scam calls, texts and ads: What to watch for this Open Enrollment
Scams Capture 22.4% of Fraud Dollars as Banks Adjust Defenses
Nearly 9 in 10 Card Issuers Turn to AI to Stop Fraud Without Blocking Sales
Brooklyn DA Shuts Down Multi-Million Dollar Crypto Scam Operation
TAG-217 Targets South Korean Financial Services with ARTEX
Working in Boston at the World’s Largest Intelligence Company
Russia Is Tightening Internet Controls, Leading to Operational Risks
The Agentic Commerce Conversations Merchants Are Having Now
Are You Ready for AI Shopping Agents This Holiday Season?
Agentic Commerce Is Here. So Are the Fraudsters Using It.
Cisco Meraki Security Hardening Release: October 2026
Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
ImHex: A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM (55.2k stars)
Sharemagazines lesen
Is this a good learning roadmap for specializing in Web Security?
NEWS ALERT: G2A reports 35% jump in security software orders as consumers broaden protection
FIRESIDE CHAT: Firms once wanted AI callers stopped – now they want to sort good from bad
NEWS ALERT: Insignary launches Clarity AIR to expose hidden open-source and AI-generated code
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business
What is Customer Due Diligence (CDD)
Your AI hackbot has found another 100+ vulnerabilities. Who fixes them? And how? ft Erlend
wood will keep you warm, once when chop, carry, staple and sort it, and once when you burn it.
I tend to sauna 2-3 days a week, it have made wonders for my recovery. #sauna #mobilesauna #vlog
6 alternatives to Blackpoint for your shortlist
Cybercrime Detective Explains Cybersecurity Jargon in 60-Second Videos for Cybersecurity Awareness Month
Innovation wins. Why smaller beats bigger
ZDI-CAN-32462: Samba
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
A Tale of Two SOCs: Insights From Two Red Team Assessments
DCSG1 - Pwn2Own Level Break of a Printer - SungJun Park, WonBeen Im
DCSG1 - Augmenting Apple's Source Code and OS Logs with AI Agents -Olivia Gallucci
DCSG1 - Actual OT Cyber Security - Dillon Lee
Introducing the new Copilot with Home, Code and Autopilot
Building the system for AI at work
Introducing Microsoft 365 G7: Intelligence + Trust for the mission ahead
AI Agents Can Be Secured. We Can Do It.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
Fraud Risk Assessment: A New Model and New Approach
Assessing the Strength of Your Fraud Controls
Fraud Risk Assessment; A New Model and New Approach
MacSync under the microscope: new delivery methods and a new payload
Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through compromised torrents
Ransomware: A Continuing Threat for Small Businesses
AI in Tax Season: Risks, Scams, and How to Protect Your Data
Tax Season Scams to Watch For This Year
Why every payments team should be watching for ACH fraud
From the Edge to the Core: 9 Ways PKI Secures Your Network
How to Secure Your Email Server on an SMB Budget
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Azure IaaS: Defense in depth built on secure-by-design principles
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
How FIN6 Exfiltrates Files Over FTP
Emulating FIN6 - Active Directory Enumeration Made EASY
The SECRET to Embedding Metasploit Payloads in VBA Macros
Try another search or clear the filters.
Showing 180 of 1015 loaded entries. Search and all-headlines view include all available entries in this section. Browse the feed archive.