WHATS Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach
The Hacker News ·
WHATS
THE HAX?
Top story
Also in coverage
Bellini Capital CISO on AI security governance and the limits of patching faster
Help Net Security ·
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature
darkreading ·
Attackers compromised 42 GitHub repositories by using files too large to be searched
CSO Online ·
Article feed
60 sources ↓ElectroNG is now open source. ElectronJS Security Scanner.
New Kerberos Abuse Path Discovery - Constrained Delegation without Protocol Transition against SPN-less accounts
GhostAction Crosses Paths With PolinRider
The Gentlemen: A closer look at a not-so-gentle ransomware-as-a-service operation
Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
Bellini Capital CISO on AI security governance and the limits of patching faster
AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records
NIST starts the countdown to retire quantum-vulnerable encryption
Breach victims discover their data was held by companies they’ve never heard of
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature
3 Frameworks to Protect CISOs & Orgs Against AI Liability
External Teams Chats Anchor 15-Minute Malware Delivery
SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack
php2shell in Practice: Exploitable, Conditional, and Hard to Mass-Exploit
Alleged Israeli spy company heavily targeted Starlink users, sources say
Ukrainian National Sentenced for Role in Hacking Hospitals, Businesses, and Governments as Part of Ransomware Conspiracies Causing Over $100 Million in Losses
Check if your AWS keys were stolen in the LiteLLM attack
Attackers compromised 42 GitHub repositories by using files too large to be searched
Attackers built a ‘Skynet’ AI agent that hijacks exposed models to run cyberattacks
Node2Shell puts Microsoft and Node.js on Brotli patch duty
Alibaba AI model tried to send data to Beijing server, Cohere says
ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th)
ISC Stormcast For Tuesday, October 27th, 2026 https://isc.sans.edu/podcastdetail/10152, (Tue, Oct 27th)
Apple Patches for October 2026, (Mon, Oct 26th)
Japan's GMO urges customers to shut down PCs amid ransomware threat
OpenAI's GPT-6.1 Terra is safer overall, but shows more destructive-action flags in tests
UNM Health ransomware attack disrupts patient care, surgeries
Raise Cuts Chargebacks 45% and Nearly Ends Manual Fraud Reviews
Fraudsters Leave Patterns, and AWS Wants AI to Follow Them
Scams Gain 10 Percentage Points in Share of Fraud Dollars
PHP2Shell can own the process. Does that mean it gets the network too? Where microVM containment helps, and why patching still matters.
Installing random apps on Android and the inherent threats: monitoring and mitigation
CyberStrikeAI and 44 Agents: What TrendAI Found in Japan
Vulnerabilities in node.js Affecting Cisco Products: October 2026
Vulnerabilities in PHP Affecting Cisco Products: October 2026
Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
Before you file that AI bug report, OpenAI has some advice
All the security risks Anthropic is worried about before its IPO
Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison
Nefilim, Hive ransomware operator given five-year-plus sentence after guilty plea
US indicts Malaysian national after Madagascar scam operation uncovered
Hackers repeatedly breached suppliers holding UK police data, watchdog finds
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Knicks sent employees fake offer of championship rings in phishing test: Report
Disgraced eMudhra drops out of TLS business after using cert private key of 4
Italy ’s Parliament Under Cyber Pressure: Why the Attack on the Chamber Matters
Australia’s Cyber Spy Chief: Expect More Disruption as AI Accelerates Hacking
U.S. CISA adds PHP flaws PHP2Shell to its Known Exploited Vulnerabilities catalog
The 5 Pillars of Agentic Readiness
AI Agent Order Data: Agentic Commerce on Forter’s Network
The Biggest Opportunity in Gaming & Betting Is Knowing When to Say Yes
Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances
Hackers Infect 953 Online Stores With Scanner-Evading Code
OpenAI Compaction Flaw Exposed AI Reasoning to Researchers
why EVERYONE is copying this
The #1 Danger Isn't Roblox
0day Hacks NetworkChuck (OSINT)
Is AI Security a Real Career?
What Does a GRC Cybersecurity Professional Do?
CTF Walkthrough: The Cuckoo's Log
Microsoft Releases Emergency .NET Patches
New Research Reveals Gaps in AI Safeguards, Cyber Experts Discuss
Anthropic’s Claude AI Model Accessed US Voter Data
Five election scams to watch out for
Artificial Intimacy: Love and lies in the age of AI
The web’s having a rough week. Here’s how to browse safely
Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws
Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk
HPE Patches Dozens of Critical Flaws in Networking Products
CVE-2026-20942 Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-62765 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-69284 Windows DCOM Server Elevation of Privilege Vulnerability
UK Politician Jess Asato Got Deepfaked. Now She’s Taking xAI to Court
The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans
The PHP Meltdown Shows How AI Makes Bugs More Exploitable
New AI Threats in 2026 #sponsored by @Snyksec
Follow The Money
AI Meets Minecraft
An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infrastructure
Deploying AI agents securely: how Kaspersky products mitigate AI threats
How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
EPICS Base
Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
Hiding Capabilities in AI Models
Bias in Qwen3-Coder Model
Friday Squid Blogging: Increasing Squid Populations
Heimdal named Advanced Persistent Threat Solution of the Year at the Computing Security Awards
Data Breach Statistics That Matter in 2026
6 alternatives to TrendAI Vision One
I'm using Claude to do reverse engineering at fl studio - it's called Lynx
Running original ARM64 QOI instructions in a browser, with heap checkpoint and restore
Heap overflow in EDK2’s Brotli decompressor: the CVE-2021-28211 fix was applied to LZMA and never to Brotli
The $2,000 php2shell Challenge Was Unexploitable
php situation 24h later
The race to the first exploit // php2shell
🍍📟 Theme Hacking Tip - WiFi Pineapple Pager #pentesting #hacking #cybersecurity
BOTS WIPED OUT? | Threat Wire
🍍📟 Don't dox yourself: Censor Mode - WiFi Pineapple Pager #pentesting #hacking #cybersecurity
Proofpoint Joins Microsoft Integrated Cloud Email Security (ICES) Ecosystem
Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal
Proofpoint CEO on acquiring Varonis for $6.3B: ‘Opportunities like this don’t come every day’
Can You Train AI on a Laptop?
How Police Can Track Your Phone
Learn More About AI With Me at GTC
Indirect Syscall Rust Loader Analysis (Stream)
Malicious AGENTS.md file in Downloads folder hijacks AI coding agents
Vivisection of Hermes: An Active Russian-Market Malware-as-a-Service Platform and Its PyMapper Distribution Chain
PHP2Shell: What to know about two critical PHP flaws
MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
My $250 AI Hackbot Ran 24/7 on a VPS and Missed This
HackerOne Limited Me to 3 Reports After 12 Years
Google just paid a $90,000 bounty for this vulnerability
MY TAKE: OktoberTech reveals a hardening AI foundation — but no one yet governing the agents
News alert: Gcore extends free web protection to government agencies after widespread PHP exploits
Industrial Defender Unifies Endpoint Intelligence and Network Monitoring for CIP-015, Adds Risk Signal
Looking for a mentor
BlackX UEFI Bootkit Leverages “Baton Drop” Flaw to Bypass Secure Boot
Today, we hacked what we'd set out to hack: the iPhone
HackTheBox - Checkpoint
HackTheBox - Eloquia
HackTheBox - DevHub
Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks
AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise
Agents are your newest insiders. Security must move at their speed.
Hacker leaks 281 GB of data from Germany’s far-right AfD party
Smashing Security podcast #489: How a brand new crypto wallet came with a spy inside
Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death
In Singapore for a few days hanging out with hackers and having a good time.
Your AI hackbot has found another 100+ vulnerabilities. Who fixes them? And how? ft Erlend
wood will keep you warm, once when chop, carry, staple and sort it, and once when you burn it.
Behind Japan’s Warnings of a Cyber Crisis
PHP2Shell Exploitation: Two Critical PHP Flaws Explained
TAG-217 Targets South Korean Financial Services with ARTEX
Widespread PHP Flaw May Cause Many Site Outages Today
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
U.K. Sanctions Cryptomus for RU Money Laundering
Does your fraud risk assessment measure up when a financial crime occurs?
Fraud Risk Assessment: A New Model and New Approach
Assessing the Strength of Your Fraud Controls
Black Hat Stories | Island.io
Black Hat Europe 2026 | Hear From Our Sponsors
Black Hat Stories | First Time Exhibitor
ZDI-CAN-34791: Open Asset Importer Library
#StopRansomware: SafePay Ransomware
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
Anthropic’s AI Reversal Is A Warning Shot For Agentic Defense
Agentic AI Is Changing Security Decisions: Why Accountability Must Be Designed, Not Assumed
A New OT Security Playbook for Connected Robots
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business
DCSG1 - Pwn2Own Level Break of a Printer - SungJun Park, WonBeen Im
DCSG1 - Augmenting Apple's Source Code and OS Logs with AI Agents -Olivia Gallucci
DCSG1 - Actual OT Cyber Security - Dillon Lee
Introducing the new Copilot with Home, Code and Autopilot
Building the system for AI at work
Introducing Microsoft 365 G7: Intelligence + Trust for the mission ahead
AI Agents Can Be Secured. We Can Do It.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
Ransomware: A Continuing Threat for Small Businesses
Why every payments team should be watching for ACH fraud
From the Edge to the Core: 9 Ways PKI Secures Your Network
How to Secure Your Email Server on an SMB Budget
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Azure IaaS: Defense in depth built on secure-by-design principles
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
How FIN6 Exfiltrates Files Over FTP
Emulating FIN6 - Active Directory Enumeration Made EASY
The SECRET to Embedding Metasploit Payloads in VBA Macros
Try another search or clear the filters.
Showing 180 of 985 loaded entries. Search and all-headlines view include all available entries in this section. Browse the feed archive.