WHATS Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
The Hacker News ·
WHATS
THE HAX?
Top story
Also in coverage
Several AI security market categories are headed for bigger platforms
Help Net Security ·
OpenAI’s August fix for theft of reasoning traces was quickly bypassed
CSO Online ·
ISC Stormcast For Tuesday, October 27th, 2026 https://isc.sans.edu/podcastdetail/10152, (Tue, Oct 27th)
SANS Internet Storm Center, InfoCON: green ·
Article feed
60 sources ↓Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
Several AI security market categories are headed for bigger platforms
Microsoft Authenticator vulnerability let rogue Android apps steal work account access
LLM agent security needs more than guardrails
Amutable Foundations is a Linux system with no SSH and no package manager
Choose Your Backend: Three TLS Bugs in GoAhead
How to Intercept HTTP/3 Traffic (QUIC and QPACK Explained)
Connection Reuse leading to desync
The AI RCEssion: Why AI-driven security is calling in decades of software tech debt
CVE Intel: open-source CVE triage tool.
PHP2Shell: Critical PHP Vulnerabilities Enable Unauthenticated Remote Code Execution
Social Security truths
Context Bombs: Making attacking agents pay
OpenAI’s August fix for theft of reasoning traces was quickly bypassed
OpenAI, Anthropic disclosures spotlight growing AI containment challenge
Malicious downloads can trick AI coding agents into compromising themselves
ISC Stormcast For Tuesday, October 27th, 2026 https://isc.sans.edu/podcastdetail/10152, (Tue, Oct 27th)
Apple Patches for October 2026, (Mon, Oct 26th)
Looking for a Language [Guest Diary], (Wed, Oct 21st)
Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics
Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI
Industrial Vendors Check Products for PHP2Shell Vulnerabilities
So Many AI Security Benchmarks, But None Tell the Whole Story
Risks & Rewards: How AI Is Redefining the CISO's Role
In-the-Wild Attack Abuses AI Agents' Trust in Markdown
Experts temper emergency-level alarms over critical Brotli defect
Senators, rights groups say Trump administration breaking law by withholding surveillance court opinion
Authorities extradite Chinese national for alleged $37M investment scam
I'm using Claude to do reverse engineering at fl studio - it's called Lynx
Running original ARM64 QOI instructions in a browser, with heap checkpoint and restore
Heap overflow in EDK2’s Brotli decompressor: the CVE-2021-28211 fix was applied to LZMA and never to Brotli
University of Copenhagen data breach exposes data of 525,000 people
Former pentester used ARTEX AI to steal 8.2 million data records
OpenAI launches GPT-6.1 Terra with 3x faster AI agents, 50% lower pricing
Banks Narrow Fraud Technology Divide but Deliver Uneven Results
57% of Large Firms Report Bot or Agent Incidents or Losses
FTC Data Shows Investment Scams Fuel Fivefold Surge in Seniors’ Fraud Losses
Texas sues OpenAI for deceiving consumers about safety, seeks sweeping reforms and fines
Serbian autocrat loses election following widespread reports of digital repression
Ukraine disputes Musk's claims of Starlink misuse as military connectivity restored
Magento Campaign Infects 953 Online Stores Across Five Domains
AI-Generated Fake Bank Calls and NFC App Enabled €380,000 Fraud, Dutch Police Say
Researchers Uncover Rentable Android Spyware uCreater Targeting WeChat and Telegram
Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
Vulnerabilities in PHP Affecting Cisco Products: October 2026
Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability
Follow The Money
AI Meets Minecraft
The AI Threat Landscape
The $2,000 php2shell Challenge Was Unexploitable
php situation 24h later
The race to the first exploit // php2shell
🍍📟 Theme Hacking Tip - WiFi Pineapple Pager #pentesting #hacking #cybersecurity
BOTS WIPED OUT? | Threat Wire
🍍📟 Don't dox yourself: Censor Mode - WiFi Pineapple Pager #pentesting #hacking #cybersecurity
Anthropic’s Claude AI Model Accessed US Voter Data
8 Million Records Allegedly Stolen by AI Hacking Group
PHP2Shell Exploited in the Wild
Proofpoint Joins Microsoft Integrated Cloud Email Security (ICES) Ecosystem
Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal
Proofpoint CEO on acquiring Varonis for $6.3B: ‘Opportunities like this don’t come every day’
Can You Train AI on a Laptop?
How Police Can Track Your Phone
Learn More About AI With Me at GTC
CISA 2030 Sets Out ‘Aggressive, Anticipatory’ Cyber Defense Strategy for Critical Infrastructure
Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens
Linux Flaws Exposed Before Fixes as Root Exploit Goes Public
Indirect Syscall Rust Loader Analysis (Stream)
Malicious AGENTS.md file in Downloads folder hijacks AI coding agents
Vivisection of Hermes: An Active Russian-Market Malware-as-a-Service Platform and Its PyMapper Distribution Chain
The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans
The PHP Meltdown Shows How AI Makes Bugs More Exploitable
Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
CVE-2026-105728 Dynamics Business Central Information Disclosure Vulnerability
CVE-2026-69923 Windows AI Elevation of Privilege Vulnerability
CVE-2026-69926 Desktop Window Manager Elevation of Privilege Vulnerability
Popcorn Time’s forgotten updater left millions of devices exposed to hijacking
AI Halloween videos: Who’s getting your photos?
Patient records exposed in Quest breach: What you need to know
6 alternatives to TrendAI Vision One
Why people don’t report scams, and it’s not embarrassment
6 alternatives to Blackpoint for your shortlist
PHP2Shell: What to know about two critical PHP flaws
MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
My $250 AI Hackbot Ran 24/7 on a VPS and Missed This
HackerOne Limited Me to 3 Reports After 12 Years
Google just paid a $90,000 bounty for this vulnerability
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
Bias in Qwen3-Coder Model
Friday Squid Blogging: Increasing Squid Populations
Compromised TLS Certificates
MY TAKE: OktoberTech reveals a hardening AI foundation — but no one yet governing the agents
News alert: Gcore extends free web protection to government agencies after widespread PHP exploits
Industrial Defender Unifies Endpoint Intelligence and Network Monitoring for CIP-015, Adds Risk Signal
Deploying AI agents securely: how Kaspersky products mitigate AI threats
How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia
Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)
GCIH studying. Advice needed.
Pivoting away from working at an MSSP, advice?
Open alternative to Glass wire (for network monitoring)?
Looking for a mentor
BlackX UEFI Bootkit Leverages “Baton Drop” Flaw to Bypass Secure Boot
Today, we hacked what we'd set out to hack: the iPhone
HackTheBox - Checkpoint
HackTheBox - Eloquia
HackTheBox - DevHub
Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks
AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise
Agents are your newest insiders. Security must move at their speed.
Knicks sent employees fake offer of championship rings in phishing test: Report
Disgraced eMudhra drops out of TLS business after using cert private key of 4
Hackers got a four-day head start on epic PHP2Shell vulnerability
The #1 Danger Isn't Roblox
0day Hacks NetworkChuck (OSINT)
Flushing the toilet kills our network!
AI Agent Order Data: Agentic Commerce on Forter’s Network
The Biggest Opportunity in Gaming & Betting Is Knowing When to Say Yes
US Shoppers Are Ready to Give AI More of Their Holiday To-Do List
Hacker leaks 281 GB of data from Germany’s far-right AfD party
Smashing Security podcast #489: How a brand new crypto wallet came with a spy inside
Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death
In Singapore for a few days hanging out with hackers and having a good time.
Your AI hackbot has found another 100+ vulnerabilities. Who fixes them? And how? ft Erlend
wood will keep you warm, once when chop, carry, staple and sort it, and once when you burn it.
Behind Japan’s Warnings of a Cyber Crisis
PHP2Shell Exploitation: Two Critical PHP Flaws Explained
TAG-217 Targets South Korean Financial Services with ARTEX
Widespread PHP Flaw May Cause Many Site Outages Today
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
U.K. Sanctions Cryptomus for RU Money Laundering
Does your fraud risk assessment measure up when a financial crime occurs?
Fraud Risk Assessment: A New Model and New Approach
Assessing the Strength of Your Fraud Controls
Black Hat Stories | Island.io
Black Hat Europe 2026 | Hear From Our Sponsors
Black Hat Stories | First Time Exhibitor
ZDI-CAN-34791: Open Asset Importer Library
What Does a GRC Cybersecurity Professional Do?
CTF Walkthrough: The Cuckoo's Log
Purple Team Incident Adventure | TCM Community Live | Cybersecurity
#StopRansomware: SafePay Ransomware
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
Anthropic’s AI Reversal Is A Warning Shot For Agentic Defense
Agentic AI Is Changing Security Decisions: Why Accountability Must Be Designed, Not Assumed
A New OT Security Playbook for Connected Robots
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business
DCSG1 - Pwn2Own Level Break of a Printer - SungJun Park, WonBeen Im
DCSG1 - Augmenting Apple's Source Code and OS Logs with AI Agents -Olivia Gallucci
DCSG1 - Actual OT Cyber Security - Dillon Lee
Introducing the new Copilot with Home, Code and Autopilot
Building the system for AI at work
Introducing Microsoft 365 G7: Intelligence + Trust for the mission ahead
AI Agents Can Be Secured. We Can Do It.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
Ransomware: A Continuing Threat for Small Businesses
AI in Tax Season: Risks, Scams, and How to Protect Your Data
Tax Season Scams to Watch For This Year
Why every payments team should be watching for ACH fraud
From the Edge to the Core: 9 Ways PKI Secures Your Network
How to Secure Your Email Server on an SMB Budget
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Azure IaaS: Defense in depth built on secure-by-design principles
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
How FIN6 Exfiltrates Files Over FTP
Emulating FIN6 - Active Directory Enumeration Made EASY
The SECRET to Embedding Metasploit Payloads in VBA Macros
Try another search or clear the filters.
Showing 180 of 994 loaded entries. Search and all-headlines view include all available entries in this section. Browse the feed archive.