WHATS OpenAI models hacked a crypto wallet and breached more websites
Security - Ars Technica ·
WHATS
THE HAX?
Top story
Also in coverage
BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
darkreading ·
Critical BlockStrap flaw lets hackers run code on Magento servers
BleepingComputer ·
Chicago-Area Cops Helped HSI Spy on Minnesota Anti-ICE Activists
Security Latest ·
Article feed
60 sources ↓OpenAI models hacked a crypto wallet and breached more websites
Targeted ads delivered 0-click exploits to install mercenary malware
Fridge hack costing millions and sparking fires stemmed from poor security
Anthropic warns small AI models could self-replicate through IoT devices
BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk
Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform
Enterprise AI Enters Risk Management Phase as Security Concerns Rise
DebuggerJ++ — A native debugger built to be driven by an AI
A story of wifi secrets, UART lockdowns and a damaged flash memory chip |
Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
Gigabyte kernel driver LPE
Critical BlockStrap flaw lets hackers run code on Magento servers
Targeted ads installed Candiru spyware in zero-click attacks
Employees using personal ChatGPT at work? Here's what IT admins need to do
Chicago-Area Cops Helped HSI Spy on Minnesota Anti-ICE Activists
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
An OpenAI Employee Allegedly Used a Chatbot to Help Plant a Recording Device at the Office
No Energy, No AI
Microsoft’s X Hacked for a Clippy Scam
Dark Web Malware: How It Works (with demos)
Deep-Dive into Android Binder UaF (CVE-2023-20938) using Time-Travel Debugging
Nadella Calls Your AI an Insider Risk. Lawmakers Already Put Your Name on the Liability Certification.
16% of RPKI-covered IPv4 routes still allow a forged-origin hijack that passes validation, the setup behind the Virtualizor update attack
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor
UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing
Hallucinated domain in official OpenAI skill underscores AI supply chain risks
Xbow spent $40K on AI and cracked Google Chrome wide open
Bank of America spent millions on anti-money-laundering tech, but not enough to avoid a $1.2B fine
Prolific Chinese espionage group exploits BeyondTrust zero-day
Cybersecurity incident at BAE Systems disrupts US bankruptcy court system
Proofpoint to buy Varonis for $6.3 billion
Private security disclosure: libnetconf2 NETCONF/TLS administrator impersonation (NETCONF-REL-001)
ARMORY CASTLE and BT26-05: What Security Teams Need to Know
ARMORY CASTLE Exploits BeyondTrust
CTF Walkthrough: The Cuckoo's Log
Purple Team Incident Adventure | TCM Community Live | Cybersecurity
Why You Need to Know the Software Development Lifecycle (SDLC)
Managing open-weight model risk in enterprise deployments
The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
Post-quantum authentication: Why organizations should start testing certificate ecosystems now
AI Hacking Breach Hits 16 Financial Institutions, Leaks 100,000 Records
OpenAI Claims Model Helped Solve Insider Threat Concern
Healthcare Ransomware Attacks Doubled Since This Time Last Year
Proofpoint lines up $6.3 billion deal for Varonis’ data security
Moscow police detain suspected DataSuckers hackers linked to breaches in Ukraine and Russia
Baltimore suburb confirms August data breach after ransomware claims
In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit
BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts
Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day
Burger King Japan Data Breach Impacted 11 Million Customers
F5 addressed critical RCE flaws in NGINX
U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog
Chromium CVE-2026-106258: Uninitialized resource
Chromium CVE-2026-106263: Improper input validation
Chromium CVE-2026-106264: Missing authorization
Proofpoint CEO on acquiring Varonis for $6.3B: ‘Opportunities like this don’t come every day’
Thoma Bravo's Proofpoint to buy Varonis Systems in $6.3 billion all-cash deal
Proofpoint to Acquire Varonis in $6.3 Billion Cybersecurity Deal
AI Security Engineering with Ashish Rajan!
Browser Cache Payloads
Steam Local Privilege Escalation
Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments
China Espionage Actor Actively Targeting Critical BeyondTrust Flaw, Google Warns
Cyber Incident at BAE Systems Disrupts US Federal Bankruptcy Noticing
Hackers disguise phishing as promising business opportunities
Scammers clone candidates’ voices to steal cash and voter data ahead of 2026 midterms, FBI warns
Fake Arch Linux AUR packages exploit typos to run malware with root privileges
What 2MFA keys brands are good?
CERT-In confirms AI agents breached Indian firms, operated undetected for days
Hoxhunt Q&A session Atendee 2026 code?
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds Four Known Exploited Vulnerabilities to Catalog
Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials
Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation
Backdooring Open-Weight AI Models
Measuring Human Cryptanalysis Effort
Upcoming Speaking Engagements
Scams Capture 22.4% of Fraud Dollars as Banks Adjust Defenses
Nearly 9 in 10 Card Issuers Turn to AI to Stop Fraud Without Blocking Sales
Brooklyn DA Shuts Down Multi-Million Dollar Crypto Scam Operation
ISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/10140, (Fri, Oct 16th)
Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th)
Panchan's Mining Island [Guest Diary], (Wed, Oct 14th)
🍍📟 New DuckyScript: PROMPT_IMAGE - WiFi Pineapple Pager #pentesting #hacking #cybersecurity
Why Apple Says Your Mac Is at Risk From AI | Threat Wire
🍍📟 Let me be CLEAR: New Limited Edition WiFi Pineapple Pager
TAG-217 Targets South Korean Financial Services with ARTEX
Working in Boston at the World’s Largest Intelligence Company
Russia Is Tightening Internet Controls, Leading to Operational Risks
The Agentic Commerce Conversations Merchants Are Having Now
Are You Ready for AI Shopping Agents This Holiday Season?
Agentic Commerce Is Here. So Are the Fraudsters Using It.
Cisco Meraki Security Hardening Release: October 2026
Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
ImHex: A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM (55.2k stars)
Sharemagazines lesen
Is this a good learning roadmap for specializing in Web Security?
Update Chrome: Google fixes 37 security flaws, including seven critical bugs
Is this link safe? Find out with Malwarebytes Scam Link Check
Sextortion “help” firm took $60 million from victims, FTC alleges
NEWS ALERT: G2A reports 35% jump in security software orders as consumers broaden protection
FIRESIDE CHAT: Firms once wanted AI callers stopped – now they want to sort good from bad
NEWS ALERT: Insignary launches Clarity AIR to expose hidden open-source and AI-generated code
Smashing Security podcast #488: How a ransomware negotiator ended up arrested at his own conference
GTA 6 leaker threatens to release full playable version of game ahead of official launch
$10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business
What is Customer Due Diligence (CDD)
U.K. Sanctions Cryptomus for RU Money Laundering
Microsoft Patches More Than 1,400 Security Flaws
FBI Arrests Executive at Ransomware Negotiation Firm
Medicare scam calls, texts and ads: What to watch for this Open Enrollment
What to do when a data breach notice doesn't say much
Google just paid a $90,000 bounty for this vulnerability
I Built a Hackbot for Less Than $250
Vercel paid a $50,000 bounty! 👀👀
Black Hat Stories | Learn From the Legends
Black Hat Stories | The Black Hat Experience
Black Hat Asia 2026 Highlights
Team Introduction Videos for the European Cyber Security Challenge
Security Through Complexity #shorts
OpenAI Hacked with a 1-Year-Old Bug
You can monitor EVERYTHING in your homelab with this
I turned my house into a VIDEO GAME!
your house needs TWO networks (here's why)
Your AI hackbot has found another 100+ vulnerabilities. Who fixes them? And how? ft Erlend
wood will keep you warm, once when chop, carry, staple and sort it, and once when you burn it.
I tend to sauna 2-3 days a week, it have made wonders for my recovery. #sauna #mobilesauna #vlog
HackTheBox - DevHub
HackTheBox - Reactor
HackTheBox - SmartHire
Malicious APK - Fake Gas payment APK Stealing UPI, card, Banking credentials
Malwarebytes Antivirus App
Malicious APK - Possible Android ad-fraud malware/loader
6 alternatives to Blackpoint for your shortlist
Cybercrime Detective Explains Cybersecurity Jargon in 60-Second Videos for Cybersecurity Awareness Month
Innovation wins. Why smaller beats bigger
ZDI-CAN-32462: Samba
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
A Tale of Two SOCs: Insights From Two Red Team Assessments
DCSG1 - Pwn2Own Level Break of a Printer - SungJun Park, WonBeen Im
DCSG1 - Augmenting Apple's Source Code and OS Logs with AI Agents -Olivia Gallucci
DCSG1 - Actual OT Cyber Security - Dillon Lee
Introducing the new Copilot with Home, Code and Autopilot
Building the system for AI at work
Introducing Microsoft 365 G7: Intelligence + Trust for the mission ahead
AI Agents Can Be Secured. We Can Do It.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
Fraud Risk Assessment: A New Model and New Approach
Assessing the Strength of Your Fraud Controls
Fraud Risk Assessment; A New Model and New Approach
MacSync under the microscope: new delivery methods and a new payload
Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through compromised torrents
Ransomware: A Continuing Threat for Small Businesses
AI in Tax Season: Risks, Scams, and How to Protect Your Data
Tax Season Scams to Watch For This Year
Why every payments team should be watching for ACH fraud
From the Edge to the Core: 9 Ways PKI Secures Your Network
How to Secure Your Email Server on an SMB Budget
Ransomware in the Dairy Aisle: A Look at Fairlife’s Cyberattack
UK’s Largest Cybercrime Case Ends in Prison for Spider Hacker
Hacking US Elections: The First Tranche of Declassified Election Integrity Documents
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Azure IaaS: Defense in depth built on secure-by-design principles
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
How FIN6 Exfiltrates Files Over FTP
Emulating FIN6 - Active Directory Enumeration Made EASY
The SECRET to Embedding Metasploit Payloads in VBA Macros
Try another search or clear the filters.
Showing 180 of 995 loaded entries. Search and all-headlines view include all available entries in this section. Browse the feed archive.