WHATS
THE HAX?
WHATS Security signals, without the noise.
Article feed
60 sources ↓So what do we need to do to prepare for all the incidents and issues about to happen? PHP and SSL certificates wise and any others.
Emudhra still connecting on IOS27.0.1 (updated browsers)
Kaspersky identifies new Lazarus APT campaign utilizing AI and post-quantum encryption
Two critical vulnerabilities in php (presumably since php 5) release today 14:00 UTC
Millions of routers can be hijacked over Wi-Fi thanks to a 16-year-old bug
Auto tech startup claims it traced hack attempt back to Comma.ai's IP address
The Internet goes on high alert after discovery of 8 compromised TLS certs
Five days before the French supermarket fridge attack, France had more exposed Danfoss StoreView dashboards than the rest of the world combined
CVE-2026-46633: Proving exploitability of Twig sandbox bypass
Decades-Old Windows Utility Powers Modern ClickFix Attack
Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys
Ex-OpenAI Engineer Detained After Planting Secret Recorder at HQ
Close Identity Gaps in Software Development Before Unleashing AI
Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree
Researchers Infiltrate Microsoft Tech Support Scam Operation
'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery
ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs
OnlyFans Copyright Takedowns Expose Compromised Websites
Memory Bugs Account for Most of Chrome’s 353 New Security Fixes
OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor
Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys
China Defends DeepSeek After US Ban of Its AI From Government Systems
Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor
PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
Fake Amazon Music x YouTube deal lures creators into a Google login trap
Signal bug could let someone keep listening after you hang up
Google may add your number to all your accounts: How to stop it
Meta glasses caught recording conversations without wake phrase
Man seeking love travels 2,000 km to meet an AI-generated woman
AOMEI Backupper update servers hijacked to push malware: Check your PC
A sextortion conspiracy killed his son (Lock and Code S07E21)
Millions of California students’ sensitive data stolen in breach
A week in security (October 12 – October 18)
Eiliko robot companion exposes private chats and can be hijacked
A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse
She Was the DEA’s Premier Crypto Detective. The Clues Led Straight to Her Own Family
OpenAI Engineer Accused of Spying on Executives Ordered to Remain in Custody
WhatsApp Help Pages Leaked Hidden Instructions for a Meta Chatbot
Encryption Is Getting Squeezed From All Sides
Chicago-Area Cops Helped HSI Spy on Minnesota Anti-ICE Activists
WordPress sites compromised after TeamUpdraft credential exposure
Google, Mozilla revoke eMudhra intermediates after private key compromise
Moving past autonomous exploitation to machine-speed security
14 ways attackers abuse cloud services to hack your enterprise
US bans DeepSeek across federal agencies, putting AI supply chains under scrutiny
Enterprises should report AI breaches and ‘near misses,’ says UK financial regulator
KVM escape exposes broader attack surface in Linux networking
When defrost becomes sabotage: 3 OT lessons from France’s supermarket attack
OT systems complicate quantum-resistant data protection
F5 rushes out emergency NGINX patches for three critical flaws
Microsoft, Nvidia push provenance checks as open-weight AI adoption accelerates
ConnectWise backup credentials exposed multiple Microsoft 365 tenants
The password nobody owns: Taking machines to zero standing privilege (ZSP)
US Government Orders DeepSeek Out of Federal Civilian Systems
PHP Prepares Emergency Fixes for Two Critical Remote Code Execution Flaws
NSO Spyware Pegasus Hit a Serbian University Rector Six Days Before Snap Elections
Nikkei data breach affected over 1.8 million records
Google Cloud Outage in London Disrupts Revolut Banking Services
AfD Email Breach Exposes 421,000 Messages in Anonymous Online Archive
Microsoft Treats AI Agents as Insider Threats in New Security Framework
Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners
Meta wants to scrape your website to train its AI, and you can’t say no
Deepfakes and Election Manipulation: UK Watchdog Seeks Faster Detection
Big Fish: OpenBSD Root Exploit Chains a 37-Year-Old BSD Bug With a Kernel Flaw
Attackers Abuse Stolen ConnectWise Application Credentials to Target Microsoft 365
Japan’s SiteGuard WAF flaw CVE-2026-106931 is already being exploited
16-Year-Old Broadcom Wi-Fi Bug Lets Attackers Take Over Routers Without a Password
China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors
Critical Vulnerabilities in PHP Require Immediate Patching
CISA Adds Six Known Exploited Vulnerabilities to Catalog
Ransomware Attacks Rise as Rival Gangs Vie For Market Supremacy
SafePay Has Compromised 600 Critical Infrastructure Victims Worldwide, CISA Warns
Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patches
Children’s Data Stolen After Ransomware Attack Compromises ‘Password1’ Account
Head of AI Security Roles Surge in Large Organizations
Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk
AI Agent Adoption Creates Risk as Oversight Struggles to Keep Pace, Splunk Finds
Siemens Customers Targeted by ClickFix Attackers Exploiting DLL Side-Loading Flaw
Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds
Conduent Agrees to Pay $80m to Settle Data Breach Class Action
OpenCode Breach Could Affect OpenAI, Anthropic and Google
ConnectWise Shuts Off Cloud Services After ‘Unauthorized Access’ to Microsoft 365 Tenants
US Cybersecurity Job Postings Fall 26%, Hitting Four Year Low
Workshop on Economics and Information Security (WEIS) Archive
Possible new Cellebrite iPhone Radio Zero-Day
Training AIs to Solve CAPTCHAs
Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact
Watching PHP with process-watcher: quick start
PHP session.upload_progress UAF CVE-2026-109618 / CVE-2026-109619
PHP warns admins of two critical flaws, emergency patches coming tomorrow
php 1day drops pre-patch
Auto tech startup claims it traced hack attempt back to rival's IP address
All vulnerabilities are now race conditions
v0.4.0-alpha is out!
PICS: Toilet Tube Tap found in OpenAI exec conference room in SF
New website to locate specific captive portals from a 500+ library.
How to detect MITM attack
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
Dad, why is my sister's name Rose?
Public Notice Regarding September Security Incident at Florida DMV
Can code injection be countered by randomizing the base address of the stack?
Super Trouper v0.5.0: package and Pattern tools for authorized Frida workflows
Chrome UX Report Dumps: September 2026 dataset added
Sudocrypt v16.0 is back! Our international CTF is happening this October
Why people don’t report scams, and it’s not embarrassment
Industrial Defender Unifies Endpoint Intelligence and Network Monitoring for CIP-015, Adds Risk Signal
News alert: Bright Security launches AI-powered tool to uncover hidden software vulnerabilities
ZDI-CAN-36560: Apple
35% of Organizations Run Over 1000 AI Agents
Only 7% of CISOs at Large Companies Own AI Governance
Security Leaders Share Concerns About California Student Data Breach
Over Half of Financial Service Leaders Miss Spoofed AI Traffic
DHS Banning DeepSeek from US Federal Civilian Agencies
Anthropic Gives METR Team “Employee-Like Access”
Healthcare Workers Claim Authentication Errors Delay Patient Care
Security Leaders Discuss BAE Cyberattack
AI Hacking Breach Hits 16 Financial Institutions, Leaks 100,000 Records
OpenAI Claims Model Helped Solve Insider Threat Concern
PHP warns it plans to release 2 emergency patches imminently
The Internet goes on high alert after discovery of 8 compromised TLS certs
Meta Muse exposes users' personal and business secrets when they share conversations
PSA: Patch your Plex media server before someone hacks it
OpenAI models hacked a crypto wallet and breached more websites
Operation FlashHole: Lazarus breaks security, defies control
The journey of a paper unicorn: adventures inside a modern warehouse
ISC Stormcast For Wednesday, October 21st, 2026 https://isc.sans.edu/podcastdetail/10144, (Wed, Oct 21st)
ISC Stormcast For Tuesday, October 20th, 2026 https://isc.sans.edu/podcastdetail/10142, (Tue, Oct 20th)
Orphaned VBA Projects Inside DWG Files: YARA Rule, (Sun, Oct 18th)
PHP2Shell Exploitation: Two Critical PHP Flaws Explained
Philippines-based American pleads guilty to running expansive fraud scheme targeting US servicemembers
Nigerian sentenced to 8 years for long-running tax business hacking and fraud scheme
Russian GRU hackers hit NATO shipbuilder, aircraft engine maker, law enforcement agency in espionage campaign
ConnectWise customers hit by supply-chain attack linked to compromised API secret
DOJ escalates fight for election supremacy with California raids
Wyden seeks adoption of encryption tech at hundreds of federal agencies to protect visitors’ sensitive traffic
DHS to ban DeepSeek from federal civilian agencies
Spyware found on devices belonging to prominent Serbian critics as elections loom
Federal agencies recommend cyber controls, independent testing for frontier AI systems
Prolific Chinese espionage group exploits BeyondTrust zero-day
Cybersecurity incident at BAE Systems disrupts US bankruptcy court system
I extended decomp.wtf into a REA system.
MG8 2026 Developer mode password
Reverse Engineering Pokémon Sprites (LGPE)
Reverse Engineer CAPTCHA-bypass (YouTube)
Reverse-engineering Sony NW-A910 firmware: language patches, resource formats, and homebrew
Playing Chromatron Again, Twenty Years Later
tvm-recover: Tencent VM devirtualization through semantic lifting and algebraic simplification
/r/ReverseEngineering's Weekly Questions Thread
Homeworld: Cataclysm source code
PS2 games statically recompiled to WebAssembly
PHP rce CVE-2026-109618
France had more Internet-exposed Danfoss refrigeration dashboards than the rest of the world combined before the supermarket attacks (weekly IPv4 scan data)
CVE-2026-46633: Proving exploitability of Twig sandbox bypass
The OffiDocs Browser Extension Campaign
Reversing a DPRK-linked toolkit that backdoors VS Code, Cursor, Discord and npm, with an Ethereum dead-drop C2 and a DEV#POPPER variant
All vulnerabilities are now race conditions
How I got over 300 Tor exit nodes removed
CVE-2026-106173 Deep-Dive: Fortinet FortiSIEM gRPC Path Traversal File Write to RCE
Prompt injection, XSS and SIEM-exfil payloads living in reverse DNS, plus 28 fake Googlebots that passed FCrDNS
How practical is 100k requests per second? Introducing h3fuzz
Unauthenticated SQL injection in GLPI (≤ 11.0.8)
CVE-2026-108097 Deep Dive: Turning a Drupal Field UI Callback Into RCE
LOLCHAIN: Blockchain abuse research and evidence for malware analysts
The OffiDocs Browser Extension Campaign
Offensive toolkit (payload builder, serialized gadgets, stager) pulled from an open directory
RenPy based windows infostealer Malware - Flooding almost everywhere and causing financial losses
Fake AI tool campaigns plant infostealers
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
JS formatting / deobfuscation can silently rewrite the script you’re analyzing.
Reversing Windows Infostealer: Warden Stealer’s hidden payload, C2 and ten-network crypto clipper
Warning: Axqua VS Code extension is MALWARE
Black Hat Europe 2026 | Hear From Our Sponsors
Black Hat Stories | First Time Exhibitor
The AI Reality. The Human Response. | Black Hat Europe 2026, London
Black Hat Stories | Chris Gaun, VP of Product Marketing at Island.io
Black Hat Stories | Chris Gaun, VP of Product Marketing at Island.io
🍍📟 "App Store" Anyone?: Pager Portal - WiFi Pineapple Pager #pentesting #hacking #cybersecurity
Hackers Turned GitHub Against Its Own Users | Threat Wire
🍍📟 New DuckyScript: PROMPT_QR - WiFi Pineapple Pager #pentesting #hacking #cybersecurity
What Does a GRC Cybersecurity Professional Do?
CTF Walkthrough: The Cuckoo's Log
0day Hacks NetworkChuck (OSINT)
Flushing the toilet kills our network!
Google Mandates Further Verification for US and Canada Financial Ads
CVE-2026-102204 Windows Subsystem for Linux Elevation of Privilege Vulnerability
CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2026-70074 Windows DNS Information Disclosure Vulnerability
CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability
CVE-2026-83782 Windows Shell Remote Code Execution Vulnerability
CVE-2026-83839 Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2026-96913 Windows Kernel Elevation of Privilege Vulnerability
Cisco Unified Intelligence Center SQL Injection Vulnerability
US Shoppers Are Ready to Give AI More of Their Holiday To-Do List
Learn More About AI With Me at GTC
What Is Machine Data?
2 Hacking Tools You Need to See
How is AI Changing Cybersecurity?
AI is the new industrial revolution
Your AI Agent Doesn’t Need to Be Hacked
Microsoft’s X Hacked for a Clippy Scam
Learn Malware Analysis with Ghidra and x64dbg (for free)
Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death
Irish police force has its Twitter hacked in cryptocurrency scam
Is the ad a scam? How to tell before you click
#StopRansomware: SafePay Ransomware
AI Changes Security Research
Self-efficacy in the age of AI
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
Agents are your newest insiders. Security must move at their speed.
Managing open-weight model risk in enterprise deployments
HackerOne Limited Me to 3 Reports After 12 Years
Anthropic’s AI Reversal Is A Warning Shot For Agentic Defense
Agentic AI Is Changing Security Decisions: Why Accountability Must Be Designed, Not Assumed
A New OT Security Playbook for Connected Robots
The Attack You Can’t Detect: AI Assistants As Exfiltration Infrastructure
Making The Non-Technical Feel Technical – A Recipe For Success
HackTheBox - Eloquia
Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal
Proofpoint CEO on acquiring Varonis for $6.3B: ‘Opportunities like this don’t come every day’
Try another search or clear the filters.
Security signals, without the noise. — page 2
Current feed archive. Entries come from the loaded publisher feeds and change as those feeds update.