WHATS
THE HAX?
WHATS Security signals, without the noise.
Article feed
60 sources ↓Browser Cache Payloads
Steam Local Privilege Escalation
Deploy YOUR OWN Honeypots on the Internet
Inside Steam Exploits
Just Hacking Training Turns 2!
Following The Payload
PowerShell Payload Unpacked
Payload Podcast 012 - Yarden Shafir
Firefox Profile Payload
Black Hat AI
pwn.college
International Law Enforcement Dismantles Multimillion-Dollar Phishing Network
Cybersecurity Outsourcing. Beyond Cost
Governance Is Failing: Why Converged Digital Risk Is Outpacing Every Control We Have
Federal Agents Shut Down Fake Remote Tech Worker Network
When DevOps Tools Turn Against You: Top Vectors Hackers Exploit Corporate Trust
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
“Spray and pray” job applications could make it harder for you to spot a scam
OpenAI sued over children safety and data use
Update Chrome: Google fixes 37 security flaws, including seven critical bugs
Is this link safe? Find out with Malwarebytes Scam Link Check
Sextortion “help” firm took $60 million from victims, FTC alleges
Raven AI lets cops find your home from a photo taken inside
AI worms could spread across your smart devices, Anthropic warns
Update Windows: Record Patch Tuesday fixes flaw already under attack
Backdooring Open-Weight AI Models
Measuring Human Cryptanalysis Effort
Upcoming Speaking Engagements
The Future of AI Cryptanalysis
Cyberattack on Connected Fridges in France
FBI Arrests Suspect in FBI-Hacking Case
Friday Squid Blogging: I Caught a Squid
How Technology Empowers—and Imperils—Dictators
Apple’s Verified Photography System
Possible Vulnerability in Apple’s Automatic Reboot
Another Historic Cipher Falls to AI
Friday Squid Blogging: EU is Trying to Fight Unregulated Squid Fishing
Unidentified Flock Cameras in Florida
How American Political Campaigns Are Using AI—and What They’re Spending on the Tools
Connected Cars Are a Surveillance Platform
Krybit ransomware: what you need to know
Smashing Security podcast #488: How a ransomware negotiator ended up arrested at his own conference
GTA 6 leaker threatens to release full playable version of game ahead of official launch
$10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack
Smashing Security podcast #487: Clippy’s crypto comeback
N0n ransomware: what you need to know
FBI tells ShinyHunters members to turn themselves in, after arrest of alleged leader
ShinyHunters suspect arrested, and is now investigated over alleged murder plots
Pentagon personnel database breach exposes personal data of millions
Inbox flooded with sign-up messages? Email bombing explained
Medicare scam calls, texts and ads: What to watch for this Open Enrollment
What to do when a data breach notice doesn't say much
MATCHBOIL: New tricks, same old evil intentions
Inside a brand deal scam targeting YouTube creators
The quest for simplicity: Why SMBs want advanced protection without the complexity
This month in security with Tony Anscombe – September 2026 edition
Scams Capture 22.4% of Fraud Dollars as Banks Adjust Defenses
Nearly 9 in 10 Card Issuers Turn to AI to Stop Fraud Without Blocking Sales
Brooklyn DA Shuts Down Multi-Million Dollar Crypto Scam Operation
Finance Teams Finally Have Proof AI Fraud Tools Pay Off
Tech Giants and Global Police Dismantle West African Scam Rings
PYMNTS Finds 42% of Companies Rely on Layered Defense to Combat Fraud
ISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/10140, (Fri, Oct 16th)
Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th)
Panchan's Mining Island [Guest Diary], (Wed, Oct 14th)
ISC Stormcast For Thursday, October 15th, 2026 https://isc.sans.edu/podcastdetail/10138, (Thu, Oct 15th)
Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)
🍍📟 New DuckyScript: PROMPT_IMAGE - WiFi Pineapple Pager #pentesting #hacking #cybersecurity
Why Apple Says Your Mac Is at Risk From AI | Threat Wire
🍍📟 Let me be CLEAR: New Limited Edition WiFi Pineapple Pager
The FBI Got Hacked? Here’s What We Actually Know | Threat Wire
🍍📟 Theme Hacking Techniques - WiFi Pineapple Pager
TAG-217 Targets South Korean Financial Services with ARTEX
Working in Boston at the World’s Largest Intelligence Company
Russia Is Tightening Internet Controls, Leading to Operational Risks
TAG-193’s Regional Espionage Operations
Malware Indicators of Compromise (IoCs) | Recorded Future
September 2026 CVE Landscape
Recorded Future Introduces AI Infrastructure Indicator Lists, Strengthening AI Governance
Japan Adopts Proactive Cyber Defense Strategy
Recorded Future Debuts Autonomous Defense, Built for Machine-Speed Threats
The Agentic Commerce Conversations Merchants Are Having Now
Are You Ready for AI Shopping Agents This Holiday Season?
Agentic Commerce Is Here. So Are the Fraudsters Using It.
Can You Tell the Difference Between an AI Agent and a Bad Bot?
AI Agent Order Data: Agentic Commerce on Forter’s Network
PSD3 and PSR’s Acquirer Liability Shift: What It Means for Your Authorization Rates
Proofpoint to buy Varonis for $6.3 billion
The next election influence campaign will target your AI chatbot
AdFection: How mercenary spyware invades victims’ devices through targeted advertising
Authorities charge alleged OLVX cybercrime marketplace operator in North Macedonia
Targeted ads delivered 0-click exploits to install mercenary malware
Fridge hack costing millions and sparking fires stemmed from poor security
Anthropic warns small AI models could self-replicate through IoT devices
Let's Encrypt cuts certificate lifetimes to 64 days starting February 2027
Hackers obtain counterfeit TLS certificates for Google and other large services
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
MCP for agent-to-agent comms may be the riskiest protocol you've never heard of
Apple changes full-disk access permissions to curb abuse from AI agents
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
Attackers have been exploiting critical Zimbra flaw to steal emails
Cloudflare plans to issue quantum-safe TLS certificates
Cisco Meraki Security Hardening Release: October 2026
Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
Jensen Huang Explains the Next Step for AI
NVIDIA Wants to Stop Rogue AI Agents
Learn How to Hack for Free
F1 Data Goes Straight Into Splunk
Think You’re Private Online? Watch This
This USB Adapter Can Hack Your Network
AI Is Helping Hackers, But Blocking Cybersecurity Experts
Healthcare Ransomware Attacks Doubled Since This Time Last Year
1M Impacted by CenterPoint Energy Data Breach
AI Agents Could Gain Ability to Self-Replicate
Newly Exploited Vulnerability in Ivanti Connect Secure
Refrigeration System Cyberattack Impacts 700+ Retailers
Nearly 1 in 3 Organizations Face IT Support Microsoft Teams Schemes
Inside a PaperCut attacker’s AI toolkit: custom Rust collectors, chisel persistence, and AI-directed exploitation using 25 concurrent agents
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
api.wakhtar.com
One Android Loader, Four Malicious APKs: Linking Challan and Gas Phishing to BTMOB
Code safety
⚠️ URGENT WARNING: Fake "VRChat-DLSS5-Cam" GitHub repository is a dangerous Infostealer Malware (SmartLoader)
Reverse Engineering an Android Banking Trojan: “Blackhole VPN,” DEX Anti-Analysis & SMS OTP Theft
fake homebrew
Malicious Infostealer Windows Malware EXE - Reportedly caused financial loss
Outlook automatically clicks the “unsubscribe” hyperlink of malicious emails when reporting them as phishing.
Yahoo Mail malvertising: two cloaked tech suppor…
Thoma Bravo's Proofpoint to buy Varonis Systems in $6.3 billion all-cash deal
Proofpoint to Acquire Varonis in $6.3 Billion Cybersecurity Deal
Proofpoint to Acquire Varonis in a $6.3 Billion Transaction
Healthcare Sees No Relief from Cyberattacks Disrupting Patient Care
Healthcare Cyberattacks Hit Harder, Cost More
The Hidden AI Security Risks Threatening Businesses
Proofpoint on Why AI Security Must Focus on Intent
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
An OpenAI Employee Allegedly Used a Chatbot to Help Plant a Recording Device at the Office
Feds Got Warrants to Use Fake Cell Towers to Hunt Down Don Lemon’s Producer
AI Is Getting Really Good at Messing With Cybercriminals
ICE Agent at NYC Shooting Has History of Alleged Violence and Illegal Arrests
The Man Behind a West Bank Telegram Channel Trying to Keep Palestinian Drivers Safe
Shaq Got Hacked. Now He’s Pitching for a VPN
The Pentagon Hopes to Speed Up ‘Kill Chain’ AI Buys With 5-Minute Videos
Muse Creates Detailed Profiles of All Your Friends and Family
ICE Has Been Dumping Protester Photos Into a Palantir Database
A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data
Purple Team Incident Adventure | TCM Community Live | Cybersecurity
Why You Need to Know the Software Development Lifecycle (SDLC)
What Do Security Professionals Look for in Code?
DEF CON CTF Walkthrough: Packet Analysis
Real Folks of Cyber | Marshall Livingston | DITL
NEWS ALERT: G2A reports 35% jump in security software orders as consumers broaden protection
FIRESIDE CHAT: Firms once wanted AI callers stopped – now they want to sort good from bad
NEWS ALERT: Insignary launches Clarity AIR to expose hidden open-source and AI-generated code
News alert: Aembit gives enterprises new controls over personal AI agents accessing sensitive systems
SHARED INTEL Q&A: AI finds flaws faster — defenders still need to fix what attackers exploit
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
U.K. Sanctions Cryptomus for RU Money Laundering
Microsoft Patches More Than 1,400 Security Flaws
FBI Arrests Executive at Ransomware Negotiation Firm
ShinyHunters Extorted Boeing Spin-off Prior to Arrests
The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
Post-quantum authentication: Why organizations should start testing certificate ecosystems now
3 lessons from frontier AI vulnerability research
CISO perspectives on managing vulnerability risks in the age of AI
Preparing governments for an era of interconnected cyber risk
Insights from the 2026 Microsoft Digital Defense Report
Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026
Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570
Phishing Abuses RMM Tools for Persistent Access
Google just paid a $90,000 bounty for this vulnerability
I Built a Hackbot for Less Than $250
Vercel paid a $50,000 bounty! 👀👀
Classic server-side request forgery… but make it AI!
I Gave Claude Access to My Hacking Traffic
Facebook’s marketplace is just getting weirder especially with AI in the mix. #ai #meta #facebook
Google built PageBreak and it found 500 XSS on Google’s own application. That kinda hurts 😭
Black Hat Stories | Learn From the Legends
Black Hat Stories | The Black Hat Experience
Black Hat Asia 2026 Highlights
Black Hat Stories | Taylor Margot
Black Hat Stories | Taylor Margot, Lytical Ventures
Black Hat Stories | Connections That Last
Black Hat Stories | Tony Lee, Black Hat Review Board Member
Black Hat Stories | Tony Lee, VP of Operations at HackerOne
Black Hat Stories | Tony Lee, Black Hat Review Board Member and VP of Operations at HackerOne
Team Introduction Videos for the European Cyber Security Challenge
Security Through Complexity #shorts
OpenAI Hacked with a 1-Year-Old Bug
OpenAI has shifted threat models #shorts
Finding a vulnerability in libheif #shorts
Why Old Threat Models Are Dead #shorts
You can monitor EVERYTHING in your homelab with this
I turned my house into a VIDEO GAME!
your house needs TWO networks (here's why)
openAI is coming for grok and Jev
openAI is coming for grok and Jev
Your AI hackbot has found another 100+ vulnerabilities. Who fixes them? And how? ft Erlend
wood will keep you warm, once when chop, carry, staple and sort it, and once when you burn it.
I tend to sauna 2-3 days a week, it have made wonders for my recovery. #sauna #mobilesauna #vlog
HackTheBox - DevHub
HackTheBox - Reactor
6 alternatives to Blackpoint for your shortlist
Cybercrime Detective Explains Cybersecurity Jargon in 60-Second Videos for Cybersecurity Awareness Month
Innovation wins. Why smaller beats bigger
Heimdal partners with Elovade to bring unified cybersecurity platform to the DACH region
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
DCSG1 - Pwn2Own Level Break of a Printer - SungJun Park, WonBeen Im
DCSG1 - Augmenting Apple's Source Code and OS Logs with AI Agents -Olivia Gallucci
DCSG1 - Actual OT Cyber Security - Dillon Lee
DCSG1- Are we nurturing the next generation of hackers or losing them - SherpaSec
DCSG1 - Autonomous and Exploitable: Breaking AI Agents before they break everything else - Aaron Ang
DCSG1 - Where's our Hats: The founding of N0H4Ts - Pengfei Yu, Zara Teo
DCSG1 - Adversaries Have AI. You Have $0. Here's How You Win Anyway - Aaron Crow
DSCG1 - CryptoCurrency Opening Keynote - Michael Schloh
DCSG1 - Introduction to Range Village Community - Gladiator
DCSG1 - DEF CON History and Lore - The Dark Tangent
DCSG1 - The DEF CON Singapore Badge Presentation - Michael Schloh, Joyce Ng, Dani Weidman
DCSG1 - You can't engineer your way out of a bad AI stack - Paul
DCSG1 - Solidity Smart Contracts - Kennashka DeSilva
DSCG1 - Attack and Defense of AI Enabled Systems - Hahna Latonick
DCSG1 - RFIDrive: Access Badges for Cars - Kamel Ghali, Smriti
Try another search or clear the filters.
Security signals, without the noise. — page 3
Current feed archive. Entries come from the loaded publisher feeds and change as those feeds update.