WHATS
THE HAX?
WHATS Security signals, without the noise.
Article feed
60 sources ↓Guest Essay: Before AI agents takes hold, define who can challenge them and who owns the outcome
News alert: SCOUTz gives MSPs security evidence to help turn prospects into customers
Black Hat Fireside Chat: As AI agents spread, the network shifts from traffic mover to policy enforcer
BLACK HAT FIRESIDE CHAT: Nobody picked the web browser to run work — now pick a boundary
MY TAKE: AI agents show uncanny initiative nobody designed — and carry no values at all
News alert: Axoflow introduces AxoDetect to identify threats and reduce security data costs
MY TAKE: OpenAI, Anthropic admit they can’t control AI — for now, the machines are running free
News Alert: SpyCloud survey finds machine identity risks outpace defenses, exposing gaps in oversight
News Alert: Reflectiz launches AI website testing, uses site context to find and verify flaws
News Alert: Link11 reports fewer but stronger DDoS attacks in Europe for the first half of 2026
GUEST ESSAY: AI coding assistants are putting open source in your code without declaring it
Can Developers Switch to AppSec Roles?
Is AppSec a Realistic First Cybersecurity Job?
Soft Skills for the Job Market: Personal Websites
Start Hardware Hacking for Just $20!
Noob Village CTF Walkthrough | DEF CON | Cybersecurity AMA
Is the OWASP Top 10 Still Relevant?
CTF Walkthrough: DEF CON Edition
3 Cybersecurity Books to Read
Beyond source code: A path to the keys to the kingdom
Star Blizzard refines phishing and malware delivery with the RedFlick technique
NeedyMantis: Unpacking a post-compromise malware family used in targeted operations
Storm-3168: Agentic-driven cloud attacks using compromised service principals
Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments
What’s new in Microsoft Security: September 2026
Reimagining the SOC for the agentic era in Microsoft Defender
Unmasking EvilTokens: Getting to the root of device code phishing
Using Claude 5 to write an exploit against Discourse #shorts
OpenAI paid $6,500 for this bug! #shorts
Gaining access to OpenAI's monorepo through ChatGPT #short
Hacking OpenAI shortly after the Hugging Face incident.
OpenAI and Slack got hacked with the same vulnerability! #short
They Hacked OpenAI! #shorts
Discourse Vulnerability: Urgent Warning for Self-Hosters! #shorts
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
Timeshare exit scams: From fake buyers to recovery fraud
The devil is still in the email – but wears a new mask
Is that vibe coded app safe? 5 checks before you download
Been told to pay at a Bitcoin ATM? Read this first
Looking for free Robux? Here’s what’s real, and what’s a scam
The SMB cybersecurity squeeze: AI agents at work, old attacks in overdrive
‘Nudify’ apps: What to do if someone makes a fake nude of you
Beware the SparroWock: The backdoor that bites, the commands that catch
Cyberthreats are moving faster than SMBs: Readiness must accelerate
GuardBreaker: Derailing AI-assisted malware analysis with a code comment
Safe word: What is it and why do you need one?
I’ve been deepfaked: What do I do?
Social Engineering in the Age of Synthetic Media
Recorded Future Launches MCP, the Intelligence Layer for Agentic Security Operations
Using Threat Intelligence to Stop Ransomware Attacks
Russia Escalating Hybrid Attacks Across Europe
The Lure Isn't The Malware. It's Your Logo.
Agent Running in the Age of AI
Our View on What It Takes To Be Named an Industry-Recognized Threat Intelligence Leader
The New Rules of Machine Speed Defense
Tajin Group: Guarantee Marketplace Vendor Involved in Phishing and Chinese Money Laundering Group
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
Data Broker Radaris Loses Domains in Privacy Fight
Microsoft Plugs Nearly 1,000 Security Holes
Steam IPC Exploit
Steam Privilege Escalation
Builders & Breakers | Local AI for Offensive Security: Models, Harnesses & Human Judgment ft Thomas
Saturday evening candy haul and photography vibes #travel #photography #vlog
Builders & Breakers | Building Hackbots: Models, Harnesses and Human Expertise with Hamid Kashfi
We back.
They hacked Google's AI in Seoul
☔️🌅
This WordPress Core Bug Can Lead to Remote Code Execution (CVE-2026-87902)
Ask and you shall receive. This is how a hacker got access to Meta’s Muse file system.
OpenAI’s agents went rogue again. 😭
Hacking AI for $100,000 Was Harder Than I Expected
Anthropic Caught Hackers Doing This So I Rebuilt It in a Few Hours
I Gave Claude 12 Years of my Bug Bounty Reports - Here's What I Learned
This Word Document Steals Your Password From Microsoft Copilot (+ LIVE DEMO)
HackTheBox - SmartHire
HackTheBox - Silentium
HackTheBox - Pirate
HackTheBox - Cobblestone
HackTheBox - Helix
HackTheBox - Kobold
HackTheBox - Fries
HackTheBox Logging
HackTheBox - CCTV
HackTheBox - DevArea
HackTheBox - WingData
HackTheBox - Nanocorp
Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?
Your AI App Works. Can You Sell It?
you need to try Paperclip RIGHT NOW!
i got one....and it's FAST!!!
Your App Crashed. Now AI Gets to Work.
AI Still Needs Network Engineers
Windows Took 90 Minutes. Omarchy Took 1.
You Need to Get Your CCNA Right Now!!
Omarchy Can Do WHAT?! 50 Features You’re Missing
Introducing the new Copilot with Home, Code and Autopilot
Building the system for AI at work
Introducing Microsoft 365 G7: Intelligence + Trust for the mission ahead
ESPC 2026 is coming to Amsterdam: Bringing Microsoft and the community together
Build apps in Copilot Cowork and Copilot Studio
PPCC 2026: Bringing AI and your business processes together
PPCC 2026: Bringing AI and your business processes together
The next measure of AI momentum is work transformed
The next measure of AI momentum is work transformed
Copilot in Excel: Built for the era of Frontier Finance
Copilot in Excel: Built for the era of Frontier Finance
Copilot Cowork is now generally available
Copilot Cowork is now generally available
Introducing Microsoft Scout: Your always-on personal agent
Introducing Microsoft Scout: Your always-on personal agent
Announcing the new Work IQ APIs
Announcing the new Work IQ APIs
Introducing Microsoft 365 Business with Copilot: The new standard for small business
Introducing Microsoft 365 Business with Copilot: The new standard for small business
Introducing a new design for Microsoft 365 Copilot
AI Agents Can Be Secured. We Can Do It.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
The Signs Were There: What the First Autonomous Ransomware Case Confirms
Inside the OpenAI – Hugging Face Incident: The AI Breach With No Human Attacker Behind It
Federal Agencies Warn of Ongoing PLC Exploitation Against Critical U.S. Infrastructure
13M+ Emails Sent in Tech Support Scam Targeting Users, Organizations in Japan
Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass
Volume Is Not Risk: Making Sense of the 'Vulnpocalypse'
Six Minutes to Compromise: How ‘Patriot Bait’ Actor Used AI to Build and Deploy a C&C Botnet
TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry
From Langflow to Monero: Inside CVE-2026-33017 Cryptominer
PeopleSoft PeopleTools Pre-Authentication RCE: A PSIGW SSRF Chain That Executes Inside the JVM
Threat Actors Abuse claude.ai Shared Chat for ClickFix Malvertising Campaign
Governing Claude Enterprise in Environments Where Inline Controls Can't Go
GenAI Is Both Hunter and Hunted at Pwn2Own Berlin 2026
Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open
Pwn2Own Berlin 2026: On the Ground With TrendAI™ ZDI's Biggest AI Showdown Yet
Smart Contracts for C&C: How ClearFake Hid in Plain Sight on BSC Testnet
Analyzing Void Dokkaebi’s Cython-Compiled InvisibleFerret Malware
AI Assistants Are Already Ordering From Your Site. Here’s What Our Data Shows
The Fraud, Payments, and Agentic Topics European Merchants Can’t Stop Talking About
How Agentic AI Is Factoring Into Christmas Shopping in the UK
Why Moving Fraud Checks Pre-Auth Increases Authorization Rates
Fraud Temperature Gauge: September 2026
Does AI Content Have to be Authentic — or Can It Just Be Effective?
What Is Visa’s DCAP? A Merchant’s Guide to Requirements, Benefits, and Rollout
The Gray Area in Your Checkout Is Costing You More Than You Think
Your Payment Routing Rules Are Making Decisions Without You
New at Forter: AI Agents Built to Amplify Your Team 1
New at Forter: AI Agents Built to Amplify Your Team
Can AI Agents Find, Trust, and Choose Your Brand?
Fraud Risk Assessment: A New Model and New Approach
Assessing the Strength of Your Fraud Controls
Fraud Risk Assessment; A New Model and New Approach
Fraud Risk Assessment; A New Model and New Approach
Applying a Deeper Understanding in Fraud Auditing: Journal Entries
Revenue Fraud Schemes: Do You Really Understand Them?
TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords
Ukrainian ransomware developer jailed for nearly 13 years
Smashing Security podcast #486: Vibe-coded shops, and hackable Flock cameras
US Coast Guard and FBI board oil tanker to investigate cyber attack
Smashing Security podcast #485: These researchers got drunk to hack an LG TV
Former AT&T store worker jailed after moonlighting as a SIM-swap gang’s inside man
‘Anne Hathaway’ admits leading $245 million crypto theft gang that spent a fortune on nightclubs, watches, and luxury cars
Smashing Security podcast #484: How websites are tracking you with silence
CRPx0 ransomware: what you need to know
MacSync under the microscope: new delivery methods and a new payload
Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through compromised torrents
NightEagle targets Russian companies
Angry Birds: Toy Ghouls’ new toys
Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set
ValleyRAT masquerading as adware
Threat landscape for industrial automation systems. Q2 2026
Exploits and vulnerabilities in Q2 2026
The invisible passenger in your car
APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit
Armored Likho expands its cyber-espionage toolkit
Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph to video conference participants
Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection
IT threat evolution in Q2 2026. Non-mobile statistics
IT threat evolution in Q2 2026. Mobile statistics
Slow is a design principle, not a delay
AI adoption that pays off is built around keeping humans in the driver’s seat
Phishing in 2026. Latest statistics and analysis
Shift Browser is signed adware that fingerprints your endpoint before it drops payload
6 ThreatLocker alternatives that should make your shortlist
50+ insider threat statistics for 2026
The Planting Seeds philosophy. Selling into schools takes years, not quarters
What the DfE’s cyber security update means for multi-academy trusts
9 Proofpoint alternatives. Pros & cons of the leading options
The risk awareness radar. A superpower every MSP needs to train
A Phone Call Can Now Spread a Zero-Click Worm | Threat Wire
I Read OpenAI’s Hacking Report. We’re Not Ready for What’s Coming | Threat Wire
Was This the Dumbest Hacker Mistake Ever? | Threat Wire
Hackers Just Poisoned the Rust Supply Chain | Threat Wire
Apple Detected Something on These iPhones | Threat Wire
What Hackers Actually Do at DEF CON | Threat Wire
Ransomware: A Continuing Threat for Small Businesses
Why every payments team should be watching for ACH fraud
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
A Tale of Two SOCs: Insights From Two Red Team Assessments
Defending Against an Active Threat to Siemens S7 Series PLCs
#StopRansomware: Gunra Ransomware
Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite
Improve Router Hygiene to Protect Against Russian State-Sponsored Targeting
Defending Against China-Nexus Covert Networks of Compromised Devices
From the Edge to the Core: 9 Ways PKI Secures Your Network
How to Secure Your Email Server on an SMB Budget
Ransomware in the Dairy Aisle: A Look at Fairlife’s Cyberattack
UK’s Largest Cybercrime Case Ends in Prison for Spider Hacker
Hacking US Elections: The First Tranche of Declassified Election Integrity Documents
Inside Microsoft’s Record-Breaking 622-Bug Release
Breaking the Knot: Marlinspike Capital Inverts the Cybersecurity Investment Playbook
Inside “Gold Eagle”: The White House’s New AI-Driven Clearinghouse for Critical Infrastructure
CISA Warns Russian FSB Hackers Are Targeting Critical Infrastructure Routers
The Threat Mechanism and Mitigation of Pink Vishing Campaigns
See It Once, Stop It Everywhere
Cybercriminals Targeting World Cup Fans
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Azure IaaS: Defense in depth built on secure-by-design principles
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business
Try another search or clear the filters.
Security signals, without the noise. — page 4
Current feed archive. Entries come from the loaded publisher feeds and change as those feeds update.