Loading…

Whats The Hax?

Daily intelligence on threats, breaches, and defenders

What's New

Top 5 Across All Sources

  1. Name That Toon Contest

    darkreading · 1h ago
Latest
darkreadingName That Toon ContestBleepingComputer5 reasons Microsoft 365 backup isn’t enough for business data protectionThe Hacker NewsDragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 TrafficBleepingComputerPolice cleans nearly 15,000 SocGholish-infected sites tied to Evil CorpSecurityWeekAccenture to Acquire Majority Stake in Dragos, All of runZero, NetRise in $4.1 Billion OT Cybersecurity PushBleepingComputerShapedPlugin update flow hacked to infect WordPress sitesBleepingComputerFortiBleed leak exposes Fortinet VPN credentials for 73,000 devices.SecurityWeekNo Exploits RequiredBleepingComputerApple fixes Beats Studio Buds flaw that let hackers spy on conversationsBleepingComputerTelegram admits it couldn't police exam-leak channels, India tells courtThe Hacker NewsOrphaned AI Agents: How to Find Hidden Access Risks Inside Your NetworkSecurityWeekDream Raises $260 Million at $3 Billion ValuationBleepingComputerF5 issues out-of-band patches for critical NGINX vulnerabilitiesThe Hacker NewsThe Scripts on Your Checkout Page Are Now a PCI DSS ProblemSecurity LatestHow to Watch the Knicks Parade on NYC Traffic Surveillance CamerasSecurityWeekAtlassian, Splunk Patch Critical VulnerabilitiesSecurityWeekRokarolla Banking Trojan Targets 200 ApplicationsSecurityWeekCritical Command Execution Vulnerability Patched in Cisco ISEBleepingComputerMicrosoft fixes Windows Server 2016 security update failuresSecurityWeekF5 Patches Critical, High-Severity NGINX VulnerabilitiesdarkreadingName That Toon ContestBleepingComputer5 reasons Microsoft 365 backup isn’t enough for business data protectionThe Hacker NewsDragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 TrafficBleepingComputerPolice cleans nearly 15,000 SocGholish-infected sites tied to Evil CorpSecurityWeekAccenture to Acquire Majority Stake in Dragos, All of runZero, NetRise in $4.1 Billion OT Cybersecurity PushBleepingComputerShapedPlugin update flow hacked to infect WordPress sitesBleepingComputerFortiBleed leak exposes Fortinet VPN credentials for 73,000 devices.SecurityWeekNo Exploits RequiredBleepingComputerApple fixes Beats Studio Buds flaw that let hackers spy on conversationsBleepingComputerTelegram admits it couldn't police exam-leak channels, India tells courtThe Hacker NewsOrphaned AI Agents: How to Find Hidden Access Risks Inside Your NetworkSecurityWeekDream Raises $260 Million at $3 Billion ValuationBleepingComputerF5 issues out-of-band patches for critical NGINX vulnerabilitiesThe Hacker NewsThe Scripts on Your Checkout Page Are Now a PCI DSS ProblemSecurity LatestHow to Watch the Knicks Parade on NYC Traffic Surveillance CamerasSecurityWeekAtlassian, Splunk Patch Critical VulnerabilitiesSecurityWeekRokarolla Banking Trojan Targets 200 ApplicationsSecurityWeekCritical Command Execution Vulnerability Patched in Cisco ISEBleepingComputerMicrosoft fixes Windows Server 2016 security update failuresSecurityWeekF5 Patches Critical, High-Severity NGINX Vulnerabilities

By Source

Feeds organized so you can skim by site.

Density Sort
DA
darkreading
1h ago · 84 items
Name That Toon Contest 1h ago ShinyHunters Uses Oracle Zero-Day to Rampage Higher Ed 5d ago Claude Fable 5 Doesn't Change the Mythos Security Story 6d ago Phishing Attack Volume Down 20%, But Risk Still Rising 6d ago Max-Severity Ivanti Flaw Exploited 24 Hours After Disclosure 6d ago Segmentation Works for OT If Operators Are Paying Attention 6d ago Chinese, N. Korean Threat Groups Build on Asia-Pacific Success 7d ago CISA Rewrites Federal Patching Requirements for AI Threat Era 7d ago Bug Bounty Research Triggers ServiceNow Security Alert 7d ago AI Risk Worries Insurers & Businesses Alike 7d ago
84 loaded
BL
BleepingComputer
1h ago · 15 items
5 reasons Microsoft 365 backup isn’t enough for business data protection 1h ago Microsoft 365 helps keep services running, but protecting and recovering business data remains your responsibility. Acronis breaks down five gaps organizations should consider when evaluating Microsoft 365 data protection. Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp 1h ago International law enforcement agencies cleaned nearly 15,000 malware-infected WordPress websites and took down more than 100 servers linked to the SocGholish botnet and the Evil Corp Russian cybercrime group. ShapedPlugin update flow hacked to infect WordPress sites 1h ago Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack that distributed infected releases to paying customers via the vendor's official update system. FortiBleed leak exposes Fortinet VPN credentials for 73,000 devices. 1h ago A newly discovered data leak dubbed Apple fixes Beats Studio Buds flaw that let hackers spy on conversations 1h ago Apple has released security updates to patch a high-severity flaw affecting the Beats Studio Buds wireless earbuds that could allow attackers in Bluetooth range to spy on users' conversations. Telegram admits it couldn't police exam-leak channels, India tells court 1h ago India's government has told the Delhi High Court that Telegram was warned about two weeks before it was blocked, and that the platform admitted it could not proactively detect the channels selling leaked exam papers. Telegram says it cooper... F5 issues out-of-band patches for critical NGINX vulnerabilities 2h ago Cybersecurity company F5 has released out-of-band security updates to address multiple NGINX web server vulnerabilities, including two critical-severity flaws that could allow attackers to execute code on vulnerable systems. Microsoft fixes Windows Server 2016 security update failures 3h ago Microsoft has fixed a known issue causing the June 2026 security updates to fail on Windows Server 2016 systems that weren't up to date. Leak confirms OpenAI is testing a ChatGPT for Science subscription 12h ago OpenAI appears to be testing a new subscription and experience for science use cases, but it's unclear if it'll be available to everyone regardless of their background. Google to use UK and EU user IP addresses for ad personalization 17h ago From August 3, 2026, Google will use IP addresses from UK, EEA and Switzerland users for ad measurement and personalization. It lands as the ICO weighs new consent rules, and years after Google itself called using such signals to identify d...
15 loaded
TH
The Hacker News
1h ago · 20 items
DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic 1h ago Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Network 2h ago The Scripts on Your Checkout Page Are Now a PCI DSS Problem 3h ago Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments 19h ago Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development 20h ago Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline 22h ago Adversarial Exposure Validation Turns Security Visibility into Confident Prioritization 23h ago Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats 1d ago The Top 10 Attack Surface Exposures in 2026 1d ago 145 Mastra npm Packages Compromised via Hijacked Contributor Account 1d ago
20 loaded
SE
SecurityWeek
1h ago · 10 items
Accenture to Acquire Majority Stake in Dragos, All of runZero, NetRise in $4.1 Billion OT Cybersecurity Push 1h ago No Exploits Required 1h ago Dream Raises $260 Million at $3 Billion Valuation 2h ago Atlassian, Splunk Patch Critical Vulnerabilities 3h ago Rokarolla Banking Trojan Targets 200 Applications 3h ago Critical Command Execution Vulnerability Patched in Cisco ISE 3h ago F5 Patches Critical, High-Severity NGINX Vulnerabilities 4h ago SailPoint to Acquire Entro in Reported $200 Million Deal 5h ago Kodak Admits Data Breach After ShinyHunters Hack Claims 6h ago Webinar Today: How Modern Breaches Bypass MFA and Evade Detection 1d ago
SL
Security Latest
3h ago · 20 items
How to Watch the Knicks Parade on NYC Traffic Surveillance Cameras 3h ago The UK Will Scan Asylum-Seekers’ Faces for Age Checks—Despite Knowing the Tech Is Flawed 8h ago Leak Exposes Members of Peter Thiel’s Secretive ‘Dialog’ Society 1d ago ‘Dangerous’ AI Models Are Coming No Matter What 1d ago Meta Tapped a Pentagon Supplier to Prototype Face Recognition for Its Glasses 3d ago The FCC Wants to Kill Burner Phones 5d ago Grok Is Still Hosting Sexualized Deepfakes of Famous Women 6d ago Drug Sites Hijacked Spotify’s Search Ranking Through Fake Podcasts 6d ago Signal Alums Reveal ‘Encrypted Spaces,’ a System for Making Private Collaboration Apps 7d ago CISA Tells US Agencies to Fix Security Bugs in as Little as 3 Days Thanks to AI Threats 7d ago
20 loaded
TR
Hostile states behind three-quarters of attacks on Britain's critical infrastructure, cyber chief warns 20h ago EU grants Ukraine access to cybersecurity reserve for major attacks 21h ago Warner warns of CISA cuts, staffing gaps in letter to acting chief 1d ago India's Telegram ban draws criticism from Durov as company challenges order in court 1d ago GitHub dismissed security reports on flaws now exploited by supply-chain worm, researchers say 1d ago
CY
CyberScoop
1d ago · 85 items
A case for how to shape ‘ingredient lists’ for AI models 1d ago Google exposes China espionage group that’s been lurking in networks undetected since 2023 2d ago Cybersecurity experts don’t think Anthropic’s Fable 5 presents a unique threat 2d ago Anthropic disables new models after government calls them a national security concern 4d ago FBI takes down massive China-based cybercrime network that caused $1.9B in losses 5d ago US, France, and Italian authorities shut down massive deepfake porn site 5d ago Conti ransomware group member pleads guilty, faces up to 20 years in prison 5d ago ShinyHunters is actively extorting universities after exploiting an unpatched Oracle flaw 5d ago CyberCorps is adapting to AI. The budget isn’t keeping up. 6d ago Russian national charged in connection with Void Blizzard espionage campaign 6d ago
85 loaded
KO
Krebs on Security
8d ago · 10 items
Who Runs the Ransomware Group ‘The Gentlemen?’ 8d ago A cybercrime group known as The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hackers through an aggressive recruitment strategy that promises affiliates 90 percent of... A Record-Breaking Patch Tuesday for June 2026 8d ago Microsoft today released software updates to plug nearly 200 security holes across its Windows operating systems and supported software, a record number of fixes for the company's monthly Patch Tuesday cycle. Nearly three dozen of those bug... Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts 16d ago The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages over the weekend, after instructions began circulating on Telegram showing how ... Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks 24d ago Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructure used by Russia to carry out cyberattacks, influence operations and disinformation campaigns inside the Euro... Lawmakers Demand Answers as CISA Tries to Contain Data Leak 26d ago Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published AWS GovCloud keys and a v... Alleged Kimwolf Botmaster ‘Dort’ Arrested, Charged in U.S. and Canada 27d ago Canadian authorities on Wednesday arrested a 23-year-old Ottawa man on suspicion of building and operating Kimwolf, a fast spreading Internet-of-Things botnet that enslaved millions of devices for use in a series of massive distributed deni... CISA Admin Leaked AWS GovCloud Keys on Github 30d ago Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of inte... Patch Tuesday, May 2026 Edition 36d ago Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at finding security vulnerabilities in human-made computer code. That reality is on full display this m... Canvas Breach Disrupts Schools & Colleges Nationwide 41d ago An ongoing data extortion attack targeting the widely-used education technology platform Canvas disrupted classes and coursework at school districts and universities across the United States today, after a cybercrime group defaced the servi... Anti-DDoS Firm Heaped Attacks on Brazilian ISPs 49d ago A Brazilian tech firm that specializes in protecting networks from distributed denial-of-service (DDoS) attacks has been enabling a botnet responsible for an extended campaign of massive DDoS attacks against other network operators in Brazi...

No matching sources found.