Critical Cisco Catalyst SD-WAN Vulnerabilities Allow Attackers to Gain Root Access
AnuPriya / cyberpress - Cisco released critical patches on March 5, 2026, for multiple flaws in Catalyst SD-WAN Manager (formerly vManage). These bugs let attackers skip authentication, grab root privileges, and run commands. The advisory, first posted February 25, now warns of …
Back to Top / Thursday, March 5, 2026, 7:21 am / permalink 20184 / 4 stories in 43 hrs
US and EU police shut down LeakBase, a site accused of sharing stolen passwords and hacking tools
Zack Whittaker / techcrunch - Authorities say LeakBase was "one of the world’s largest online forums for cybercriminals," and maintained an archive of hacked databases containing hundreds of millions of passwords.
Back to Top / Wednesday, March 4, 2026, 5:21 pm / permalink 20155 / 7 stories in 2 days
A Possible US Government iPhone-Hacking Toolkit Is Now in the Hands of Foreign Spies and Criminals
Andy Greenberg / wired - A highly sophisticated set of iPhone hijacking techniques has likely infected tens of thousands of phones or more. Clues suggest it was originally built for the US government.
- Coruna's 23-exploit chains compromised tens of thousands (3)
- From spies to thieves: Coruna fuels espionage and crypto theft (3)
- Tracing Coruna: likely US‑government roots, contractor fingerprints (5)
- All Other Stories
Coruna's 23-exploit chains compromised tens of thousands
From spies to thieves: Coruna fuels espionage and crypto theft
Tracing Coruna: likely US‑government roots, contractor fingerprints
All Other Stories
Back to Top / Tuesday, March 3, 2026, 6:20 pm / permalink 20094 / 13 stories in 3 days
Researchers discover massive Wi-Fi vulnerability affecting multiple access points — AirSnitch lets attackers on the same network intercept data and launch machine-in-the-middle attacks
tomshardware - A team of researchers discovered that they can break cryptographic client isolation on a number of wireless routers by taking advantage of how Wi-Fi networks work.
Back to Top / Thursday, February 26, 2026, 2:21 pm / permalink 19824 / 3 stories in 8 days
CarGurus data breach affects 12.5 million accounts
Kirsten Korosec / techcrunch - Automotive marketplace CarGurus was the target of a data breach in which the names, email addresses, phone numbers, and physical addresses of millions of customers were stolen.
Back to Top / Tuesday, February 24, 2026, 7:21 pm / permalink 19701 / 3 stories in 10 days
U.S. sanctions Russian firm Operation Zero following crypto-funded trade secret theft
Sarah Wynn / theblock - The Treasury’s OFAC has sanctioned the Russian company Operation Zero following the guilty plea of a man who admitted to stealing software.
Back to Top / Tuesday, February 24, 2026, 4:21 pm / permalink 19687 / 9 stories in 10 days
Solana DeFi Project Step Finance to Wind Down Weeks After $29M Hack
Callan Quinn / decrypt - The Solana projects made the "difficult decision" to cease operations after January's treasury breach and subsequent failed rescue efforts.
Back to Top / Tuesday, February 24, 2026, 9:21 am / permalink 19641 / 3 stories in 10 days
Fury Over Discord's Age Checks Explodes After Shady Persona Test In UK
BeauHD / slashdot - Backlash intensified against Discord's age verification rollout after it briefly disclosed a UK age-verification test involving vendor Persona, contradicting earlier claims about minimal ID storage and transparency. Ars Technica explains: One of the major…
Back to Top / Friday, February 20, 2026, 9:20 pm / permalink 19492 / 8 stories in 14 days
PayPal Discloses Data Breach That Exposed User Info For 6 Months
msmash / slashdot - PayPal is notifying customers of a data breach after a software error in a loan application exposed their sensitive personal information, including Social Security numbers, for nearly 6 months last year. From a report: The incident affected the PayPal Wor…
Back to Top / Friday, February 20, 2026, 1:20 pm / permalink 19476 / 5 stories in 14 days
$20 million lost in 'jackpotting' ATM malware attacks in 2025, FBI reports — scheme forces machines to spit out cash, targets banks and ATM operators
tomshardware - The FBI released a public warning, saying that ATM "jackpotting" incidents have exponentially increased in 2025.
Back to Top / Friday, February 20, 2026, 10:21 am / permalink 19467 / 4 stories in 14 days
LLM-Generated Passwords Look Strong but Crack in Hours, Researchers Find
msmash / slashdot - AI security firm Irregular has found that passwords generated by major large language models -- Claude, ChatGPT and Gemini -- appear complex but follow predictable patterns that make them crackable in hours, even on decades-old hardware. When researchers …
Back to Top / Thursday, February 19, 2026, 1:21 pm / permalink 19429 / 4 stories in 15 days
Cyberpunk 2077 is now playable on high-end Android smartphones using PC emulation
techspot - YouTube channel ETA Prime used the Red Magic 11 Pro to run an emulated version of Cyberpunk 2077. It's a suitable handset for the experiment, thanks to its liquid cooler, active cooling fan, and large vapor chamber, all helping keep the Snapdragon 8 Elite…
Back to Top / Wednesday, February 18, 2026, 7:21 am / permalink 19349 / 3 stories in 16 days
Google patches Chrome zero-day as in-the-wild exploits surface
Carly Page / theregister - High-severity CSS flaw let malicious webpages run code inside the sandbox Google has quietly pushed out an emergency Chrome fix after attackers were caught exploiting the browser's first reported zero-day of 2026.…
Back to Top / Monday, February 16, 2026, 8:20 am / permalink 19240 / 6 stories in 18 days
AMD Won’t Fix Critical RCE Vulnerability in its AutoUpdate Software
Markus Kasanmascheff / winbuzzer - Security researcher has disclosed a severe RCE vulnerability in AMD's AutoUpdate software after the company declined to address the critical flaw.The post AMD Won’t Fix Critical RCE Vulnerability in its AutoUpdate Software appeared first on WinBuzzer.
Back to Top / Saturday, February 7, 2026, 1:20 pm / permalink 18890 / 4 stories in 27 days
Moltbook, the viral social network for AI agents, has a major security problem
Chris Stokel-Walker / fastcompany - The rise of OpenClaw, a proactive agentic AI controlled through interfaces more familiar to the average user than tools like Anthropic’s Claude Code, which enthralled early adopters over the holiday period, has been one of the most seismic shifts in the A…
- AI governance and identity (2)
- Emerging AI agent communities (3)
- Moltbook security failures (4)
- OpenClaw: risks and buzz (5)
- All Other Stories
AI governance and identity
Emerging AI agent communities
Moltbook security failures
OpenClaw: risks and buzz
All Other Stories
Back to Top / Tuesday, February 3, 2026, 11:21 am / permalink 18707 / 15 stories in 4 wks
Notepad++ update server hijacked in targeted attacks — outfit claims Chinese state-sponsored hackers may be to blame
tomshardware - The Notepad++ project yesterday disclosed that its update server was covertly hijacked in a targeted supply chain attack that began in June 2025,
Back to Top / Tuesday, February 3, 2026, 10:21 am / permalink 18706 / 4 stories in 4 wks
Notepad++ update feature hijacked by Chinese state hackers for months
Bill Toulas / bleepingcomputer - Chinese state-sponsored threat actors were likely behind the hijacking of Notepad++ update traffic last year that lasted for almost half a year, the developer states in an official announcement today. [...]
- Chinese state hackers seize update channels (5)
- Widespread state-sponsored attack compromises update infrastructure (5)
- All Other Stories
Chinese state hackers seize update channels
Widespread state-sponsored attack compromises update infrastructure
All Other Stories
Back to Top / Monday, February 2, 2026, 9:21 am / permalink 18661 / 13 stories in 4 wks
Solana DeFi platform step finance hit by $27 million treasury hack as token price craters
Francisco Rodrigues / coindesk - The platform's governance token (STEP) plummeted over 80% following the announcement amid a wider crypto market drawdown.
Back to Top / Saturday, January 31, 2026, 1:20 pm / permalink 18617 / 2 stories in 4 wks
Sandworm hackers linked to failed wiper attack on Poland’s energy systems
Lawrence Abrams / bleepingcomputer - A cyberattack targeting Poland's power grid in late December 2025 has been linked to the Russian state-sponsored hacking group Sandworm, which attempted to deploy a new destructive data-wiping malware dubbed DynoWiper during the attack.. [...]
Back to Top / Saturday, January 24, 2026, 4:20 pm / permalink 18376 / 7 stories in 5 wks
Future Apple product plans may be at risk following Luxshare hack
appleinsider - Apple supply chain member Luxshare suffered a major data breach in December, and hackers that pilfered the files are now offering it for sale on the dark web. It looks legit.Luxshare's existing US office near Apple Park — image credit: Apple MapsThe Apple…
Back to Top / Wednesday, January 21, 2026, 1:20 pm / permalink 18245 / 5 stories in 6 wks