-
31. cPanel Bug Enables Full Database Administrator Access (securityaffairs.com) ▲ -
32. Bypassing AI guardrails is so easy a script kiddie can do it (theregister.com) ▲ -
33. Operators of dozens of sanctioned tankers share one email domain with Russia’s Sovcomflot, Kharon Research finds (theins.press) ▲ -
34. TryHackMe Hacker Holidays 2026 (tryhackme.com) ▲ -
35. SQLite Critical CVEs or LLM Slop? (research.jfrog.com) ▲ -
36. Pass the Passkey: A Novel Attack Surface in Passwordless Authentication (unit42.paloaltonetworks.com) ▲ -
37. Harvesting SSH Credentials: Insights from my Honeypot Network (uphillsecurity.com) ▲ -
38. The rooting, firmware analysis and hardcoded, reset-persistent credentials of the TP-Link (blog.juni-mp4.com) ▲ -
39. Bitcoin cold-wallet attack spreads to 4,500 addresses as losses near $89 million (coindesk.com) ▲ -
40. Anthropic's Fever Dream: Claude's package that stole real keys (aikido.dev) ▲ -
41. CISA Alert: Water Sector PLC Targeting (censys.com) ▲ -
42. New Defcon Badges Pack a Unique Open-Source Chip That Doubles as a Security Key (wired.com) ▲ -
43. OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia (securelist.com) ▲ -
44. North Korea busts elite hacking ring inside its own banks (dailynk.com) ▲ -
45. Read This Before You Buy That TV Streaming Stick (krebsonsecurity.com) ▲ -
46. Shai-Hulud and the risks of external dependencies (scotto.me) ▲ -
47. Disrupting supply chain attacks on npm and GitHub Actions (github.blog) ▲ -
48. What does GitHub’s security team even do? (orchidfiles.com) ▲ -
49. Pope's official prayer app commits cardinal sin, leaks 700K+ users' info (theregister.com) ▲ -
50. The hacker who humiliated spyware makers and was never caught (techcrunch.com) ▲ -
51. Hacker wipes Romania's land registry database (news.risky.biz) ▲ -
52. [post] How to maintain best practice in CS? ▲ -
53. Two critical SQLi vulnerabilities in WordPress (wordpress.org) ▲ -
54. Jailbroken Gemini spun up new C2 server for Russian fraudster in just 6 minutes (theregister.com) ▲ -
55. Destructive Windows backdoor stuffs multiple wipers and ransomware code into a single package (theregister.com) ▲ -
56. North Korean Hackers Compromise Go and PHP Packages (opensourcemalware.com) ▲ -
57. PRC-linked spies hid inside medical and military networks for more than a year (theregister.com) ▲ -
58. Nearly Half of LG Smart TV Apps Are Laced with Proxies (spur.us) ▲ -
59. Anonymous GitHub account mass-dropping undisclosed 0-days (github.com) ▲ -
60. Cybersecurity in the post-mythos era: Keep calm and carry on! (cephalosec.com) ▲