← Feed

Posts

• View post

  ⚪️ Active Directory Group Policies Became a Tool for Ransomware Operators 🗨️ Researchers at Kaspersky Lab have reported an unusual ransomware attack targeting a manufacturing company in the Middle East. The hackers stole data, locked down the organization’s computers, and demanded a ransom, but did not encrypt files or execute malware on… 🔗 https://hackmag.com/news/active-directory-payload?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #news

• View post

  ⚪️ Watermarks Could Make LLMs More Vulnerable to Prompt Injection 🗨️ A researcher at Lasso Security found that SynthID-Text watermarks can affect the security of large language models. In some cases, after content watermarking was enabled, LLMs agreed to carry out harmful instructions that they would have rejected without SynthID. This… 🔗 https://hackmag.com/news/sampling-drift?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #news

• View post

  ⚪️ Fake LastPass Authenticator Repositories on GitHub Contain Rapuncel Stealer 🗨️ Researchers at LastPass and Delphos Labs have uncovered a large-scale malicious campaign in which attackers publish GitHub repositories impersonating LastPass and at least 39 other companies. The fake repositories are promoted through search engines and distribute the new Rapuncel infostealer… 🔗 https://hackmag.com/news/lastpass-rapuncel?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_s...

• View post

  ⚪️ Brooklyn Man Faces Up to 12 Years in Prison for Stealing Nearly $16 Million from Coinbase Customers 🗨️ A Brooklyn court sentenced 23-year-old Ronald Spector to between four and twelve years in prison. Spector pleaded guilty to stealing nearly $16 million from approximately one hundred U.S. users of the Coinbase cryptocurrency exchange. The scheme relied on phishing and… 🔗 https://hackmag.com/news/ronald-spector-coinbase-scam?utm_source=mastodon&utm_medium=social&utm_campaign=repost_ha...

• View post

  ⚪️ North Korean WaterPlum Group Steals $11 Million from 7,000 Crypto Wallets 🗨️ A group of hackers from North Korea stole funds from more than 7,000 cryptocurrency wallets or the credentials needed to access them, transferring approximately $10.71 million to Pyongyang, according to a joint statement by seven law enforcement agencies from four… 🔗 https://hackmag.com/news/contagious-interview-hack?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #news

• View post

  ⚪️ Using Regular Expressions to Find Secrets in Offensive and Defensive Security 🗨️ Think of your code as a hidden stash—but instead of gold, it contains your passwords, server keys, and other sensitive data. One day, however, you accidentally leave it exposed, and now anyone can take whatever they want. Not a great prospect, right? Secret scanning is designed to help identify … 🔗 https://hackmag.com/devops/code-secrets?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_t...

• View post

  ⚪️ Nightmare Eclipse Reveals Identity and Publishes New 0-Day Exploit 🗨️ Security researcher known as Nightmare Eclipse, who has been publishing 0-day exploits for Windows and other Microsoft products since this spring, has released a new exploit called BigDiskBuster. The associated vulnerability prevents Microsoft Defender from installing platform and signature updat… 🔗 https://hackmag.com/news/bigdiskbuster?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #...

• View post

  ⚪️ RatHat Android Trojan Uses AI for Automation 🗨️ Zimperium researchers have discovered a new Android trojan called RatHat, which uses generative AI to navigate the interfaces of infected devices. The malware can steal banking data and passwords, intercept one-time codes, monitor data entered by victims, and provide attackers… 🔗 https://hackmag.com/news/rathat?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #news

• View post

  ⚪️ Corporate Phishing Anatomy: Creating Emails for Security Awareness Simulations 🗨️ This article is aimed at penetration testers and security professionals who want to assess whether employees can recognize malicious emails. We will discuss corporate email phishing. 🔗 https://hackmag.com/security/corporate-fishing?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #security

• View post

  ⚪️ FBI Seizes NightmareStresser DDoS Service Domains 🗨️ The FBI has seized two NightmareStresser domains, a service designed to offer DDoS attacks for hire. According to U.S. authorities, NightmareStresser was one of the oldest active DDoS-for-hire services, and since 2022 it had been used to launch hundreds of… 🔗 https://hackmag.com/news/nightmarestresser?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #news

• View post

  ⚪️ Four Hacker Groups Are Using the BlueMoon Exploit Kit Simultaneously 🗨️ Researchers at Proofpoint have discovered a new BlueMoon exploit kit that chains together three vulnerabilities in Chrome and Windows. According to the experts, the tool was adopted almost simultaneously by at least four espionage groups, most of them linked to… 🔗 https://hackmag.com/news/bluemoon?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #news

• View post

  ⚪️ Hunting IDORs: A Three-Act Play About Data Protection 🗨️ IDOR is the most dangerous beast in the OWASP forest. Even a single instance falling into the wrong hands can prove costly for an engineer’s company, so he uses every capability available through white-box testing to stay ahead of pentesters, bug bounty hunters, and malicious attackers in this hunt. 🔗 https://hackmag.com/security/idor-hunt?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #security

• View post

  ⚪️ Fraudsters obtained Revolut customer data through an Italian government email system and are now demanding a ransom 🗨️ The leak of Revolut fintech customer data has been linked to the compromise of the Italian authorities’ certified email system: the attackers used it to send forged data disclosure requests. In addition, one of the alleged participants in the attack… 🔗 https://hackmag.com/news/revolut-pec?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #n...

• View post

  ⚪️ Hackers Compromised HBO Max’s Reddit Account to Spread ClickFix Ads 🗨️ Hackers compromised HBO Max’s official Reddit account and used it to distribute malicious ads. Over roughly 48 hours, the attackers posted 108 advertisements leading to ClickFix pages that infected Windows and macOS devices with stealers and other malware. Researchers at… 🔗 https://hackmag.com/news/hbo-max-clickfix?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #news

• View post

  ⚪️ Analyzing Dynamic Code with Intel Pin: A Practical Guide 🗨️ Pin is a dynamic binary instrumentation (DBI) tool. It recompiles machine code on the fly at runtime, effectively running the program inside a transparent virtual machine that, after initial startup, incurs only minimal performance overhead. Pin lets you inspect executing code or alter its behavi… 🔗 https://hackmag.com/security/intel-pin?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #security

• View post

  ⚪️ ReForge: Enhancing Stable Diffusion Image Generation 🗨️ The focus of today’s article is an advanced toolkit that not only provides access to a wide range of fine-grained neural network settings, but also automates the generation of high-quality images. 🔗 https://hackmag.com/security/stable-diffusion-reforge?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #security

• View post

  ⚪️ Chrome and Edge Extensions Stole Cryptocurrency 🗨️ Researchers at Socket discovered 18 malicious extensions for Google Chrome and one for Microsoft Edge. All of the extensions loaded a modular framework designed to steal victims’ cryptocurrency, credentials, and browser history, while also displaying ClickFix lures. Researchers have dubbed… 🔗 https://hackmag.com/news/superior?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #news

• View post

  ⚪️ Investigating a Credential Stuffing Attack on Linux: A Digital Forensics Guide 🗨️ Today, we will practice traffic analysis using Wireshark, examine a credential-stuffing brute-force attack, and analyze the attacker’s persistence technique within the system. We will then build an event timeline. 🔗 https://hackmag.com/security/sherlocks-meerkat?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #security

• View post

  ⚪️ Reverse Engineering Binary Files: A Hands-On Guide Using libexif 🗨️ When I was first getting into the world of hacking, I was severely short on information and had to gather it bit by bit. In this article, I’ll try to provide what I was missing back then: a concise, structured overview of reverse engineering. To make things more practical, we’ll walk through a r… 🔗 https://hackmag.com/security/reversing-guide?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_t...

• View post

  ⚪️ Reverse Engineering the Liposonix Cartridge and Building an Emulator 🗨️ In this article, I’ll explain how real-world medical equipment is reverse-engineered. Using a cartridge for the Liposonix system as an example, we’ll cover the basics of reverse-engineering digital-device protocols and see how transmitted data can be spoofed. As it turns out, an ATmega microcontr… 🔗 https://hackmag.com/security/liposonix-hack?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackma...

• View post

  ⚪️ EIGRP Route Table Poisoning with Python 🗨️ In this article, I’ll show how to use Python to inject rogue routes into an EIGRP domain. With some luck, such an injection could allow an attacker to perform a man-in-the-middle (MITM) attack or temporarily cause disruption within the routing domain. We’ll examine the process of establishing adj… 🔗 https://hackmag.com/stuff/eigrp-scam?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #stuff

• View post

  ⚪️ Emerging Cybersecurity Research Trends and Insights 🗨️ Today, we’ll take a look at the latest trends in cybersecurity, explore the new ideas currently on the minds of security professionals—including my own team—and review some relevant publications you may want to read. 🔗 https://hackmag.com/security/research-review?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #security

• View post

  ⚪️ OpenAI publishes official report on July Hugging Face breach 🗨️ Specialists from OpenAI and the research organization METR have published detailed reports on the July attack on the Hugging Face platform involving AI agents. It emerged that around 1,200 agents, which were supposed to operate in isolation from one another,… 🔗 https://hackmag.com/news/hugging-face-post-mortem?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #news

• View post

  ⚪️ Two Members of the TeamPCP Hacking Group Arrested in Australia 🗨️ The Australian Federal Police (AFP) reported the arrest of two suspected members of the TeamPCP hacking group, which has been linked to large-scale supply chain attacks. According to investigators, the group’s attacks may have affected more than 1,000 organizations worldwide,… 🔗 https://hackmag.com/news/teampcp-arrest?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #news

• View post

  ⚪️ Calling Native WinAPI from C#: Techniques for Managed-to-Native Interoperability 🗨️ One of the few drawbacks of C# is that calling WinAPI methods can be somewhat cumbersome. While many capabilities have already been wrapped in .NET assemblies, developers still frequently need to call Win32 functions directly. In such cases, P/Invoke, D/Invoke, and related techniques are used. I… 🔗 https://hackmag.com/stuff/csharp-winapi-tutorial?utm_source=mastodon&utm_medium=social&utm_campa...

• View post

  ⚪️ ToxicPanda Malware Abuses Android VPN Mechanism to Block Access to Google Play 🗨️ Researchers warn about the emergence of an updated version of the ToxicPanda Android Trojan. It supports 167 remote commands, can block access to the Google Play store, and automatically abuses Wireless ADB to gain shell access. The malware’s target list… 🔗 https://hackmag.com/news/toxicpanda-2-0?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #news

• View post

  ⚪️ Qilin Ransomware Operators Claim to Have Hacked the ATF 🗨️ Representatives of the U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) confirmed that one of its systems had been compromised. Shortly before that, members of the Qilin ransomware group claimed to have breached the ATF and added the agency… 🔗 https://hackmag.com/news/qilin-atf?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #news

• View post

  ⚪️ How EDR Works: A Detailed Guide to Endpoint Detection and Response Protection 🗨️ *Hacker* magazine often covers process and system call hiding, code obfuscation, and other ways to evade AV/EDR solutions. But what if you want to do more than just follow instructions and instead discover such techniques on your own? At a minimum, that requires understanding the general princip… 🔗 https://hackmag.com/malware/inside-edr?utm_source=mastodon&utm_medium=social&utm_campaign=repost_ha...

• View post

  ⚪️ $1.1M Crypto Hack Sends Neobank Token Down 49% 🗨️ A vulnerability in an outdated payment-infrastructure contract for the Rain crypto card led to the theft of approximately $1.1 million across several programs on the Solana blockchain. Neobank Avici was hit hardest: the attacker stole more than $500,000 from 1,685… 🔗 https://hackmag.com/news/avici-token-hack?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #news

• View post

  ⚪️ Cronos Network Halted Following Tectonic Protocol Hack 🗨️ On August 30, 2026, Cronos blockchain validators halted the network after an attacker drained Tectonic, the network’s largest lending protocol, by artificially inflating the price of the TONIC token. According to analyst Weilin Li, the losses amounted to approximately $66–75… 🔗 https://hackmag.com/news/cronos-tectonic-hack?utm_source=mastodon&utm_medium=social&utm_campaign=repost_hackmag_to_socials #news