mastodon 4.8.0-alpha.3+glitchDaily news and articles for ethical/legal hackers, information security specialists, researchers, developers, and all other IT enthusiasts.
This account is automated, but it doesn't mean there will be no real person (@mechanism8@mastodon.social) behind.
We do not support illegal activities in any form or shape.
For support: support@hackmag.com; for editorial inquiries: staff@hackmag.com.
⚪️ $1.1M Crypto Hack Sends Neobank Token Down 49%
🗨️ A vulnerability in an outdated payment-infrastructure contract for the Rain crypto card led to the theft of approximately $1.1 million across several programs on the Solana blockchain. Neobank Avici was hit hardest: the attacker stole more than $500,000 from 1,685…
⚪️ EIGRP Route Table Poisoning with Python
🗨️ In this article, I’ll show how to use Python to inject rogue routes into an EIGRP domain. With some luck, such an injection could allow an attacker to perform a man-in-the-middle (MITM) attack or temporarily cause disruption within the routing domain. We’ll examine the process of establishing adj…
⚪️ Reverse Engineering Binary Files: A Hands-On Guide Using libexif
🗨️ When I was first getting into the world of hacking, I was severely short on information and had to gather it bit by bit. In this article, I’ll try to provide what I was missing back then: a concise, structured overview of reverse engineering.
To make things more practical, we’ll walk through a r…
⚪️ Google Announces Encrypted Client Hello (ECH) Support in Android 17
🗨️ Android 17 introduces system-level support for Encrypted Client Hello (ECH), making it harder for ISPs and other observers to determine which websites and services a user is accessing. Although Android 17 was released back in June 2026 and already included…
⚪️ Reverse Engineering the Liposonix Cartridge and Building an Emulator
🗨️ In this article, I’ll explain how real-world medical equipment is reverse-engineered. Using a cartridge for the Liposonix system as an example, we’ll cover the basics of reverse-engineering digital-device protocols and see how transmitted data can be spoofed. As it turns out, an ATmega microcontr…
⚪️ Reverse Engineering a Python Application with a Custom Interpreter
🗨️ Reverse-engineering applications written in Python is not always straightforward. Developers know how to protect their secrets using obfuscation, encryption, custom marshaling formats, and proprietary interpreters. But every lock has a pick: today, we’ll explore how to reverse-engineer such progr…
⚪️ Calling Native WinAPI from C#: Techniques for Managed-to-Native Interoperability
🗨️ One of the few drawbacks of C# is that calling WinAPI methods can be somewhat cumbersome. While many capabilities have already been wrapped in .NET assemblies, developers still frequently need to call Win32 functions directly. In such cases, P/Invoke, D/Invoke, and related techniques are used.
I…
⚪️ Anthropic Warns Users About Infostealer Attacks
🗨️ Anthropic representatives are warning users about a new scheme involving abuse of Claude accounts. Infostealers steal active sessions from victims’ browsers, allowing attackers to access other people’s accounts and use up their available limits. Anthropic is currently sending targeted notifications…
⚪️ Two Members of the TeamPCP Hacking Group Arrested in Australia
🗨️ The Australian Federal Police (AFP) reported the arrest of two suspected members of the TeamPCP hacking group, which has been linked to large-scale supply chain attacks. According to investigators, the group’s attacks may have affected more than 1,000 organizations worldwide,…
⚪️ How EDR Works: A Detailed Guide to Endpoint Detection and Response Protection
🗨️ *Hacker* magazine often covers process and system call hiding, code obfuscation, and other ways to evade AV/EDR solutions. But what if you want to do more than just follow instructions and instead discover such techniques on your own?
At a minimum, that requires understanding the general princip…
⚪️ OpenAI publishes official report on July Hugging Face breach
🗨️ Specialists from OpenAI and the research organization METR have published detailed reports on the July attack on the Hugging Face platform involving AI agents. It emerged that around 1,200 agents, which were supposed to operate in isolation from one another,…
⚪️ Android Security: Defending Against Overlay Attacks with Kotlin Contracts
🗨️ In today’s issue: how Android 12 tackles overlays; the difference between compileSdkVersion and targetSdkVersion; alternatives to OkHttp for multiplatform projects; how to restrict the visibility of extension functions; and what Kotlin contracts are.
Also included: a roundup of extension fun…
⚪️ Cronos Network Halted Following Tectonic Protocol Hack
🗨️ On August 30, 2026, Cronos blockchain validators halted the network after an attacker drained Tectonic, the network’s largest lending protocol, by artificially inflating the price of the TONIC token. According to analyst Weilin Li, the losses amounted to approximately $66–75…
⚪️ Emerging Cybersecurity Research Trends and Insights
🗨️ Today, we’ll take a look at the latest trends in cybersecurity, explore the new ideas currently on the minds of security professionals—including my own team—and review some relevant publications you may want to read.
⚪️ Two More Backdoors Found in ZBT Routers
🗨️ Researchers at VulnCheck have discovered two previously unknown implants in the firmware of routers made by Chinese manufacturer Shenzhen Zhibotong Electronics (ZBT). Both allow a remote attacker to connect to the device without authentication and execute commands with root privileges.…
⚪️ Errors in llms.txt Make Claude, Codex, and Hermes Execute Third-Party Code
🗨️ Researchers found that llms.txt and llms-full.txt files on 120 websites contained links to unregistered packages and domains. AI agents including Claude, OpenAI Codex, and Hermes treat instructions in these files as trusted documentation and actually execute the specified commands. As…
⚪️ Creating Images on Radio Waterfall Displays: A Guide to RF Artwork
🗨️ A waterfall display is a way of visualizing signals that can be found in virtually every radio software application. Each horizontal line shows the signal spectrum—its frequencies and amplitudes. With a bit of tinkering, you can even draw images on a waterfall display. That is what we will be doi…
⚪️ Qilin Ransomware Operators Claim to Have Hacked the ATF
🗨️ Representatives of the U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) confirmed that one of its systems had been compromised. Shortly before that, members of the Qilin ransomware group claimed to have breached the ATF and added the agency…
⚪️ Investigating a Credential Stuffing Attack on Linux: A Digital Forensics Guide
🗨️ Today, we will practice traffic analysis using Wireshark, examine a credential-stuffing brute-force attack, and analyze the attacker’s persistence technique within the system. We will then build an event timeline.
⚪️ ToxicPanda Malware Abuses Android VPN Mechanism to Block Access to Google Play
🗨️ Researchers warn about the emergence of an updated version of the ToxicPanda Android Trojan. It supports 167 remote commands, can block access to the Google Play store, and automatically abuses Wireless ADB to gain shell access. The malware’s target list…