The Hacker News (1 hour ago)
A system doesn’t always need a complicated bug to let someone in. Sometimes, a blank password is enough. That’s one of the bigger stories this week. And it gets worse when the tools meant to keep systems updated or running safely become part of the attack.
Read the full story on The Hacker News.
A former FBI agent has pleaded guilty to stealing nearly $2.5 million from the wallets of fraud victims and nation-state hackers under investigation.
UK shoppers caught up in third-party security mess, and nobody knows whether the data was flushed away
Online fashion retailer Revolve has told regulators that the September cyberattack affected more than 1.5 million individuals.
Encrypted passwords were among the stolen information.
The US Department of the Treasury has cut off the MEXC Global crypto exchange from the US financial system over sanctions evasion and links with cybercrime gangs.
Threat actors are exploiting the four-flaw chain to hack the Plex Media Server application on QNAP NAS devices.
The login systems behind two car brands’ mobile apps could be taken over completely, two security researchers found, allowing them to access any customer’s account and, for an owner with a connected car, unlock the doors and start the engine.
Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker. Keplr uses a company called Web3Auth to run that Google and Apple sign-in. The attacker used a security flaw at that company to reach the wallets, both companies said late last week.
Everyone running LNbits, a free, open-source Bitcoin Lightning wallet system, should shut down their servers now because of a wave of attacks, the project said yesterday. It has several security fixes to release and asked operators to be careful until they are out.
A single attacker using AI agents pulled emergency dispatch records covering seven Taipei districts, researchers at Acronis’s Threat Research Unit said last week.
69 active sources
24 Turkish · 45 English
All sources
