$6.3B Crypto Hack, DoorDash to Acquire Instacart, and Apple’s New Touchscreen MacBooks | Tech Today
We break down the multi-billion-dollar crypto breach, delivery app consolidation, and Apple’s shift to touch display laptops.
🔒
Cybersecurity News
The latest cybersecurity news — data breaches, zero-days, ransomware, CVEs and threat intelligence. Aggregated from Krebs on Security, Bleeping Computer, The Hacker News and more.
93 articles · Updated 1 min ago · Browse all categories
Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services
Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, user...
GPT-6 Cyber is finding security flaws before hackers can exploit them
From Firefox to the Linux kernel, OpenAI's new cybersecurity model is uncovering serious flaws that earlier AI systems missed and helping developers fix them...
Chainalysis says breach exposed password hashes and live tokens
Chainalysis disclosed password hashes and live tokens were exposed after initially reporting only non-sensitive customer data was accessed.
Friday briefing: After a week of disruption, is living with threats our new normal?
In today’s newsletter: From diverted airliners to hacked fridges, a string of disruptive incidents has exposed the vulnerabilities of modern life. There ...
Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login
Two flaws in Barracuda's Email Security Gateway, an email-filtering appliance, can be chained to run commands on it as root, its highest level of access, wit...
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Certain configurations of Alpine are affected. Other distros may be as well.
OpenAI launches GPT-6 Cyber, an Astra model built to keep vulnerability research in scope
OpenAI Group PBC today released GPT-6 Cyber, a version of its GPT-6 Astra model trained specifically for authorized vulnerability research. The new model goe...
Ad
Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts
Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees into phishing attacks, using two different phishing-as-a-service pla...
What We Missed: Knicks Phishing Test Goes Out of Bounds
In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from an ill-conceived phishing simulation to a h...
MS Paint Remote Code Execution Vulnerability
Article URL: https://www.cve.org/CVERecord?id=CVE-2026-83844 Comments URL: https://news.ycombinator.com/item?id=50384233 Points: 556 # Comments: 200
Mercado Bitcoin Said Its Hack Was Contained, But Blockchain Data Tells a Different Story
Fresh forensic analysis traces $48.6 million across 11 blockchains and finds thousands of customer deposit addresses drained hours after the Brazilian exchan...
OpenAI Found 948 Linux Security Flaws—And Figured Out How to Exploit Them
An automated OpenAI system produced working exploits and draft fixes at roughly $1,279 per flaw, raising new questions about how cheaply AI can find holes in...
OpenAI released a new cybersecurity model. Is that enough?
OpenAI's newest cybersecurity model comes out as AI labs face scrutiny of their work to protect digital infrastructure.
Binance, Deribit revoke SignalPlus API keys after fake Teams invite attack
SignalPlus said attackers compromised an engineer’s computer in a breach that resulted in losses of less than $82,000, which the crypto trading platform pled...
SourceHut disabled registration bypass | CVE-2026-121728
Comments
Ad
The ex-Secret Service agent who flipped a hacker is now raising a second $250M cybersecurity fund
Stephen Ward, a former Secret Service agent and Home Depot CISO, is preparing a second fund of roughly $250 million for Brightmind Partners.
Apple to Check Public iCloud Links Starting With iOS 27.3
Apple will begin checking publicly shared iCloud content in version 27.3. Here's what the change means for file sharing, encryption, and account restrictions...
OpenSSH flaw lets attackers log into password-disabled Linux accounts
A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are conf...
Android SMS of Death Flaw: How to Check If Your Phone Is Patched
Google's November security update fixes a critical Android vulnerability that can interrupt cellular calls through a hidden message. Here's how to check your...
Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction
Cybersecurity researchers have disclosed details of a now-patched vulnerability that could be exploited to bypass Lockdown Mode protections in OpenAI ChatGPT...
Hackers backdoor Linux servers using trojanized CWP web server
A new Linux malware called CWPdoor is being distributed through a trojanized version of cwpsrv, the web server behind the Control Web Panel (CWP) management ...
DigiCert data breach exposes customer information, identity documents
DigiCert warns it suffered a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized acces...
Everton's Grealish unavailable again after 'breach of discipline'
Jack Grealish remains unavailable for Everton's Premier League clash with Coventry on Friday, manager David Moyes confirms.
Ad
The Playbook: Shadow Reports, lineup locks and projected scores for Week 9
An all-encompassing look at the matchups to exploit or avoid and lineup locks in fantasy, as well as projected scores for all NFL games.
ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories
How much damage can someone do without breaking much? Quite a lot, it seems. A stolen login can open doors across several systems. A trusted setting can be u...
DreamHost admits major cyberattack saw hackers steal customer data and access inboxes
A software vulnerability allowed threat actors to obtain login credentials, putting files and emails at risk.
Is Your Exposure Management Platform Leaving You Exposed? Five Tests to Find Out
A critical finding can move through several security tools and still leave the organization exposed. The vulnerability has a severity score, and a ticket ha...
Binance Revokes API Keys, Security Issue Found at SignalPlus
Binance has revoked API keys linked to SignalPlus following a security vulnerability, cutting off third-party trading access.
How to get early access to Android’s smart new scam shield
When it comes to Android security, we’ve got three main types of threats to contend with as informed phone-owners determined to keep our data safe. First, th...