Three OSS Release Changes This Week That Actually Change Something
Fourteen pull requests before coffee Your dependency bot opened 14 pull requests overnight. Version bumps everywhere — a patch here, a minor there, one thing...
🔒
Cybersecurity News
The latest cybersecurity news — data breaches, zero-days, ransomware, CVEs and threat intelligence. Aggregated from Krebs on Security, Bleeping Computer, The Hacker News and more.
90 articles · Updated just now · Browse all categories
How to Build a Self-Hosted LLM Firewall with Resk: A Practical Tutorial
How to Build a Self-Hosted LLM Firewall with Resk TL;DR Resk is a deployable full-stack LLM firewall (FastAPI + React) that sits in front of any OpenAI-compa...
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies
Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, surveillance, and traffic-in...
Liquid Hackers to Return 'Most' of 4,000 BTC After Bug Fix
The purported white-hat hackers behind the $320 million Liquid Network security incident have offered to return "most" of the nearly 4,000 BTC they withdrew,...
Bitcoin sidechain Liquid pauses after purported ‘white hats’ withdraw $320M in BTC
The actors told Blockstream they would return most of the 4,000 BTC after the Elements vulnerability is patched across the network.
Harmony proposes shutting down layer 1, migrating ONE to Ethereum
Harmony proposed sunsetting its layer-1 blockchain and migrating ONE to Ethereum, weeks after an exploit led to plans to discard 109,000 transactions.
Bitcoin network used by exchanges hit by $320 million exploit. Hackers claim they're the 'good guys'
Liquid Network, a settlement layer used by exchanges, halted all transactions after losing $320 million worth of bitcoin in a security exploit.
Blockstream Hunts ‘White Hats’ After 4,000 BTC Leaves Liquid
The layer two (L2) sidechain known as the Liquid Network paused on Sunday following a so-called white hacker exploiting a bug in Blockstream’s Elements softw...
Ad
‘White hats’ take 4000 BTC from Liquid, ETFs see best inflows of 2026: Hodler’s Digest
Purported white hat hackers have taken 4000 Bitcoin from the Liquid sidechain in a major security breach. The Bitcoin ETFs see the best three weeks of inflow...
Get 20TB of lifetime cloud storage for $350
Get 20TB of Scramble lifetime cloud storage for $349.95 (reg. $1,440), with end-to-end encryption, unlimited sharing and WebDAV integration.
Bitcoin OG Says He Is Watching for Next Major Exploit as AI Models Get Stronger
Longtime Bitcoin figure CobraBitcoin has warned that the rapid rise of increasingly autonomous AI models could create a new security threat for Bitcoin.
Attackers conceal phishing lures using invisible Unicode characters
Threat actors have adopted the ASCII smuggling technique in phishing campaigns, using invisible Unicode characters to evade email security filters. [...]
Former Old School RuneScape dev gets jail time for stealing $400,000 from players — virtual gold stolen and sold on the black market before Jagex caught the culprit using hidden firewall tweaks
A former Jagex employee stole over $400,000 worth of in-game items and virtual currency from OSRS players and sold them on the black market. He was eventuall...
Some joints may be primed for rheumatoid arthritis before birth
Scientists have found evidence that vulnerability to rheumatoid arthritis may begin before birth. Finger joints commonly affected by the disease develop with...
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's serve...
Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials
JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentified threat actors exploited...
Ad
Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code
Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitr...
Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted
Hardware wallet manufacturer Trezor on Friday disclosed that another 67,000 customers from the U.S. have been impacted in a breach at its shipping provider S...
Why is there so much worry about OpenAI Astra, and what issues could ‘recurrent depth’ reasoning cause? The experts weigh in
As OpenAI unveils GPT-6 Astra, cybersecurity experts question whether the model's 'recurrent depth' reasoning was properly tested.
Apple @ Work: Capping bug bounty submissions is the wrong response in the AI era of security threats
Apple @ Work is exclusively brought to you by Mosyle, the only Apple Unified Platform. Mosyle is the only solution that integrates in a single professional g...
Meet the CISO: A new front line star in the AI cybersecurity war
The OpenAI-Hugging Face agent hack sent shockwaves through the business world and helped put the chief information security officer into the spotlight.
OpenAI admits it didn't disclose rogue AI wiki hijacking incident
OpenAI admits it did not disclose an incident where autonomous AI agents hijacked a German wiki, created 18,000 posts, shared answers, and bypassed restricti...
G7 Warns Quantum Threat Demands Action as Crypto Industry Weighs Fixes
The group is urging organizations to adopt post-quantum security before powerful computers can compromise today’s encryption and digital signatures.
Apple Planning AI Home Security Camera and Service for 2027
Apple could release a home security system and service in 2027, according to Bloomberg. The company is designing a privacy-forward home security camera that ...
Ad
Trezor Breach Worse Than Reported: Another 67,000 US Customers Exposed
Bitcoin Magazine Trezor Breach Worse Than Reported: Another 67,000 US Customers Exposed Trezor said that its third party shipping partner, ShipMonk, had not ...
Kubernetes v1.37: KubeletInUserNamespace (aka Rootless mode) Graduates to Beta
Kubernetes v1.37 promotes the KubeletInUserNamespace feature gate to beta. With this feature enabled, all of the node components (kubelet, CRI and OCI runtim...
IDScan sued over alleged data breach affecting 153 million drivers
Multiple lawsuits have been filed against identity verification company IDScan after hackers allegedly breached the service and offered to sell more than 153...
FBI Probes Service Selling 153M+ Drivers Licenses
Brian Krebs, reporting at KrebsOnSecurity: On Monday, Aug. 31, a source alerted KrebsOnSecurity to a service advertised by a new user on the Russian cybercri...
CISA Flags Old ownCloud Flaw After Reported Philippine Nuclear Data Theft
CISA added CVE-2023-49105 to its exploited-flaws catalog after researchers tied the old ownCloud bug to reported Philippine nuclear data theft. The post CISA...
Critical Citrix NetScaler auth bypass now leveraged in attacks
Attackers have begun targeting a critical-severity Citrix NetScaler auth bypass flaw (CVE-2026-19490) in the wild, according to vulnerability intelligence co...