hacking Community | Digg

18h

These Hackers Are Turning Dead Vapes Into Musical Synthesizers

This Wired article explores how a group of makers in New York City are repurposing spent Elf Bar nicotine vapes into musical synthesizers, addressing the issue of e-waste and encouraging creative reuse.

@comdak

18h

Chinese cyberspies breach Singapore's four largest telcos

A Chinese threat actor, UNC3886, breached Singapore's four largest telecommunication service providers, Singtel, StarHub, M1, and Simba, at least once last year. The attackers used a zero-day exploit to bypass a telecom's perimeter firewalls and steal technical data but did not access sensitive customer data or disrupt services. Singapore responded with 'Operation Cyber Guardian' to limit the adversary's activity and expanded monitoring to other critical infrastructure.

@comdak

18h

Hackers breach SmarterTools network using flaw in its own software

SmarterTools confirmed a breach by the Warlock ransomware gang, exploiting a flaw in their SmarterMail software. The attack compromised an employee-set-up virtual machine, leading to the breach of 12 Windows servers and a secondary data center, though customer data remained unaffected. The vulnerability, CVE-2026-23760, allows for authentication bypass and admin password reset, and is linked to a Chinese nation-state actor. The attackers used tools like Velociraptor and SimpleHelp for persistence and lateral movement.

@Z4CK

CNIT 126: Practical Malware Analysis Spring 2026 Sam Bowne

Pretty cool that YouTube recommended this to me. It’s an actual course running right now, free textbooks and new lectures on YouTube. Quizzes and tests. Highly relevant stuff here if you’re at all interested in deep systems work.

@comdak

European Commission discloses breach that exposed staff data

The European Commission disclosed a breach that exposed staff data after finding evidence that its mobile device management platform was hacked. The Commission detected traces of a cyberattack targeting infrastructure that manages its staff's mobile devices. While the attackers may have accessed some staff members' personal information, including names and phone numbers, the Commission has not yet found evidence that their mobile devices were compromised.

@comdak

State actor targets 155 countries in “Shadow Campaigns”espionage op

A state-aligned cyberespionage threat group, tracked as TGR-STA-1030/UNC6619, has conducted a global-scale operation dubbed the 'Shadow Campaigns,' targeting government infrastructure in 155 countries. The group has been active since at least January 2024 and is believed to operate from Asia. The attacks focus on government ministries, law enforcement, border control, finance, trade, energy, mining, immigration, and diplomatic agencies. Unit 42 researchers confirmed compromises of at least 70 organizations across 37 countries, including entities in the Americas, Europe, Australia, and Taiwan. The threat group uses highly tailored phishing emails and exploits known vulnerabilities to gain initial access, employing a custom Linux kernel eBPF rootkit called 'ShadowGuard' to evade detection.

@ammartiger

Locating WhatsApp User IP address

Ever wondered if you can pull someone’s real IP from a WhatsApp voice/video call? Turns out yes — but only if they actually pick up the call (peer-to-peer STUN negotiation leaks it in many cases). This is a classic network sniffing technique. WhatsApp calls often try direct P2P

@midi002

Someone registered wp-admin as a community!

Yaaas! Exploit those weird edge cases!

@comdak

Hackers (1995): The Experience

Fly through a Gibson's file structure, just like Dade, Kate and the rest..

@comdak

Man pleads guilty to hacking nearly 600 women's Snapchat accounts

An Illinois man, Kyle Svara, pleaded guilty to hacking nearly 600 women's Snapchat accounts to steal nude photos between May 2020 and February 2021. Svara used social engineering tactics to obtain victims' credentials and accessed at least 59 accounts without permission. He traded stolen content on various online platforms and even took on paid hacking jobs, including one from former Northeastern University track and field coach Steve Waithe, who was later convicted of sextortion. Svara faces multiple charges including aggravated identity theft, wire fraud, computer fraud, and making false statements related to child pornography.

@comdak

Critical n8n flaws disclosed along with public exploits

Multiple critical vulnerabilities in the n8n open-source workflow automation platform have been disclosed, allowing attackers to perform unrestricted remote code execution on the server. The vulnerabilities, tracked as CVE-2026-25049, can be exploited by authenticated users to escape the environment and gain complete control of the host server. Researchers found that the sanitization mechanism in n8n is insufficient, bypassing the patch for CVE-2025-68613, another critical flaw. Exploitation enables attackers to run arbitrary commands, steal credentials, and access internal systems. Users are advised to update to the latest version of n8n and review their workflows for suspicious expressions.

@comdak

Flickr discloses potential data breach exposing users names, emails

I legit didn't even know Flickr was still around, I haven't heard that name in so long..

@comdak

Newsletter platform Substack notifies users of data breach

Substack, a newsletter platform, has notified its users of a data breach that occurred in October 2025, where attackers stole email addresses and phone numbers. The breach was discovered by Substack only recently, and while the attackers did not access credentials or financial information, the company has addressed the flaw and warned users of potential phishing attempts.

@comdak

Microsoft releases urgent Office patch. Russian-state hackers pounce.

Microsoft released an urgent Office patch, but Russian-state hackers exploited the vulnerability within 48 hours to compromise devices in diplomatic, maritime, and transport organizations in over half a dozen countries. The hackers, tracked under names including APT28, Fancy Bear, Sednit, Forest Blizzard, and Sofacy, installed two novel backdoor implants, BeardShell and NotDoor, to evade detection. The spear phishing campaign, which began on January 28, targeted organizations in Eastern Europe, primarily defense ministries, transportation/logistics operators, and diplomatic entities.

@Slyke

10 open source tools that feel illegal...

This video explores 10 open-source tools for penetration testing and ethical hacking, demonstrating their use on Kali Linux. It highlights the importance of ethical use and obtaining permission before using these tools.

@comdak

Hackers compromise NGINX servers to redirect user traffic

A threat actor is compromising NGINX servers in a campaign that hijacks user traffic and reroutes it through the attacker's backend infrastructure. The malicious campaign targets NGINX installations and Baota hosting management panels used by sites with Asian top-level domains and government and educational sites. Attackers modify existing NGINX configuration files to capture incoming requests and forward traffic to attacker-controlled domains.

@comdak

A VIC-20 Emulator In Your Browser

This Hackaday article introduces JVic, a VIC-20 emulator developed by Lance Ewing, enabling users to run VIC-20 games in their browsers or on mobile devices. The emulator, written in Java, supports both online and local installations, and it can boot from a ROM file. It offers a library of games and is available on Github for those interested in exploring further.

@comdak

New Amaranth Dragon cyberespionage group exploits WinRAR flaw

A new cyberespionage group named Amaranth Dragon, linked to APT41, exploited the CVE-2025-8088 vulnerability in WinRAR to target government and law enforcement agencies in Southeast Asia. The group used the flaw to deliver malicious payloads, combining legitimate tools with the Amaranth Loader for increased stealth. Check Point reports that the group has been active since March 2025 and has used geofencing to restrict attacks to specific countries.

@comdak

Coinbase confirms insider breach linked to leaked support tool screenshots

Coinbase has confirmed an insider breach after a contractor improperly accessed the data of approximately thirty customers in December. The contractor has been terminated, and affected users were notified and provided with identity theft protection services. This incident is separate from a previously disclosed breach involving TaskUs, another outsourcing firm. Threat actors known as 'Scattered Lapsus Hunters' shared screenshots of an internal Coinbase support interface on Telegram, showing access to sensitive customer information.

@comdak

Hackers exploit critical React Native Metro bug to breach dev systems

Hackers are exploiting a critical vulnerability in the React Native Metro server, identified as CVE-2025-11953, to breach development systems and deliver malicious payloads for Windows and Linux. The flaw allows unauthenticated attackers to execute arbitrary commands on Windows and run arbitrary executables on Linux and macOS. Discovered by JFrog and disclosed in early November, the vulnerability affects @react-native-community/cli-server-api versions 4.8.0 through 20.0.0-alpha.2, and was fixed in version 20.0.0 and later. Despite active exploitation being observed, the vulnerability still carries a low score in the Exploit Prediction Scoring System (EPSS). VulnCheck's report includes indicators of compromise (IoCs) for the attacker network infrastructure as well as Windows and Linux payloads.

@comdak

Paris prosecutor's cybercrime unit raids X’s French office

The cybercrime unit of the Paris prosecutor's office raided the French offices of Elon Musk's social media network X as part of an ongoing investigation into potential biased algorithms.

@comdak

Russian hackers exploit recently patched Microsoft Office bug in attacks

Ukraine's Computer Emergency Response Team (CERT) reports that Russian hackers are exploiting a recently patched Microsoft Office vulnerability, CVE-2026-21509, in targeted attacks. Microsoft released an emergency update on January 26, but CERT-UA detected malicious DOC files exploiting the flaw just three days later. The malware installs via a WebDAV-based download chain and uses the Filen cloud storage service for command-and-control operations.

@comdak

New GlassWorm attack targets macOS via compromised OpenVSX extensions

A new GlassWorm malware attack targets macOS systems via compromised OpenVSX extensions, aiming to steal passwords, crypto-wallet data, and developer credentials. The threat actor compromised a developer account and pushed malicious updates to four extensions, which were downloaded 22,000 times. The malware uses invisible Unicode characters to hide its malicious code and supports VNC-based remote access and SOCKS proxying. Developers who downloaded the malicious releases should perform a full system clean-up and rotate all their secrets and passwords.

@comdak

The rise of Moltbook suggests viral AI prompts may be the next big security threat - Ars Technica

Ars Technica reports on the potential security threat posed by self-replicating AI prompts, likening them to 'prompt worms' or 'prompt viruses'. The article discusses how these prompts could spread through networks of AI agents, exploiting the agents' core function of following instructions. The rise of platforms like Moltbook and OpenClaw, which allow AI agents to communicate and share instructions, has raised concerns among security researchers. The article highlights the vulnerabilities of these systems, including unmoderated skill extensions, access to private data, and the potential for prompt injection attacks. It also discusses the challenges of regulating AI agents and the need for proactive measures to prevent a future security crisis.

@comdak

Notepad++ Official Update Mechanism Hijacked to Deliver Malware to Select Users

State-backed attackers hijacked Notepad++ update traffic via a hosting provider breach, redirecting users to malicious downloads since June 2025.

@comdak

Assistive Technology's DIY Approach Gains Traction

This article from IEEE Spectrum explores the impact of Therese Wilkomm's DIY assistive technology hacks, which provide cost-effective solutions for disabled individuals. Wilkomm, known as the 'MacGyver of Assistive Technology,' has created over 2,000 hacks, aiming to keep costs under five dollars using donated materials and reusable components. The article discusses the evolution of assistive technology, the challenges of affordability and accessibility, and the potential of AI in enhancing communication devices for people with disabilities.

@comdak

An Event Badge Re-Imagined As A Cyberdeck

This Hackaday article details a project where a conference badge, specifically the WHY2025 badge, has been creatively repurposed as a carrier board for the Flipper Blackhat, a Linux add-on for the Flipper Zero. The repurposed device retains the original badge's hardware capabilities, including an ESP32-P4, a high-quality screen, and a SolderParty keyboard, now running Linux. The project aims to give new life to unused badges, transforming them into practical, mini Linux computers.

@comdak

Panera Bread breach impacts 5.1 million accounts, not 14 million customers

Have I Been Pwned reports that the data breach at Panera Bread affected 5.1 million accounts, not 14 million customers as initially reported. The breach, attributed to the ShinyHunters group, exposed personal information such as email addresses, names, phone numbers, and physical addresses. Panera Bread has confirmed the breach but has not yet issued a formal statement or filed data breach notifications.

@comdak

Exposed MongoDB instances still targeted in data extortion attacks

A threat actor continues to target exposed MongoDB instances in automated data extortion attacks, demanding low ransoms from owners to restore the data. The attacker focuses on insecure databases due to misconfigurations that permit unrestricted access. Around 1,400 servers have been compromised, with ransom notes demanding approximately $500 in Bitcoin. Researchers at Flare found over 208,500 publicly exposed MongoDB servers, with 3,100 accessible without authentication. The researchers suggest that MongoDB administrators avoid exposing instances to the public unless necessary, use strong authentication, and update to the latest version.

@comdak

Running DOOM And Mario 64 Inside A PDF File

Although generally described as a document format, PDFs have evolved into an interactive platform supporting XML and JavaScript, enabling the execution of games like DOOM and Super Mario 64 within a PDF file. The Doom PDF project runs the game in DOSBox, while the Super Mario 64 port is stand-alone, albeit with limited performance. This demonstration highlights the versatility of PDFs but also raises questions about their practicality for gaming.

These Hackers Are Turning Dead Vapes Into Musical Synthesizers

Chinese cyberspies breach Singapore's four largest telcos

Hackers breach SmarterTools network using flaw in its own software

CNIT 126: Practical Malware Analysis Spring 2026 Sam Bowne

European Commission discloses breach that exposed staff data

State actor targets 155 countries in “Shadow Campaigns”espionage op

Locating WhatsApp User IP address

Someone registered wp-admin as a community!

Hackers (1995): The Experience

Man pleads guilty to hacking nearly 600 women's Snapchat accounts

Critical n8n flaws disclosed along with public exploits

Flickr discloses potential data breach exposing users names, emails

Newsletter platform Substack notifies users of data breach

Microsoft releases urgent Office patch. Russian-state hackers pounce.

10 open source tools that feel illegal...

Hackers compromise NGINX servers to redirect user traffic

A VIC-20 Emulator In Your Browser

New Amaranth Dragon cyberespionage group exploits WinRAR flaw

Coinbase confirms insider breach linked to leaked support tool screenshots

Hackers exploit critical React Native Metro bug to breach dev systems

Paris prosecutor's cybercrime unit raids X’s French office

Russian hackers exploit recently patched Microsoft Office bug in attacks

New GlassWorm attack targets macOS via compromised OpenVSX extensions

The rise of Moltbook suggests viral AI prompts may be the next big security threat - Ars Technica

Notepad++ Official Update Mechanism Hijacked to Deliver Malware to Select Users

Assistive Technology's DIY Approach Gains Traction

An Event Badge Re-Imagined As A Cyberdeck

Panera Bread breach impacts 5.1 million accounts, not 14 million customers

Exposed MongoDB instances still targeted in data extortion attacks

Running DOOM And Mario 64 Inside A PDF File

About

Community Guidelines

Founded by

Top Contributors