OpenSSL HollowByte: 11 bytes are enough to freeze the memory of a TLS server
An 11-byte TLS request is enough to cause OpenSSL server memory to bloat, leading to a denial of service. A formidable asymmetric DoS.
Jul 18, 2026 2 1
SonicWall SMA1000: Two actively exploited 0-days, potentially chainable
The Register and The Hacker News reported on September 2, 2026, that SonicWall SMA1000 appliances are once again under active attack, with two zero-days capable of forming a full exploit chain. Immediate operational priority.
Sep 3, 2026 2 1
A malicious .git file can execute code in Claude Code, Codex, and Cursor
The Hacker News documents a new class of attack: malicious .git configurations that, when read by AI coding agents, execute attacking code. The tools meant to secure become vectors.
Sep 3, 2026 9 2
UAC-0099 incorporates a "nuclear weapon prompt" into its malware to blind AI analysts
The pro-Russian group UAC-0099 has found an original workaround against automated analysis by LLM: embedding prompts about nuclear weapons in its malware. The AI tools trigger their filters and refuse to analyze it—a reversed jailbreak that turns AI safeguards against defenders.
Sep 2, 2026 14 3
ReactOS 0.4.16: The Windows of the 90s open source returns with fewer bugs
ReactOS, the open-source project that rebuilds Windows XP/2003 from scratch without using Microsoft's code, has released version 0.4.16. Twenty-two years of volunteer reverse engineering to revive an interface that shaped a generation.
Sep 2, 2026 25 4
GTA VI: A 60 FPS patch in development for PS5 and Xbox Series X
Rockstar is reportedly working actively on a performance patch to make GTA VI run at 60 frames per second on PS5 and Xbox Series X. No release date has been announced, but the studio has confirmed it is taking the issue seriously and will not allow its most ambitious game to be indefinitely capped at 30 fps.
Sep 2, 2026 19 3
Pacemakers under fire, millions of stolen records: healthcare, the new frontier of cyberattacks on critical infrastructure
Cyberattacks have targeted pacemakers and exfiltrated millions of patient records in August 2026. The healthcare sector joins water and energy on the list of critical infrastructures regularly targeted.
Sep 1, 2026 12 3
Aurora Ransomware + Cursor AI: When a Criminal Group Operationalizes AI in Its Attacks
Aurora ransomware operators integrate Cursor AI into their attack chain to generate and adapt their payloads across 10 targets. A deliberate operational decision—not an accident.
Sep 1, 2026 15 3
Leak Steam of 12 TB: Half-Life 2 Episode 3's digital ghosts resurface
A massive 12-terabyte Steam data leak has exposed abandoned development assets for Half-Life 2: Episode 3—the ghost game that has haunted the fandom since 2007. It's not the game we were waiting for, but it's something.
Aug 31, 2026 19 3
8,300 Gitea forges exposed to RCE: is your source code on the list?
Thousands of teams self-hosting Gitea to retain control of their code are discovering their forge is vulnerable to remote code execution. The real issue: no one patches the "peripheral" tools.
Aug 31, 2026 18 3
GoCaracal: C2 via Ethereum smart contract extends beyond npm - blockchain technology becomes standard
GoCaracal, a new RAT malware, stores its command-and-control addresses in an Ethereum smart contract. Following the 7 fake Vite npm packages from August 2026, the blockchain C2 technique confirms its scaling across multiple malware families.
Aug 28, 2026 18 3
Farewell, Gundam: Tokyo's life-size statue farewell ceremony to be broadcast live
An official farewell ceremony has been announced for the life-size Gundam statue in Tokyo. The event will be broadcast live—an opportunity to pay tribute to one of Japan’s iconic pop culture installations before its removal.
Aug 28, 2026 3 1