HackingPassion.comSecurity News
165 posts
543,699 keys and passwords sat in public GitHub code and still worked when researchers tested them in July 2026. The oldest went back to 2009. 51.8 percent were …
Your iPhone 11 or newer had a hole that let one crafted file run code. Attackers already used it on chosen people. It sat in the code that draws what your apps …
Attackers took 387.5 million dollars from a crypto exchange, and the exchange signed off on it. Its private keys were never stolen. The same kind of trick took …
An app with zero permissions can take full control of a OnePlus phone. You install it, and it is already root. OnePlus was warned in April, threatened the …
95.7 percent of the sites you opened in Firefox showed up for another account on your Windows PC, and 32 percent of the ones in Edge. An Android app with zero …
A 2-year-old hole in the Linux kernel took a process from inside a container to root on the host machine. 82 percent of container users run Kubernetes in …
Your banking PIN went out live while your thumb was still on the keypad. Your pattern lock too. More than 30 banks. Europe, Canada and the Gulf. One free TV app …
TeamPCP Breached 1,000 Companies for 20,000 Dollars While Google Sat in Their Private Chat Police say a 21-year-old near Perth helped break into a thousand …
Your Windows PC mined Monero on 40 percent of your threads. A scan of the disk found nothing to delete. The code sat in the registry. The rest arrived in DNS …
Your headphones handed your audio to an antenna 30 meters away, and through concrete to the room next door. Sony. Apple. Philips. HP. The owners did nothing …
You drove past a camera on a pole and it took 28 photos of your car. It did that to 50,000 cars in 21 days. 1.6 million images, and the key to the encrypted …
Nightmare Eclipse Has a Name Now and ShieldCrash Broke Microsoft’s Defender Patch in Two Hours Nightmare Eclipse has been dropping Windows zero-days since …
Your passport, your selfie, your IBAN and your full Bitcoin history went out because someone emailed from the right domain. Revolut handed it over. The FBI …
Mullvad Says Any Android App Can Send Your IP Past the VPN Kill Switch Your phone kept sending its address out on a 10 second timer while the VPN kill switch …
Five spy crews broke into Chrome with the same kit in seven days. The victims clicked one link in an email. Google fixed the first hole on August 7. It reached …
Your LG television counted 38 devices in the house that have nothing to do with television. Phones, smartwatches, a printer, the thermostat. The set was not …
An attacker emptied a vault of 3,996 bitcoin and then asked the owners to contact him. He wrote the message into the blockchain, where the rest of us could read …
A database account that was only allowed to copy data could run commands on the server itself. The admins never gave it that right. The hole has been open since …
Your locked Android phone opened its photo gallery to the person holding it. One video call and four taps did it. A Pixel on Android 17 with the newest patch …
Your ad blocker stopped working thirteen months ago. Chrome 138 switched it off in July 2025. On August 31 Google pulled the last copy from the store. Edge, …
SLEEPWALKER Backdoor Hides in a Security Agent and Wakes Up for One Packet 5 bytes of orders sit inside a backdoor that has never once called home. It reads …
Your kid downloaded a Minecraft client from the first result in Google. It cost the attacker 5 dollars, the panel behind it has logged 116,464 infections, and …
Nightmare Eclipse published his tenth Windows attack and it lifts a normal account to SYSTEM. It only works on machines with Defender switched on. It is a full …
Your Rust build pulled in a backdoor for 86 minutes on Thursday. Five versions with 246 million downloads between them were pulled in 16 seconds, leaving one …
Your router now reports when someone walks through your house. You installed no sensor. There is none. A phone indoors gave up a person’s breathing to a …
Expired credit cards still paid at the checkout. Researchers spent $500 on one, then $2.79 in a shop. The cards had already been handed in for a replacement, …
A botnet is breaking into home routers with a bug from 2007. Ten known holes, and a list of 150 common logins. Nobody in the house clicked on anything. The …
Windows Defender Dies to a One-Click Script While Defender Bypasses Sell for $30 a File A script created an account on a fully secured Windows 11 machine, …
Plug and Pwn Turns a Fake USB Device Into SYSTEM on Fully Patched Windows 11 Two researchers took over a fully updated Windows 11 machine in five minutes with a …
Someone could sign in as a company’s top admin by reading one Windows log file. The admin’s password and passkey were never touched. Microsoft …