HackingPassion.comSecurity News
179 posts
Canon, then Stardock, now Siemens. Attackers keep running their code behind a trusted signature. On October 19 Siemens confirmed its own signed program was the …
Spyware got onto Al Jazeera devices through an ad that only had to load on the screen. 45 were targeted, and the owners did nothing wrong. The company behind …
Three bugs chained in order gave an attacker full control of a smart TV, straight over the home WiFi, without the set ever asking for its PIN. The owner did …
77 million shoppers a week. On a Sunday afternoon, the company behind them switched off its own systems. Shelf labels showed last week’s prices. Six days …
8,749,975 Danish ID numbers copied in about ten days. Names and home addresses, the dead included. One company with two employees. Its admin password: 123456. …
Crypto worth more than 86 million dollars was drained from Ledger wallets. Each confirmed case was a wallet bought from a shop Ledger had authorized itself. …
Fridges in hundreds of French supermarkets heated up to 50°C in one night. The food went in the bin. The attackers never set foot inside. The cooling controls …
One click in a Telegram group sent 3 of a victim’s login files to an attacker. The victim opened no file and typed no password. Versions up to 7.2.8 did …
Thousands of Android phones in more than 150 countries came out of the box already infected. The owners did nothing wrong. The malware sat in the phone’s …
A WordPress backdoor was deleted and came back within seconds. Deleted again, back again. It lived in at least 8 places, the server’s memory too, and had …
Home routers from Linksys, TP-Link, D-Link and Tenda are being turned into hidden proxies, and the orders arrive disguised as Google. The owners did nothing …
Connected Cars Talk to Google and Ad Trackers While Seven Car Apps Hand Over the Owner’s VIN 19 of 21 new cars talked to outside companies over WiFi, and …
An adblocker with 2 million users sent ChatGPT, Claude and Gemini chats to its own server, plus their browsing history. It promised a more private web. Google …
A CAPTCHA on hacked websites now hides the malware in the browser cache as an image before it asks for anything. When the pasted command runs, nothing gets …
543,699 keys and passwords sat in public GitHub code and still worked when researchers tested them in July 2026. The oldest went back to 2009. 51.8 percent were …
Your iPhone 11 or newer had a hole that let one crafted file run code. Attackers already used it on chosen people. It sat in the code that draws what your apps …
Attackers took 387.5 million dollars from a crypto exchange, and the exchange signed off on it. Its private keys were never stolen. The same kind of trick took …
An app with zero permissions can take full control of a OnePlus phone. You install it, and it is already root. OnePlus was warned in April, threatened the …
95.7 percent of the sites you opened in Firefox showed up for another account on your Windows PC, and 32 percent of the ones in Edge. An Android app with zero …
A 2-year-old hole in the Linux kernel took a process from inside a container to root on the host machine. 82 percent of container users run Kubernetes in …
Your banking PIN went out live while your thumb was still on the keypad. Your pattern lock too. More than 30 banks. Europe, Canada and the Gulf. One free TV app …
TeamPCP Breached 1,000 Companies for 20,000 Dollars While Google Sat in Their Private Chat Police say a 21-year-old near Perth helped break into a thousand …
Your Windows PC mined Monero on 40 percent of your threads. A scan of the disk found nothing to delete. The code sat in the registry. The rest arrived in DNS …
Your headphones handed your audio to an antenna 30 meters away, and through concrete to the room next door. Sony. Apple. Philips. HP. The owners did nothing …
You drove past a camera on a pole and it took 28 photos of your car. It did that to 50,000 cars in 21 days. 1.6 million images, and the key to the encrypted …
Nightmare Eclipse Has a Name Now and ShieldCrash Broke Microsoft’s Defender Patch in Two Hours Nightmare Eclipse has been dropping Windows zero-days since …
Your passport, your selfie, your IBAN and your full Bitcoin history went out because someone emailed from the right domain. Revolut handed it over. The FBI …
Mullvad Says Any Android App Can Send Your IP Past the VPN Kill Switch Your phone kept sending its address out on a 10 second timer while the VPN kill switch …
Five spy crews broke into Chrome with the same kit in seven days. The victims clicked one link in an email. Google fixed the first hole on August 7. It reached …
Your LG television counted 38 devices in the house that have nothing to do with television. Phones, smartwatches, a printer, the thermostat. The set was not …