❌

Normal view

Received — 25 March 2026 ⏭

LeakBase Admin Arrested in Russia Over Massive Stolen Credential Marketplace

✇The Hacker News
By: Ravie Lakshmanan
25 March 2026 at 17:35
The alleged administrator of the LeakBase cybercrime forum has been arrested by Russian law enforcement authorities, state media reported Thursday. According to TASS and MVD Media, a news website linked to the Russian Interior Ministry, the suspect is a resident of the city of Taganrog. The suspect is said to have been detained for creating and managing a criminal site that allowed stolen

Our first pentest on a 100% Vibe coded application : analysis & feedback

✇/r/netsec - Information Security News & Discussion
By: /u/Hackmosphere
25 March 2026 at 16:07

We pentested a web app built 100% with AI — no human-written code. Functional, clean, well-structured. But security-wise, we found critical issues on day one: LFI, IDOR, vulnerable dependencies, and more.

AI-generated code is not secure by default. And vibe coding moves fast enough that security gets skipped entirely.

Full writeup with technical details and recommendations: https://www.hackmosphere.fr/en/?p=3803

Anyone else seeing this pattern in AI-generated apps?

submitted by /u/Hackmosphere
[link] [comments]

GlassWorm Malware Uses Solana Dead Drops to Deliver RAT and Steal Browser, Crypto Data

✇The Hacker News
By: Ravie Lakshmanan
25 March 2026 at 14:26
Cybersecurity researchers have flagged a new evolution of the GlassWorm campaign that delivers a multi-stage framework capable of comprehensive data theft and installing a remote access trojan (RAT), which deploys an information-stealing Google Chrome extension masquerading as an offline version of Google Docs. "It logs keystrokes, dumps cookies and session tokens, captures screenshots, and

Navia breach exposed HackerOne employee PII due to a BOLA-style access in third-party system

✇/r/netsec - Information Security News & Discussion
By: /u/raptorhunter22
25 March 2026 at 13:31

Breach occurred at Navia Benefit Solutions, a 3rd party, not HackerOne infra.

Around 287 HackerOne employees PII leaked.

Navia delayed breach notifications by weeks. Filed at Maine AG.

Navia was independently breached. Over 10K US employee's PII exposed.

Reports point to an auth flaw (BOLA-type) enabling access to employee PII (SSNs, DoB, addresses, benefits data).

Exposure window: Dec 2025 to Jan 2026.

submitted by /u/raptorhunter22
[link] [comments]

When Satellite Data Becomes a Weapon

✇WIRED
By: Gia Chaudry
25 March 2026 at 13:00
As war reshapes the Gulf, the satellite infrastructure the world relies on to see conflict clearly is being delayed, spoofed, and privately controlled—and nobody is sure who is responsible.

CVE-2026-33656: EspoCRM ≤ 9.3.3 — Formula engine ACL gap + path traversal → authenticated RCE (full write-up + PoC)

✇/r/netsec - Information Security News & Discussion
By: /u/JivaSecurity
25 March 2026 at 12:51

Root cause: EspoCRM's formula engine operates outside the field-level restriction layer — fields marked readOnly (like Attachment.sourceId) are writable through it. sourceId is concatenated directly into a file path in getFilePath() with no sanitization. Chain: modify sourceId via formula → upload webshell via chunked upload → poison .htaccess → RCE as www-data. Six requests, admin credentials required. Coordinated disclosure — patched in 9.3.4.

submitted by /u/JivaSecurity
[link] [comments]

The Kill Chain Is Obsolete When Your AI Agent Is the Threat

✇The Hacker News
By: Unknown
25 March 2026 at 11:58
In September 2025, Anthropic disclosed that a state-sponsored threat actor used an AI coding agent to execute an autonomous cyber espionage campaign against 30 global targets. The AI handled 80-90% of tactical operations on its own, performing reconnaissance, writing exploit code, and attempting lateral movement at machine speed. This incident is worrying, but there's a scenario that should

Russian Hacker Sentenced to 2 Years for TA551 Botnet-Driven Ransomware Attacks

✇The Hacker News
By: Unknown
25 March 2026 at 11:52
The U.S. Department of Justice (DoJ) said a Russian national has been sentenced to two years in prison for managing a botnet that was used to launch ransomware attacks against U.S. companies. Ilya Angelov, 40, of Tolyatti, Russia, was also fined $100,000. Angelov, who went by the online aliases "milan" and "okart," is said to have co-managed a Russia-based cybercriminal group known as TA551 (aka

Device Code Phishing Hits 340+ Microsoft 365 Orgs Across Five Countries via OAuth Abuse

✇The Hacker News
By: Unknown
25 March 2026 at 11:34
Cybersecurity researchers are calling attention to an active device code phishing campaign that's targeting Microsoft 365 identities across more than 340 organizations in the U.S., Canada, Australia, New Zealand, and Germany. The activity, per Huntress, was first spotted on February 19, 2026, with subsequent cases appearing at an accelerated pace since then. Notably, the campaign leverages

Enterprise PCs are unreliable, unpatched, and unloved compared to Macs

✇The Register - Security
25 March 2026 at 07:29

Omnissa telemetry suggests business buyers are loving Apple and Google

End-user compute vendor Omnissa, the company formed by the spin-out of VMware’s virtual desktops, applications, and device management biz, has dug into the telemetry it collects from customers and painted a picture of the world’s enterprise hardware fleet – and the news is better for Google and Apple than it is for Microsoft.…

FCC Bans New Foreign-Made Routers Over Supply Chain and Cyber Risk Concerns

✇The Hacker News
By: Ravie Lakshmanan
25 March 2026 at 07:11
The U.S. Federal Communications Commission (FCC) said on Monday that it was banning the import of new, foreign-made consumer routers, citing "unacceptable" risks to cyber and national security. The action was designed to safeguard Americans and the underlying communications networks the country relies on, FCC Chairman Brendan Carr said in a post on X. The development means that new models of

❌