Latest Tech News

Stay updated with the latest in technology, AI, cybersecurity, and more

Filtered by: hack Clear Filter

Lovense was told its sex toy app leaked users’ emails and didn’t fix it

is a news writer who covers the streaming wars, consumer tech, crypto, social media, and much more. Previously, she was a writer and editor at MUO. Lovense, the maker of internet-connected sex toys, left user emails exposed for months — even after it became aware of the vulnerability. In a blog post spotted by TechCrunch and Bleeping Computer, security researcher BobDaHacker found that they could “turn any username into their email address,” which they could then use to take over someone’s acco

Amazon's AI coding assistant exposed nearly 1 million users to potential system wipe

A hot potato: Earlier this month, a hacker compromised Amazon's generative AI coding assistant, Amazon Q, which is widely used through its Visual Studio Code extension. The breach wasn't just a technical slip, rather it exposed critical flaws in how AI tools are integrated into software development pipelines. It's a moment of reckoning for the developer community, and one Amazon can't afford to ignore. The attacker was able to inject unauthorized code into the assistant's open-source GitHub rep

If you have 90 minutes to spare, play the cyberpunk horror game s.p.l.i.t

s.p.l.i.t is the most badass typing game I’ve ever played. It’s actually more of a hacking simulator, cyberpunk thriller and puzzle experience than a typing game, but its core loop is bookended by sequences of high-intensity letter pecking with gruesome consequences — think Mavis Beacon as designed by Ted Kaczynski — and the final scenes have a way of searing themselves into your psyche. Not to mention, the whole thing takes place on a keyboard, no mouse or gamepad. So I guess it’s technically o

Google, Microsoft say Chinese hackers are exploiting SharePoint zero-day

Security researchers at Google and Microsoft say they have evidence that hackers backed by China are exploiting a zero-day bug in Microsoft SharePoint, as companies around the world scramble to patch the flaw. The bug, known officially as CVE-2025-53770 and discovered last weekend, allows hackers to steal sensitive private keys from self-hosted versions of SharePoint, a software server widely used by companies and organizations to store and share internal documents. Once exploited, an attacker

Show HN: A rudimentary game engine to build four dimensional VR evironments

Hypershack Hypershack is a standalone, private space designed for tinkering and learning with 4D objects in Virtual Reality. There are some elements designed to help get oriented in the 4d world: there are small particles falling down, i.e. moving towards negative y-axis. The speed they are falling depends on the orientation of the observed 3d space in the 4d world, the closer the 3d space is aligned with y-axis, the faster the particles fall. If you rotate the 3d space to be perpendicular to

Hackers exploiting SharePoint zero-day seen targeting government agencies

The hackers behind the initial wave of attacks exploiting a zero-day in Microsoft SharePoint servers have so far primarily targeted government organizations, according to researchers as well as news reports. Over the weekend U.S. cybersecurity agency CISA published an alert, warning that hackers were exploiting a previously unknown bug — known as a “zero-day” — in Microsoft’s enterprise data management product SharePoint. While it’s still early to draw definitive conclusions, it appears that th

This ‘violently racist’ hacker claims to be the source of The New York Times’ Mamdani scoop

is a reporter who writes about tech, money, and human behavior. She joined The Verge in 2014 as science editor. Previously, she was a reporter at Bloomberg. The ultimate source for The New York Times’ story about Zohran Mamdani’s college application is an open secret. It’s an anime-loving neo-Nazi whose hobbies include furry drawings, posting fan art of a video game character, and hacking universities. On X, the alleged hacker is followed by New York Times freelancer Benjamin Ryan, who was the

Microsoft Sharepoint server vulnerability puts an estimated 10,000 organizations at risk

A major zero-day security vulnerability in Microsoft's widely used SharePoint server software has been exploited by hackers, causing chaos within businesses and government agencies, multiple outlets have reported. Microsoft announced that it had released a new security patch "to mitigate active attacks targeting on-premises [and not online] servers," but the breach has already effected universities, energy companies, federal and state agencies and telecommunications firms. The SharePoint flaw i

New zero-day bug in Microsoft SharePoint under widespread attack

The U.S. federal government and cybersecurity researchers say a newly discovered security bug found in Microsoft’s SharePoint is under attack. U.S. cybersecurity agency CISA sounded the alarm this weekend that hackers were actively exploiting the bug. Microsoft has not yet provided patches for all affected SharePoint versions, leaving customers across the world largely unable to defend against the ongoing intrusions. Microsoft said the bug, known officially as CVE-2025-53771, affects versions

10,000+ companies at risk from Microsoft Sharepoint security flaw

More than 10,000 organizations around the world are at risk from hackers after a serious security flaw was discovered in Microsoft’s popular Sharepoint platform, used to store and share confidential documents. The majority of companies at risk are said to be in the US … Microsoft said that there were “active attacks targeting on-premises servers.” US federal and state agencies are among the organizations said to have been affected. Security researchers cited by Bloomberg said that the vulnerab

Microsoft SharePoint servers are under attack because of a major security flaw

Hackers have exploited vulnerabilities in Microsoft’s SharePoint software, placing tens of thousands of on-premises servers used by global businesses and agencies at risk. Microsoft issued an alert on Saturday disclosing that it was aware of “active attacks,” and that it was working to patch the zero-day exploit. Researchers at Eye Security first identified the vulnerability on July 18th, which allows hackers to access certain on-premises versions of SharePoint and steal keys that can let them

Whatever You Do, Don't Become Obsessed With This Conspiracy Thriller on Netflix

Sometimes, the best TV shows come from unexpected places. Obviously, there were the big ones like Breaking Bad and Game of Thrones. When Vince Gilligan's drug drama ended in 2013, with HBO's landmark fantasy hit in full swing, I wondered what series would be next to capture our collective attention. It took me a few years to find my next TV obsession, which aired on an unassuming basic cable channel. The show I'm referring to was about the internet, of all things. It was created by a guy with

How China’s Patriotic ‘Honkers’ Became the Nation’s Elite Cyberspies

In the summer of 2005, Tan Dailin was a 20-year-old grad student at Sichuan University of Science and Engineering when he came to the attention of the People’s Liberation Army of China. Tan was part of a burgeoning hacker community known as the Honkers—teens and twentysomethings in late-’90s and early-’00s China who formed groups like the Green Army and Evil Octal and launched patriotic cyberattacks against Western targets they deemed disrespectful to China. The attacks were low-sophistication—

How China’s Patriotic ‘Honkers’ Became the Nation’s Elite Cyber Spies

In the summer of 2005, Tan Dailin was a 20-year-old grad student at Sichuan University of Science and Engineering when he came to the attention of the People’s Liberation Army of China. Tan was part of a burgeoning hacker community known as the Honkers—teens and twentysomethings in late-’90s and early-’00s China who formed groups like the Green Army and Evil Octal and launched patriotic cyberattacks against Western targets they deemed disrespectful to China. The attacks were low-sophistication—

Hackers are trying to steal passwords and sensitive data from users of Signal clone

Hackers are targeting a previously reported bug in the Signal clone app TeleMessage in an effort to steal users’ private data, according to security researchers and a U.S. government agency. TeleMessage, which earlier this year was revealed to be used by high-ranking officials in the Trump administration, already experienced at least one data breach in May. The company markets modified versions of Signal, WhatsApp, and Telegram for corporations and government agencies that need to archive chats

SonicWall SMA devices hacked with OVERSTEP rootkit tied to ransomware

A threat actor has been deploying a previously unseen malware called OVERSTEP that modifies the boot process of fully-patched but no longer supported SonicWall Secure Mobile Access appliances. The backdoor is a user-mode rootkit that allows hackers to hide malicious components, maintain persistent access on the device, and steal sensitive credentials. Researchers at Google Threat Intelligence Group (GTIG) observed the rootkit in attacks that may have relied on “an unknown, zero-day remote code

UK retail giant Co-op confirms hackers stole all 6.5 million customer records

The chief executive of U.K. retail conglomerate the Co-op on Wednesday said that hackers had stolen the personal data of all of the company’s customers during an April cyberattack. Co-op Group CEO Shirine Khoury-Haq told BBC News that the hackers copied the company’s member list of 6.5 million members, but that the Co-op shut down its network before the hackers could lock up its systems with ransomware. The members’ data includes names, addresses, and contact information. The retailer’s netwo

Authorities arrest four hackers linked to UK retail hacking spree

In Brief U.K. authorities confirmed on Thursday they had arrested four individuals for allegedly carrying out a series of hacks earlier this year targeting the British retail sector, including Marks & Spencer, Harrods, and the Co-op. The National Crime Agency said a woman aged 20, two men aged 19, and a youth aged 17, were arrested on Thursday at locations across the U.K. under suspicion of hacking, blackmail, money laundering, and participating in an organized crime group. The suspects weren

US government confirms arrest of Chinese national accused of stealing COVID research and mass-hacking email servers

In Brief The U.S. Justice Department has confirmed the arrest of Chinese national Xu Zewei, an alleged prolific contract hacker who carried out cyberattacks for China. Xu was arrested in Italy at the request of U.S. prosecutors. Xu and another Chinese national Zhang Yu, who remains at large, are accused in a nine-charge indictment of “hacking and stealing crucial COVID-19 research” from U.S. universities during February 2020. The DOJ said Xu worked for a company called Shanghai Powerock Networ

Activision took down Call of Duty game after PC players hacked, says source

Games giant Activision took down “Call of Duty: WWII” due to hackers exploiting a flaw in a specific PC version of the game, which led to several players getting their computers hacked, TechCrunch has learned. Last week, Activision announced that it brought offline the Microsoft Store version of “Call of Duty: WWII,” a 2017 first-person shooter, as the company was investigating “reports of an issue,” without specifying what the issue was. The company had just launched that version of the game,

Employee gets $920 for credentials used in $140 million bank heist

Hackers stole nearly $140 million from six banks in Brazil by using an employee's credentials from C&M, a company that offers financial connectivity solutions. The incident reportedly occurred on June 30, after the attackers bribed the employee to give them his account credentials and perform specific actions that would help their operations. Insider threat According to Brazilian media reports, the employee (João Nazareno Roque) sold his corporate credentials to the hackers for roughly $920,

Android May Soon Warn You About Fake Cell Towers

In recent years, North Korea has deployed thousands of so-called IT workers to infiltrate Western businesses, get paid salaries, and send money back to support the regime. As the schemes have become more successful, they have grown increasingly elaborate and employed new tactics to evade detection. But this week, the United States Justice Department revealed one of its biggest operations to tackle IT workers to date. The DOJ says it has identified six Americans who allegedly helped enable the s

AI Seizes Top Spot on Leaderboard for White Hat Hackers

For the first time ever, an AI model has seized the top spot on a white hat hacking leaderboard. In a blog post, the cybersecurity firm Xbow boasted about its historic rise to the top of the HackerOne leaderboard, which ranks the top ethical hackers in the US against each other as they duke it out in the name of cybersecurity. Xbow's use of AI for white hat hacking follows a long tradition of automation on both sides of the ethics divide, culminating in a majority of hackers using the technolo

Show HN: HackerNewt – Breadth-first exploring HN client for iOS

Don't get lost in big Hacker News discussions! HackerNewt is a Hacker News client that uses an alternative way of displaying comment tree. Advantages over traditional interfaces: - Comment width doesn't get narrower no matter how deep in the tree you are - You always see the parent of the comment you're currently reading - Swiping allows you to move in and out of subtrees with animated transitions that you fully control - You can easily skip subtrees that don't interest you by simply scrolling A

US critical infrastructure exposed as feds warn of possible attacks from Iran

Hackers working on behalf of the Iranian government are likely to target industrial control systems used at water treatment plants and other critical infrastructure to retaliate against recent military strikes by Israel and the US, federal government agencies are warning. One cybersecurity company says many US-based targets aren't adequately protected against the threat. “Based on the current geopolitical environment, Iranian-affiliated cyber actors may target US devices and networks for near-t

Show HN: HackerNewt - Breadth-first exploring HN client for iOS

Don't get lost in big Hacker News discussions! HackerNewt is a Hacker News client that uses an alternative way of displaying comment tree. Advantages over traditional interfaces: - Comment width doesn't get narrower no matter how deep in the tree you are - You always see the parent of the comment you're currently reading - Swiping allows you to move in and out of subtrees with animated transitions that you fully control - You can easily skip subtrees that don't interest you by simply scrolling A

El Chapo drug cartel reportedly tracked and killed informants by hacking an FBI phone

The Mexican Sinaloa cartel hired a hacker to track and surveil the FBI, then used that information to intimidate and even kill witnesses against drug lord Joaquín "El Chapo" Guzmán, according to a Justice Department report spotted by Ars Technica. The hacker used relatively sophisticated data collection techniques and weaknesses in the FBI's cybersecurity to identify the witnesses, the report states. According to the highly redacted report, which is based in part on testimony from an "individua

Mexican Drug Cartel Hacker Used Surveillance Tech to Target FBI Informants for Execution

Sometimes the surveillance state gets turned against itself. That seems to be what resulted in the unfortunate demise of a number of FBI informants, who were tracked by a hacker working for the Sinaloa cartel in Mexico, according to a recent report published by the U.S. Justice Department. According to the 47-page report issued by the Justice Department Inspector General, titled “Audit of the Federal Bureau of Investigation’s Efforts to Mitigate the Effects of Ubiquitous Technical Surveillance,

Mexican drug cartel hacker spied on FBI official’s phone to track and kill informants, report says

In 2018, a hacker hired by the Mexican Sinaloa drug cartel run by the infamous kingpin Joaquín “El Chapo” Guzmán spied on the U.S. Embassy in Mexico City with the goal of identifying “people of interest” for the cartel to target and kill, according to a new U.S. government watchdog report. On Friday, the Department of Justice’s Office of the Inspector General revealed the incident as part of a published report auditing the FBI’s efforts to counter surveillance with the goal of protecting “its e

FBI, cybersecurity firms say a prolific hacking crew is now targeting airlines and the transportation sector

The FBI and cybersecurity firms are warning that the prolific hacking group known as Scattered Spider is now targeting airlines and the transportation sector. In a brief statement on Friday shared with TechCrunch, the FBI said it had “recently observed” cyberattacks resembling Scattered Spider to include the airline sector. Executives from Google’s cybersecurity unit Mandiant and Palo Alto Networks’ security research division Unit 42 also said they have witnessed Scattered Spider cyberattacks