GoKawiil - Tech News

1.

‘Zoomsday’ hack uncovered using fewer than 20 AI prompts (theverge.com)

2026-08-11 | by Emma Roth | tags: attacker, blog, exploit

2.

New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes (bleepingcomputer.com)

2026-08-06 | tags: attack, attacker, branch

3.

Researchers found a way to steal passkeys straight out of Chrome's memory (techspot.com)

2026-08-06 | by Daniel Sims | tags: access, attacker, chrome

4.

Warning shot or publicity stunt - how worried should we be about the OpenAI hack? (feeds.bbci.co.uk)

2026-07-24 | by Watch Our Pick Of Standout Clips Across The Bbc | tags: hugging face, ai hack, cyber criminal

5.

Hugging Face warns an autonomous AI agent hacked its network (bleepingcomputer.com)

2026-07-20 | tags: hugging face, autonomous ai, agentic attacker

6.

New Spirals ransomware encrypts victim network in under 24 hours (bleepingcomputer.com)

2026-07-16 | tags: access, attacker, payload

7.

Windows 0-day drops the same day Microsoft releases record number of patches (arstechnica.com)

2026-07-15 | tags: account, accounts, admin

8.

AsyncAPI npm packages infected with credential-stealing malware (bleepingcomputer.com)

2026-07-15 | tags: asyncapi, attacker, files

9.

AsyncAPI npm packages infected with credential-stealing malware (bleepingcomputer.com)

2026-07-15 | tags: asyncapi, attacker, files

10.

New phishing kits target Microsoft 365 accounts, evade MFA (bleepingcomputer.com)

2026-07-14 | tags: account, attacker, code

11.

Turning the Tables on Email Scammers With 'ScamBuster' (darkreading.com)

2026-07-13 | by Elizabeth Montalbano | tags: attacker, email, giovannoni

12.

New hack exploits AI hallucinations to trick agents into running malicious code — 'HalluSquatting' attack exploits a fundamental weakness in every available model (tomshardware.com)

2026-07-09 | by Bruno Ferreira | tags: attacker, bots, code

13.

Lone Attacker Uses AI to Breach AWS Cloud Environment in 72 Hours (darkreading.com)

2026-07-08 | get AWS Security Monitoring Tool → | tags: ai workflows, amazon, amazon customer

14.

'GitLost' Flaw Leaks Private Data From GitHub's Agentic Workflows (darkreading.com)

2026-07-07 | get GitHub Actions Security Badge → | tags: allows, allows unauthenticated, attacker

15.

The GitHub Actions Attack Pattern Your CI Security Scanners Miss (bleepingcomputer.com)

2026-07-07 | get GitHub Actions Security Scanner → | tags: attacker, green, pull

16.

Soatok's Informal Guide to Threat Models (news.ycombinator.com)

2026-07-04 | by View Archive | get Cybersecurity Threat Model Book → | tags: attacker, messages, model

17.

Think Like an Attacker: Cybersecurity Tips From a Security Strategist (darkreading.com)

2026-07-02 | get Cybersecurity Toolkit for Beginners → | tags: etay maor, cybersecurity, strategist

18.

Three AirDrop vulnerabilities discovered, with Apple working on a full fix (9to5mac.com)

2026-06-30 | by Ben Lovejoy | get Apple AirDrop Security Kit → | tags: airdrop, apple, attack

19.

Microsoft's bug-hunting nemesis extends vendetta with more zero-day attacks — Nightmare Eclipse publishes RoguePlanet and GreatXML local privilege escalation exploits (tomshardware.com)

2026-06-12 | by Bruno Ferreira | get Cybersecurity Penetration Testing Kit → | tags: attacker, eclipse, microsoft

20.

DNS is for people, not for IT infrastructure (news.ycombinator.com)

2026-06-04 | get Cloudflare 1.1.1.1 DNS → | tags: attacker, domain, infrastructure

21.

Why the browser is now the front line for AI security (bleepingcomputer.com)

2026-06-02 | get AI Security Browser Extension → | tags: ai security, browser extensions, phishing kits

22.

It's Patch Tuesday for Microsoft & Not a Zero-Day In Sight (darkreading.com)

2026-05-12 | by Jai Vijayan | get Microsoft Security Update Kit → | tags: attacker, code, cves

23.

Flaw in Grandstream VoIP phones allows stealthy eavesdropping (bleepingcomputer.com)

2026-02-19 | get Smartphone → | tags: attacker, exploitation, grandstream

24.

Dell's Hard-Coded Flaw: A Nation-State Goldmine (darkreading.com)

2026-02-18 | get I cannot provide information on a current or active threat → | tags: access, access deploy, allowing

25.

Deobfuscation and Analysis of Ring-1.io (news.ycombinator.com)

2026-02-08 | get Ring-1.io → | tags: attacker, execution, guest

26.

Hackers exploit critical React Native Metro bug to breach dev systems (bleepingcomputer.com)

2026-02-03 | get React Native → | tags: attacker, linux, payloads

27.

Notepad++ update feature hijacked by Chinese state hackers for months (bleepingcomputer.com)

2026-02-02 | get Notebook Plus → | tags: attacker, attackers, developer

28.

1-Click RCE to steal your Moltbot data and keys (news.ycombinator.com)

2026-02-01 | get Molotov Cocktails → | tags: attacker, attacker com, gatewayurl

29.

'Semantic Chaining' Jailbreak Dupes Gemini Nano Banana, Grok 4 (darkreading.com)

2026-01-29 | get Gemini → | tags: attacker, attacker splits, chunks

30.

Google Gemini Flaw Turns Calendar Invites Into Attack Vector (darkreading.com)

2026-01-20 | get Google Calendar → | tags: access, access private, allows