GoKawiil
Tech News
An attacker drained roughly 2.94 trillion QU tokens, worth about $1.3 million, from 1,404 Qubic wallets over a 104-minute window on October 17-18, 2026. Qubic's validators halted the chain to freeze the stolen funds, and developers say the breach stemmed from predictable recovery seeds generated on older Apple devices and browsers rather than a flaw in the network's code itself.
Scottish modder Joshua Kennedy has completed a nine-year effort to pull off the Xbox 360's CPU reset-glitch hack using a $4 Raspberry Pi Pico microcontroller instead of costly specialized glitching hardware. The exploit sends a precisely timed signal to the CPU's reset pin, causing it to misexecute instructions in a way that lets arbitrary code run, bypassing Microsoft's console security.
Security firm Calif reported a decades-old integer overflow bug in OpenBSD's shared memory attachment counter, tracing back to original BSD source code. Combined with a separate out-of-bounds write flaw, attackers could exploit a race condition to achieve local root access even with protections like KARL, SMAP, and SMEP enabled. OpenBSD has since patched both issues through errata 026 and 018.
Palo Alto Networks disclosed a high-severity PAN-OS flaw, rated 8.6, that lets authenticated attackers with management-interface access execute code as root. The company said it observed limited exploitation in the wild and has released patches for PAN-OS 10.2, 11.1, 11.2, 12.1 and 12.2, with a fix for 11.2.16 due October 15. The flaw affects PA-Series and VM-Series firewalls and Panorama appliances, but not Cloud NGFW or Prisma Access.
CISA is directing admins to immediately patch CVE-2026-104935, a high-severity authentication bypass in Ivanti Connect Secure that has been exploited as a zero-day since at least October 1. Ivanti released patched versions on Tuesday, and researchers at Volexity and Defused say an unknown threat actor chained the bug with two other flaws to gain unauthenticated root access and steal Active Directory credentials, LAPS passwords and BitLocker keys.
A TP-Link EAP770 Wi-Fi 7 access point, bought in 2023 before the standard was finalized, was found to silently corrupt large file transfers over its wireless link. The owner says TP-Link stopped updating the device after its initial 2023 firmware release, leaving a known fix—two sysfs values—unreachable through the device's restricted shell, which led them to write a custom kernel exploit to apply the fix themselves.
Citrix has released emergency firmware updates for NetScaler ADC and Gateway appliances to fix CVE-2026-88779, a memory buffer vulnerability in SAML authentication with a CVSS score of 8.7. The company confirmed the bug has already been exploited in targeted attacks against unpatched devices, causing denial-of-service outages, and said it has found no evidence of customer data being compromised. Fixed versions include 14.1-73.41 and 13.1-64.28, with separate builds for FIPS and NDcPP customers.
Symantec and Carbon Black researchers say the China-linked Warlock group, also tracked as Longlegs, has compromised a water utility, a telecom provider, a regional government body and a university by exploiting on-premises SharePoint vulnerabilities, including the ToolShell exploit chain. In one July 22 intrusion, the attacker disabled security software on roughly 40 hosts within two hours and deployed Warlock ransomware to at least 33 machines, using a signed but vulnerable driver to kill endpoint defenses.
Symantec reports that the Warlock ransomware group, also tracked as Longlegs or Storm-2603, has recently focused attacks on organizations in Spanish- and Portuguese-speaking countries. Over the past two months the group hit four high-value targets: a water utility, a telecom provider, a regional government body, and a university, gaining initial access via Microsoft SharePoint vulnerabilities including the ToolShell exploit chain.
A new jailbreak called Relapse has been released for PlayStation 5 consoles, covering firmware versions 7.00 through 13.60, including the PS5 Pro. It uses browser and kernel exploits to gain kernel read/write access and supports homebrew tools like etaHEN, enabling unauthorized software and emulators such as a Nintendo Switch emulator.
A newly released PS5 hacking exploit now supports more recent console firmware, expanding the pool of hardware that can be jailbroken beyond older, unupdated units previously required. This means users no longer need to hunt for outdated secondary-market consoles to get into PS5 hacking.
Ahead of Friday's official iPhone Duo preorder launch, a fraudulent website mimicking Apple's design and offering a fake $500 discount is using the leaked DarkSword exploit chain to attack vulnerable, unpatched iPhones. Malwarebytes researchers say simply visiting the page can trigger an attack that harvests device data, notes, keychain credentials and cryptocurrency wallet files from apps like MetaMask, Phantom and Coinbase Wallet, then exfiltrates them to a remote server.