Police in Japan say a couple hid a mini PC behind a hotel fridge and used the hotel Wi-Fi to send 480,000 credit card phishing emails. How the scheme worked and what it teaches.
Read more: Hidden PC in a Kobe Hotel Sent 480,000 Phishing Emails
Attackers accessed DNI images and selfies from TuLotero's KYC service in July 2026. What is confirmed, what is claimed, and how operators stop the phishing that follows.
Read more: TuLotero KYC Breach: How Stolen IDs Fuel Gambling Phishing
Cloudflare Drop needs no account to publish a live site. See how trusted CDN abuse on Cloudflare, Vercel, and Netlify is fueling phishing and malware.
Read more: How Cloudflare Drop Turned Trusted CDNs Into Phishing Hosts
Hackers used a fake SpaceXAI-affiliated badge to hijack SpaceX and Starlink's X accounts in a social media account takeover that fueled a $125K rug pull.
Read more: SpaceX & Starlink X Hack: How Verified Badge Abuse Happened
Two critical unauthenticated RCE flaws in PHP core, dubbed PHP2Shell, leaked a day early. What happened, why EOL PHP 5 and 7 installs are the real problem, and what to do now.
Read more: Another Day, Another Core RCE: Welcome to PHP2Shell (CVE-2026-109618 & CVE-2026-109619)
Attackers took over Danfoss refrigeration controllers in hundreds of French supermarkets and heated fridges to 50°C. What failed, which models are affected and how to protect them.
Read more: French Supermarket Fridge Hack: What Happened and How to Prevent It
Police in Japan say a couple hid a mini PC behind a hotel fridge and used the hotel Wi-Fi to send 480,000 credit card phishing emails. How the scheme worked and what it teaches.
Read more: Hidden PC in a Kobe Hotel Sent 480,000 Phishing Emails
A leaked "123456" password on a contractor's account gave an attacker access to Denmark's CPR register and 8.8 million records. What failed and how to prevent it.
Read more: Denmark CPR Breach: How "123456" Exposed 8.8 Million People
Tampered Ledger devices sold through third-party resellers carried a hidden cellular implant that sent seed phrases to attackers. Over $100 million was drained. How to check yours.
Read more: Tampered Ledger Wallets: How the Hidden Implant Steals Seed Phrases
ASCII smuggling hides invisible Unicode tag characters inside words so email filters miss them while people read normal text. How the attack works and how to stop it.
Read more: ASCII Smuggling: How Invisible Unicode Bypasses Email Filters