The GoldStandardNEWSPAPER · LEARNING CENTRE
Latest
Borderline DeskUS holds 2027 refugee ceiling at 17,500, Afrikaners firstBorderline DeskUK MPs back narrower Article 8 test as backlog hits 155,798AmplifiedAnberlin — Never Take Friendship PersonalSpace DeskJapan's MMX set to launch for Mars moon Phobos on TuesdayAustraliaPauline Hanson warns France-style riots will hit AustraliaAmplifiedEmery — The QuestionChristian DeskPope Leo thanks faithful at first Angelus after surgeryGame ReviewsPower To The Players Act aims to let gamers own their gamesAmplifiedDemon Hunter — Summer of DarknessTech DeskDisney hires most of Character.AI's staff in bankruptcy dealHow-to DeskHow to stop your Suncorp loan repayment jumping at ANZAmplifiedNorma Jean — Bless the Martyr and Kiss the ChildUnited StatesTrump approval hits record low 33% in ABC, Post, Ipsos pollAustraliaGreenpeace activists held after Woodside platform protestComing SoonStranger Than Heaven trailer starts Act 1 in 1915 KokuraAustraliaNorth Adelaide Golf Course $55,000 contracts under fireAustraliaTwo teens arrested after Glenelg Moseley Square fightHacking DeskOpenCode breach exposes saved AI keys for 1.4% of usersThe WireCFB Wainwright fire kills 4 Canadian soldiers in AlbertaAI DeskGrok Bot can phone restaurants to book tables, Musk says
Thursday 22 October 2026

Hacking Desk

Hacking · Page 3

Stories 41–60 of 68, newest first. Back to the latest

  1. Hacking7 min read

    Hackers heat French supermarket fridges via Danfoss controllers

    Hackers turned up the heat in fridges at hundreds of French supermarkets, spoiling food and sparking fires. Danfoss controllers are in the frame.
  2. Hacking7 min read

    Ahsay backup servers hacked, and the first fix didn't work

    Hackers took over Ahsay backup servers and hid crypto miners. Ahsay's first patch didn't stop them, and Huntress says hotfix 10.3.4.45 now does.
  3. Hacking6 min read

    Hijackers got rogue Google certificates via .gh, .sl and .as

    Attackers hijacked the .gh, .sl and .as domain registries and got real security certificates for Google and YouTube names. Chrome has blocked them.
  4. Hacking4 min read

    Qilin ransomware suspect extradited from Japan to Germany

    Germany has arrested a 28-year-old Russian alleged to be a core Qilin ransomware member after Japan extradited him. Qilin hit Court Services Victoria.
  5. Hacking5 min read

    DOJ and FBI seize Flax Typhoon tools Microscan and FishHub

    The DOJ and FBI have seized domains behind Microscan and FishHub, two hacking tools run by China's Integrity Tech. A joint warning for defenders came too.
  6. Hacking5 min read

    FBI confirms multiple arrests in its ShinyHunters hack probe

    The FBI says it and partners have arrested multiple ShinyHunters suspects, and it's blaming a contractor's missed patch for the hack of its jobs site.
  8. Hacking5 min read

    CISA adds Apple CoreGraphics flaw CVE-2026-86950 to KEV list

    CISA added Apple's CoreGraphics bug CVE-2026-86950 to its KEV list on 29 September. US agencies had to patch by 2 October. iOS and macOS fixes are out.
  9. Hacking6 min read

    CISA KEV catalogue explained: the list of bugs under attack

    CISA's Known Exploited Vulnerabilities catalogue listed 1,731 bugs attackers are already using as of 1 October 2026. Here's how it works and what changed.
  10. Hacking5 min read

    Police seized KillSec's leak site and say a 16-year-old ran it

    Police in 10 countries seized the KillSec ransomware leak site and five servers on Wednesday 30 September. They suspect a 16-year-old was the leader.
  11. Hacking5 min read

    Iranian named as Mabna suspect Amir Barati extradited to the US

    Montenegro extradited a 40-year-old Iranian to the US. Police gave only initials, but reports name him as Amir Barati, accused in Mabna's campus hacks.
  12. Hacking5 min read

    Chrome 154 fixed 11 security bugs, one a critical WebGL flaw

    Google's Chrome 154 update, version 154.0.8037.97, landed on Thursday 1 October with 11 security fixes. One is critical, and none is flagged as exploited.
  13. Hacking5 min read

    GitLab fixed a critical AI Gateway flaw, its own servers first

    GitLab fixed critical AI Gateway flaw CVE-2026-90970 on Friday 2 October. Self-hosters need 19.2.4, 19.3.2 or 19.4.1. GitLab.com users are covered.
  14. Hacking5 min read

    DHH's Omarchy Linux put US$100,000 into a HackerOne bug bounty

    Omarchy, DHH's Linux distribution, opened a US$100,000 bug bounty on HackerOne on Friday 2 October, Adelaide time. Critical bugs pay up to US$1,500.
  15. Hacking18 min read

    NetScaler got hit before the fix

    Hackers are already using two new flaws to break into Citrix NetScaler boxes. US federal agencies have until Wednesday 30 September to fix them.
  16. Hacking16 min read

    Cisco Secure Email Gateway flaw is under attack

    Cisco Secure Email Gateway has a critical flaw, CVE-2026-76461, that lets hackers take it over. It's under attack and CISA set a 17 September deadline.
  17. Hacking6 min read

    Apple Patched the Neural Engine

    Apple has patched CVE-2026-43748, a critical bug in its Neural Engine driver, in macOS Sequoia 15.7.8, Tahoe 26.6 and matching iOS updates.
  18. Hacking6 min read

    CISA directive BOD 26-04 sets three-day patch clocks

    CISA's new directive for federal agencies, BOD 26-04, sets patch deadlines by risk. The most urgent flaws get about three days, plus forensic checks.
  19. Hacking6 min read

    Chromium Hit the KEV

    The US cyber agency CISA has added Chromium flaw CVE-2026-85046 to its Known Exploited Vulnerabilities catalog. Browser updates carry the fix.
  20. Hacking17 min read

    Magento zero-day StyleSmuggler hit stores before Adobe's fix

    Sansec says a Magento and Adobe Commerce zero-day it calls StyleSmuggler was under attack from 4 September. Adobe issued an emergency fix on 7 September.
  21. Hacking5 min read

    Microsoft says Entra ID flaw CVE-2026-62916 is already mitigated

    Microsoft says Entra ID flaw CVE-2026-62916, an elevation of privilege bug, is already fully mitigated. Customers don't need to do anything.

Say hello in our guest book