A 24-year-old linked to Scattered Spider pleaded guilty after stealing $8 million in digital assets from multiple companies.

The campaign used SMS phishing to capture employee credentials, then SIM swapping to take over accounts across telecom, tech, and crypto firms.

🔗 Read → https://thehackernews.com/2026/04/weekly-recap-vercel-hack-push-fraud.html#:~:text=British%20National%20Pleads%20Guilty%20to%20Scattered%20Spider%20Campaign

🛑 A Linux backdoor is using Microsoft’s cloud to stay hidden.

Harvester’s GoGra uses Outlook mailboxes as C2, executing commands via email, returning results, then deleting traces to evade detection.

Targets likely include India and Afghanistan.

🔗 Read → https://thehackernews.com/2026/04/harvester-deploys-linux-gogra-backdoor.html

If the channel reaches 500 subscribers, we will release SMTPs | rdps, advanced courses, and advanced malware. Free

CVE-2026-3844
*
Breeze Cache <= 2.4.4 Unauthenticated Arbitrary File Upload to RCE
*
PoC
#exploit

Some notes on the security properties of the pipe_buffer kernel object

hmm

#linux #exploit

⚰️Toronto Police launched Project Lighthouse in November, 2025 after police were tipped off about an unknown person(s) operating an SMS Blaster in downtown Toronto.

Watch the video for an actual explanation. The fancy Detective lady gives a run down on what happened.

tl;dr three chinese dudes some how built a custom made portable cell phone tower thingie in a van, drove around toronto with it. peoples cell phones automagically connected it to (its literally a cell phone tower thingie). when a cell phone connected to their portable cell tower thingie it would automatically send the connected phone a text which appeared to be from their bank or somewhere important. they interupted real cell phone towers 13m times lmfao. they were trying to steal passwords and stuff. no details released on how three random nerds managed to do this

Persistence method on endpoint devices by replacing the Context Menu handler
https://github.com/i014n/RightHand-Persistence/⁠�

Books Community

Richard Stallman talks about Ubuntu 👍

ShinyHunters compromised Canvas (to a currently unknown extent) which resulted in a "this system has been compromised" to over 9,000 universities.

As ridiculous as that sounds, I'm not memeing. It has been speculated it is actually over 9,000 universities.

ShinyHunters is having their ALPHV moment. They're now going to get attention at a serious scale outside of the information security circle.

——— Xss Forum ———-

The miracle that is gone and will never return

⤷ Title: Offsec’s “Sorcerer” [Medium]
════════════════════════
𐀪 Author: solitude
════════════════════════
ⴵ Time: Sat, 23 May 2026 19:01:00 GMT
════════════════════════
⌗ Tags: #ctf #hacking #cybersecurity #offsec #offensive_security

I learn cb sec
But wait wait why?
Idk