hacker Archives

AppWizard

September 11, 2026

NetScaler vulnerability exploited, AdaptHealth suffers breach, new Android malware

The Cybersecurity and Infrastructure Security Agency (CISA) warned of a critical vulnerability in NetScaler, identified as CVE-2026-19490, with a CVSS score of 9.3, which has been exploited and affects all NetScaler ADC and Gateway appliances. Citrix has patched this vulnerability as of August 19. AdaptHealth reported a data breach affecting over 4.1 million individuals, compromising personal, health, and insurance information, but not Social Security numbers or financial data. A new strain of Android malware, MantaxOtax, attributed to Indonesian threat actors, combines ransomware and spyware, stealing sensitive information and affecting older Android versions. The Gigabud banking trojan has evolved to evade detection by installing a secondary app that hides the malicious application. CISA acting director Nick Andersen emphasized the need for swift adaptation to cybersecurity threats and highlighted staffing improvements within CISA. Russian e-commerce giant Wildberries experienced disruptions from a DDoS attack affecting payments to sellers, following claims of a cyber operation by Ukraine's military intelligence. McKesson faced a cyberattack exposing sensitive data of 6.4 million individuals, with the ShinyHunters group releasing this data after a failed extortion attempt. IDScan confirmed a data breach affecting 150 million individuals, resulting in the theft of personally identifiable information and government-issued documents.

Tech Optimizer

September 5, 2026

Silver Fox uses adware to distribute ValleyRAT backdoor

The cyber threat group Silver Fox is distributing the ValleyRAT backdoor disguised as a legitimate signed Chinese adware application, specifically bundled with the QN Wallpaper tool. This malware allows attackers to gain comprehensive control over infected machines, enabling them to collect sensitive information, capture screenshots, and deploy additional malicious modules. The attack utilizes DLL sideloading, where a modified version of QN Wallpaper loads a malicious DLL from the same directory, circumventing signature-based security measures. The installer disables Windows Defender, adds itself to autorun entries, and uses the "runas" command to elevate privileges if the user lacks administrator rights. ValleyRAT also marks its process as critical, potentially causing a blue screen of death if terminated. Kaspersky has identified Silver Fox as the likely perpetrator of this campaign, known for similar techniques.

AppWizard

August 30, 2026

A Star Wars Galaxies community server was allegedly hacked with AI assistance by a Reddit moderator harboring a primeval grudge

A hacker known as levarrishawk has decrypted the game assets of the Star Wars Galaxies Legends community server, raising concerns among developers and players. The Legends team confirmed that he used AI tools to access client-side game asset files, which include unique content from the server. Levarris has offered these decrypted files to other servers, and the team warned that any Legends-exclusive content appearing elsewhere may have originated from their assets. Levarris claims his motivations stem from a dispute regarding the use of development tools obtained through a "honeypot" scheme related to the original game. He criticized the Legends project for not sharing these tools with other developers in the community. Reactions within the community have been mixed, with some expressing disappointment in Levarris's actions.

AppWizard

August 21, 2026

Catastrophic GTA VI leak is a full working build — notorious hacker CyberLeek taunts Rockstar Games by spraying the word ‘leek’ onto a wall in-game with bullets

The hacker known as Cyberleek has released new gameplay clips and the entire map of Grand Theft Auto VI, indicating possession of a complete, unreleased build of the game. In a notable clip, the character spells out "LEEK" by shooting at a wall, suggesting the hacker recorded themselves playing. Rockstar Games has issued DMCA takedown notices but some clips remain accessible. Cyberleek has vowed to continue leaking content until Rockstar issues a public apology and a commitment to improvement, hinting at the possibility of revealing the game's ending. Earlier this year, Rockstar faced a hack that threatened to release confidential data unless a ransom was paid. Despite the leaks, many gamers are expected to still purchase GTA VI.

AppWizard

August 21, 2026

Who is Cyberleek? What we know about the GTA 6 leaker

On August 18, an entity named "Cyberleek" shared what is believed to be authentic gameplay footage from Grand Theft Auto 6, featuring the protagonist Jason. The footage showcased typical GTA activities and was removed from social media due to copyright claims from Take-Two and Rockstar. Cyberleek's leaks were not from testers but indicated access to a segment of GTA 6. They expressed consumer rights grievances and made three demands: no more digital preorders, no selling DLC already included in base game files, and mandatory offline fallback states for single-player games. Cyberleek is also promoting a cryptocurrency token, $Cyberleek, with a market cap of .1 million, allowing token holders to vote on gameplay clips to release. The timing of the leaks suggests a possible European origin, and investigations link Cyberleek to past posts on a German cybersecurity forum. There are indications that Cyberleek is not affiliated with Rockstar Games, and if identified, they could face significant consequences. Rockstar's official gameplay reveal for GTA 6 is scheduled for August 27.

Tech Optimizer

August 17, 2026

How PGSimCity Turns PostgreSQL Complexity Into a Virtual City 3D Simulation

Nikolay Samokhvalov has introduced PGSimCity, an open-source educational tool that visualizes PostgreSQL cluster mechanics in a 3D simulation accessible via web browsers. The tool represents PostgreSQL 18's internals as municipal districts, with components like shared_buffers and Write-Ahead Logging organized spatially. It separates rendering from state transitions to maintain architectural integrity. Backend developers can trace SQL statement lifecycles and simulate operational anomalies, such as memory restrictions leading to performance issues. The project has generated discussions on AI-assisted visualization and has received community feedback for improvements. PGSimCity includes PGlite for in-browser PostgreSQL execution and has a roadmap for future enhancements, with its codebase available on GitHub under the Apache-2.0 License.

TrendTechie

August 16, 2026

Хакеры взломали ремейк Assassin’s Creed 4: Black Flag

The remake of Assassin's Creed: Black Flag Resynced has been compromised by hackers, making it available for download on various torrent sites. This breach occurred a little over a month after the game's official release on July 9. The hacker, known as voice38, successfully bypassed Denuvo's anti-piracy measures and has previously hacked other titles. The game is available on PC via Steam, Epic Games Store, and Ubisoft Connect, as well as on PS5 and Xbox Series, featuring Russian subtitles and significant enhancements such as redesigned mission structures, revamped combat systems, improved parkour mechanics, enhanced graphics, and new narrative content. Additionally, Mafia: The Old Country has released an expansion titled “Man of Honor”.

Winsage

August 13, 2026

Microsoft-vendetta hacker has a new zero day that gives system privileges on fully patched Windows

Nightmare Eclipse has released a new zero-day exploit called ShieldBreak, which can bypass Microsoft's RoguePlanet patch (CVE-2026-50656) and allow attackers to gain SYSTEM privileges on fully patched Windows 10, Windows 11, and Windows Server systems. The exploit has been confirmed by security expert Kevin Beaumont, who provided detection methods for it. ShieldBreak is the tenth zero-day from Nightmare Eclipse since April and was released shortly after Microsoft's monthly Patch Tuesday. The exploit allows local privilege escalation and has a 100% success rate on the latest version of Windows 11 and Windows Server 2025, while Windows 10 remains vulnerable. Microsoft is aware of the vulnerability and is investigating it, emphasizing the importance of coordinated vulnerability disclosure. Previous exploits from Nightmare Eclipse include LegacyHive and GreatXML, with earlier vulnerabilities having been patched but recent ones still unaddressed. Microsoft had threatened legal action against Nightmare Eclipse in May but later reconsidered its approach to vulnerability disclosure.

TrendTechie

August 13, 2026

Японские власти вычислили сидера аниме-трекера без слежки за торрент-роем

The Kyoto Prefectural Police have arrested 56-year-old Masakazu Ono, a primary seed of the torrent site Nyaa, following a multi-year investigation led by the anti-piracy organization CODA. Ono was identified through an analysis of data movement on torrent sites, rather than direct monitoring of BitTorrent traffic. He is accused of uploading around one thousand NHK recordings, including content from the series "Midnight Taxi." The investigation began in 2021 as part of the Cross-Border Enforcement Project, which aimed to identify uploaders on Nyaa. Charges were also brought against three secondary uploaders from aggregator sites.

TrendTechie

August 13, 2026

Японская полиция начала войну с торрентами — теперь у нее есть способ находить первоисточники раздач

Masakazu Ono, a 56-year-old resident of Sagamihara, was arrested by the Kyoto Prefectural Police for his role as a prolific seeder on the torrent tracker Nyaa, with assistance from the anti-piracy organization CODA and the Japan Hacker Association. His arrest was linked to the upload of the television series Midnight Taxi, but he had been sharing various programs from the Japanese broadcasting corporation for years. CODA identified him using tracker metadata analysis and de-anonymization techniques through Deep Packet Inspection, rather than traditional methods of monitoring torrent swarms.