HackingPassion.com : [email protected][~]

Your Rust build pulled in a backdoor for 86 minutes on Thursday. Five versions with 246 million downloads between them were pulled in 16 seconds, leaving one poisoned release to land on.

At 07:15 UTC on 20 August a new version of a Rust package called arrayref showed up on crates.io. That package had been sitting there...

Your router now reports when someone walks through your house. You installed no sensor. There is none. A phone indoors gave up a person’s breathing to a receiver three meters outside the wall.

The radio waves coming out of your router do not stop at the wall. They go through it, bounce off the floor, the cupboard and the person walking to the kitchen, ...

Expired credit cards still paid at the checkout. Researchers spent $500 on one, then $2.79 in a shop. The cards had already been handed in for a replacement, and the account behind them stayed open.

A payment card sells one promise on its front. The date printed there is the day the card stops working. Shops rely on it, banks rely on i...

Evooo1Bot Turns Home Routers Into Rented Proxies and Reads the Traffic Passing Through

A botnet is breaking into home routers with a bug from 2007. Ten known holes, and a list of 150 common logins. Nobody in the house clicked on anything. The internet still works fine.

The bug from 2007 is a command injection in a phon...

Windows Defender Dies to a One-Click Script While Defender Bypasses Sell for $30 a File

A script created an account on a fully secured Windows 11 machine, killed the antivirus Windows says cannot be killed, and ran a payload. It needed one click. Its memory had no write protection. 🧐

The machine had everything switched on. Secure Boot, driver signatur...