The Daily Hodl

Hackers Draining Android Users’ Bank Accounts As Tap-to-Pay Malware Spreads: Report

Android users are increasingly being targeted by malware that steals their payment card details through tap-to-pay technology ...
Android Authority

Your aging iPhone might be vulnerable to a flaw Apple can't patch

A new BootROM vulnerability has been discovered in older iPhones using the A12 and A13 chips. It uses a hardware bug in the USB controller to gain access to an iPhone’s startup process. It can’t be ...
Android

Instagram Users Still Getting Hacked After Meta’s Promised AI Bot Exploit Fix

Despite official claims that a critical Meta AI support chatbot vulnerability had been resolved, reports confirm that hackers are still actively hijacking Instagram accounts. High-profile victims, ...
Bleeping Computer

Google fixes one actively exploited Android zero-day, 124 flaws

Google has released the June 2026 Android security patches to address 124 vulnerabilities, including one zero-day flaw exploited in targeted attacks. Local attackers can exploit the actively abused ...
Fox News

Major cruise line hack exposes sensitive data of nearly 6 million travelers

Carnival Corporation, the world’s largest cruise company, announced it is offering some U.S. travelers two years of free credit monitoring after a data breach leaked the personal information of nearly ...
The Verge

Microsoft is threatening legal action for disclosing exploits

The company is feuding with a security researcher publicly posting vulnerabilities. The company is feuding with a security researcher publicly posting vulnerabilities. is the Verge’s weekend editor.
GitHub

chilkat_crypt_writefile.rb

NOTE: This vulnerability is still unpatched. The latest version of Chilkat Crypt at the time of this writing includes ChilkatCrypt2.DLL version 4.4.4.0.
GitHub

hp_loadrunner_addfile.rb

able to execute arbitrary code.
Dark Reading

AI-Assisted Exploit Development Outpaces Scanner Detection

Attackers have reduced the time to develop an exploit for a known vulnerability from 125 days to a mere half a day, thanks to the use of AI-assisted development, leaving vulnerability scanners ...
Ars Technica

Google publishes exploit code threatening millions of Chromium users

Google on Wednesday published exploit code for an unfixed vulnerability in its Chromium browser codebase that threatens millions of people using Chrome, Microsoft Edge, and virtually all other ...
TechSpot

A security researcher says Microsoft secretly built a backdoor into BitLocker, releases an exploit to prove it

The Epitome of WTF: A researcher known as "Nightmare-Eclipse" recently released YellowKey, a security vulnerability that allegedly enables a full bypass of BitLocker's full-volume encryption. The ...
Ars Technica

Zero-day exploit completely defeats default Windows 11 BitLocker protections

A zero-day exploit circulating online allows people with physical access to a Windows 11 system to bypass default BitLocker protections and gain complete access to an encrypted drive within seconds.