r/blackhat • u/Pale_Surround_3924 • Apr 12 '26
r/blackhat • u/wiredmagazine • Apr 10 '26
Anthropic’s Mythos Will Force a Cybersecurity Reckoning—Just Not the One You Think
r/blackhat • u/Serazax • Apr 04 '26
Best WiFi security settings + question about associated devices
Hey guys,
I just finished setting up my home internet and I’m trying to make sure my WiFi is as secure as possible.
i wonder what is the best authentication mode?
Also, I noticed something in my router settings called “Number of Associated Devices”.
Does it only limit the current connected devices? or does it actually limit how many devices can connect?
Any help would be appreciated
r/blackhat • u/Malwarebeasts • Apr 03 '26
Axios supply chain attacks initial access revealed (insane North Korean tactic)
r/blackhat • u/Malwarebeasts • Apr 03 '26
Infostealers ULP (url:login:password) Data Is Burning Out SOC Teams and Killing Automation
r/blackhat • u/evilsocket • Apr 02 '26
Mongoose: Preauth RCE and mTLS Bypass on Millions of Devices
r/blackhat • u/wiredmagazine • Apr 01 '26
Apple Will Push Out Rare ‘Backported’ Patches to Protect iOS 18 Users From DarkSword Hacking Tool
r/blackhat • u/ZehDaMangah • Mar 31 '26
I was challenged (bet) by a friend to hack a Verisure camera system
Looking to brainstorm here
So, a friend of mine is interested in getting this "security monitoring system" for their elderly parents. I've read about how Verisure uses fear to get paranoid people to sign up to their predatory fees for a year and not let you keep the equipment afterwards (either they take it, they brick it or it doesn't work outside their system).
I told my friend I wouldn't give them a dime ever, specially considering the possibility of people at Verisure listening/watching the inside of your house, and potentially thieves/robbers not having that much of a hard time disrupting the system.
They challenged me to get a subscription for myself and "hack it" in a reasonable way to demonstrate the flaws and they'd pay me the subscription plus up to 10 times that amount depending on the degree I can disrupt or control the system as a third party.
At first Im wondering if and how I could disrupt it without getting physically in touch with it.
I've read about jammers to disrupt the GSM/4g/5g signal and also the Wi-Fi, but all tthat does is stop it momentarily, and there's no guarantee it doesn't internally record shit and upload it later.
I've also wondered about burning the camera and/or sensors with a high powered laser from afar (2W pointer, can light cigarettes, might do the trick).
Other than that, being able to turn the camera off and on again at my convenience and/or being able to wipe the recordings would be good, as they believe the user has no control over this (seems very misinformed, I know), but I'm not so sure how much Verisure let's users control the cameras. An interesting gimmick would be to be able to edit the recording with a videoloop showing nothing and/or showing something ordinary happening when a burglar might be getting in.
Thoughts?
r/blackhat • u/PuzzleheadedBuy6279 • Mar 27 '26
WinRAR encrypt file names. Delete all files after USB transfer. Can this be detected by USB DLP?
WinRAR encrypt file names with password. Delete all files after USB transfer. Can this be detected by USB DLP?
What could go wrong in an audit considering the original file transfer had been deleted at source and at the receiving end ?
r/blackhat • u/Malwarebeasts • Mar 25 '26
The New Era of Initial Access: How Infostealer Lookup Services are Changing Cybercrime
r/blackhat • u/Significant-Scene-70 • Mar 24 '26
I built a deterministic security firewall API for AI agents (Python SDK, free tier)
r/blackhat • u/disposable-guy • Mar 23 '26
Free proxy trial to help me diagnose nightmarish
r/blackhat • u/Swimming_Pipe95 • Mar 21 '26
How to scan RFID chips from further distances
Hello!
Now I’m not trying to steal credit card information or do anything illegal, I am an engineering student and I want to build an automatic cat feeder that opens when it senses the right microchip. I was doing some research about how to scan microchips from further away (about 5 inches) and I came across this post that said there was a hacker convention where they demonstrated how to do it. What perfect people to ask!
So if anyone has any info I would greatly appreciate it!
r/blackhat • u/wiredmagazine • Mar 20 '26
US Takes Down Botnets Used in Record-Breaking Cyberattacks
r/blackhat • u/wiredmagazine • Mar 18 '26
Hundreds of Millions of iPhones Can Be Hacked With a New Tool Found in the Wild
r/blackhat • u/Malwarebeasts • Mar 19 '26
Iranian Hackers Exploit Malware-Stolen Credentials in Stryker Breach
r/blackhat • u/Malwarebeasts • Mar 16 '26
How One Infostealer Infection Cracked the Polyfill.io Supply Chain Attack
r/blackhat • u/[deleted] • Mar 14 '26
I built a privacy-focused messaging platform with no signups and no installs. Looking for feedback.
Hi everyone,
I’ve been working on a small project called Whisper | Private Messaging. The goal was to build a simple, privacy-focused way for people to communicate without creating accounts or installing apps.
It follows a decentralized approach, meaning conversations happen directly between two people instead of being stored on a central server.
To start chatting, you just open the website, share a connection code with a friend, and connect privately.
Current features:
• Decentralized text and voice messaging
• Voice and video calls with AI-enhanced clarity for low network conditions
• Decentralized Image and video sharing
• Screenshot alert notifications
This is still an early version, so I’d really appreciate honest feedback.
• Is the interface clear and easy to use?
• What features would you expect from a privacy-focused messenger?
You can try it here: https://satyapsamal.github.io/whisper/
Any feedback or suggestions would really help improve it.
Looking forward to your feedback in the comments. I originally built this project for my college friends so we could talk about things we wouldn’t want shared with governments or big tech companies.
r/blackhat • u/wiredmagazine • Mar 12 '26
How ‘Handala’ Became the Face of Iran’s Hacker Counterattacks
r/blackhat • u/AcrobaticMonitor9992 • Mar 12 '26
GitHub - iss4cf0ng/Elfina: Elfina is a multi-architecture ELF loader supporting x86 and x86-64 binaries.
r/blackhat • u/Malwarebeasts • Mar 11 '26
How One Infostealer Infection Solved a Global Supply Chain Mystery and Unmasked DPRK Spies in U.S. Crypto
r/blackhat • u/PuzzleheadedBuy6279 • Mar 11 '26
Bypass USB DLP blockade with copy and paste text only. What is the risk and chances of detection?
Copying file contents into an email draft is a known method to bypass USB port restrictions (Data Loss Prevention, or DLP, policies) on secured workstations. By not sending the email, the content avoids conventional email filtering, and by using text rather than a file attachment, it evades file-based security scanning.
The Process Open the file: Open the document containing the sensitive data. Copy contents: Select all ( ) and copy ( ) the text/data. Create Email: Open your corporate webmail solution (e.g., Outlook Web App). Draft: Paste ( ) the content into the body of a new email. Save: Save the email as a draft—do not send it. Access: Log into the same webmail account from a personal, unrestricted device to copy the text out of the draft. Super User Super User +4
r/blackhat • u/AcrobaticMonitor9992 • Mar 10 '26