Belk hit by May cyberattack: DragonForce stole 150GB of data

Ransomware group DragonForce claims it attacked U.S. retailer Belk in May, stealing over 150GB of data in a disruptive cyberattack. The infamous Ransomware group DragonForce claimed responsibility for the May disruptive attack on US department store chain Belk. The ransomware gang claimed it had stolen 156 gigabytes of data from Belk. Belk, Inc. is a […]

July 15, 2025
Read More >>

Thread support for Flipper Zero

With this guide, Flipper Zero now supports Thread and Matter protocols, unlocking powerful new capabilities for smart home experimentation and security research. This integration allows users to interact with modern IoT ecosystems in a hands-on way, bridging the gap between consumer tech and cybersecurity tools. It’s a major step forward for tinkerers, researchers, and developers exploring the future of connected devices.

submitted by /u/hackeronimacaroni
[link] [comments]

July 15, 2025
Read More >>

North Korea-linked actors spread XORIndex malware via 67 malicious npm packages

North Korea-linked hackers uploaded 67 malicious npm packages with XORIndex malware, hitting 17K+ downloads in ongoing supply chain attacks. North Korea-linked threat actors behind the Contagious Interview campaign have uploaded 67 malicious npm packages with XORIndex malware loader, hitting over 17,000 downloads in ongoing supply chain attacks. XORIndex was built to evade detection and deploy […]

July 15, 2025
Read More >>

FBI seized multiple piracy sites distributing pirated video games

FBI seizes multiple piracy sites for Nintendo Switch and PlayStation 4 games, dismantling their infrastructure. The FBI, with the help of the Dutch FIOD, seized multiple piracy sites distributing pirated video games, including nsw2u.com, ps4pkg.com, and mgnetu.com, dismantling their infrastructure. These sites, active for over four years, offered early access to popular game titles and […]

July 15, 2025
Read More >>

An attacker using a $500 radio setup could potentially trigger train brake failures or derailments from a distance

A 20-year-old flaw in End-of-Train and Head-of-Train systems could let hackers trigger emergency braking, finally getting proper attention. US CISA has warned about a critical flaw, tracked as CVE-2025-1727, in the radio-based linking protocol between End-of-Train (EoT) and Head-of-Train (HoT) systems. An End-of-Train (EoT) device, also known as a Flashing Rear End Device (FRED), is […]

July 15, 2025
Read More >>

Interlock ransomware group deploys new PHP-based RAT via FileFix

Interlock ransomware group deploys new PHP-based RAT via FileFix (a ClickFix variant) in a widespread campaign targeting multiple industries. The Interlock ransomware group is deploying a new PHP-based variant of the Interlock RAT in a broad campaign. According to researchers from the DFIR Report, in partnership with Proofpoint, it uses a delivery method known as FileFix, […]

July 14, 2025
Read More >>

Global Louis Vuitton data breach impacts UK, South Korea, and Turkey

Louis Vuitton data breach affects customers in the UK, South Korea, Turkey, and possibly more countries, with notifications underway. Customers of French luxury retailer Louis Vuitton are being notified of a data breach affecting multiple countries, including the UK, South Korea, and Turkey. The security breach was discovered on July 2nd, 2025, and exposed customer […]

July 14, 2025
Read More >>

Spain awarded €12.3 million in contracts to Huawei

Spain gives Huawei wiretap contracts, sparking concerns over potential Chinese government access due to Huawei’s links to Beijing. The Spanish Ministry of the Interior has awarded €12.3 million ($14.3 million) contracts to manage and store judicially authorized wiretaps used by law enforcement and intelligence agencies, raising concerns about potential Chinese government access due to the […]

July 14, 2025
Read More >>

Unconventional Shellcode Delivery (Evasion Achieved) — Unsure Where to Go From Here

Hey all, I’m looking for advice, if this is the wrong sub please let me know. I’m a developer and independent security researcher, and I recently created a new obfuscation method:

  • An unconventional payload delivery mechanism
  • A machine learning-based decoder
  • Verified evasion of modern static and behavioral defenses (including Windows Defender on 11 24H2)

This technique opens up interesting possibilities for covert channels, adversarial ML, and next-gen red team tooling. It’s 100% undetectable, and even when inspecting the binary it appears completely benign. I’m currently waiting to hear back from a conference about presenting this research.

I’m currently exploring:

  • Potential sale/licensing to trusted orgs or brokers
  • Research/collaboration with companies working in offensive AI or threat emulation
  • Employment opportunities in exploit dev, AI red teaming, or detection evasion R&D

Any advice on how to navigate this I’d greatly appreciate it, would love a job in research, and doing a writeup on this.

submitted by /u/_W0z
[link] [comments]

July 13, 2025
Read More >>