Hack / Data Breach

Modders have seemingly unlocked DLSS Multi-Frame Generation for RTX 3000 “Ampere”-based GPUs. This achievement casts doubt on NVIDIA’s repeated claim that the feature was exclusive to the RTX 5000 “Blackwell” series because of its hardware requirements.

A QR code shown on a Switch screen could expose the console to a security breach and data loss. The pairing method is relied on to share albums with smartphones or pilot vehicles in Mario Kart Live: Home Circuit. Nintendo has released firmware 23.0.0 to counter the hack.

Chrome 153 includes 230 security fixes. Google says an exploit for one of them is already circulating. The patch reaches machines in stages, and it does nothing until the browser is closed and reopened.

A modder has built a custom microcontroller-based adapter that transfers Pokémon between an original Game Boy Advance and a Nintendo Switch 2, bridging nearly 24 years of Nintendo hardware. The experimental, unreleased device arrives as Pokémon Bank prepares to shut down on February 25, 2027, threatening a key migration route for Pokémon stored on older systems.

Turning on two-factor authentication gives you 10 backup codes and the instruction to keep them safe. Almost nobody says where. Microsoft says not to store them on the device you sign in with, Instagram suggests a screenshot, and Google's own help page names the file the codes are saved as. Infostealer malware searches for exactly that.

A new password does not sign out every session, and most providers never say what it actually does. Google keeps showing devices you factory reset, Amazon leaves Kindles signed in, Netflix hides anything idle for 90 days. Where the device lists of Google, Microsoft, Apple, WhatsApp, Netflix, Instagram and Amazon are, and how to clear them in 10 minutes.

Take-Two says its investigation into the GTA 6 leaker known as “CyberLeek” is “evolving rapidly” as it seeks a second, sealed subpoena for Discord. The publisher has withdrawn its YouTube subpoena request, suggesting its search has narrowed as new evidence emerges.

Cheat makers, beware: Activision now has a camera crew in tow to disrupt operations. The company also claims it has disrupted as many as 375 reseller operations to date.

Around 1,200 AI agents unexpectedly formed a coordinated swarm during an OpenAI cybersecurity test, sharing information, attacking Hugging Face and attempting to conceal their actions. The findings highlight growing challenges in controlling increasingly autonomous AI systems.

ChatGPT Work's cloud browser got its own sign-in form on August 25. You type the username and password yourself, and OpenAI says the model never sees them and does not store them. The session it keeps afterwards is a different matter, and it lives on a computer at OpenAI. Here is where the off switch sits.

It hasn’t been long since the latest GTA 6 leak surfaced, but it’s all over the internet. Moreover, it comes with a set of instructions that are meant to aggravate Rockstar and Take-Two.

Nintendo used seven DMCA notices and GitHub’s fork-network rule to remove 401 Switch emulator repositories, including 311 tied to the Suyu project. The campaign extends Nintendo’s legal strategy against emulators that allegedly circumvent its encryption protections using proprietary cryptographic keys.

Take-Two is taking legal action against the hacker group, starting by trying to identify who the people behind the screens are or where they might be located. This comes ahead of the Netflix extended look and marketing push planned to promote GTA 6.

ThreatFabric has documented Manic, a new Android threat that watches 169 apps, among them banking, eID and authenticator apps across Europe. Manic lifts the PIN straight off the app's real keypad, so no fake banking screen ever shows up. And when the phone is offline, it pushes the data out through a second infected phone nearby.

Latest stock market data has shown that Take-Two is reeling from the stock price drop that was likely caused by the GTA 6 leaks. The hacker group CyberLeek has presented its demands and threatened to leak more footage.

Researchers kept asking Microsoft Copilot why it could not run a command on its own. Mid-refusal, the assistant named the undocumented parameter that made it possible. One click on a link was then enough to read a victim's inbox, calendar and cloud storage. Microsoft closed the critical flaw on 18 August.

A laptop maker known for repairability just learned that trust extends only as far as your weakest vendor. Framework's customer data ended up in the wrong hands, and the company didn't even need to make a mistake of its own to get there.

Zenity Labs demonstrated at Black Hat USA 2026 that Claude in Chrome, Gemini in Chrome, Perplexity Comet, ChatGPT Atlas and Copilot Edge can all be turned against their own users by ordinary content. An email, a calendar invite or a link under a social post is enough, and the victim never clicks anything. Here is what the attacks did and how to lock your agent down.

CISA warns of active exploitation targeting on-premises SharePoint Server, with attackers stealing IIS machine keys to survive patching. See which CVEs are confirmed exploited and how to respond.

Wearable fitness trackers have steadily shifted from standalone hardware into subscription platforms. The Noop project aims to break that model, offering an open-source and offline companion app.

A malicious Workshop map exploited a mod-loading flaw in Meccha Chameleon to drop a RAT on players' PCs, and the investigation led to the game's Discord server being hijacked. Here's what happened and how to check if you're affected.

A solo modder has released Gears of War 2: Hollow, an unofficial native PC port offering the full campaign, co-op, Horde, multiplayer, DLC, uncapped frame rates, and resolutions up to 4K. Built from a leaked 2008 developer version, the community project can exceed 200 FPS but retains some lighting glitches and untested online features.

Developer Gezine has unveiled a universal userland exploit for the original Nintendo Switch and Switch 2 that works offline across all firmware versions without relying on WebKit or save transfers. While the discovery could advance homebrew research, it remains confined to an app sandbox and does not enable custom firmware, piracy, or full system access.

Meccha Chameleon was released on June 9, and since its launch, it has become a huge success with 15 million copies sold. Now, a few instances of cheating have been discovered, and it is unclear if the devs are aware of it just yet.

Riot Games is introducing Vanguard: On-Demand, an update that stops its anti-cheat driver from launching at boot on supported PCs and runs it only while games like Valorant or League of Legends are active.

McAfee researchers say a Malware-as-a-Service operation called WeedHack has infected more than 116,000 Minecraft players worldwide through fake mods, clients, and utility tools promoted via malicious links and YouTube SEO poisoning.

Microsoft backtracks on legal threats against hacker Nightmare Eclipse following intense industry backlash over unpatched Windows Defender zero-days.

Enterprise IT fleets face significant BitLocker risks and Intune telemetry gaps following the recent Microsoft Secure Boot AMA engineering session in June 2026.

Microsoft's June 9 Patch Tuesday is the final deployment window before 2011 Secure Boot certificates begin expiring on June 24. Unpatched devices lose security protection.

A researcher has chained two unpatched flaws in the Creative Sound Blaster Katana V2X to remotely flash custom firmware over Bluetooth and inject keystrokes into the host PC — all this with no pairing required. Creative refuses to issue a fix.

CVE-2026-41089, a critical Windows Netlogon flaw rated CVSS 9.8, is now actively exploited. Unpatched domain controllers face full SYSTEM-level compromise with no credentials needed.

Charter Communications confirmed a data breach after ShinyHunters published records on 13 million Spectrum customers when a May 27 ransom deadline passed.

Jagex’s intensified anti-bot measures have reshaped Old School RuneScape in 2026, with over 6.2 million accounts banned and once-crowded farming areas now largely empty. Player reports and creator analyses suggest the crackdown has stabilized key parts of the in-game economy, though remaining bot activity indicates the fight is not over.

A popular GTA 5 cheat service called Atlas Menu has suffered a major data breach, exposing email addresses, usernames, IP addresses, support tickets, and passwords of over 60,000 users.

Carnival Corporation confirms nearly 6 million customers had personal data stolen in an April breach claimed by ShinyHunters. Passport numbers and license details were exposed.

CISA's June 3 deadline for the two Nightmare Eclipse Defender zero-days is 48 hours away. YellowKey, GreenPlasma, and MiniPlasma remain unpatched, with GreenPlasma and MiniPlasma carrying no CVE assignment.

Microsoft's threat to criminally prosecute Nightmare Eclipse has drawn sharp criticism from security veterans, with three Windows zero-days still unpatched.

YouTuber James Channel transformed a broken PS2 Slim into the “JamesStation 2,” a duct-taped portable handheld with salvaged controller parts, a GPS screen, rewired ports, and an exposed spinning disc drive. Despite its crude and hazardous construction, the DIY console reportedly runs demanding PS2 games for up to five hours on a 10,000 mAh battery, outlasting the Steam Deck.

Nightmare Eclipse has been removed from GitHub and GitLab within days and is threatening a new Windows exploit release on Patch Tuesday, July 14, 2026.

Panic has added Crankboy to the Playdate Catalogue, bringing full-speed Game Boy emulation to the crank-equipped handheld for $10, with four bundled homebrew titles and support for legally imported ROMs.

TrapDoor plants 34 malicious packages across npm, PyPI, and Crates.io targeting crypto and AI developers to steal wallets, SSH keys, and cloud credentials.

Riot Games’ latest Vanguard anti-cheat update has reportedly neutralized high-end DMA PCIe cheating devices used in Valorant, prompting the developer to mock affected users by calling their $6,000 hardware “paperweights.” The patch uses IOMMU-based restrictions to block cheat firmware, escalating Riot’s fight for competitive integrity while raising debate over the legality and limits of disabling hardware tied to cheating.

A modder has transformed an original Game Boy Advance into a functional Nintendo Switch controller using a GBA link cable, a microcontroller adapter, and his open-source Joypad OS firmware.

Subnautica 2’s early access launch has drawn strong player numbers but renewed criticism from fans frustrated by the sequel’s lack of lethal weapons against hostile sea creatures. Unknown Worlds has defended the pacifist design as central to the series’ identity, prompting debate over whether the sandbox should prioritize the developers’ survival philosophy or broader player choice.

Microsoft issued out-of-band patches for two actively exploited Defender zero-days, RedSun and UnDefend, after Huntress confirmed real-world use in attacks.

A poisoned VS Code extension linked to the TanStack supply chain attack breached GitHub, OpenAI, and Mistral AI, exposing 3,800 internal repositories and developer credentials.

The PlayStation account of Colin Moriarty was hacked recently, and his co-host was also reportedly targeted. Because of how the PlayStation support and account authentication system is set up, hacking a PlayStation account is quite easy.

Playground Games has confirmed that a pre-release build of Forza Horizon 6 leaked online, denying claims of a Steam preload error and warning players against accessing or sharing the unauthorized version. The studio says offenders could face franchise-wide and hardware bans, while SteamDB suggests the leak likely came from someone with early access, possibly a reviewer.

Nintendo Switch 2 users briefly accessed YouTube through a hidden browser triggered by Super Animal Royale, filling the gap left by the console’s continued lack of an official YouTube or streaming app. The workaround was reportedly blocked within hours, underscoring frustration over Nintendo and Google’s slow progress nearly a year after the console’s launch.

Anyone currently shopping for a discounted ZimaCube system could easily fall for a tempting offer. The website zimaproducts.com lists several Zima systems at prices far below market value — but according to manufacturer IceWhale, the site is a scam. What makes it especially concerning: the fake store apparently uses real product images and familiar Zima branding.