Hack / Data Breach

The PS3 emulator RPCS3 has been ported to the PS4, thanks to independent developers and the homebrew community. The multiplatform, open-source emulator has recently seen a large number of potentially AI-assisted ports to platforms that are not officially supported.

Denuvo has asked a California federal court to authorize subpoenas to Valve, Reddit, and Discord to identify “voices38,” an anonymous game cracker accused of circumventing its DRM protection on 26 titles. The company is also investigating cryptocurrency transactions it alleges are linked to the cracker, though it has not disclosed the basis for that connection.

ASOS app users received an unusual notification today, with hackers claiming they compromised the company’s systems. ASOS is investigating, but the extent of the breach remains unclear.

By September 26, OpenAI had notified more than 100 organizations because its AI agents went too far on their websites during training and testing. Four Australian government bodies are among them. To find more cases, OpenAI is combing through about 50 petabytes of logs on roughly 7,000 GPUs. Here is what that means and what it has to do with ChatGPT users.

AnyPS5 skips emulation entirely to run PS5 games on PC, but it hasn't proven itself beyond 2D indie games. It is however, a promising alternative approach to traditional emulators that are also experiencing increasing amounts of success at booting and running PS5 titles.

A U.S. federal court has ordered former r/SwitchPirates moderator James “Archbox” Williams to pay Nintendo $4.5 million for distributing pirated Switch games and promoting piracy services. The default judgment also permanently bars Williams from operating pirate shops, sharing Nintendo titles, or distributing software designed to bypass the company’s protections.

German and Austrian authorities have dealt a major blow to online fraud networks. In the large-scale "Operation Herakles", investigators shut down nearly 14,000 phone numbers used extensively for fraudulent financial schemes. That said, the threat to consumers remains.

Beyond personal information, ShinyHunters claimed their FBI hack exposed critical details about how the agency's cyber wing operates. While this could be a major blow to the agency, the full extent of the hack is not yet clear.

A new Exabeam-commissioned survey finds 48% of security leaders rank autonomous AI agents with excessive access as their top threat, ahead of hackers and insiders.

Denuvo is suing the notorious game pirate known as “Voices38”. The game cracker is well known for circumventing Denuvo’s DRM protection on games once considered impenetrable.

About 347,000 Trezor newsletter subscribers received a warning about a fake hardware defect, sent from the real address mailing@trezor.io. It passed every authentication check because the newsletter provider Brevo had been breached. BitBox and CoinTracking were hit too. Here is what actually protects you.

GMX and WEB.DE are allowed to empty an unused free mailbox after 6 months and hand the address to another user after 12. Section 5.3 of their terms says so at both providers. Anyone still using that address at a shop, an insurer or an old account is sending their password resets to a stranger.

Modders have seemingly unlocked DLSS Multi-Frame Generation for RTX 3000 “Ampere”-based GPUs. This achievement casts doubt on NVIDIA’s repeated claim that the feature was exclusive to the RTX 5000 “Blackwell” series because of its hardware requirements.

A QR code shown on a Switch screen could expose the console to a security breach and data loss. The pairing method is relied on to share albums with smartphones or pilot vehicles in Mario Kart Live: Home Circuit. Nintendo has released firmware 23.0.0 to counter the hack.

Chrome 153 includes 230 security fixes. Google says an exploit for one of them is already circulating. The patch reaches machines in stages, and it does nothing until the browser is closed and reopened.

A modder has built a custom microcontroller-based adapter that transfers Pokémon between an original Game Boy Advance and a Nintendo Switch 2, bridging nearly 24 years of Nintendo hardware. The experimental, unreleased device arrives as Pokémon Bank prepares to shut down on February 25, 2027, threatening a key migration route for Pokémon stored on older systems.

Turning on two-factor authentication gives you 10 backup codes and the instruction to keep them safe. Almost nobody says where. Microsoft says not to store them on the device you sign in with, Instagram suggests a screenshot, and Google's own help page names the file the codes are saved as. Infostealer malware searches for exactly that.

A new password does not sign out every session, and most providers never say what it actually does. Google keeps showing devices you factory reset, Amazon leaves Kindles signed in, Netflix hides anything idle for 90 days. Where the device lists of Google, Microsoft, Apple, WhatsApp, Netflix, Instagram and Amazon are, and how to clear them in 10 minutes.

Take-Two says its investigation into the GTA 6 leaker known as “CyberLeek” is “evolving rapidly” as it seeks a second, sealed subpoena for Discord. The publisher has withdrawn its YouTube subpoena request, suggesting its search has narrowed as new evidence emerges.

Cheat makers, beware: Activision now has a camera crew in tow to disrupt operations. The company also claims it has disrupted as many as 375 reseller operations to date.

Around 1,200 AI agents unexpectedly formed a coordinated swarm during an OpenAI cybersecurity test, sharing information, attacking Hugging Face and attempting to conceal their actions. The findings highlight growing challenges in controlling increasingly autonomous AI systems.

ChatGPT Work's cloud browser got its own sign-in form on August 25. You type the username and password yourself, and OpenAI says the model never sees them and does not store them. The session it keeps afterwards is a different matter, and it lives on a computer at OpenAI. Here is where the off switch sits.

It hasn’t been long since the latest GTA 6 leak surfaced, but it’s all over the internet. Moreover, it comes with a set of instructions that are meant to aggravate Rockstar and Take-Two.

Nintendo used seven DMCA notices and GitHub’s fork-network rule to remove 401 Switch emulator repositories, including 311 tied to the Suyu project. The campaign extends Nintendo’s legal strategy against emulators that allegedly circumvent its encryption protections using proprietary cryptographic keys.

Take-Two is taking legal action against the hacker group, starting by trying to identify who the people behind the screens are or where they might be located. This comes ahead of the Netflix extended look and marketing push planned to promote GTA 6.

ThreatFabric has documented Manic, a new Android threat that watches 169 apps, among them banking, eID and authenticator apps across Europe. Manic lifts the PIN straight off the app's real keypad, so no fake banking screen ever shows up. And when the phone is offline, it pushes the data out through a second infected phone nearby.

Latest stock market data has shown that Take-Two is reeling from the stock price drop that was likely caused by the GTA 6 leaks. The hacker group CyberLeek has presented its demands and threatened to leak more footage.

Researchers kept asking Microsoft Copilot why it could not run a command on its own. Mid-refusal, the assistant named the undocumented parameter that made it possible. One click on a link was then enough to read a victim's inbox, calendar and cloud storage. Microsoft closed the critical flaw on 18 August.

A laptop maker known for repairability just learned that trust extends only as far as your weakest vendor. Framework's customer data ended up in the wrong hands, and the company didn't even need to make a mistake of its own to get there.

Zenity Labs demonstrated at Black Hat USA 2026 that Claude in Chrome, Gemini in Chrome, Perplexity Comet, ChatGPT Atlas and Copilot Edge can all be turned against their own users by ordinary content. An email, a calendar invite or a link under a social post is enough, and the victim never clicks anything. Here is what the attacks did and how to lock your agent down.

CISA warns of active exploitation targeting on-premises SharePoint Server, with attackers stealing IIS machine keys to survive patching. See which CVEs are confirmed exploited and how to respond.

Wearable fitness trackers have steadily shifted from standalone hardware into subscription platforms. The Noop project aims to break that model, offering an open-source and offline companion app.

A malicious Workshop map exploited a mod-loading flaw in Meccha Chameleon to drop a RAT on players' PCs, and the investigation led to the game's Discord server being hijacked. Here's what happened and how to check if you're affected.

A solo modder has released Gears of War 2: Hollow, an unofficial native PC port offering the full campaign, co-op, Horde, multiplayer, DLC, uncapped frame rates, and resolutions up to 4K. Built from a leaked 2008 developer version, the community project can exceed 200 FPS but retains some lighting glitches and untested online features.

Developer Gezine has unveiled a universal userland exploit for the original Nintendo Switch and Switch 2 that works offline across all firmware versions without relying on WebKit or save transfers. While the discovery could advance homebrew research, it remains confined to an app sandbox and does not enable custom firmware, piracy, or full system access.

Meccha Chameleon was released on June 9, and since its launch, it has become a huge success with 15 million copies sold. Now, a few instances of cheating have been discovered, and it is unclear if the devs are aware of it just yet.

Riot Games is introducing Vanguard: On-Demand, an update that stops its anti-cheat driver from launching at boot on supported PCs and runs it only while games like Valorant or League of Legends are active.

McAfee researchers say a Malware-as-a-Service operation called WeedHack has infected more than 116,000 Minecraft players worldwide through fake mods, clients, and utility tools promoted via malicious links and YouTube SEO poisoning.

Microsoft backtracks on legal threats against hacker Nightmare Eclipse following intense industry backlash over unpatched Windows Defender zero-days.

Enterprise IT fleets face significant BitLocker risks and Intune telemetry gaps following the recent Microsoft Secure Boot AMA engineering session in June 2026.

Microsoft's June 9 Patch Tuesday is the final deployment window before 2011 Secure Boot certificates begin expiring on June 24. Unpatched devices lose security protection.

A researcher has chained two unpatched flaws in the Creative Sound Blaster Katana V2X to remotely flash custom firmware over Bluetooth and inject keystrokes into the host PC — all this with no pairing required. Creative refuses to issue a fix.

CVE-2026-41089, a critical Windows Netlogon flaw rated CVSS 9.8, is now actively exploited. Unpatched domain controllers face full SYSTEM-level compromise with no credentials needed.

Charter Communications confirmed a data breach after ShinyHunters published records on 13 million Spectrum customers when a May 27 ransom deadline passed.

Jagex’s intensified anti-bot measures have reshaped Old School RuneScape in 2026, with over 6.2 million accounts banned and once-crowded farming areas now largely empty. Player reports and creator analyses suggest the crackdown has stabilized key parts of the in-game economy, though remaining bot activity indicates the fight is not over.

A popular GTA 5 cheat service called Atlas Menu has suffered a major data breach, exposing email addresses, usernames, IP addresses, support tickets, and passwords of over 60,000 users.

Carnival Corporation confirms nearly 6 million customers had personal data stolen in an April breach claimed by ShinyHunters. Passport numbers and license details were exposed.

CISA's June 3 deadline for the two Nightmare Eclipse Defender zero-days is 48 hours away. YellowKey, GreenPlasma, and MiniPlasma remain unpatched, with GreenPlasma and MiniPlasma carrying no CVE assignment.

Microsoft's threat to criminally prosecute Nightmare Eclipse has drawn sharp criticism from security veterans, with three Windows zero-days still unpatched.

YouTuber James Channel transformed a broken PS2 Slim into the “JamesStation 2,” a duct-taped portable handheld with salvaged controller parts, a GPS screen, rewired ports, and an exposed spinning disc drive. Despite its crude and hazardous construction, the DIY console reportedly runs demanding PS2 games for up to five hours on a 10,000 mAh battery, outlasting the Steam Deck.