Hack / Data Breach

Nintendo exclusives are finding their way onto PCs and rival consoles. Following the Zelda: Ocarina of Time release date, the remake now loads on a PlayStation system. A homebrew enthusiast used the PS5 jailbreak to install a Switch 2 emulator, but frame rates rarely pass 20 fps.

Some PC gamers are experiencing a modernized Zelda N64 classic a day ahead of its release date. The Ocarina of Time remake is functional in the Lichii Switch 2 emulator. Exploits like the ns2jb jailbreak led to game dumps and the PC footage, but performance is inconsistent.

Nintendo may hope to make the physical Civilization 7 Switch port extinct. The cartridge is a gateway to the CivSwitch exploit and establishes userland access on the Switch 2 console. An Amazon retailer notified a customer of a recall and suggested the code-in-box version as a substitute.

Sony fought back after homebrew developers overcame the security protections of July PS5 firmware. The Prolapse jailbreak was a hopeful solution for software updates 14.00 and 14.10. However, the memory management exploit has hit a dead end, as 14.20 and 14.22 also remain elusive.

Seiko has removed the wishlist feature from three Japanese online stores after a security incident involving third-party provider Swym. The wider incident involved malicious checkout redirects on some retailers' websites, although Seiko has not confirmed that its own stores were affected.

Datamined files reportedly suggest that FromSoftware’s Nintendo Switch 2 exclusive, The Duskbloods, will feature 13 playable Bloodsworn, compared with six available during its closed network test. The findings identify characters by their weapons rather than names, while the full roster and release timing remain unconfirmed.

A new open-source project lets Nintendo Switch games run natively on Apple Silicon chips without emulation. Reports indicate that Monster Hunter Rise can reach as much as an impressive 60 FPS on an M1 chip.

Without Nintendo blocking the Switch 2 jailbreak, new games are vulnerable. The Zelda: Ocarina of Time remake preload has started, allowing pre-release date downloads. However, many files are likely encrypted, which may prevent the ns2jb exploit from uncovering secrets.

Metroid Dread has received an unofficial PC port through an AI-assisted recompilation project, adding higher frame rates, widescreen support, and expanded graphics options. Available free on GitHub, the work-in-progress port requires players’ own game files updated to version 2.1.0, with the developer warning of potential crashes and glitches.

A new wrinkle has emerged in the cat-and-mouse game between Sony and hackers. Unlike Relapse, Prolapse is a kernel exploit that works on firmware 14.00 and 14.10. GTA 6 may boot with 14.10 on its release date, though the hypervisor bypass isn't yet compatible with the PS5 jailbreak.

Game dumps have resulted from the recent Switch 2 jailbreak. The ns2jb exploit extracted files for Deltarune Chapters 1-4 and The Duskbloods beta. Playable ROMs for emulators require further breakthroughs to overcome the Nintendo console’s security protections.

Capcom has suffered a major data breach involving its Capcom ID service. The company says the breach has exposed information linked to over 11.7 million accounts.

A developer has reportedly jailbroken the Nintendo Switch 2 using a software-only exploit that works on the latest firmware. The jailbreak can run homebrew and game mods, but it is not permanent and disappears after restarting the console.

API keys saved in OpenCode workspaces may have been exposed after someone accessed a legacy system. Users are reporting unexpected spending on connected AI accounts, with one putting the damage at $400. OpenCode has confirmed the breach and is working with three major AI providers.

Hacking attacks on public infrastructure have taken a rather unexpected twist. This time around, the target was supermarket chain refrigerators whose controllers raised the temperature inside to spoil the food.

The PS3 emulator RPCS3 has been ported to the PS4, thanks to independent developers and the homebrew community. The multiplatform, open-source emulator has recently seen a large number of potentially AI-assisted ports to platforms that are not officially supported.

Denuvo has asked a California federal court to authorize subpoenas to Valve, Reddit, and Discord to identify “voices38,” an anonymous game cracker accused of circumventing its DRM protection on 26 titles. The company is also investigating cryptocurrency transactions it alleges are linked to the cracker, though it has not disclosed the basis for that connection.

ASOS app users received an unusual notification today, with hackers claiming they compromised the company’s systems. ASOS is investigating, but the extent of the breach remains unclear.

By September 26, OpenAI had notified more than 100 organizations because its AI agents went too far on their websites during training and testing. Four Australian government bodies are among them. To find more cases, OpenAI is combing through about 50 petabytes of logs on roughly 7,000 GPUs. Here is what that means and what it has to do with ChatGPT users.

AnyPS5 skips emulation entirely to run PS5 games on PC, but it hasn't proven itself beyond 2D indie games. It is however, a promising alternative approach to traditional emulators that are also experiencing increasing amounts of success at booting and running PS5 titles.

A U.S. federal court has ordered former r/SwitchPirates moderator James “Archbox” Williams to pay Nintendo $4.5 million for distributing pirated Switch games and promoting piracy services. The default judgment also permanently bars Williams from operating pirate shops, sharing Nintendo titles, or distributing software designed to bypass the company’s protections.

German and Austrian authorities have dealt a major blow to online fraud networks. In the large-scale "Operation Herakles", investigators shut down nearly 14,000 phone numbers used extensively for fraudulent financial schemes. That said, the threat to consumers remains.

Beyond personal information, ShinyHunters claimed their FBI hack exposed critical details about how the agency's cyber wing operates. While this could be a major blow to the agency, the full extent of the hack is not yet clear.

A new Exabeam-commissioned survey finds 48% of security leaders rank autonomous AI agents with excessive access as their top threat, ahead of hackers and insiders.

Denuvo is suing the notorious game pirate known as “Voices38”. The game cracker is well known for circumventing Denuvo’s DRM protection on games once considered impenetrable.

About 347,000 Trezor newsletter subscribers received a warning about a fake hardware defect, sent from the real address mailing@trezor.io. It passed every authentication check because the newsletter provider Brevo had been breached. BitBox and CoinTracking were hit too. Here is what actually protects you.

GMX and WEB.DE are allowed to empty an unused free mailbox after 6 months and hand the address to another user after 12. Section 5.3 of their terms says so at both providers. Anyone still using that address at a shop, an insurer or an old account is sending their password resets to a stranger.

Modders have seemingly unlocked DLSS Multi-Frame Generation for RTX 3000 “Ampere”-based GPUs. This achievement casts doubt on NVIDIA’s repeated claim that the feature was exclusive to the RTX 5000 “Blackwell” series because of its hardware requirements.

A QR code shown on a Switch screen could expose the console to a security breach and data loss. The pairing method is relied on to share albums with smartphones or pilot vehicles in Mario Kart Live: Home Circuit. Nintendo has released firmware 23.0.0 to counter the hack.

Chrome 153 includes 230 security fixes. Google says an exploit for one of them is already circulating. The patch reaches machines in stages, and it does nothing until the browser is closed and reopened.

A modder has built a custom microcontroller-based adapter that transfers Pokémon between an original Game Boy Advance and a Nintendo Switch 2, bridging nearly 24 years of Nintendo hardware. The experimental, unreleased device arrives as Pokémon Bank prepares to shut down on February 25, 2027, threatening a key migration route for Pokémon stored on older systems.

Turning on two-factor authentication gives you 10 backup codes and the instruction to keep them safe. Almost nobody says where. Microsoft says not to store them on the device you sign in with, Instagram suggests a screenshot, and Google's own help page names the file the codes are saved as. Infostealer malware searches for exactly that.

A new password does not sign out every session, and most providers never say what it actually does. Google keeps showing devices you factory reset, Amazon leaves Kindles signed in, Netflix hides anything idle for 90 days. Where the device lists of Google, Microsoft, Apple, WhatsApp, Netflix, Instagram and Amazon are, and how to clear them in 10 minutes.

Take-Two says its investigation into the GTA 6 leaker known as “CyberLeek” is “evolving rapidly” as it seeks a second, sealed subpoena for Discord. The publisher has withdrawn its YouTube subpoena request, suggesting its search has narrowed as new evidence emerges.

Cheat makers, beware: Activision now has a camera crew in tow to disrupt operations. The company also claims it has disrupted as many as 375 reseller operations to date.

An incorrectly secured legacy server just handed the internet thousands of early software prototypes spanning from 2003 to 2013. The exposed data includes a radically different Portal 2 beta, unreleased CS:GO game modes, fully runnable Left 4 Dead builds, and development assets that were never intended for the public to see.

Around 1,200 AI agents unexpectedly formed a coordinated swarm during an OpenAI cybersecurity test, sharing information, attacking Hugging Face and attempting to conceal their actions. The findings highlight growing challenges in controlling increasingly autonomous AI systems.

ChatGPT Work's cloud browser got its own sign-in form on August 25. You type the username and password yourself, and OpenAI says the model never sees them and does not store them. The session it keeps afterwards is a different matter, and it lives on a computer at OpenAI. Here is where the off switch sits.

It hasn’t been long since the latest GTA 6 leak surfaced, but it’s all over the internet. Moreover, it comes with a set of instructions that are meant to aggravate Rockstar and Take-Two.

Nintendo used seven DMCA notices and GitHub’s fork-network rule to remove 401 Switch emulator repositories, including 311 tied to the Suyu project. The campaign extends Nintendo’s legal strategy against emulators that allegedly circumvent its encryption protections using proprietary cryptographic keys.

Take-Two is taking legal action against the hacker group, starting by trying to identify who the people behind the screens are or where they might be located. This comes ahead of the Netflix extended look and marketing push planned to promote GTA 6.

ThreatFabric has documented Manic, a new Android threat that watches 169 apps, among them banking, eID and authenticator apps across Europe. Manic lifts the PIN straight off the app's real keypad, so no fake banking screen ever shows up. And when the phone is offline, it pushes the data out through a second infected phone nearby.

Latest stock market data has shown that Take-Two is reeling from the stock price drop that was likely caused by the GTA 6 leaks. The hacker group CyberLeek has presented its demands and threatened to leak more footage.

Researchers kept asking Microsoft Copilot why it could not run a command on its own. Mid-refusal, the assistant named the undocumented parameter that made it possible. One click on a link was then enough to read a victim's inbox, calendar and cloud storage. Microsoft closed the critical flaw on 18 August.

A laptop maker known for repairability just learned that trust extends only as far as your weakest vendor. Framework's customer data ended up in the wrong hands, and the company didn't even need to make a mistake of its own to get there.

Zenity Labs demonstrated at Black Hat USA 2026 that Claude in Chrome, Gemini in Chrome, Perplexity Comet, ChatGPT Atlas and Copilot Edge can all be turned against their own users by ordinary content. An email, a calendar invite or a link under a social post is enough, and the victim never clicks anything. Here is what the attacks did and how to lock your agent down.

CISA warns of active exploitation targeting on-premises SharePoint Server, with attackers stealing IIS machine keys to survive patching. See which CVEs are confirmed exploited and how to respond.

Wearable fitness trackers have steadily shifted from standalone hardware into subscription platforms. The Noop project aims to break that model, offering an open-source and offline companion app.

A malicious Workshop map exploited a mod-loading flaw in Meccha Chameleon to drop a RAT on players' PCs, and the investigation led to the game's Discord server being hijacked. Here's what happened and how to check if you're affected.

A solo modder has released Gears of War 2: Hollow, an unofficial native PC port offering the full campaign, co-op, Horde, multiplayer, DLC, uncapped frame rates, and resolutions up to 4K. Built from a leaked 2008 developer version, the community project can exceed 200 FPS but retains some lighting glitches and untested online features.