⚠️ THIS IS A VULNERABLE LAB — YOU ARE ALLOWED TO HACK IT Learn more

Hacking News Lab

Log in Sign up

Ethical Hacking Mission Control

This live lab is a safe space for defenders, red teamers, and curious hackers to sharpen their tradecraft using real tooling and real telemetry. Every article, lab module, and intel briefing is curated to help you practice responsible disclosure, grow your skill set, and support the security community.

Review the lab briefing Stock your toolkit

Latest Intel Log in to unlock your personalized feed.

All feeds.feedburner.com bleepingcomputer.com krebsonsecurity.com darkreading.com

feeds.feedburner.com 2026-10-09 13:22

TP-Link Sued by Four More U.S. States Over Router Security and China Ties

feeds.feedburner.com 2026-10-09 16:29

P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands

feeds.feedburner.com 2026-10-09 12:59

Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

feeds.feedburner.com 2026-10-09 12:47

Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects

feeds.feedburner.com 2026-10-09 12:47

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

feeds.feedburner.com 2026-10-09 12:21

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

feeds.feedburner.com 2026-10-09 06:39

FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions

feeds.feedburner.com 2026-10-09 11:30

The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition

feeds.feedburner.com 2026-10-09 09:03

GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

feeds.feedburner.com 2026-10-09 08:26

Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own

feeds.feedburner.com 2026-10-09 08:11

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

feeds.feedburner.com 2026-10-08 18:32

FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails

feeds.feedburner.com 2026-10-08 17:58

ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories

feeds.feedburner.com 2026-10-08 15:45

Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks

feeds.feedburner.com 2026-10-08 15:26

UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML

feeds.feedburner.com 2026-10-08 14:12

ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms

feeds.feedburner.com 2026-10-08 10:30

Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia

feeds.feedburner.com 2026-10-08 09:46

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases

feeds.feedburner.com 2026-10-08 07:42

U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks

feeds.feedburner.com 2026-10-08 07:41

MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data

feeds.feedburner.com 2026-10-08 05:46

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

feeds.feedburner.com 2026-10-07 18:48

Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

feeds.feedburner.com 2026-10-07 17:43

Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer

feeds.feedburner.com 2026-10-07 16:17

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

feeds.feedburner.com 2026-10-07 15:34

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

feeds.feedburner.com 2026-10-07 15:33

PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet

feeds.feedburner.com 2026-10-07 11:57

The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflow

feeds.feedburner.com 2026-10-07 11:56

FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials

feeds.feedburner.com 2026-10-07 11:49

Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

feeds.feedburner.com 2026-10-07 11:42

What Is Agentic Pentesting? What It Proves, and Where It Stops.

feeds.feedburner.com 2026-10-07 08:07

Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws

feeds.feedburner.com 2026-10-07 06:57

100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer

feeds.feedburner.com 2026-10-06 18:38

Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes

feeds.feedburner.com 2026-10-06 18:24

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

feeds.feedburner.com 2026-10-06 11:57

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

feeds.feedburner.com 2026-10-06 11:26

Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies

feeds.feedburner.com 2026-10-06 11:02

Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers

feeds.feedburner.com 2026-10-06 09:21

Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports

feeds.feedburner.com 2026-10-06 06:58

Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products

feeds.feedburner.com 2026-10-06 06:56

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

feeds.feedburner.com 2026-10-06 06:00

Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account

feeds.feedburner.com 2026-10-06 05:22

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

feeds.feedburner.com 2026-10-05 16:21

Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

feeds.feedburner.com 2026-10-05 14:20

⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests

feeds.feedburner.com 2026-10-05 11:55

The Credential Layer Is Expanding Faster Than Security Teams Can See It

feeds.feedburner.com 2026-10-05 11:46

Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

feeds.feedburner.com 2026-10-05 10:38

Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access

feeds.feedburner.com 2026-10-05 08:09

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

feeds.feedburner.com 2026-10-05 06:40

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

feeds.feedburner.com 2026-10-04 07:22

ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members

feeds.feedburner.com 2026-10-04 07:20

China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing

Bug Bounty Radar

Hand-picked programs with live scope and standout rewards to help you focus your next responsible disclosure run.

FastAPI Cloud

HackerOne • Updated 2024-05-18

Top reward $20K

Prototype pollution in async workers and GraphQL stitching flaws.

Scope: api.fastapicloud.com, *.fastapicloud.com

Program brief →

Supply Chain Monitor

Bugcrowd • Updated 2024-05-22

Top reward $12K

Dependency confusion, pipeline breakout, and artifact poisoning.

Scope: *.scm.dev, api.scm.dev

Program brief →

Secure Notes

Intigriti • Updated 2024-05-17

Top reward €8K

OAuth misconfigurations, storage isolation, and advanced XSS chains.

Scope: app.securenotes.io, api.securenotes.io

Program brief →

OpenTelemetry Hub

YesWeHack • Updated 2024-05-20

Top reward €10K

Collector escapes, tenant isolation bugs, and SSRF via exporters.

Scope: *.otelhub.dev

Program brief →