❌

Normal view

Received yesterday — 25 March 2026 ⏭ Security

LeakBase Admin Arrested in Russia Over Massive Stolen Credential Marketplace

✇The Hacker News
By: Ravie Lakshmanan
25 March 2026 at 17:35
The alleged administrator of the LeakBase cybercrime forum has been arrested by Russian law enforcement authorities, state media reported Thursday. According to TASS and MVD Media, a news website linked to the Russian Interior Ministry, the suspect is a resident of the city of Taganrog. The suspect is said to have been detained for creating and managing a criminal site that allowed stolen

Our first pentest on a 100% Vibe coded application : analysis & feedback

✇/r/netsec - Information Security News & Discussion
By: /u/Hackmosphere
25 March 2026 at 16:07

We pentested a web app built 100% with AI — no human-written code. Functional, clean, well-structured. But security-wise, we found critical issues on day one: LFI, IDOR, vulnerable dependencies, and more.

AI-generated code is not secure by default. And vibe coding moves fast enough that security gets skipped entirely.

Full writeup with technical details and recommendations: https://www.hackmosphere.fr/en/?p=3803

Anyone else seeing this pattern in AI-generated apps?

submitted by /u/Hackmosphere
[link] [comments]

GlassWorm Malware Uses Solana Dead Drops to Deliver RAT and Steal Browser, Crypto Data

✇The Hacker News
By: Ravie Lakshmanan
25 March 2026 at 14:26
Cybersecurity researchers have flagged a new evolution of the GlassWorm campaign that delivers a multi-stage framework capable of comprehensive data theft and installing a remote access trojan (RAT), which deploys an information-stealing Google Chrome extension masquerading as an offline version of Google Docs. "It logs keystrokes, dumps cookies and session tokens, captures screenshots, and

❌