SECURITY 15 | Oton Technology

CVE-2026-2005 PostgreSQL pgcrypto remote code execution exploit now public.

Public PoC Drops for 20-Year PostgreSQL pgcrypto RCE Flaw

A working proof-of-concept exploit for CVE-2026-2005 is now public, and the flaw it targets is a heap-based buffer overflow in PostgreSQL’s pgcrypto extension built on code...

South Korea SIM fraud hacking syndicate arrest 48 billion won cybercrime 2026.

NEWS2 months ago

South Korea SIM Fraud Ring Targeted Prisoners, Soldiers, and the Dead

South Korean police on Thursday announced the arrest of the second and final suspected ringleader of a hacking syndicate that stole 48.4 billion won ($31.9 million)...

DevilNFC Android NFC relay malware targets European and Latin American banking customers.

NEWS2 months ago

DevilNFC Targets European Banks as Chinese NFC Relay Monopoly Falls

For most of 2024 and into 2025, the business of NFC relay fraud ran through Chinese-controlled infrastructure. Malware-as-a-Service (MaaS, a subscription model that packages attack tooling...

Tenable Hexa AI agentic security platform automates remediation across enterprise attack surfaces.

NEWS2 months ago

Tenable Hexa AI Goes Live as AI Shrinks the Exploit Window to Minutes

Frontier AI models can find a software flaw and convert it into a working weapon in minutes. On May 20, Tenable Holdings (NASDAQ: TENB) announced the...

YellowKey BitLocker bypass CVE-2026-45585 leaves Windows 11 drives exposed without a patch.

NEWS2 months ago

YellowKey Bypass Hits BitLocker With No Patch and a Public Exploit

On May 12, a security researcher known online as Nightmare-Eclipse released working exploit code for a Windows BitLocker bypass that needed nothing more than a prepared...

THORChain emergency halt mechanism after $10.8 million GG20 vault exploit in May 2026.

CRYPTO2 months ago

THORChain’s 13-Hour Halt Caught a $10.8M Vault Drain Cold

THORChain’s cross-chain swap engine sat dark for nearly thirteen hours on May 15, after a newly seated validator quietly fed enough cryptographic material out of the...

Crypto seizures in 2025 show stablecoin enforcement power.

CRYPTO2 months ago

Crypto Seizures Hit 11% as Stablecoin Enforcers Gain Power

Crypto seizures reached roughly 11% of illicit volume in 2025, according to Binance Research, a claim that flips the usual crime narrative around public blockchains. The...

Smartphone displaying a fragmented WhatsApp threat message beside a US Marine helmet outline under red warning glow

NEWS3 months ago

Iran’s Handala Hackers Dox 2,379 Marines Across the Persian Gulf

The Iran-linked Handala Hack Team published what it described as the names and phone numbers of 2,379 US Marines stationed in the Persian Gulf on April...

BTS Jungkook hacking ringleader extradited from Thailand in $25.5M Korea cybercrime case.

NEWS3 months ago

BTS Jungkook Hack: $25.5M Cybercrime Kingpin Extradited From Thailand

South Korea brought home the second mastermind of a hacking syndicate that drained roughly $25.5 million from the country’s wealthiest accounts, the Ministry of Justice confirmed...