The "Oh hey look who got hacked today" thread!

[Tomiko]

Hasbro

April 1 (Reuters) - Toymaker Hasbro (HAS.O), opens new tab said on Wednesday it ​was investigating a cybersecurity incident ‌after identifying unauthorized access to its network on March 28, with ​help from third-party cybersecurity ​professionals.

[Ragns]

Claude accidentally posted their entire source code during an update and now it's all over the internet for free; someone rewrote it from scratch so their version isn't subject to DMCA strikes and is presumably available forever.

Sent from my SM-S938U using Tapatalk

Found in the leak:

[Outlaw]

But it's ok they told it NOT to do that.

[brozy]

has real



energy to it.

[6souls]

Crunchyroll, 1.2M user records (100GB) consisting of emails, IP, & credit card data. Data was taken via an Indian partner. 1 person is said to have purchased the trove.

[Ragns]

https://cybernews.com/security/cpuid...liver-malware/

TLDR: If you recently downloaded CPU-Z, HWMonitor, PerfMonitor or powerMAX from CPUID website, it might have stolen your Chrome saved credentials.

[Outlaw]

Oh damn. Good thing I haven't updated those in a long time. Not like I use Chrome anyway though. Sucks they got compromised.

[Davorin]

Ransomware attack on Canvas (Instructure)
https://www.reddit.com/r/canvas/comm...ort=confidence

Finals week next week for me, but so much to do still.

[6souls]

https://x.com/github/status/2056884790553653750

[Outlaw]

Whoa. This could be bad.

Oh wait! It already is!

Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems. Security experts said the public archive included files detailing how CISA builds, tests and deploys software internally, and that it represents one of the most egregious government data leaks in recent history.

One of the exposed files, titled “importantAWStokens,” included the administrative credentials to three Amazon AWS GovCloud servers. Another file exposed in their public GitHub repository — “AWS-Workspace-Firefox-Passwords.csv” — listed plaintext usernames and passwords for dozens of internal CISA systems. According to Caturegli, those systems included one called “LZ-DSO,” which appears short for “Landing Zone DevSecOps,” the agency’s secure code development environment.

https://krebsonsecurity.com/2026/05/...eys-on-github/

[Melena]

Riots vanguard anti cheat will now brick your computer if you are using a firmware hack to hide your cheats.

Riots response. Enjoy your 6000 dollar paperweight.

https://www.pcgamesn.com/valorant/va...-riot-response

Sent from my SM-S928U using Tapatalk

[Krandor]

While no anti cheat should be able to brick someone's computer, I kinda respect how blunt they're being about it.

[Shenrien]

Smells like lawsuit for damages.

[Lyltia]

No way does their terms of service allow them to be held liable for damages over this.

[Krandor]

To get the cheat/hack to work they're disabling a feature in Windows to prevent it from booting if the OS detects insecure drivers/firmware. I'm sure there's some legal loophole there that leaves Riot in the clear.

[Melena]

No way does their terms of service allow them to be held liable for damages over this.

A lot of TOS are illegal. It's just finding a lawyer to fight the terms.

Also can't wait for the first false positive bricking.

Sent from my SM-S928U using Tapatalk

[Lyltia]

Also, idk why I’m so annoyed about this but, if your computer gets bricked it’s not the sort of thing an OS install will fix. It’s “bricked” because it’s just a heavy rectangular object. In no sense does the word brick have anything to do with “it needs a factory reset”. Nobody factory resets bricks!

[Meresgi]

To get the cheat/hack to work they're disabling a feature in Windows to prevent it from booting if the OS detects insecure drivers/firmware. I'm sure there's some legal loophole there that leaves Riot in the clear.

They're disabling secure boot? I mean if they are installing insecure drivers/firmware to their hardware and it bricks...whelp that's on them if they are 3rd party firmware/drivers. If they are manufacturer drivers then different story. If It's just disabling secure boot without actually doing anything else then it's another story. I'm not familiar with the cheat tool landscape nowadays and everything going into it but yeah if you're custom modding your hardware with 3rd party shit and it bricks then that's 100% on you. However if the software/anticheat from a company is bricking your system that's a messy legal battle. Like Symantec and other bullshit AV and tons of anti cheats are way too deep kernel level at this point for the "security" they give.

[arus2001]

No way does their terms of service allow them to be held liable for damages over this.

I feel like at some point Windows got in trouble for bricking peoples' PCs for trying to run pirated copies. If that's the case, I don't see how Riot has any chance of getting a free pass.

[Outlaw]

with complaints about its kernel-level access.

https://media0.giphy.com/media/v1.Y2...HdMk/giphy.gif