[Mix]

Hack Forum News - Edition 25

Welcome back to the Hack Forum News. Where we keep you up to date on the weekly events and news happening on site and around the world. If you have never heard of the Hack Forum News, don't worry, we have you covered. We are a team of members from the Hack Forums community who are journalists and writers, and we are here to keep you in the loop of the changes around the site and the events happening around the world.

---

Writer - Mix

The Hack Forums Wiki Returns By Mix

The Hack Forums Wiki is back in action and is now under way to a few big changes. The site has been under some work recently as the site was sadly left with a load of issues and no one was running the official site. Thanks to everyone within the HF news team, the site is now under new leadership and, thanks to @Omniscient allowing the team to start their work on this while maintaining the HF news, the site is back getting some lovely changes and getting updated daily to bring it back to a new modern day Wikipedia with a load of information for everyone to read up on.

Hack Forums News Team - Become a Writer By Mix

Are you looking to join the HF news team? Do you enjoy making threads or even want to become a better writer? Well, we are looking for members of the site to help write each week and are looking for anyone who has any interest. We have a few new sections opening up right now, and we would love for you to see if they would be anything of interest to you. If you are interested, please check out the thread or contact Mix to discuss joining the team behind the HF News.

---

Writer - Mix



Last Week:
Spoiler (Click to View)

---

Writer - Mix


Pοιsonlεaf Has obtained the "Quickly Loved" award -
Tyr Has obtained the "SportsBook" award -
@Daniel Rosenfeld@ Has obtained the "King Decade" award -
zavierd Has obtained the "King Decade" award -
Archeery Has obtained the "King Decade" award -
Catfisher Has obtained the "King Decade" award -
v11 Has obtained the "King Decade" award -
serlix Has obtained the "King Decade" award -
TheMTGuy Has obtained the "King Decade" award -

---

Writer - Oh_Well

WHAT ARE LOGS AND HOW TO USE THEM - by leste

This thread dives into what “logs” are in the context of stealer malware – the dumped browser passwords, cookies, sessions, wallets, and more that end up being traded around. OP breaks down the kinds of data you’ll typically find, which countries are considered “high value,” and how people think about monetizing that info. As you’d expect, it’s the kind of topic that lives deep in the grey/illegal zone, and it’s a good reminder that chasing quick money with stolen data comes with serious legal and security risks attached.

Best OS for local LLM? - by Hackers

Hackers throws out a simple question that turned into a solid tech discussion: what’s the best OS for running local LLMs? Linux distros, Windows, macOS with Apple Silicon – everything gets compared. People weigh in with their setups, performance, driver quirks, VRAM needs, and general comfort for dev work. If you’re thinking about building a box (or repurposing a rig) for local AI, this thread is a nice snapshot of what the community is actually using and why.

[Quantum] I gave AI a budget to find and purchase the best Black Friday deals - by Oh_Well

In this one, I hand a chunk of PayPal balance to an AI-powered browser agent and lets it go wild on Black Friday. The AI scans major stores, tracks price history, avoids fake discounts, stacks coupons, and auto-checks out a full shopping list: action cam, helmet intercoms, smart home gear, robot vacuum, air fryer, plus accessories. Final score? Roughly €985 “saved” while I just watched. It’s a fun look at what happens when you combine real money, real stores, and a cold, emotionless optimizer that refuses to fall for marketing tricks.

Whats a Random Skill You Picked Up That Ended Up Helping You Later? - by Axelyn

Axelyn opens up a wholesome reflection thread about “accidental” skills – the random things you learn from a hobby, a side task, or boredom that later turn out to be surprisingly useful. They share how casually learning Canva evolved into a money-saving, small-gig-generating skill for social media graphics. From there, members jump in with their own stories: odd talents that helped them land jobs, start side hustles, solve real-life problems, or just make day-to-day life smoother. It’s one of those threads that makes you rethink all the little things you’ve picked up along the way.

What did you do for Thanksgiving? - by JoshAllen

Even though OP isn’t from the US, they're craving turkey and the cozy family vibe, so they ask the community how they spent Thanksgiving. The thread turns into a chill, feel-good roundup of how members celebrated (or didn’t): family dinners, time off work and solo chill days. It's a nice little snapshot of how different people on HF mark the holiday, whether they're in the States or just vibing with the idea of Thanksgiving from afar.

---

Writer - Chrome

GROUPS FOR SALE AND SOLD

Succubus group is still listed for sale by SecretAchiever101
Olympians group & Benevolence are still listed for sale by Neil

Mystery Inc listed for sale by Scooby


RECENT GROUP CHANGES & EVENTS

xadamxk has been added as leader to Sociopaths


RECRUITMENTS:

Casino Recruitment
Pink LSZ Recruitment
Warriors Recruitment
Gamblers Recruitment
Legends Recruitment
Allegiance Buy-in
Olympians leader recruitment
The Academy Recruitment

---

Writer - Mix

This week starts our Christmas season of music. For the next few editions we will be featuring a few Christmas songs. We wanted to feature more than one song each week but, sadly, we have found, due to the limitations of the site, we are only allowed to feature one song, so we will make sure they are only the best. If you would like to nominate your own, please head over to this thread here. >>Click Here<<

This weeks Song Of The Week:




Big thank you to JoshAllen For this weeks submittion.

---

Writer - Mix

👉🏼 250,000 Bytes Contest - $600 Value 💸💸💸 By @Moooookie

Moooookie is hosting a massive bytes contest for Christmas this year. The Bytes Millionaire themselves has this contest open for upgraded site members, and it will be ending on the 25th of December 2025. Right in time for Christmas this year. Make sure you get your entry.

$15 Crypto Contest | Win free money! | Ends 12th December 2025 By Hazii

The user known as Hazii is hosting a nice giveaway that ends on the 12th of December 2025, and is giving one lucky winner the prize of $15 Crypto. Go and get your entry to have a chance at winning that free money.

Servury Launch Contest - 3 Winners - 20$ Crypto / 30$ Servury Credits By servury

servury is hosting a contest with three lucky winners who can pick between $20 Crypto or $30 Servury credits and the content ends on the 20th of December 2025. That gives everyone plenty of time to get their chance to win some more free money. Good luck everyone.

---

Writer - Mix

Donald J. Trump declares Venezuelan airspace “closed”

US President Trump said that Venezuelan airspace and surrounding airspace should be considered closed. The declaration triggered sharp reactions from Caracas, which called the move “an illegal aggression.”

Source

Black Sea attacks as part of Russia–Ukraine war

Naval drones launched by Ukraine struck Russian oil tankers in the Black Sea, in what Kyiv said targeted sanctioned Russian oil shipments. Meanwhile, Russia carried out drone and missile strikes at several locations across Ukraine, including near the capital Kyiv killing and wounding civilians and causing widespread power outages.

Source

Severe flooding and natural disasters hit Southeast Asia and beyond

Heavy rains and floods have devastated parts of Southeast Asia: in Indonesia and Thailand, flooding and landslides killed hundreds and displaced many more. Several people remain missing as rescue efforts continue.

Source

Ongoing global climate and environmental concerns

Recent scientific analyses show that Europe along with many other parts of the world is facing a serious decline in groundwater reserves due to climate changes. This poses long-term risks for agriculture, ecosystems, and water security.

Source

[Mix]

Writer - MadScientist

GrapheneOS bails on OVHcloud over France's privacy stance


French cloud outfit OVHcloud took another hit this week after GrapheneOS, a mobile operating system, said it was ditching the company's servers over concerns about France's approach to digital privacy.

The project posted on X (formerly Twitter): “We no longer have any active servers in France and are continuing the process of leaving OVH.”

“France isn't a safe country for open source privacy projects,” the group explained. “They expect backdoors in encryption and for device access too. Secure devices and services are not going to be allowed.

“We don't feel safe using OVH for even a static website with servers in Canada/US via their Canada/US subsidiaries.”


Brsk ISP Suffers Major Data Breach Impacting Over 230,000 Customers


Brsk, a UK internet service provider, disclosed a significant data breach in which attackers accessed and exfiltrated a customer database containing more than 230,000 records. The compromised data includes customer names, email addresses, home addresses, phone numbers, installation details, geolocation information, and indicators identifying vulnerable customers. No financial data or account passwords were confirmed stolen. The breach stemmed from unauthorized access to an internal database system, after which the stolen data was listed for sale on a cybercrime forum — raising risks of identity theft, phishing, and targeted social‑engineering attacks.


Bootstrap Script Exposes PyPI to Domain Takeover Attacks


Researchers discovered that legacy “bootstrap” scripts used by various Python packages (via zc.buildout) still reference a long‑abandoned domain — python-distribute.org — to fetch an outdated installer for the discontinued Distribute packaging tool. The domain is currently unclaimed, meaning a malicious actor could purchase it and host arbitrary code. Any developer executing these bootstrap scripts would then unknowingly download and run attacker‑supplied payloads, enabling arbitrary code execution. Affected packages include tornado, pypiserver, roman, slapos.core, xlutils, and others, posing a significant software supply‑chain threat for organizations still relying on outdated bootstrapping workflows.


CISA Flags Actively‑Exploited XSS Vulnerability in OpenPLC ScadaBR (CVE‑2021‑26829)


CISA has added CVE‑2021‑26829 — an XSS vulnerability in OpenPLC ScadaBR’s system_settings.shtm — to its Known Exploited Vulnerabilities catalog after confirming real‑world attacks. The flaw affects Windows builds up to 1.12.4 and Linux versions through 0.9.1. Recent activity linked to the TwoNet hacktivist group shows attackers using this flaw to deface HMIs, disable alarms/logging, and maintain persistence — no privilege escalation required. Any exposed industrial HMI running vulnerable versions is at direct risk of compromise.


Critical JPEG‑Parsing Flaw in Windows Graphics Component (CVE‑2025‑50165) Enables RCE[/b]


A severe flaw in Windows’ JPEG‑decoding library — CVE‑2025‑50165 — allows attackers to craft malicious JPEGs that trigger memory misuse during parsing. When such an image is opened (including via embedded content in documents or email clients), it can lead to remote code execution within the user’s context. A public proof‑of‑concept demonstrates the exploit, making patching urgent. Given that nearly every Windows application relies on the shared graphics subsystem for JPEG handling, the attack surface is massive.


Critical Pre‑Authentication RCE in Oracle Identity Manager (
CVE‑2025‑61757) — Confirmed Exploited[/b]


CVE‑2025‑61757 is a high‑severity pre‑authentication RCE in Oracle Identity Manager’s REST WebServices caused by a missing authentication check in a Groovy compilation endpoint. Attackers can submit malicious Groovy code for execution, enabling full system takeover. Public exploit code exists, and honeypots observed exploitation weeks before Oracle released patches. The vulnerability carries a 9.8 CVSS and poses immediate enterprise‑wide risk. PoC: Yes


Critical Vulnerabilities in Fluent Bit Threaten Cloud Logging Systems Worldwide


Five major flaws impact Fluent Bit:

– Path traversal (CVE‑2025‑12972) in file‑output plugin
– Stack buffer overflow (CVE‑2025‑12970) in Docker input plugin
– Log‑spoofing flaws (CVE‑2025‑12977 / CVE‑2025‑12978)
– Authentication bypass in forward input (CVE‑2025‑12969)

Because Fluent Bit runs across billions of containers and cloud infrastructures worldwide, these vulnerabilities enable attackers to corrupt logs, hide malicious activity, or even achieve code execution. Updated versions 4.1.1 and 4.0.12 address these issues.


Latest High to Critical CVEs


CVE‑2025‑66216 — AIS‑catcher heap buffer overflow enabling large writes into a small buffer; fixed in version 0.64.

CVE‑2025‑65113 — ClipBucket v5 authorization bypass allowing unauthenticated mass‑flagging of content; patched in 5.5.2‑#164.

CVE‑2025‑13783 — SQL injection in WTCMS CommentadminController enabling remote exploitation. Exploit confirmed publicly released. PoC: Yes

CVE‑2025‑66423 — Trytond HTML editor route insufficient access control; fixed in 7.6.11 and corresponding LTS updates.

CVE‑2025‑13615 — StreamTube Core WordPress plugin allows arbitrary password resets if registration password fields are enabled.

Multiple OrangeHRM Vulnerabilities

CVE‑2025‑66289 — OrangeHRM sessions remain valid after disabling users or password changes, allowing persistent unauthorized access.

CVE‑2025‑66224 — OrangeHRM mail‑handling injection enabling file writes and potential code execution.

CVE‑2025‑66225 — OrangeHRM password reset flow allows attackers to set new passwords for arbitrary accounts due to lack of username validation.

---

Writer - ▄︻デ══━一一一一━

Hackers hijack US radio gear to send fake alerts and obscenities
US telecom regulators report that hackers took control of radio transmission equipment and broadcast false emergency alerts along with offensive messages across several stations.
Source

Shai Hulud V2 supply chain attack spreads from NPM to Maven
A new wave of the Shai Hulud campaign expanded from NPM into the Maven ecosystem and compromised many repositories that leaked cloud keys and other sensitive secrets.
Source

Attackers use Blender 3D asset platforms to deploy data stealing malware
Threat actors are distributing malicious Blender resources that install a new version of StealC malware when users open trojanized 3D assets.
Source

Georgia real estate court filing system faces ransomware threat
A ransomware threat forced Georgia officials to halt electronic real estate filings and warn county offices of possible data exposure.
Source

KawaiiGPT malicious AI tool helps low skill attackers craft cyber attacks
Security researchers discovered that KawaiiGPT provides automated phishing templates and malware instructions that make complex attacks easier for new threat actors.
Source

London council cyber attack disrupts major resident services
A cyber attack on a London council IT environment caused phone outages and disabled online services while affecting more than one hundred thousand residents.
Source

ShadowV2 botnet compromises routers and DVRs worldwide
A newly discovered botnet named ShadowV2 has infected a large number of IoT devices and is capable of launching high volume denial of service attacks.
Source

---

Writer - JoshAllen

-1-
Spoiler (Click to View)

-2-
Spoiler (Click to View)

-3-
Spoiler (Click to View)

-4-
Spoiler (Click to View)

-5-
Spoiler (Click to View)

---

A big thank you to all the members who put in the hard workto bring us another edition of HF News this week

Mix Cap Chrome MadScientist Oh_Well JoshAllen ▄︻デ══━一一一一━

---

Support The Team by wearing our signatures

If you have enjoyed the read please consider using one of our signatures in any way to support us!





Red

Code

[align=center][url=https://hackforums.net/forumdisplay.php?fid=2][img]https://hackforums.net/images/hfnews/support-red.png[/img][/url][/align]

Blue

Code

[align=center][url=https://hackforums.net/forumdisplay.php?fid=2][img]https://hackforums.net/images/hfnews/support-gray.png[/img][/url][/align]

Green

Code

[align=center][url=https://hackforums.net/forumdisplay.php?fid=2][img]https://hackforums.net/images/hfnews/support-magenta.png[/img][/url][/align]

Orange

Code

[align=center][url=https://hackforums.net/forumdisplay.php?fid=2][img]https://hackforums.net/images/hfnews/support-brown.png[/img][/url][/align]

Purple

Code

[align=center][url=https://hackforums.net/forumdisplay.php?fid=2][img]https://hackforums.net/images/hfnews/support-magenta-2.png[/img][/url][/align]

[JoshAllen]

Thank you for another great edition! Thank you Mix!

[m0hx]

Thanks for another edition of newwz :O ima read in a bit.

[CL1B]

Thank you for this weeks edition guys

[Axelyn]

Thanks for the mention! Second month in a row and I’m happy to be included. I really appreciate this edition, it’s a great one.

[Hazii]

Thanks for the mention Mix! Good stuff!

[s0lo]

Thanks for what have you done

[Jamika]

Nice version as usual bro , well-done as usual

[JoseMar]

A big thank you to all the members who put in the hard work
to bring us another edition of HF News
Mix Cap Chrome MadScientist JoshAllen ▄︻デ══━一一一一━ Oh_Well

[JoshAllen]

A big thank you to all the members who put in the hard work
to bring us another edition of HF News
Mix Cap Chrome MadScientist JoshAllen ▄︻デ══━一一一一━ Oh_Well

Thank you so much JoseMar You are truly one of a kind.

[RangoWorld]

Thanks for another wonderful news thread. I particularly liked the last comic this time around. Very relatable. DJ playing White noise for everyone. Haha