Midnight Web by Rahul Banerjee

MEERUT,India  The website belonging to the Meerut Development Authority (MDA) in Meerut has been defaced recently following an attack by some anonymous threat actors that resulted in the defacement of the government-run website with anti-India and pro-Pakistan messages. Those attempting to visit the MDA website recently were met with a black screen with political slogans, instead of visiting the normal interface of the website offering services like construction approval, announcements, etc. The attackers have also revealed their identity through the defacement of the site, with "Overthrush1337" being the name used by them. This is obviously a typical case of website defacement in which the attackers gain access to the web server and deface it to make changes to the content available on the website. Attack Timeline Initial Compromise and Defacement of Website Based on preliminary reports, it appears that the hackers could have taken advantage of an unpatched vul...

Recently, attackers took over high-profile Instagram accounts, including the official Obama’s White House account and a United States Space Force chief officer. The attacker didn't break any Instagram code or crack passwords. They convinced Meta's own AI support chatbot to hand over the accounts. Meta uses an AI-powered support chatbot to help users recover locked accounts, change recovery emails, and handle account issues. The chatbot is trained to verify identity through questions and decide whether a request looks legitimate. Attackers figured out how to manipulate that decision making process. Video Credit-  x.com/chetaslua The attack consists of four main steps. Step 1: The attacker contacts Meta's AI support chatbot claiming to be the legitimate owner of a target account. They simply use Instagram's help interface and start an account recovery conversation. For high-profile targets, attackers use publicly available information such as display names, profile bios, ...

  A new wave of malicious iOS applications has been uncovered on Apple’s App Store, disguising themselves as legitimate cryptocurrency wallets to steal users’ sensitive data. The campaign, identified by cybersecurity researchers at Kaspersky and dubbed FakeWallet , has reportedly been active since at least late 2025. According to the findings, at least 26 fraudulent apps were distributed through the platform, impersonating popular crypto wallet services. These apps used cloned logos, familiar branding, and slight variations in names to appear authentic and rank in search results. Their primary goal was to trick users into entering their recovery phrases critical credentials that grant full access to cryptocurrency funds. The campaign appears to have been particularly active in regions like the Chinese App Store, where restrictions on official crypto apps create a gap that malicious actors can exploit with convincing imitations. Fake website impersonating Ledger Source: Kaspersky Af...

  I am going to break down the story of a tool that I'm willing to bet you've used, but whose incredible business journey you probably know nothing about. Honestly, this is a master class for any founder looking to build something valuable from scratch. I am calling it the Bootstrapper’s Playbook. A Wild Reality Check Let’s just start with a wild fact. There's a website out there, a deceptively simple one, that in places like India pulls in more traffic than Amazon. I'm serious. Millions and millions of people rely on it every single day. Any guesses? It's iLovePDF. If you've ever needed to quickly merge, split, or compress a PDF file, you've almost definitely landed on this site. But what most people have no idea about is how this massive global platform was built. And that is where the real story begins. Born from Frustration So, let's go all the way back to the beginning. Because this whole thing wasn't born from some grand business plan or a fanc...

In a move that signals a major shift in the artificial intelligence race, Anthropic has unveiled Claude Mythos its most powerful AI model to date. But unlike previous releases, this one comes with a surprising twist: the public can’t use it. Instead, the company has locked the model behind restricted access, offering it only to a small group of partners focused on cybersecurity. The decision highlights a growing reality in the tech world AI is becoming so powerful that open access is no longer always the safest option. A Leap Forward in AI Power Claude Mythos represents a significant jump in capability over earlier models. According to Anthropic’s system report, it excels in complex reasoning, software engineering, and advanced research tasks. In some areas, it even approaches expert-level performance. What stands out most is its ability to operate across domains analyzing code, synthesizing scientific research, and solving multi-step problems with remarkable efficiency. Fo...

Who Is Handala? Handala (also stylized as Handala_hack) first appeared on December 18, 2023, launching both its Telegram channel and X/Twitter account simultaneously. The most recent major attack linked to Handala happened on March 11, 2026, targeting the U.S. medical technology company Stryker. What happened? Handala claimed responsibility for a destructive cyberattack on Stryker’s global systems. The attack disrupted internal networks and Microsoft systems, leaving many employees unable to access devices. The group said the attack was retaliation tied to the ongoing Iran U.S. Israel conflict. Impact Handala claimed it: Wiped over 200,000 devices Stole up to 50 TB of data The company experienced global operational disruption, affecting multiple countries. The FBI this week seized two domains operated by Handala one used as a data leak site and another allegedly used to target individuals with possible links to Israeli defense contractors. Both domai...