Netcrook
31 July 2026
Mobile Core Blind Spots: 84 Flaws Put 4G and 5G Trust Logic Under the Microscope
A new academic disclosure turns attention away from the radio layer and toward the control systems that manage mobile-network signaling, authentication, and sessions.
Cheap TV Boxes, Expensive Lies: The Android Identity Trick Behind a Proxy-for-Hire Scheme
A cluster of low-cost Android TV boxes appears to have been used for two kinds of abuse at once: pretending to be popular phones for ad fraud, and turning household broadband into proxy infrastructure.
Rebuilding a Console’s Beating Heart: The Push to Recreate a PlayStation Motherboard
A reproduction PlayStation motherboard points to a simple but stubborn problem in aging hardware: once the board is badly damaged, repair often depends on making a new one.
When a Single Chat Command Became an Attack Workflow
A reported Telegram instruction, an open-source agent framework, and a tool-calling model formed a chain that may have let one session move from conversation to exploit selection with little human steering.
Hikvision Access Points Put the Admin Layer Under a Microscope
A high-severity flaw in some Hikvision wireless access points shows how a single authenticated path can become a device-control problem if input handling slips.
BlackTech Links BlueShell to a Fresh Linux Foothold in Japan-Focused Operations
A public-source RAT can become a quiet post-compromise tool when operators reshape it for Linux environments and long-haul access.
The Fake Kernel Thread That Could Fool a Linux Admin
A reported BlueShell variant hides behind a kworker-style name on Linux, turning process masquerade into a stealth tool for post-compromise access.
When a Fake Mac Update Meets Blockchain Hiding, the Malware Trail Gets Harder to Kill
A ClickFix-style lure, EtherHiding infrastructure, and a reported DPRK-linked wallet trail show how one operation can blend social engineering, resilient delivery, and on-chain tracing.
On-Chain Dead Drops: How a Blockchain Channel Turned macOS Malware Harder to Unravel
A DPRK-linked cluster is reported to be using Ethereum smart contracts as a resilient command path, showing how public blockchain data can be repurposed into malware infrastructure.
When an AI Agent Becomes the Operator: The New Risk Hidden in Terminal Access
A reported DeepSeek-and-Hermes attack stack is a reminder that the most sensitive security question is no longer what a model can say, but what an agent is allowed to do.
Shared Servers, Not Shared Certainty: The OctLurk Trail Into Central Asia
A reused C2 backend tied to TrustFall, MystRodX, and SilentRaid turns this case into a lesson on how infrastructure overlap can reveal a campaign without proving who ran it.
Inside the Brainstem: Why a Tiny Map Can Change a Big Conversation
Indian scientists have produced a notable new map of the brainstem, a compact region whose role is vital even though parts of its function remain incompletely understood.
South Korea’s Telecom Fine Signals a Bigger Battle Over Subscriber Data
A KRW 53.979 billion penalty against KT Corporation puts privacy governance, breach handling, and telecom data risk under a harsher spotlight.
When One Forgotten Chip Decides Whether a Machine Lives or Dies
A Betacam SP tapedeck was kept running by rebuilding an obsolete integrated circuit, a reminder that long-lived hardware often depends on parts no catalog still carries.