A hacking group called Leakers$ says it took control of digital advertising screens by exploiting weaknesses in software used to send content to LED displays. The claim followed an October 29 incident in which sexually explicit footage appeared on a large billboard beside Giza’s 26 July Corridor, prompting authorities to suspend roadside advertising displays and investigate. The group says an automated scan lasting about two hours found thousands of exposed systems, including in Malaysia, Brazil, China and Iraq, and that the operation targeted vulnerable infrastructure rather than Egypt specifically. It described the intrusion as relatively simple and intended to expose poor security, not extort money. However, it offered no technical evidence establishing whether the flaw was an unknown vulnerability or access to inadequately protected systems.
The billboard was operated by Arabian United, a joint venture involving United Media Services (UMS), a media conglomerate linked to Egypt’s General Intelligence Service, and Saudi advertising company Arabian Contracting Services. Egypt’s Interior Ministry said an international advertising company’s website had been hacked, but did not name it or explain how that breach enabled control of the screens. Arabian United acknowledged unauthorized access and said it had suspended the billboard and was investigating. The incident raises questions about security responsibilities across the operator, contractors and software providers: the Saudi partner’s Egyptian subsidiary manages 1,926 billboards, including 239 digital screens, while public rules focus on advertising content and morality. Authorities have not disclosed what cybersecurity standards apply, whether the network was assessed, or who must audit its systems.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
CVE-2026-98432 is a critical Linux IPv4 TCP handshake use-after-free, remotely exploitable without authentication and potentially allowing root command execution on servers with multipath TCP listeners. Upstream fixes are available, but Ubuntu and RHEL had not yet shipped patched kernels as of October 29, 2026. (atlasum.net)
Colin Percival discovered that Intel Hyper-Threading could leak cryptographic secrets and developed an exploit to recover an RSA key. He argues scholars who find security flaws should coordinate quietly with affected teams so patches are ready before public disclosure. (daemonology.net)
Binance says it has covered 90% of the $6.3 billion in cryptocurrency stolen in a hack and will absorb the losses rather than pass them to users. It has set aside more than $6.34 billion and says sourcing the remaining assets may take longer. (bbc.com)
Plymouth canceled its Flock license-plate camera contract after the system wrongly tracked a couple, but the company did not respond to removal requests. The police chief disconnected the cameras’ power to ensure they stopped recording vehicles. (thedrive.com)
VOLTA infostealer steals credentials, financial data, and personal details, then sends an evidence bundle to an LLM to rank victims by potential value. If a model refuses, the malware tries a chain of other models, making AI a key part of its intelligence-gathering workflow. (blog.talosintelligence.com)
Cybersecurity startup Cathedral accessed Anthropic’s internal systems in under 12 hours during an authorized security test, exposing employee details, salary information, job offers and internal messages. Its AI agents found weaknesses in business software and accessed meeting transcripts and Slack conversations. (indiatoday.in)
Today's best Hacker News stories, summarized and screenshotted, one email a day.