u/Silly-Commission-630

Looking for a good family friendly spot in northern Israel where we can camp in our own tents with the kids.

Any recommendations?

Crypto exchange Bybit has filed a civil lawsuit against North Korea, its Reconnaissance General Bureau (RGB), and the state-linked Lazarus Group over the massive February 2025 cyberattack.

The attackers allegedly stole approximately $1.5 billion in Ethereum, making it one of the largest cryptocurrency thefts ever recorded. Bybit has now secured a preliminary injunction freezing certain stolen digital assets, preventing identified holders from transferring or selling them while the case continues.

North Korean hackers have been linked to billions of dollars in cryptocurrency thefts over the years, with stolen crypto widely believed to help finance the country's weapons programs. This case adds another layer to the fight against state-sponsored cybercrime using civil courts alongside blockchain tracing, sanctions and law enforcement to freeze and potentially recover stolen assets.

r/SECITHUBCOMMUNITY Cybersecurity news, incidents and breaches explained with context and impact. Share your insights.

Uber Freight confirmed unauthorized access to part of its systems and repositories, but says the incident has been contained and business operations remain unaffected.

A hacking group calling itself Helix claims it obtained nearly 1 million files from Uber Freight. The company has not confirmed whether the published data is authentic. Helix has been linked to a wave of extortion attempts targeting major U.S. companies and financial institutions.

r/SECITHUBCOMMUNITY Cyber incidents and data breach news explained with context and impact. Share your insights.

During Delta flight 591 from Las Vegas to Atlanta, an unauthorized Wi-Fi network reportedly appeared onboard for a short period. Delta says no aircraft systems were hacked and flight safety was never affected. The crew disabled the aircraft’s Wi-Fi for around 30 minutes while the issue was investigated.

The concern is that the rogue network may have been an evil twin a fake access point designed to mimic a legitimate Wi-Fi network and trick users into connecting through it. That can potentially expose credentials, session data, or other sensitive traffic depending on how the victim connects and what protections are in place.

r/SECITHUBCOMMUNITY Cyber incidents and data breach news explained with context and impact. Share your insights.

Recent cybersecurity evaluations have exposed a worrying pattern.. frontier AI agents have repeatedly gained unintended internet access and taken actions beyond what testers expected.

In separate incidents, AI systems accessed public services, exploited real vulnerabilities, compromised external organizations, uploaded malicious packages, created fake identities, and interacted with production infrastructure. In several of these cases, the root cause was not a sophisticated “AI escape,” but something much more familiar: misconfigured test environments and weak containment.

As AI agents become more autonomous and more capable of executing cyber tasks, securing the model itself is only part of the challenge. The surrounding environment network access, sandboxing, credentials, permissions, and external connectivity needs to be treated with the same level of rigor.

Thee future of AI security may depend less on controlling what the model wants to do, and more on making sure it simply cannot do anything outside its intended boundaries.

r/SECITHUBCOMMUNITY Cyber incidents and data breach news explained with context and impact. Share your insights.

OpenAI has expanded its Daybreak cybersecurity program and introduced GPT-5.6-Cyber, a specialized model for advanced, authorized security work.

Unlike the standard GPT-5.6 Sol model,GPT-5.6-Cyber is designed to respond to far more advanced cyber requests, including exploit-chain development, authentication bypass, privilege escalation and vulnerability research. OpenAI says it completed 95% of advanced cybersecurity requests in internal testing, compared with just 1.5% for the standard model.

Access is restricted to vetted defenders through Daybreak Red, while broader defensive workflows remain available through Daybreak Blue.

r/SECITHUBCOMMUNITY Cyber incidents and data breach news explained with context and impact. Share your insights.

Attackers breached a Polish combined heat and power plant through a private cellular APN used to access remote infrastructure.

After pivoting from a compromised wind-farm network, they reached the plant’s OT environment, where a controller was still using default admin credentials. The attackers ultimately put multiple Siemens PLCs into STOP mode, shutting down a steam turbine and process-water treatment system.

The interesting part no malware was required. The attackers abused legitimate device functions and existing industrial protocols. Despite the disruption, the plant continued supplying heat and electricity to roughly 50,000 residents.

r/SECITHUBCOMMUNITY Cyber incidents and data breach news explained with context and impact. **Share your insights.**

Unlimited Technology, a software provider serving around 6,500 U.S. healthcare organizations, has disclosed a major data breach affecting approximately 3.8 million people. Attackers reportedly accessed the company’s network for about five days in October 2025, reaching files containing sensitive patient information.

Exposed data may include names, Social Security numbers, dates of birth, IDs, health insurance information and medical data, including diagnoses. Another reminder of how a breach at one healthcare technology provider can create exposure across an entire ecosystem.

r/SECITHUBCOMMUNITY Cyber incidents and data breach news explained with context and impact. Share your insights.

Levi Strauss & Co. disclosed that attackers used social engineering against three employees, gaining access to their corporate computers and stealing data.

Levi’s says it detected and stopped the intrusion before customer data was exposed, with no material impact on business operations. Another reminder that attackers don’t always need a zero-day. Sometimes, people are the entry point.

r/SECITHUBCOMMUNITY Cyber incidents and data breach news explained with context and impact. Share your insights.

I'm hoping to get some advice from people who've actually done this. My website is built on WordPress, hosted on Hostinger, and designed with Elementor. Over time, it has quite a few plugins, and it's become clear that it needs much more than a few cosmetic changes.n. I'm wondering whether Codex is the right tool for a project like this.

Has anyone successfully used Codex to work on an existing WordPressand Elementor website? Can it reliably handle redesigns, content restructuring, styling, and pluginsrelated changes, or does it struggle with that kind of environment? I'd really appreciate hearing from anyone with real-world experience what worked well, what didn't, and any recommendations or best practices before I dive into such a large project.

I don’t come from a technical background, but I never thought I’d enjoy building things this much., It’s crazy how easily everything connects now....Codex, GitHub, Vercel, Firebase and suddenly you have a working product without spending much, if anything. Building agents is starting to feel like a game. You get an idea, build a quick version, tweak it, see it work… and immediately want to build the next one. Where do you think this whole agent world will be in 4–5 years? It feels like almost any idea can become a real tool now, and anyone who’s even a little technical knowledge can build an agent for less than a day. The speed of it all is a bit scary.