// all articles

HackDecoded Blog

Breach autopsies, threat breakdowns, and privacy guides — plain English, no jargon.

ALLDATA BREACHESPRIVACYAI THREATSVULNERABILITIESSCAMS
Your GitHub Repo Got a Fake Security Audit That Stole Your API Keys
VULNERABILITY4 min read

Your GitHub Repo Got a Fake Security Audit That Stole Your API Keys

A campaign called GhostAction planted a fake 'security audit' workflow in thousands of GitHub repos, silently draining API keys, cloud credentials, and AI secrets.

2026-10-10T08:02:38.289869+00:00READ →
One Hacked Email Tool Weaponized 100,000 Websites Against Their Own Visitors
VULNERABILITY5 min read

One Hacked Email Tool Weaponized 100,000 Websites Against Their Own Visitors

Hackers hijacked Brevo, a popular email platform, and for 5 hours every visitor to 100,000+ business websites was shown a fake security prompt built to install malware.

2026-09-24T08:03:29.185581+00:00READ →
Your Google Pixel Can Be Silently Hacked From a Nearby Network: Here Is the Fix
VULNERABILITY5 min read

Your Google Pixel Can Be Silently Hacked From a Nearby Network: Here Is the Fix

A flaw in Google Pixel's cellular modem was actively exploited before a patch existed — and attackers needed zero clicks from you to break in.

2026-09-21T08:02:30.975064+00:00READ →
160,000 Online Stores Were Hacked This Week, Even the Fully Patched Ones
VULNERABILITY5 min read

160,000 Online Stores Were Hacked This Week, Even the Fully Patched Ones

A zero-day rated a perfect 10.0 severity let hackers secretly take over online stores, including ones with every security update applied. A patch is now out.

2026-09-10T08:03:09.425434+00:00READ →
Fake Job Offer PDFs Are Installing a Windows Rootkit That Disables Your Security Software
VULNERABILITY5 min read

Fake Job Offer PDFs Are Installing a Windows Rootkit That Disables Your Security Software

North Korean hackers sent fake job offer PDFs to plant a hidden Windows rootkit — it ran undetected for 5 weeks by disabling the security tools meant to catch it.

2026-08-22T08:03:32.561652+00:00READ →
Google Patches Actively Exploited Android Zero-Day Vulnerability
VULNERABILITY4 min read

Google Patches Actively Exploited Android Zero-Day Vulnerability

A critical Android flaw is being actively exploited right now. If your phone runs Android 14, 15, or 16, you need to update today.

2026-06-09T22:29:42.568754+00:00READ →
Opening One Email in Microsoft Exchange Can Hand Hackers Your Entire Account — And There's Still No Fix
VULNERABILITY5 min read

Opening One Email in Microsoft Exchange Can Hand Hackers Your Entire Account — And There's Still No Fix

A zero-day in Microsoft Exchange's webmail interface is being actively exploited with no permanent patch. Opening a malicious email in your browser is enough. CISA ordered federal agencies to patch by May 29.

2026-06-06T14:00:46.165347+00:00READ →