News Archive
2287 stories · page 25 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
Legacy Lenovo login opens 5,000 Dropbox accounts to attackers
Dropbox has confirmed that approximately 5,000 user accounts were compromised due to an exploit involving a legacy login integration with Lenovo. The cloud storage provider stated that attackers leveraged an issue within Lenovo's email verification process to gain unauthorized access to these accounts.
Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
Manifold Security has reported the discovery of eight security vulnerabilities across seven distinct command-line AI coding agents. The core mechanism of these flaws involves a malicious Git configuration file within a repository, which can instruct the AI agent to execute an arbitrary command on the developer's machine. Four of these identified vulnerabilities remain unpatched at the time of…
Ransomware protection for MSPs: A 6-point checklist for faster recovery
A cybersecurity report identified 143 managed service providers (MSPs), IT service providers, and telecommunication companies as ransomware victims in 2025. Phishing was responsible for 52% of initial access incidents, while unpatched vulnerabilities accounted for 27%. In response, a six-point checklist has been proposed for MSPs to enhance ransomware protection and accelerate recovery.
Your AI chats could be used in court
Conversations with artificial intelligence chatbots are increasingly being sought and used as evidence in legal proceedings, raising concerns about user privacy and the perceived confidentiality of these interactions. Unlike communications with legal or medical professionals, which are typically privileged, exchanges with AI systems like OpenAI's ChatGPT and Anthropic's Claude lack such…
GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
A critical unauthenticated remote code execution (RCE) vulnerability chain has been addressed in GeoNetwork, an open-source geospatial metadata catalog. The flaw, which combines two distinct vulnerabilities, could allow attackers to execute arbitrary code on systems running GeoNetwork without requiring any prior authentication. This issue is particularly significant given GeoNetwork's role as…
Chrome and Firefox Updates Patch Dozens of Vulnerabilities
Recent updates for Google Chrome and Mozilla Firefox have addressed numerous security vulnerabilities, according to reports. The patches collectively resolve dozens of flaws, including critical issues such as use-after-free errors, sandbox escapes, and privilege escalation bugs, enhancing the overall security posture of both widely used web browsers.
Anthropic’s Enterprise Frontier Safeguards lets your Claude logs stay in your cloud
Anthropic has introduced a new security framework called Enterprise Frontier Safeguards, designed to address data retention and privacy concerns for enterprise customers, particularly those in regulated industries. This framework allows organizations to maintain control over their Claude AI activity logs within their own cloud environments, using their own encryption keys and access policies.
An AI CAPTCHA solver talked itself out of the right answer
Researchers at Bern University of Applied Sciences have demonstrated that while large language models (LLMs) can struggle with visual CAPTCHA challenges, their performance can be significantly improved when paired with specialized tools, though some models exhibit an unexpected tendency to override correct answers. The study focused on three types of CAPTCHAs: rotation puzzles, open-circle…
Cops, CrowdStrike disrupt Sality botnet by poisoning the network and diverting into sinkholes
International law enforcement agencies, in collaboration with cybersecurity firm CrowdStrike and the Shadowserver Foundation, have successfully disrupted the Sality peer-to-peer botnet, which has been active for 23 years. The operation, which took place on Monday, September 1, 2026, involved a peer-to-peer sinkhole strategy designed to isolate infected machines and sever the botnet operator's…
Counterfeit installers to system compromise: Tracking a deceptive software download campaign
A new report details an active campaign leveraging counterfeit software installers to achieve system compromise. The campaign reportedly impersonates legitimate software vendors, employing look-alike download pages and regenerated installer archives to distribute malware. Microsoft Defender Experts has shared observations regarding the attack techniques, Defender XDR detections, indicators of…
FBI Probes Service Selling 153M+ Drivers Licenses
The Federal Bureau of Investigation's New Orleans field office has initiated an inquiry into a dark web service, "Nexus," which claims to be selling over 153 million driver's license scans from individuals in the United States and Canada. The service, which emerged on the Russian cybercrime forum Exploit on August 31, 2026, also advertises access to more than 10 million identification cards,…
FBI raises alarm over deceptive phishing campaign targeting prominent people
The Federal Bureau of Investigation has issued a public warning regarding an ongoing and sophisticated social engineering campaign that targets high-profile individuals, their family members, and acquaintances. The campaign, which the FBI has been tracking since late 2025, aims to gain long-term access to victims' accounts on commercial messaging applications and cloud services.
Another Artifactory CVE under attack by AI agents or humans
Attackers are actively exploiting a critical authentication bypass vulnerability in JFrog Artifactory, identified as CVE-2026-82329, mere days after the vendor released a patch for the flaw. The vulnerability, rated 9.8 on the CVSS scale, allows unauthenticated intruders to create administrative tokens on affected servers.
Attackers Pounce on Critical Artifactory Flaw Following Disclosure
Reports indicate that attackers have begun exploiting a critical authentication bypass vulnerability in JFrog's Artifactory repository manager. The flaw, tracked as CVE-2026-82329, reportedly allows unauthorized individuals to achieve administrative access on vulnerable Artifactory instances. This activity follows the public disclosure of the vulnerability, suggesting a rapid weaponization by…
Coast Guard Establishes Office of Maritime Cybersecurity Policy
The United States Coast Guard has reportedly established a new Office of Maritime Cybersecurity Policy. This new entity is designated to function as the central authority for all cybersecurity policy matters pertaining to U.S. ports, vessels, and maritime facilities. The move signifies a consolidation of efforts to address the unique and evolving cyber threats within the maritime domain.
Critical Langflow flaw exploited to steal OpenAI and AWS keys
Threat actors are actively exploiting a critical unauthenticated remote code execution vulnerability, identified as CVE-2026-0768, in Langflow, an open-source framework for building AI applications. The attacks aim to steal credentials, tokens, and various API keys.
Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
Threat actors are actively exploiting a recently disclosed critical security flaw in JFrog Artifactory, according to a report from watchTowr. The vulnerability, identified as CVE-2026-82329 with a CVSS score of 9.8, is an authentication bypass issue that could allow attackers to gain administrative access to Artifactory instances. This exploitation is occurring mere days after the public…
Hackers push malicious Virtualizor update in BGP hijacking attack
Softaculous, the developer of the Virtualizor VPS management software, has confirmed that a BGP hijacking attack allowed threat actors to deliver malicious updates to a limited number of Virtualizor installations. The incident occurred between August 28, 20:57 UTC, and August 30, 06:10 UTC, when attackers rerouted a block of Hetzner-hosted IP addresses associated with Softaculous's update…
Attackers Steal METR API Key and Burn $600,000 in AI Credits
The AI safety research organization METR has disclosed two separate security incidents, one in March and another in May, neither of which resulted in evidence of sensitive information access. The more significant event involved attackers stealing an API key and using it for three weeks to consume approximately $600,000 worth of AI model credits, which had been provided free of charge by an…
Novocure data breach affects more than 1,400 cancer patients
Novocure, a global oncology company specializing in Tumor Treating Fields (TTFields) therapy, has confirmed a data breach affecting more than 1,400 U.S. cancer patients and an undisclosed number of employees. The company disclosed the incident in a filing with the U.S. Securities and Exchange Commission (SEC), stating that unauthorized access to some of its information systems was discovered…
The Collective Cyber Defense letter wrote your next vendor questionnaire
A recent report highlights a letter, signed by over 200 companies, that outlines key metrics for enhancing cyber defenses, particularly in the context of artificial intelligence. The letter, dated August 27, reportedly includes specific criteria that signatories are endorsing under their respective corporate logos. These criteria are presented as potential benchmarks for evaluating vendor…
Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild
Reports indicate that a critical authentication bypass vulnerability affecting JFrog Artifactory, identified as CVE-2026-82329, is actively being exploited in the wild. This exploitation reportedly began mere days following the public disclosure of the flaw.
Rewiring Democracy Series on The Renovator
A new essay series, "Rewiring Democracy," is exploring real-world applications of democratic technologies, with the latest installment focusing on civic AI initiatives in Scotland. The series, co-authored by Nathan E. Sanders, is published on The Renovator.
Bot detection arrives in CrowdSec 1.8.0, along with two DoS fixes
CrowdSec has released version 1.8.0 of its open-source security engine, introducing new bot detection capabilities for its web application firewall (WAF) component and addressing two denial-of-service (DoS) vulnerabilities in its log acquisition datasources. The update, which became available on August 31, also includes improvements for Kubernetes integration and performance enhancements.