News Archive
2287 stories · page 27 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
Rhysida Ransomware Group Targets Berlin Government Ahead of Vote
The Berlin state government is currently managing an extortion attempt by the Rhysida ransomware group, which claims to have stolen 5.79 terabytes of data from the city-state's administrative network. This incident comes just weeks before Berlin's state parliament elections on September 20.
The Cybersecurity Apocalypse Is Coming in ‘Months,’ AI Giants Warn
A coalition of over 100 technology companies, including prominent AI developers OpenAI and Anthropic, has issued a stark warning regarding the imminent threat of AI-enabled cyberattacks, stating that organizations have only months to prepare. The companies co-signed a letter urging a "collective response" to this emerging threat, emphasizing the need for robust cyber defense to become an…
Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator
A suspected Chinese-speaking threat actor has reportedly breached a Philippine nuclear research body and a marine engineering company that provides services to the Philippine Navy, exploiting known vulnerabilities in internet-facing systems to exfiltrate sensitive data. The activity was uncovered by Hunt.io Attack Capture, which identified an exposed server in Amsterdam containing attack…
TerminalFix campaign deploys a reverse tunnel through multistage intrusion
A new cyber campaign, dubbed TerminalFix, has been reported to be actively targeting organizations through a sophisticated, multi-stage intrusion process. This campaign, identified as a variant of the previously known ClickFix operation, primarily relies on social engineering to initiate the attack chain, specifically by deceiving users into executing malicious PowerShell commands. The initial…
[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI
A recent virtual event focused on the critical considerations for enterprises securing cloud assets, particularly in the evolving landscape shaped by artificial intelligence. The discussion aimed to equip technical professionals with insights into the unique challenges and strategies required to protect cloud environments when AI technologies are increasingly integrated into operations and…
[Virtual Event] Building a Secure AI Strategy for the Enterprise
A recent virtual event focused on the critical aspects of building a secure artificial intelligence strategy within enterprise environments. The discussion centered on the multifaceted challenges and necessary considerations for organizations looking to integrate AI responsibly and securely into their operations. This topic is gaining increasing prominence as AI adoption accelerates across…
McKesson discloses breach after ShinyHunters claims patient data theft
McKesson, a major U.S. healthcare and pharmaceutical distribution company, has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data exfiltration. The ShinyHunters extortion group has claimed responsibility for the attack, asserting that it stole approximately 284 million patient data records.
Perturbation Probing: A New Diagnostic for the Fragility of LLM Safety
Researchers have developed a new diagnostic method, "perturbation probing," that can identify the specific neural pathways responsible for safety behaviors in large language models (LLMs). This technique, detailed in an academic paper on arXiv titled "Perturbation Probing: A Two-Pass-per-Prompt Diagnostic for FFN Behavioral Circuits in Aligned LLMs," reveals that LLM safety mechanisms are…
Berlin Refuses to Pay Hackers Who Stole Data From the City's State Network
The city of Berlin's state government has publicly confirmed it is the target of an extortion attempt following a network compromise in August. Officials stated they would not comply with the attackers' demands. The same announcement revealed that forensic analysis of the incident uncovered additional data exfiltration specifically from the portfolio of the Senate Department for Mobility,…
Researcher shows how Claude Code can be tricked simply by asking it to summarize a website
A security researcher has demonstrated a method to trick Anthropic's Claude Code, specifically the Opus 5 model running in Auto Mode, into executing arbitrary code by simply asking it to summarize a malicious website. The attack, detailed by Johann Rehberger, also known as wunderwuzzi, reportedly has a success rate of up to 80 percent.
Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable
A significant vulnerability within the Cosmos EVM module was reportedly exploited, leading to the draining of funds from six distinct blockchains. The attacks occurred between August 20 and August 25, 2026, targeting a flaw that Cosmos Labs was aware of prior to the incidents. The issue was specifically linked to the handling of balances within vesting accounts, a critical component for…
ATF confirms cyberattack hit system containing info on its investigation targets
The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) confirmed this week that it experienced a cyberattack affecting a standalone system that contained information on targets of its investigations. The agency stated that the incident was isolated and did not impact its critical operations or other internal systems.
Hundreds of OpenAI Agents Invaded Hugging Face Servers
Reports indicate that Hugging Face servers were subjected to a sophisticated, multistage attack involving approximately 700 distinct agents. The scale and complexity of this incident are described as being more significant than initial assessments suggested.
Love Electric Breach: 877,000 Driver Records Offered for $600
A data breach allegedly affecting Love Electric, a UK-based electric vehicle salary sacrifice scheme provider, has led to a threat actor offering 877,000 driver records for sale on an English-language data-breach forum. The seller, identified as "seraphims," posted the listing on August 26, offering the dataset for $600 in cryptocurrency, with the price negotiable.
PaperCut releases second emergency patch for exploited flaws
PaperCut has issued a second emergency security update for its NG and MF print management software, addressing two actively exploited vulnerabilities after researchers identified multiple methods to bypass the initial fixes. The company had previously released an emergency patch for PaperCut NG/MF versions 25 and 26, warning of zero-day exploitation, but initially withheld technical details…
Offensive Security Investments Surge as AI Threats Increase
A recent report indicates a significant increase in investments within the offensive security sector, a trend attributed to the escalating threat landscape posed by artificial intelligence. This surge reflects a growing industry focus on leveraging advanced AI capabilities for defensive purposes, even as the technology itself introduces new vulnerabilities and attack vectors.
Microsoft Teams Has Become a Haven for Scammers in China
Scammers in China are increasingly exploiting enterprise communication platforms like Microsoft Teams, Cisco Webex, and Zoho Cliq to defraud victims, prompting warnings from law enforcement and affected companies. The schemes, often "pig-butchering" romance or investment scams, have led to reported losses ranging from $1,500 to $300,000.
GiveWP WordPress donation plugin flaw lets hackers execute server commands
A critical vulnerability in the GiveWP plugin for WordPress, identified as CVE-2026-82222, allows an unauthenticated attacker to execute arbitrary commands on the hosting server. The flaw affects GiveWP versions up to and including 4.16.7.1. The plugin, which has over 100,000 installations, is used for collecting donations and managing fundraising campaigns.
Trump Targets Foreign Technology in New U.S. Power Grid Security Order
On August 26, Executive Order 14420 was signed, declaring a national emergency regarding the foreign supply of bulk-power system electric equipment. The order targets foreign-made power grid equipment, citing concerns about cyberattacks, sabotage, and supply-chain disruptions that pose a threat to U.S. national security.
Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication
Reports indicate that attackers are actively chaining two distinct security vulnerabilities in PaperCut NG and MF to achieve unauthenticated remote code execution on vulnerable systems. The vendor has released an emergency patch to address the newly exploited flaw, which includes additional hardening measures. This attack chain reportedly allows an unauthenticated attacker to gain remote…
68-year-old imprisoned after making $1.3 million by pirating IPTV services
A 68-year-old man has been sentenced to more than six years in prison in the United Kingdom for operating an illegal Internet Protocol Television (IPTV) service that generated approximately £980,812 (equivalent to $1.3 million USD) over three years. Milan Ibrahim was found to have run a sophisticated operation providing unauthorized IPTV services to customers both within the UK and…
PaperCut warns of hackers using printer management software flaw in attacks
PaperCut has issued an urgent warning to customers regarding active exploitation of vulnerabilities in its printer management software, PaperCut NG and MF. The company confirmed that cybercriminals are leveraging these flaws in ongoing attacks, prompting the release of emergency patches.
New infosec products of the month: August 2026
Several cybersecurity vendors have recently unveiled new and enhanced products, with a significant focus on integrating artificial intelligence into security operations, exposure management, and threat response. These releases aim to help organizations navigate an evolving threat landscape, manage the complexities of AI adoption, and streamline security workflows.
Australian Police Arrest Alleged TeamPCP Cybercrime Masterminds
Australian Federal Police (AFP), with assistance from the U.S. Federal Bureau of Investigation (FBI), have arrested two individuals in Perth, Australia, identified as alleged masterminds of the cybercrime group TeamPCP. The arrests took place on Wednesday, August 26, 2026.