News Archive
2287 stories · page 30 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
The GTA VI leaks are breaking the internet. Security researchers have seen this before.
Rockstar Games, a subsidiary of Take-Two Interactive Software, has been targeted in a high-profile data extortion attack involving the unauthorized release of gameplay footage from the highly anticipated *Grand Theft Auto VI* (GTA VI). The incident, which saw gameplay videos published online a week before the publisher's planned reveal, has been described by some as one of the most significant…
58 arrested in international cybercrime crackdown
Fifty-eight individuals have been arrested across 22 countries as part of an eight-month international cybercrime operation, Interpol announced. The arrests are the latest phase of Operation Jackal, a multi-year effort to dismantle cybercriminal organizations globally. This specific leg, dubbed Operation Jackal IV, ran from November 2025 to June 2026.
AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes
A new phishing-as-a-service (PhaaS) platform named AnonyMousKIT has been identified as automating the process of obtaining passcodes for stolen Apple devices, enabling the disabling of Apple's Activation Lock feature and access to sensitive user data. Active since early 2024, the service supports an ecosystem for selling stolen iPhones, harvesting Apple IDs, and accessing iCloud backups and…
Finding Nemo(Claw): Networking Issue Allows for LLM Poisoning in OpenClaw
A recently disclosed security vulnerability, dubbed "Nemo(Claw)," allows for the poisoning of large language models (LLMs) within NVIDIA's OpenClaw framework. The reported issue stems from a networking misconfiguration that grants unauthenticated access to the local model server via the Ollama API. This access could enable attackers to introduce malicious data into the models, leading to…
Employee benefits platform Paylogix says hackers stole financial and health data
Paylogix, a technology company specializing in employee benefits management, has confirmed a data breach that resulted in the theft of sensitive personal, financial, and health information belonging to tens of thousands of individuals. The New York-based firm, which provides benefits administration tools to employers and insurance companies, disclosed the incident through state regulatory…
Arrested man allegedly impersonated NSA elite hacking unit, Supreme Court chief justice
A man identified as Joshua Culver, also known by the alias "Maverick Young," was arrested last week in Colorado on charges of impersonating both the Chief Justice of the Supreme Court, John Roberts, and the head of the National Security Agency's Tailored Access Operations (TAO) unit. Culver appeared in a Colorado court on Tuesday following an indictment issued in Indiana in July, which…
U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches
The U.S. Department of the Treasury has reportedly imposed sanctions on approximately 60 Iran-linked entities and individuals. Among those sanctioned is a cyber group that is reportedly affiliated with Iran's Ministry of Intelligence and Security (MOIS). This group is accused of conducting widespread breaches targeting U.S. critical infrastructure, alongside engaging in financially motivated…
Norway ’s Digital Government Infrastructure Hit by a new DDoS Attack
Norway's shared digital government infrastructure has been subjected to a third distributed denial-of-service (DDoS) attack, causing widespread disruption to public services. The latest incident, which began at 03:38 CEST on Monday, August 24, targeted infrastructure operated by the Norwegian Digitalisation Agency (Digdir) and its service provider, Vivicta.
Water sector passes, government sector fails attempts to spot and halt simulated CISA attack
The Cybersecurity and Infrastructure Security Agency (CISA) recently conducted simulated cyberattacks against two unnamed organizations, one in the government sector and one in the water sector, revealing significant differences in their defensive capabilities. While CISA's red team successfully gained initial access to both targets, the water sector organization quickly detected and mitigated…
When the Algorithm Fires You: Uber Faces €825M Fine
Uber is facing an €825 million (approximately $964 million) fine from the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP) for its use of fully automated systems to suspend or deactivate driver accounts without human review. The AP ruled that Uber violated the General Data Protection Regulation (GDPR) by making significant decisions affecting individuals' livelihoods solely…
Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable
Two critical authentication bypass vulnerabilities, both rated CVSS 9.8, in the miniOrange SAML 2.0 Single Sign On WordPress plugin were actively exploited before public vulnerability databases accurately reflected the affected paid editions. These flaws, identified as CVE-2026-61979 and CVE-2026-15981, allowed unauthenticated attackers to forge SAML authentication responses and gain…
Linux Foundation to Govern TRACE, an Open Standard for AI Runtime Attestation
The Linux Foundation has announced it will govern TRACE, an open standard designed for AI runtime attestation. This initiative aims to provide a standardized method for verifying the integrity and trustworthiness of AI systems during their operation.
You could've applied all 1,449 Oracle patches and still been hit by this attack
A recent credential theft incident targeting an Oracle database server would not have been prevented by any of the 1,449 patches Oracle released in late July, according to cybersecurity firm Huntress. The attack highlights a shift in threat actor tactics toward exploiting system functionality rather than solely identifying vulnerabilities.
The patch window is collapsing: Why security needs a new control plane
A recent report highlights a significant shift in the cybersecurity landscape: the traditional patch management window is rapidly collapsing. This shrinking timeframe between the discovery of a vulnerability and its effective remediation is creating an increasingly critical attack surface for organizations. The analysis suggests that current security strategies are struggling to keep pace,…
Massive DDoS attack disrupts Norway’s government digital services
Norway's shared government digital infrastructure has been experiencing disruptions since Monday, August 22, due to a distributed denial-of-service (DDoS) attack. The attack, which began at 03:38 CEST, has targeted services operated by the Norwegian Digitalization Agency (Digitaliseringsdirektoratet, or Digdir) and its operations provider, Vivicta.
Obfuscating IP Addresses as Hostnames, (Tue, Aug 25th)
A recent report highlights a technique where IP addresses can be obfuscated as hostnames, a method that can be exploited in various security attacks. This approach leverages the way systems resolve or interpret network requests, potentially bypassing security controls designed to detect and block direct IP address references. The core of the issue lies in the ability to represent an IP address…
Is Cyber Facing an Affordability Crisis?
The cybersecurity industry is reportedly grappling with an affordability crisis, characterized by escalating costs associated with data breaches and substantial expenditures required for defensive measures. This situation is said to be disproportionately impacting small businesses, leaving them exposed to cyber threats. The reported vulnerability of these smaller entities, in turn, poses a…
Hospital operator Nutex Health says data stolen in cyberattack
Nutex Health, a for-profit healthcare provider operating 28 facilities across 12 states, has confirmed a cyberattack resulted in the exfiltration of data from its servers. The company disclosed the incident in a filing with the U.S. Securities and Exchange Commission (SEC), stating that an unauthorized third party accessed and stole information, some of which may be private or confidential.
ZeroTokens Phishing Platform Steers Attacks in Real Time
A new phishing platform known as ZeroTokens allows attackers to monitor victim sessions in real time and dynamically alter the prompts displayed, enabling adaptive attacks aimed at harvesting credentials and financial data. The platform provides operators with live visibility into information entered by victims, allowing them to steer individual phishing interactions while simultaneously using…
Interpol targets Black Axe’s illicit financial web in latest international sting
An international law enforcement operation, dubbed Operation Jackal IV, has resulted in 58 arrests and the identification of 263 suspects globally, targeting the financial networks of West African organized crime groups, including Black Axe. The operation, announced by Interpol, aimed to disrupt money laundering activities, locate high-value targets, seize assets, and support prosecutions.
Alice Secures $140M for AI Model Defense and Enterprise Security
Alice, formerly known as ActiveFence, has announced a significant new funding round, securing $140 million. This latest investment brings the company's total funding to $280 million. The stated purpose of these funds is to strengthen Alice's capabilities in defending AI models and to enhance its existing enterprise security offerings.
A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw
A recent report indicates a significant vulnerability within NVIDIA NemoClaw that could enable a malicious webpage to compromise a local AI agent. The core of the issue lies in the ability of an attacker to modify the AI model's chat template, effectively injecting hidden instructions that would then influence all subsequent interactions with the model. This form of "poisoning" could lead to…
Microsoft PowerToys adds Alt+Tab-style switching for an app's windows
Microsoft has introduced a new utility called "Window Hopper" to its PowerToys suite, designed to streamline switching between multiple windows of a single application. This feature, included in PowerToys version 0.101.2362.0, was released on August 25, 2026.
WordPress Websites Targeted via MiniOrange Plugin Vulnerabilities
Reports indicate that WordPress websites are currently being targeted through the exploitation of two authentication bypass vulnerabilities found in the MiniOrange SAML 2.0 SSO plugin. These vulnerabilities have been assigned the identifiers CVE-2026-61979 and CVE-2026-15981. The active targeting suggests that attackers are leveraging these flaws to gain unauthorized access to affected…