News Archive
2287 stories · page 32 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
US sanctions Iranian cyber actors as UK discloses power plant attack
The United States has imposed sanctions on several Iranian nationals for their alleged involvement in cyberattacks targeting critical infrastructure, following reports of a cyber intrusion at a small power plant in the United Kingdom. Treasury Secretary Scott Bessent announced the new sanctions on Monday, August 24, 2026, as part of efforts to pressure the Iranian government and facilitate the…
SCOTUS tosses one of two injunctions against Trump USPS mail-in ballot rules
The Supreme Court has dismissed one of two injunctions that had blocked the Trump administration's changes to U.S. Postal Service (USPS) regulations concerning mail-in ballots. The 6-3 decision, issued on August 24, 2026, found that the plaintiff states lacked standing to sue because they could not demonstrate concrete harm from the executive order.
Exploited Zimbra Flaw Highlights Shrinking Window to Patch
A recently exploited vulnerability in Zimbra, identified as CVE-2026-73570, has prompted a directive from the Cybersecurity and Infrastructure Security Agency (CISA) for federal agencies to apply patches within a three-day window. The flaw is reported to enable a complete takeover of a user's communications, underscoring the critical nature of the exploit and the urgency of mitigation.
You don't want this Sleepwalker backdoor on your Windows machine
A newly identified Windows backdoor, dubbed "Sleepwalker," operates by lying dormant in memory, awaiting a specially crafted "magic packet" to deliver commands through its unique 23-instruction language. This sophisticated malware, detailed by researcher Dominik Reichel, is designed to evade traditional security tools by not initiating outbound connections or opening obvious listening ports.
Unpatched Calix flaw lets hackers bypass NAT to expose internal devices
An unpatched vulnerability in Calix GS7 XGS (GS5239XG) residential routers, also marketed as the GigaSpire 7u10txg, allows remote, unauthenticated attackers to create port-forwarding rules that expose internal network devices to the public internet. The flaw, tracked as CVE-2026-75501, is a missing authentication issue affecting devices running EXOS/6.6.47 firmware.
Browser fingerprint tool shows how easy you are to track using the latest sneaky tricks
A new browser fingerprinting tool called Glassbox has been released, designed to show users how easily their browser and device can be uniquely identified online. Developed by security engineer David Dale, Glassbox operates entirely within the user's browser, without transmitting any data to external servers, while simulating various tracking and anti-fraud scripts commonly found on websites.
Foul Language: WordlistLoader Disguises Malware as Ordinary Text
A new report indicates that threat actors are employing a novel technique, dubbed "WordlistLoader," to obfuscate malware delivery, specifically targeting campaigns that resemble "ClickFix" operations. This method reportedly disguises malicious payloads as ordinary text files, making them more difficult for security systems to detect and analyze. The primary payload identified in these…
New Zealand to pursue social media ban for children under 16
New Zealand's Prime Minister, Christopher Luxon, announced plans to introduce legislation that would prohibit children under 16 from using social media platforms. The proposed law aims to address concerns about the negative impact of social media on the mental health, sleep, education, and family life of young New Zealanders, citing exposure to harmful content, addictive technology, and undue…
Hackers target WordPress sites in miniOrange auth bypass attacks
Threat actors are actively attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress. These vulnerabilities, tracked as CVE-2026-61979 and CVE-2026-15981, can be chained together to forge SAML responses and gain administrative access to affected WordPress sites.
Treasury sanctions alleged Iranian hackers as part of ‘economic D-Day’
The U.S. Treasury Department announced new sanctions against four Iranians on Monday, August 24, 2026, alleging their involvement in cyberattacks against critical infrastructure and cybertheft targeting the United States. This action follows a recent indictment unsealed by the Justice Department against individuals reportedly affiliated with the Tehran-based Mabna Institute.
Bipartisan Senate bill aims to prepare energy sector for Q-Day
A new bipartisan Senate bill aims to fortify the U.S. electric grid against potential cybersecurity threats posed by quantum computers. The Quantum Grid Utility Assurance and Resilient Defense (Quantum-GUARD) Act, introduced by Senators Mike Rounds (R-S.D.) and Chris Coons (D-Del.), would mandate that the Federal Energy Regulatory Commission (FERC) consider quantum computing risks and the…
The Cloudflare Blog – Brought to you by EmDash
Cloudflare has confirmed a security incident involving an unauthorized third party gaining access to an internal Atlassian server. The company stated that the attacker used stolen credentials to breach the system, which hosted its Confluence wiki, Jira bug-tracking system, and Bitbucket source code management system.
Indian man who fled US arrested on charges he helped scammers siphon $7.5 million from the elderly
A 21-year-old Indian national, Jay Sunilbharthi Goswami, has been arrested in Canada while attempting to flee the United States, facing charges for his alleged role as a money mule in an international scam operation that defrauded elderly Americans of over $7.5 million. Goswami, a resident of Jersey City, New Jersey, was apprehended on August 17 after driving from Buffalo, New York, across the…
TikTok reaches $400M settlement with US over COPPA violations
TikTok and its parent company, ByteDance, have agreed to a $400 million settlement with the U.S. Department of Justice (DoJ) to resolve allegations of violating the Children’s Online Privacy Protection Act (COPPA). The agreement, announced by the DoJ, addresses a lawsuit filed in 2024 concerning the social media platform's handling of user data.
ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited
ReliaQuest has confirmed that it was targeted by the ShinyHunters hacking group, acknowledging that an employee fell victim to a phishing attack. The incident resulted in unauthorized access to an internal dashboard, though the company has stated that the impact was limited.
Iran-linked cyberattack shut down a UK power plant
A small-scale power plant in the United Kingdom was shut down for four days due to a suspected cyberattack, which government officials confirmed on Monday. While the UK government has not formally attributed the incident, it is believed to be linked to Iran. Authorities emphasized that the wider energy system was never at risk, describing it as "highly resilient."
Fake GTA 6 Extended Look and demo sites deliver an infostealer
Cybercriminals are exploiting the widespread anticipation for Grand Theft Auto VI by distributing password-stealing malware through fake websites impersonating Rockstar Games. These sites, which appear in search results for a "GTA 6 demo" or "Official Download," lure visitors into downloading a malicious executable disguised as a game installer.
Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
A remote code execution (RCE) vulnerability, identified as CVE-2026-63520, has been disclosed in Microsoft SharePoint, allowing an authenticated attacker to execute arbitrary code on a vulnerable server. When chained with an authentication bypass vulnerability, CVE-2026-55040, the exploit becomes unauthenticated.
New Guidance Helps Businesses Verify Quantum-Safe Hardware Claims
The Trusted Computing Group (TCG) has released new guidance to help organizations verify whether their hardware, specifically Trusted Platform Modules (TPMs), genuinely meet post-quantum cryptography (PQC) requirements. This move comes as businesses seek to future-proof their systems against potential quantum-enabled cyberattacks.
NIST Warns of Unique Security Risks in Multi-Cloud Environments
The National Institute of Standards and Technology (NIST) has issued a warning to organizations regarding the unique cybersecurity and compliance challenges inherent in multi-cloud environments. NIST's new report, published on August 21, highlights that utilizing two or more cloud service providers (CSPs) introduces complexities that make it difficult to maintain consistent security policies,…
ReliaQuest confirms failed data-theft attack after ShinyHunters breach
ReliaQuest, a cybersecurity firm, has confirmed that one of its employees was targeted in a social engineering attack that resulted in temporary, view-only access to an internal identity dashboard. The incident, which occurred after an attacker impersonated a security team member, was subsequently claimed by the ShinyHunters data extortion group.
Tricky 'SynkLoader' Multitool May Herald Ransomware
Security researchers have identified a sophisticated new malware family, dubbed "SynkLoader," which exhibits advanced capabilities including screen hijacking for credential theft and a range of novel features. This multitool malware is believed to be a precursor to more damaging attacks, potentially including ransomware deployments, and is notable for its multilingual support and a return to…
Malicious Firefox add-ons caught stealing cryptowallet seed phrases and browser credentials
Security researchers have uncovered a campaign involving dozens of malicious Firefox add-ons designed to steal cryptocurrency wallet seed phrases and other browser credentials. The operation, dubbed "Offside Wallet Theft Factory" by researchers at Socket, has been active since at least March 2026.
Fake Codex Download Uses Google Sites to Deliver macOS Malware
A new campaign is leveraging sponsored search results and legitimate Google Sites pages to distribute macOS malware, tricking users into executing malicious commands under the guise of installing OpenAI's Codex. The campaign was detailed in a technical write-up published on August 24 by researchers at Cato Networks.