News Archive
2287 stories · page 35 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
Say it once: introducing Bot Preference Sync
Cloudflare has confirmed that it was targeted by the advanced persistent threat (APT) group known as Spook. The attack, which occurred between October 26 and October 30, 2023, involved Spook gaining unauthorized access to Cloudflare's internal Atlassian server. This server hosted Cloudflare's Confluence wiki, Jira bug-tracking system, and Bitbucket source code management system.
Cloudflare Launches Bot Preference Sync for AI Traffic Management
Cloudflare has introduced a new feature designed to synchronize bot preferences for AI traffic management across its network. This initiative aims to streamline how AI-driven bots interact with web services and content delivery, particularly in scenarios involving large language models (LLMs) and other generative AI applications.
Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain
A sophisticated new software supply chain attack, dubbed "ChainDrop," has been observed infecting over 400 npm packages, including widely used libraries such as `keyv` and `cacheable-request`. This attack leverages a three-step process to steal credentials and propagate itself, highlighting a growing trend of attackers targeting the tools and environments developers use rather than just…
Friday Squid Blogging: Neon Flying Squid
A research team has captured the first photographic evidence of neon flying squid (Ommastrephes bartramii) gliding above the surface of the Pacific Ocean. The observation, made approximately 370 miles from Tokyo, involved a shoal of about 100 squid that emerged from the water and glided for roughly 30 meters near the researchers' boat.
How an Emerging Industrial Protocol Family Could Put OT at Risk
New research has brought to light potential security vulnerabilities within Time-Sensitive Networking (TSN) protocols, an emerging family of communication standards increasingly adopted in industrial operational technology (OT) environments. The findings indicate that if TSN implementations lack adequate protection, they could become vectors for attackers to interfere with or directly…
Lawmakers call for investigation into impact of CISA staffing cuts
Members of Congress have formally requested that the Government Accountability Office (GAO) investigate the impact of significant staffing reductions at the Cybersecurity and Infrastructure Security Agency (CISA) on its operational capabilities and mission fulfillment. The request, spearheaded by Representative Bennie Thompson (D-MS), ranking member of the House Committee on Homeland Security,…
Apollo discloses data breach from ongoing wave of attacks hitting financial sector
Apollo Global Management, a major private equity firm, has confirmed it experienced a data breach in July, impacting some of its cloud platforms. The company disclosed that sensitive personal data, including names, dates of birth, contact information, home addresses, and Social Security numbers, was compromised during the incident.
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
A recent report indicates that security researchers have uncovered 14 malicious npm packages designed to deploy a Linux backdoor identified as RedC2 4.0. These packages were reportedly masquerading as legitimate utilities related to calendar and streak tracking functionalities within the npm ecosystem. The discovery highlights an ongoing threat vector targeting developers and systems reliant…
Your Shredded Visa Card May Still Work at the Checkout
Researchers at the University of Massachusetts Amherst have demonstrated a method to make purchases with expired Visa contactless credit cards, including at live retail and grocery merchants. The attack, presented at USENIX Security 2026, exploits a structural weakness in Visa's implementation of the EMV contactless payment protocol, specifically within its Kernel 3 software.
New SynkLoader malware pushed in Microsoft Teams phishing campaign
A previously undocumented malware family, named SynkLoader, is being distributed through phishing campaigns targeting Microsoft Teams users. The attacks aim to steal credentials by presenting victims with a deceptive lock screen.
OWASP Flags Top AI Skill Risks in New Security Blueprint
The Open Worldwide Application Security Project (OWASP) has released a new security blueprint that identifies the top ten security risks associated with artificial intelligence (AI) skills. This new list is designed to address the unique security challenges presented by the increasing integration of AI capabilities into applications and systems. A key component of this blueprint is the…
AI Is Learning to Write Genetic Code
Researchers have successfully used artificial intelligence models to generate functional genetic code for a bacteriophage, a type of virus that infects and destroys bacteria. The AI-designed viruses demonstrated viability and, in some instances, proved more effective at targeting bacteria than their natural counterparts.
Homeland security cybercops say patch TrueConf (Russia's Zoom) if you're using it
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has mandated that federal agencies patch two actively exploited vulnerabilities in TrueConf Server, a video conferencing platform developed in Russia. The flaws, identified as CVE-2026-72529 and CVE-2026-72530, were added to CISA's Known Exploited Vulnerabilities catalog on Thursday, indicating their use in real-world attacks.…
Former NSA Director Paul Nakasone Launches National Security Advisory Firm
Former National Security Agency (NSA) Director General Paul Nakasone has reportedly launched a new national security advisory firm, named the Nakasone Group. The firm is positioned to offer strategic counsel to a diverse clientele, including government leaders, corporations, prominent families, and other private clients. Its stated focus areas encompass cybersecurity, geopolitical challenges,…
U.S. Bank says breach claims related to fourth-party incident
U.S. Bancorp, the seventh-largest bank in the United States, has stated that recent claims of data theft by the LockBit ransomware group are linked to a cyber incident involving a fourth-party vendor, rather than a direct compromise of the bank's own systems or network. The bank confirmed it has investigated the claims and found no evidence that its internal systems, networks, or data…
Hundreds of leaked AWS keys give full control over corporate accounts
Over 9,300 Amazon Web Services (AWS) access keys, publicly exposed between August 2022 and August 2026, remain active and valid, according to research from Truffle Security. The firm has been tracking these exposures for four years, identifying 817 keys linked to companies, with 526 of these being AWS root keys.
Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
Check Point Research has disclosed a technique that leverages a legitimate Microsoft Defender driver, BTR.sys (Boot Time Removal Tool), to delete security software at boot time. The technique reportedly does not exploit a software flaw but rather weaponizes the driver's intended functionality. This method is said to affect Windows systems from Windows 7 up to Windows 11 25H2.
Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet
A novel malware family has been identified that specifically targets Android-based car head units, utilizing their built-in firmware update mechanisms for propagation. This sophisticated threat, reportedly linked to the MoYu Group, is designed to engage in ad fraud and to establish a proxy botnet. This marks a significant development as it is described as the first documented instance of…
In Other News: Zombie Card Attack, T-Mobile Cut Cable to Stop Hackers, GitHub Denies AI Caused Bug
A recent report highlighted several security incidents and developments, including a "Zombie Card" attack, a distributed denial-of-service (DDoS) attack against Threema, and the emergence of the Evooo1Bot Linux botnet. Additionally, T-Mobile reportedly severed a cable in an attempt to thwart attackers, while GitHub denied that artificial intelligence was responsible for a specific bug.…
Lawmakers seek watchdog review of federal hacking of Americans
Two members of Congress have formally requested that the Government Accountability Office (GAO) investigate the federal government's use of hacking tools, including spyware, against Americans. Senator Ron Wyden (D-Ore.) and Representative Greg Casar (D-Texas) sent a letter to the GAO on Friday, August 16, 2026, seeking a comprehensive review and a public report on these activities.
Canada’s Hospital for Sick Children attacked by cybercriminals again as employee data stolen
The Hospital for Sick Children (SickKids) in Toronto, Canada, has confirmed a recent cybersecurity incident that resulted in the theft of personal information belonging to current and former employees. This marks the second significant cyberattack against the institution, following a ransomware incident in 2022.
Malware injected into popular Rust packages to steal developer credentials
The Rust Security Response Team has disclosed a supply chain attack that injected malware into several popular Rust packages, turning routine software builds into a mechanism for delivering infostealer malware to developers' machines. The incident was initially reported to the Rust team by Nextron Systems' research team.
Microsoft blames Windows gaming issues on RGB lighting devices
Microsoft has confirmed that recent Windows updates, specifically KB5121003 and subsequent releases from August 11, 2026, are causing games to crash or fail to launch on systems running Windows 11 versions 24H2 and 25H2. The company is investigating reports of issues where games like *ARC Raiders*, *MARVEL T kon: Fighting Souls*, and *The Finals* are affected, with users also experiencing game…
Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini
A new technique, dubbed ‘Cryptographic Context Injection,’ has reportedly demonstrated the ability to bypass AI safety guardrails in models such as Grok and Gemini. This method involves concealing malicious instructions within encrypted prompts, which are then decrypted only within a trusted execution environment, effectively circumventing the AI’s pre-processing safety mechanisms.