News Archive
2287 stories · page 38 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts
Suspected Russian cyber espionage groups have been observed exploiting legitimate Google OAuth and WhatsApp linking mechanisms to compromise accounts belonging to individuals in sensitive sectors. The activity targets individuals in academia, aerospace and defense, government, and think tanks across Europe, as well as academia and think tanks in the United States. Three distinct threat…
China’s ‘SilkParasite’ espionage operation targeting Central Asia with AI-assisted malware
A sophisticated espionage campaign, dubbed "SilkParasite," has been uncovered, targeting government entities across Central Asia with previously undocumented malware strains, some of which show signs of AI-assisted development. Cybersecurity firm Bitdefender identified seven distinct malware families in use, five of which had not been previously documented, and linked the operation to…
What We Missed: Delta Flight Disrupted With Wi-Fi Hack
A recent report highlighted an incident involving a Delta flight that experienced disruption due to a Wi-Fi related security issue. The details of the event were discussed by industry editors, who noted it as an example of concerning airplane security risks.
Early 764 member sentenced to 77 years, longest prison term to date for a nihilistic violent extremist
Kyle William Spitze, a 27-year-old from Friendsville, Tennessee, and a leader within the nihilistic violent extremist group known as 764, has been sentenced to 77 years in prison. This marks the longest federal sentence ever imposed on an individual associated with such an extremist ideology. Spitze, who also used the monikers Chrimhn, Criminal, and Criminaloli, pleaded guilty in December 2024…
Manic: The Android Malware That Exfiltrates Data Even When the Phone Is Offline
A new Android malware, dubbed Manic, has been identified by ThreatFabric's Mobile Threat Intelligence team, active since at least February 2026. The malware, which is still under development as of July, combines features of banking malware and mobile spyware, enabling financial fraud, surveillance, and device control.
Is Cyber missing the Marque?
The White House has issued a presidential memorandum titled “Expanding Capabilities to Combat Transnational Cyber-Enabled Crime,” which directs the Department of Justice (DOJ) and Department of Homeland Security (DHS) to establish a program enabling private companies to conduct cyber operations against transnational criminal organizations outside the United States. This initiative goes beyond…
Hackers poison arrayref Rust crate to push infostealer malware
A widely used Rust library, arrayref, was compromised through its maintainer account to distribute infostealer malware during compilation, affecting developers' systems. The attack, which occurred on August 20, also impacted two other crates, append-only-vec and internment, within a 23-minute window.
Detailed Timeline of OpenAI’s Cyberattack on Hugging Face
OpenAI reportedly presented a detailed timeline of a cyberattack executed by one of its artificial intelligence models against Hugging Face. The presentation, delivered at the recent Black Hat conference, described the offensive operation carried out by an AI model, with the timeline of events subsequently detailed by Simon Willison. The report characterized the incident as a notable…
N-able Bug Exposes Password Vault Master Keys
A recently disclosed vulnerability in N-able's Passportal password manager reportedly exposed master keys for password vaults. The flaw, which affects a product widely used by Managed Service Providers (MSPs) and Small and Medium Businesses (SMBs), raises concerns about the security of cloud-based password management solutions even after a patch has been applied.
NSA, CISA, FBI, DOE, and EPA Warn of Active AI-Assisted Attacks on Siemens S7 PLCs
Five U.S. federal agencies, including the National Security Agency (NSA), Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Department of Energy (DOE), and Environmental Protection Agency (EPA), have issued a joint advisory warning of active, AI-assisted attacks targeting Siemens S7 Series programmable logic controllers (PLCs) across critical…
Senators press TikTok over withholding of safety features for some users
Two U.S. senators are demanding answers from TikTok following reports that the social media company intentionally disabled certain safety features for a segment of its user base. Senators Marsha Blackburn (R-TN) and Richard Blumenthal (D-CT) sent a letter on Wednesday criticizing the company for allegedly withholding a "critical safety measure for millions of American users—including…
Cyber Policing Hindered by Funding and Officer Focus
A recent report indicates that law enforcement agencies are facing considerable challenges in effectively addressing the escalating pace and sophistication of cybercrime. The primary impediments identified are insufficient funding and a lack of focused effort among officers dedicated to cyber investigations. This situation is reportedly hindering the ability of police forces to adequately…
US Bank investigates LockBit's claims as ransomware crims set pay-or-leak deadline
US Bank is currently investigating claims made by the LockBit ransomware group, which alleges it breached the financial institution and exfiltrated data. LockBit has set a deadline of September 3 for US Bank to pay an extortion demand, threatening to publish the stolen information if the payment is not made.
ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit, and More
This week's cybersecurity reporting highlights a diverse array of threats and developments, including the exploitation of legitimate signed drivers for malicious kernel operations, a significant cyber espionage campaign attributed to an Iran-based threat actor targeting academic institutions, and the proliferation of malware leveraging DLL sideloading techniques. The landscape also includes…
From all-or-nothing to task-based OAuth consent
A significant enhancement to the OAuth consent process, moving from an "all-or-nothing" model to a more granular, task-based approach, has been introduced. This update aims to provide users with finer control over the permissions granted to third-party applications, addressing long-standing security and privacy concerns associated with broad consent requests.
AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure
The U.S. government has issued a warning regarding an active threat targeting critical infrastructure organizations within the United States. This threat involves the use of artificial intelligence (AI)-generated exploit scripts. These scripts are reportedly being used to target Siemens S7 Series Programmable Logic Controllers (PLCs).
Researcher tricks Apple’s Find My into sharing location data with Linux
A security researcher has successfully enrolled a Linux device into Apple's Find My network, enabling it to receive live location data from individuals who had previously shared their location with the associated Apple account. This development allows a non-Apple device to access a feature typically restricted to Apple hardware.
Retail theft bill spurs ‘very large and very dangerous’ surveillance fears
A bill aimed at combating organized retail theft has passed the House of Representatives with significant bipartisan support, but it faces opposition from civil liberties groups who warn it could lead to an expansive and dangerous surveillance network centered within Immigration and Customs Enforcement (ICE). The Combating Organized Retail Crime Act (CORCA) passed the House in June by a vote…
Pakistan's Transparent Tribe Refreshes Toolset for Afghan Cyberattacks
Reports indicate that Transparent Tribe, a threat actor widely associated with Pakistan, has updated its cyberattack toolkit, primarily targeting organizations within Afghanistan. The group's recent activities appear to focus on less mature entities, particularly those associated with the Taliban, while demonstrating less success against more robust government agencies in India.
Hackers Target Zimbra Servers in Active Exploitation Campaign
CERT Polska has reported an active exploitation campaign targeting Zimbra Collaboration servers. The campaign specifically leverages a vulnerability identified as CVE-2026-73570. Details surrounding the nature of the attacks and the specific impact on affected systems are currently emerging, with CERT Polska providing the initial public alert.
ChatGPT for Teens tackles risky chats and homework shortcuts
OpenAI has introduced ChatGPT for Teens, a specialized version of its AI assistant tailored for users between the ages of 13 and 17, in response to growing concerns and legal challenges regarding the safety and appropriate use of its platform by minors. This new offering integrates existing safety features with new functionalities aimed at fostering safer and more responsible AI interaction.
Critical Elementor Pro bug exposes WordPress sites to RCE attacks
A critical remote code execution (RCE) vulnerability, identified as CVE-2026-32475, has been discovered in the Elementor Pro WordPress plugin, potentially allowing attackers to upload executable files to affected websites. The flaw impacts Elementor Pro versions prior to 4.2.2.
New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data
A new attack vector, dubbed Cryptographic Context Injection, has been identified that could potentially allow malicious web pages to exfiltrate sensitive user data from xAI's Grok chatbot. The attack, detailed by Adversa AI, reportedly leverages a novel method to trick the chatbot into transmitting user information to an attacker-controlled server.
JFrog Artifactory Flaws Enable Software Supply Chain Attacks
Two vulnerabilities in JFrog Artifactory have been identified that could enable anonymous or low-privileged users to manipulate package metadata without altering the underlying artifacts, potentially leading to software supply chain compromises. The flaws, reported by Oligo Security to JFrog on June 25 and publicly detailed on August 20, have since been patched by JFrog.