News Archive
2287 stories · page 41 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical server-side request forgery (SSRF) vulnerability in MLflow, tracked as CVE-2026-64849, to its Known Exploited Vulnerabilities (KEV) catalog. This designation indicates that the flaw is actively being exploited in the wild.
US Indicts 17 Iranians Over Years-Long Cyber Espionage Campaign
The U.S. Justice Department has unsealed a superseding indictment charging 17 Iranian nationals in connection with a years-long cyber espionage campaign. The operation, attributed to the Iran-based Mabna Institute, is alleged to have stolen over 31 terabytes of academic data and intellectual property from universities, companies, and government agencies worldwide since at least 2013.
Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler
A critical authentication bypass vulnerability has been reported in Citrix NetScaler, with exploitation anticipated by security researchers. The flaw allows remote, unauthenticated attackers to compromise affected systems without requiring any user interaction. This type of vulnerability is particularly severe due to its low complexity of exploitation and high potential impact.
Critical GitLab Flaw Exploited Shortly After Disclosure
A critical vulnerability in GitLab, identified as CVE-2026-19478, has reportedly been exploited in the wild shortly after its public disclosure. This flaw is particularly severe as it allows unauthenticated attackers to modify or delete public projects and associated user data within affected GitLab instances. The rapid exploitation highlights the urgency for organizations to address this…
Tufin expands Unified Control Plane with AI intelligence and multi-vendor automation
Tufin has announced the release of Tufin Orchestration Suite (TOS) 5.3, an update designed to enhance security operations and maintain consistent control across complex, multi-vendor hybrid environments. The new version expands Tufin's Unified Control Plane with additional integrations, AI-powered intelligence, and automation capabilities.
US charges 17 Iranian hackers over 31-terabyte academic data theft
The U.S. government has announced charges against 17 alleged members of the Mabna Institute, an Iranian hacking-for-hire entity, for a multi-year campaign of data theft targeting academic institutions, private companies, and government agencies. The new indictment, filed in the Southern District of New York, adds eight individuals to a previous indictment from 2018 that named nine others.
StopAndProtect Turns 2,000 Hacked WordPress Sites Into a Criminal Network
A newly identified cybercrime operation, dubbed "StopAndProtect" by researchers at Check Point, has co-opted nearly 2,000 compromised WordPress websites, transforming them into a criminal network for malware distribution, data exfiltration, surveillance, and ransomware deployment. The campaign was first observed in May 2026.
AI agent suggested installing a malware package. Engineer almost took its advice
An engineer at the software development firm Softjourn narrowly avoided installing a malicious software package after an AI programming assistant recommended it. The incident highlights a new supply chain attack vector where threat actors register packages with names "hallucinated" by AI models, a practice dubbed "slopsquatting."
Microsoft says August Windows updates may cause gaming issues
Microsoft has confirmed it is investigating reports that recent Windows updates, specifically those released on August 11, 2026, may be causing gaming issues on some Windows 11 systems. Users have reported that certain games may fail to launch, crash unexpectedly, or exhibit other stability problems.
Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code
Cybersecurity researchers have reported a critical vulnerability in the Elementor Pro WordPress plugin that could enable unauthenticated attackers to upload PHP files and achieve remote code execution. The flaw, identified as CVE-2026-32475, has been assigned a CVSS score of 9.0, indicating a high level of severity.
AI is making fraud harder to spot and identity harder to prove
The proliferation of artificial intelligence is fundamentally altering the landscape of online fraud, making deceptive schemes more sophisticated and difficult to detect for both consumers and businesses. This shift is highlighted in Experian's 2026 U.S. Identity Fraud Report, which indicates that fraud has evolved from isolated incidents to an integrated component of digital interactions…
Researchers find a loophole that lets expired credit cards make unauthorized payments
Researchers at the University of Massachusetts Amherst have identified a vulnerability, dubbed "Zombie Card," that allows expired contactless credit cards to be used for unauthorized payments. The team, led by Muhammad Taqi Raza, assistant professor in the Riccio College of Engineering, presented their findings at USENIX Security 2026. The issue stems from a disconnect in how various…
8,539 reasons to rethink how vulnerabilities get patched
The volume of high- and critical-severity vulnerability disclosures has doubled in the past year, with 8,539 recorded in Q2 2026, according to a recent industry report. This surge is intensifying pressure on security teams, who must prioritize which flaws to address immediately, often contending with a rapidly shrinking window between disclosure and exploit weaponization.
OpenAI confirms ChatGPT is down as logins and signups fail
ChatGPT, OpenAI's popular AI chatbot, is experiencing a significant global outage, preventing users from logging in, creating new accounts, or accessing existing conversations. The disruption began around 8 PM ET on Wednesday, August 19, impacting users across various regions, including the United States and Europe.
Smashing Security podcast #481: Never say this to a robot dog
A new social engineering attack successfully targeted the United Kingdom's recently appointed Prime Minister, Andy Burnham, with an imposter claiming to be a high-ranking official from the Trump administration. The attacker, posing as White House Chief of Staff Susie Wiles, made direct contact with Burnham, exploiting the opportune timing of his new role.
'Not a theoretical risk,' feds warn as attackers use AI-made code to hack critical infrastructure controllers
Five U.S. federal agencies have issued a joint alert regarding an active threat in which attackers are utilizing AI-generated exploitation scripts to compromise internet-exposed Siemens S7 Series programmable logic controllers (PLCs). The targeted facilities include critical infrastructure in the water, manufacturing, energy, chemical, food and agriculture, and commercial sectors, with…
Rogue ransomware affiliate poses as data recovery firm to steal payments
A suspected ransomware affiliate is reportedly posing as a data recovery service, "Ransom Busters," contacting victims of cyberattacks before the incidents become public. The group claims to possess decryption keys and the ability to delete stolen data for a fee, ranging from $20,000 to $60,000.
Rogue ransomware affiliate poses as recovery firm to steal payments
A suspected ransomware affiliate is reportedly posing as a recovery service called "Ransom Busters," contacting victims of cyberattacks before the incidents become public. This group claims to possess decryption keys and the ability to delete stolen data for a fee, ranging from $20,000 to $60,000.
Sakura Internet hack exposes data of up to 1.36 million accounts
Sakura Internet, a prominent Japanese cloud and data center service provider, has disclosed that a cybersecurity incident may have exposed data belonging to up to 1,360,563 member accounts. The company, which is a key domestic provider for Japan's Government Cloud program, confirmed that attackers gained access to its sales management system, where customer contract and membership information…
No-Filter 'Kriminal' AI Platform Raises Cybercrime Concerns
A new AI platform, dubbed "Kriminal," has reportedly emerged, offering unrestricted tools that raise significant concerns about their potential misuse in cybercrime. While the platform officially states a prohibition against illicit activities, its functionalities are openly available to users who pay with cryptocurrency, effectively bypassing any meaningful restrictions.
Healthtech firm CareCloud data breach impacts 3.7 million patients
CareCloud, a U.S. healthcare IT company, has confirmed that a data breach earlier this year impacted over 3.7 million individuals. The publicly traded firm, which provides electronic health records, medical billing, practice management, and revenue-cycle services, initially disclosed the incident in March through a filing with the U.S. Securities and Exchange Commission (SEC).
Agentic AI Presents New Insider Threat Model for Orgs
The emergence of agentic AI systems is reportedly introducing a novel insider threat model for organizations, compelling a re-evaluation of established security paradigms. These autonomous AI entities, increasingly integrated into core business processes, are said to present risks akin to those posed by malicious or compromised human insiders. This development underscores the need for…
Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second
Cybersecurity researchers have reportedly demonstrated a refined Spectre attack targeting Cloudflare Workers, successfully exfiltrating a JSON Web Token (JWT) from a co-located Worker. The attack achieved a data leakage rate of 12 bits per second, which is described as a significant improvement in speed over prior iterations of similar attacks.
AI-fueled attacks pose ‘active threat’ to water, other sectors, U.S. agencies warn
U.S. government agencies have issued a joint warning regarding active threats to critical infrastructure sectors, including water, food, energy, chemical, manufacturing, and commercial facilities. The alerts specify that attackers are targeting Siemens S7 Series programmable logic controllers (PLCs) and are employing artificial intelligence to generate exploitation scripts.