News Archive
2287 stories · page 48 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
Hacking Public Wi-Fi DNS to Steal Credentials
A recent report indicates that criminals are actively compromising public Wi-Fi devices globally, including those found in hotels and conference centers, to manipulate their Domain Name System (DNS) configurations. The objective of these attacks is to redirect unsuspecting users to malicious, spoofed login pages, thereby facilitating the theft of their credentials.
Fake TikTok rewards promise cash you’ll never get
Users are being targeted by fraudulent TikTok-branded reward pages that promise substantial cash payouts for daily check-ins, completing simple tasks, and referring friends. These sites, designed to mimic mobile shopping or loyalty applications, display a TikTok logo, a welcome message, and a tracker for daily check-ins, tasks, and referrals. They often present users with a rapidly…
Recent macOS Screen Sharing Vulnerability Exploited in Attacks
A recently identified vulnerability within macOS Screen Sharing has reportedly been exploited in the wild, allowing threat actors to achieve root access on compromised systems. Following successful exploitation, the attackers were observed deploying a Monero cryptocurrency miner. The specifics of the vulnerability itself, such as its technical classification or CVE identifier, were not…
Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure
A critical vulnerability in SAP Commerce Cloud, identified as CVE-2026-58231, was reportedly exploited in the wild just three days after its public disclosure. The flaw allows for arbitrary code execution and the compromise of internal system components, posing a significant risk to affected deployments.
Police bust cybercrime ring accused of stealing €30 million in four-day spree
An international law enforcement operation has dismantled a cybercrime ring accused of stealing €30 million from a German financial institution over a four-day period in late 2023. Authorities in Brazil arrested four individuals and are pursuing three additional suspects in Spain and Bulgaria.
Africa’s Cybersecurity Challenge Is Bigger Than Access to Technology
A recent report highlights that the primary cybersecurity challenge facing organizations in Africa extends beyond mere access to technology, according to Gopan Sivasankaran, Rapid7's Regional Director for the Middle East & Africa. The observation focuses on the expanding technological landscape across key nations including Egypt, Nigeria, South Africa, and Kenya, where organizations are…
Black Hat and DEF CON are AI conferences now, too
The recent Black Hat and DEF CON cybersecurity conferences in Las Vegas were dominated by discussions surrounding AI agents and their potential impact on critical infrastructure, with many expressing concern over recent incidents. A particular focus was an OpenAI briefing detailing an incident where its AI agents exhibited unexpected emergent behaviors during a training run.
Akira Ransomware Uses Safe Mode to Bypass EDR
An Akira ransomware affiliate recently attempted to deploy ransomware on a victim's network by first rebooting the compromised host into Safe Mode with Networking, a tactic aimed at disabling endpoint detection and response (EDR) tools. While the maneuver successfully bypassed security controls, the ransomware itself failed to execute due to memory constraints within the stripped-down Safe…
Fortune 500 Companies Hit in Azure Data Theft Campaign
Reports indicate that a threat actor is claiming to have exfiltrated millions of records from multiple large organizations, including McDonald’s, TCS, and Vodafone. The campaign reportedly targets Fortune 500 companies, with the actor asserting successful data theft from several prominent entities. The specific mechanism of the alleged exfiltration was not detailed in the initial reports, but…
Windows 11’s strongest security defenses can be bypassed without a screwdriver
Researchers from the University of Birmingham and Durham University have identified a software-based method to bypass significant security protections in Windows 11, even when an attacker already possesses privileged access to a system. The technique, dubbed "Download More RAM," targets a configuration chip on Dual In-line Memory Modules (DIMMs), commonly known as RAM sticks, found in most…
Hazmat: Open-source containment for AI agents
Hazmat is an open-source tool designed to contain AI coding agents within a separate, isolated environment on a user's machine. The tool aims to prevent agents from accessing sensitive user data by restricting their permissions to only the project directory specified by the user.
Product showcase: ScamNet looks for warning signs in suspicious calls and shady links
Synaptrex Technologies has released ScamNet: Anti-Scam Suite, a consumer security application designed to detect and block various scams across phone calls, text messages, and websites. The application is available for iPhone, iPad, and Mac, with specific features varying by platform. While call protection is exclusive to iPhone, tools like Visual Intelligence are supported on both iPhone and…
Microsoft blames AI for delayed Exchange update, can’t say when it will arrive
Microsoft has acknowledged a delay in the release of Cumulative Update 1 (CU1) for Exchange Server Subscription Edition (SE), attributing the setback to an increased volume of security vulnerabilities identified by artificial intelligence tools. The company’s Exchange team addressed customer inquiries in a post titled “Where is Exchange SE CU1 anyway?” published last Thursday, confirming that…
Chinese AI company Zhipu claims its new is a better bug-finder than Anthropic, OpenAI
Zhipu, a Chinese artificial intelligence company, has introduced a new AI model named GLM-5.3, which it claims surpasses models from Anthropic and OpenAI in its ability to identify software vulnerabilities. The company released benchmark data indicating that GLM-5.3 outperforms Fable 5 and GPT-5.6 Sol on the CyberGym benchmark, a test designed to evaluate an AI model's proficiency in resolving…
SafePal data breach impacts 39,798 customers, stolen info for sale
SafePal, a provider of cryptocurrency hardware wallets, has disclosed a data breach affecting approximately 39,798 customers. The incident, which exposed customer order information, stems from an exploited authorization flaw within an order-tracking plugin.
DDoS Attacks Cause Major Threema Outages
Threema, the Swiss secure messaging service, experienced significant communication disruptions this week due to a series of large-scale distributed denial-of-service (DDoS) attacks. The incidents, which began on Tuesday evening, August 13, 2026, caused intermittent outages for users of its cloud-based service, though customers utilizing Threema On-Prem deployments, which run on their own…
Anthropic confirms Claude is down in major outage affecting multiple services
Anthropic's Claude AI services are experiencing a significant outage, with users reporting difficulties logging in and degraded performance across multiple platforms. The disruption began on August 16, 2026, around 21:58 UTC.
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 110
A new multi-stage Rust-based macOS information stealer, dubbed AmnesiaStealer, has been identified as capable of hijacking Chromium-based browsers to give attackers live control over victims' sessions. This malware is part of a broader trend of evolving cyber threats, which includes the Kimsuky APT group integrating artificial intelligence into its attack operations, from generating decoy…
Large-scale DDoS attacks disrupted Threema secure messaging service
Threema, the Swiss-based secure messaging service, experienced significant disruptions earlier this week due to a series of large-scale distributed denial-of-service (DDoS) attacks. The incidents, which began on Tuesday evening, August 13, 2026, and continued into Wednesday morning, affected the availability of the end-to-end encrypted platform for many users.
Mustang Panda Upgrades CoolClient With a Kernel Rootkit
Mustang Panda, also known as HoneyMyte, has upgraded its CoolClient backdoor with a signed kernel-mode driver, significantly enhancing its stealth and persistence on compromised Windows systems. This new variant, documented by Kaspersky, has been observed in attacks targeting entities in Pakistan, Mongolia, Myanmar, and Russia, including confirmed government organizations.
New AmnesiaStealer macOS malware hijacks browser sessions via remote control
A new information-stealing malware, dubbed AmnesiaStealer, is targeting macOS users through "ClickFix" campaigns, according to research from Jamf. The malware's notable capability is its "stream_module," which allows attackers to remotely control a victim's web browser through a hidden, headless instance, effectively hijacking authenticated sessions.
Stopping a cyberattack while walking your dog - defensive AI security CEO says it's not ruff to do
Corma, an AI security startup, recently announced $60 million in seed funding led by Sequoia Capital, with participation from Khosla Ventures and Coatue. The company, founded approximately a year ago by CEO Alon Pluda, aims to address what it terms the "defense gap" in cybersecurity, where AI models currently exhibit greater proficiency in offensive security tasks compared to defensive ones.
Sophisticated Cyberattack Exposes Data of 678,000 French Taxpayers
France's Directorate-General for Public Finances (DGFiP) has confirmed a sophisticated cyberattack resulted in the theft of personal data belonging to 678,000 taxpayers. The breach, described by tax officials as more complex than previous incidents, exposed income details, tax rates, and family circumstances for individuals, and SIREN registration numbers, business addresses, and authorized…
Crooks Buy Expired Domains for Malware Delivery, Other Threats Detailed
Cybercriminals are increasingly acquiring expired internet domains to host malware and execute other malicious activities, according to recent security reports. This tactic leverages previously legitimate domain names, which can lend an air of trustworthiness to their operations.