News Archive
2287 stories · page 61 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
Poland uncovers second heat plant cyberattack that went hidden for months
Polish cybersecurity authorities have disclosed a previously unacknowledged cyberattack that impacted a combined heat and power plant last winter, coinciding with a period of severe cold. This incident occurred on the same day in December as a series of coordinated cyberattacks that targeted over 30 other renewable energy installations and a larger heat plant, which Poland publicly…
Senate Democrats introduce bill to distribute $300 million annually to shore up water system cybersecurity
Two Democratic senators have introduced legislation aimed at bolstering the cybersecurity of the nation's water and wastewater systems, proposing an annual allocation of $300 million for improvements. Senators Adam Schiff (D-Calif.) and Amy Klobuchar (D-Minn.) unveiled the Water Cyber Shield Act, which seeks to grant the Environmental Protection Agency (EPA) enhanced authority to regulate…
Researchers Uncover RovoBlast Vulnerability in Atlassian AI Assistant
A vulnerability, dubbed "RovoBlast" by Varonis Threat Labs, was discovered in Atlassian's enterprise AI assistant, Rovo, allowing for the exfiltration of company data through a single crafted link. The flaw was disclosed to Atlassian by Varonis, which published its analysis on August 7 after presenting the research at DEF CON 34. Atlassian has since confirmed and fixed the issue.
New turnkey kit makes it easy for anyone to become a scammer
A new "turnkey" scam kit, priced at $500, has been discovered on a cybercrime forum, offering a comprehensive package designed to facilitate cryptocurrency investment fraud. The kit, marketed by a threat actor known as "xrep," provides a ready-made website and backend infrastructure, significantly lowering the technical barrier for individuals looking to launch sophisticated scams.
Russian military hackers pose as recruiters to target Ukrainian IT workers
Russian military intelligence hackers are reportedly impersonating recruiters to trick Ukrainian IT professionals into installing malicious software. Ukraine's Computer Emergency Response Team (CERT-UA) confirmed that the campaign has been active since at least May and is attributed to Sandworm, a hacking group associated with Russia's GRU military intelligence agency, also known as APT44 or…
UK man tied to The Com sentenced for abusing 117 victims
A 20-year-old man in the United Kingdom, Justin Swaddle, has been sentenced to two years in prison after admitting to an online abuse campaign that affected 117 victims across multiple countries. Swaddle, who was a minor when the offenses occurred, pleaded guilty to child sexual abuse offenses and blackmail. He will also be required to register as a sex offender.
Elevating Trust: Email Threat Defense Achieves FedRAMP Class D (High) Certification
Cisco Secure Email Threat Defense has achieved FedRAMP Class D (High) certification, a designation that signifies the solution meets stringent U.S. government standards for cloud product security. This certification applies specifically to Cisco Secure Email Threat Defense for Government, which is designed to protect sensitive communications for federal agencies, contractors, and organizations…
DeadLock Ransomware Uses Rust and Decentralized Infrastructure
Recent reports indicate the emergence of DeadLock ransomware, a new threat notable for its implementation in the Rust programming language and its adoption of a decentralized infrastructure. This design choice reportedly enhances the ransomware's operational resilience, particularly concerning its command-and-control mechanisms and data leak operations. The group behind DeadLock is said to…
Cyberattack on Steam hardware shipper leaks names, addresses, and order data
Valve, the video game publisher, has begun notifying European customers of a data breach at CEVA Logistics, its shipping partner for Steam hardware. The incident, which occurred between July 29 and August 1, 2026, potentially exposed personal information and order details for customers who purchased Steam hardware in Europe.
Ransomware Gangs Exploit SonicWall SMA1000 Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware groups are actively exploiting two recently patched vulnerabilities in SonicWall SMA1000 secure remote access gateways. These flaws, identified as CVE-2026-15409 and CVE-2026-15410, include a maximum-severity server-side request forgery (SSRF) vulnerability.
OpenAI’s Upcoming Astra Model Raises Autonomous Cyberattack Concerns
Reports indicate that OpenAI's forthcoming Astra model is generating concerns within the cybersecurity community regarding its potential for autonomous cyberattacks. While the current GPT-5.6-Sol model has been assigned a "high" cybersecurity threshold, the Astra model is projected to potentially reach the maximum "critical" threshold, signaling a significant escalation in perceived risk.
WordPress Plugins Compromised Without a Single File Change
Seven WordPress plugins developed by BdThemes, a vendor of Elementor add-ons, were exploited to inject rogue administrator accounts and webshells onto live websites. The compromise, which did not involve modifying any plugin files, was reported on August 7 and publicly analyzed by Wordfence on August 8. All seven affected plugins, distributed through the official WordPress.org directory, have…
Metabase zero-day exploited to access Framework customer data
Framework, a San Francisco-based laptop manufacturer, has confirmed a data breach stemming from a zero-day vulnerability in the Metabase business intelligence service. The incident led to unauthorized access to customer names, email addresses, phone numbers, physical addresses, and login IP addresses. Framework clarified that payment information and order records were not compromised.
Attackers pick Levi's pockets in social engineering attack
Levi Strauss & Co. is investigating a data breach that resulted from a social engineering attack, which allowed unauthorized access to three employee work computers. The apparel manufacturer confirmed in a regulatory filing that attackers accessed and exfiltrated "certain corporate information."
Wetherspoons bars smart glasses from filming customers
Wetherspoon, a major UK pub chain, has announced a policy requiring customers to disable the recording functions of smart glasses, such as those produced by Meta, while inside its establishments. The company stated that while it does not outright ban the wearing of these devices, the act of filming customers or employees without explicit permission is prohibited.
Valve notifies Steam hardware customers of a data breach
Valve, the company behind the Steam digital distribution platform, has begun notifying European hardware customers of a data breach stemming from a cyberattack on its shipping partner, CEVA Logistics. The incident, which Valve learned about on August 7, compromised personal information necessary for shipping hardware orders.
New Jersey, Alabama Join States Targeted in Water Cyberattacks
Water facilities in New Jersey and Alabama have reportedly joined a growing list of states targeted in cyberattacks against industrial control systems (ICS). The incidents are part of a broader campaign attributed to Iranian-linked hackers, which has reportedly impacted water infrastructure in at least a dozen U.S. states.
N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577
N-able has released a second security hotfix for its N-central remote monitoring and management (RMM) solution, urging all partners to update immediately. This new hotfix, version 2026.3.1.10 (2026.3 Hotfix 2), provides additional hardening measures to protect against ongoing exploitation of CVE-2026-18577, an authentication bypass vulnerability. The company recommends upgrading agents on…
Novel Private APN Pivot Let Hackers Sabotage Second Polish Energy Facility
Reports indicate that a second Polish energy facility has been targeted in an attack that leveraged a novel pivot point: a private Access Point Name (APN). According to CERT.PL, this incident marks what is believed to be the first documented instance of a private APN being exploited as an attack vector to facilitate sabotage.
IT threat evolution in Q2 2026. Non-mobile statistics
In the second quarter of 2026, cybersecurity firms observed a dynamic threat landscape, marked by significant ransomware activity, the emergence of new malware variants, and notable disruptions to cybercriminal operations. Kaspersky products alone blocked nearly 400 million online attacks and identified over 16 million malicious objects during this period.
IT threat evolution in Q2 2026. Mobile statistics
In the second quarter of 2026, cybersecurity researchers observed a continued decline in the overall number of attacks on mobile devices, with just under 2 million incidents blocked. Despite this decrease, new and evolving threats, particularly mobile banking Trojans and sophisticated droppers, remained a significant concern for Android and iOS users.
Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials
Cybersecurity researchers have issued an alert regarding a malicious Microsoft Visual Studio Code (VS Code) extension, identified as "Solidity Pro" (solidity-pro), which has been observed deploying a browser wallet and credential-stealing malware. The report specifically named two variants of this extension: helper-beeps.solidity-pro and web3devtoolsx.solidity-pro. While these extensions are…
OpenAI locks down Astra over potential critical cyber capabilities
OpenAI has initiated a lockdown of its forthcoming Astra model after internal evaluations revealed significant advancements in its agentic coding and cybersecurity capabilities. The company stated it cannot definitively rule out Astra achieving a "critical capability" level for cybersecurity under its Preparedness Framework, which outlines risk assessment and safeguard protocols for advanced…
GitHub Dependabot malware alerts now cover eight ecosystems
GitHub's Dependabot malware alert system has expanded its coverage from a single ecosystem, npm, to include seven additional package ecosystems: PyPI, Maven, RubyGems, NuGet, Go, crates.io, and PHP Composer. This enhancement, which became active in August 2026, allows Dependabot to issue malware alerts for packages across all eight supported ecosystems, provided users enable the feature.