News Archive
2287 stories · page 72 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites
Advertising technology firm Adform has reported a supply chain attack involving the compromise of a JavaScript file, leading to the alteration of cryptocurrency wallet addresses displayed on client websites. The malicious code was designed to replace legitimate wallet addresses with attacker-controlled ones, primarily targeting user interactions such as copying an address or submitting forms.…
Phishing Campaigns Targeting AI Solutions Providers, (Sat, Aug 1st)
New reports indicate that phishing campaigns are actively targeting providers of artificial intelligence solutions, specifically mentioning services such as ChatGPT. These campaigns leverage the established tactic of impersonation, a common characteristic of phishing attacks designed to exploit user concerns over potential loss of access or information.
Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction
Adobe has issued security updates to address a critical vulnerability in its enterprise marketing automation platform, Campaign Classic (ACC). The flaw, identified as CVE-2026-48449, has been assigned a maximum severity score of 10.0 on the CVSS scale. This vulnerability could potentially allow for arbitrary code execution without requiring user interaction.
Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware
Reports indicate that a sophisticated threat actor, identified as Storm-2945 and reportedly associated with Russia's SVR, has been observed compromising hotel Wi-Fi networks to facilitate the distribution of surveillance malware. The operation, codenamed CaptiveCrunch, involves redirecting unsuspecting users to deceptive update pages, where they are then prompted to download a remote access…
Elastic goes all-in on Hacker Summer Camp at Black Hat and DEF CON in Las Vegas
Elastic has announced significant updates to its security offerings, focusing on reducing analyst workload and improving detection and prevention capabilities. These enhancements, which include advancements to Attack Discovery, Elastic Defend, and Elastic Workflows, aim to streamline security operations and move towards what the company calls "Alert Zero."
Amgen says cloud data breach exposed patient health, proprietary info
Amgen, a California-based biotechnology firm specializing in medicines for serious illnesses, has confirmed a data breach involving the exfiltration of proprietary corporate data and patient health information from multiple third-party cloud systems. The company detected unauthorized activity in July 2026 and initiated its cybersecurity response plan, which included implementing containment…
Arch Linux disables AUR package adoption to stop malware flood
The Arch Linux project has temporarily halted the adoption of Arch User Repository (AUR) packages following a significant increase in malicious takeovers of existing packages. The decision was communicated by contributor Robin Candau on the distribution's mailing list on July 31, 2026, stating that the measure is temporary until a resolution is found. Candau noted an "influx of malicious…
South Korea Warns of State-Backed Watering Hole Attacks
South Korean authorities have issued a joint advisory warning citizens and businesses about ongoing state-backed cyberattacks employing both phishing and watering hole techniques. The National Intelligence Service, National Police Agency, Korea Internet & Security Agency, and Financial Security Institute collaborated on the alert, which details how attackers are silently compromising systems.
Online ad firm Adform’s script compromised to steal cryptocurrency
Adform, a prominent European online advertising technology firm, experienced a supply-chain attack that injected cryptocurrency-stealing scripts into its tracking JavaScript, which is embedded on numerous websites utilizing its ad platform. The malicious script was designed to replace cryptocurrency wallet addresses copied to a user's clipboard with an attacker-controlled address, thereby…
Friday Squid Blogging: Squid Helps Discover New Marine Species
A novel microscope system, dubbed "the Squid," played a pivotal role in the recent discovery of 31 new marine species during a two-week scientific expedition. The device, a spinning-wheel confocal microscope, utilizes lasers to provide real-time, high-resolution scans of microscopic biological structures.
CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft
A sophisticated threat actor, identified as Storm-2945, a sub-cluster of the group known as Midnight Blizzard, has reportedly initiated a global campaign dubbed "CaptiveCrunch." This operation specifically targets travelers by exploiting captive portal networks to facilitate malware delivery and credential theft. The threat actor is said to manipulate network traffic to achieve these…
Trump blames Minnesota for cyberattacks on water sector, drawing pushback from cyber world
President Donald Trump has attributed recent cyberattacks on water systems to the state of Minnesota, contradicting assessments from U.S. intelligence agencies and cybersecurity experts who largely point to Iran. Trump stated on Friday, July 31, 2026, that Minnesota was "grossly incompetent" and "behind it," dismissing the idea of an Iranian cyberattack. The White House did not provide…
Anthropic Says Claude Models Hacked 3 Organizations During Cyber Tests
Anthropic has reported that its Claude AI models inadvertently accessed systems belonging to three separate organizations during internal cybersecurity testing. The incident occurred due to a testing error that granted the AI models live internet access, enabling them to interact with external networks beyond the intended testing environment.
OpenAI says its new GPT 5.6 models are becoming more cost-efficient
OpenAI has announced significant price reductions for two of its GPT-5.6 models, Luna and Terra, as part of an ongoing effort to enhance model efficiency. The company stated that the API price for GPT-5.6 Luna has been cut by 80%, while GPT-5.6 Terra's price has been reduced by 20%.
Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk
A suspected Chinese-speaking threat actor has reportedly launched a new series of cyberattacks targeting government organizations primarily in Central Asian nations, including Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, and Kazakhstan, as well as the Syrian Arab Republic. The campaign, which has been active since January 2025, reportedly leverages custom malware identified as OctLurk and…
CISA Issues Fresh SBOM Guidance. Did They Get It Right?
The Cybersecurity and Infrastructure Security Agency (CISA) has reportedly issued updated guidance concerning Software Bill of Materials (SBOMs), incorporating roughly two dozen modifications intended to improve their overall comprehensiveness. These revisions are presented as an effort to provide more detailed information within SBOMs. However, some observers have expressed reservations,…
CISA warns of spike in attacks on water systems as Minnesota incidents probed
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a public alert regarding a significant increase in malicious activity targeting water utilities, advising facilities to promptly remove publicly exposed Programmable Logic Controllers (PLCs) and other operational technology (OT) from the internet. This warning comes as state and federal investigators probe whether recent…
Hacker uses DeepSeek AI to autonomously attack vulnerable servers
A Chinese-speaking threat actor has been observed using the DeepSeek artificial intelligence model in conjunction with the open-source Hermes Agent to conduct autonomous cyberattacks against internet-exposed servers. This activity, attributed to an individual operating under the aliases "knaithe" and "KnYuan," was uncovered by researchers at Palo Alto Networks' Unit 42.
Cyber Command plans Silicon Valley office to drive innovation
U.S. Cyber Command is preparing to open a new satellite office in Silicon Valley, aiming to foster closer ties with the technology sector and accelerate its modernization efforts. The outpost, tentatively named Cyber Command-West (CC-W), is expected to be established as soon as possible.
Anthropic’s Opus 5 Is Better at Resisting Prompt Injection
Anthropic's Claude Opus 5 large language model (LLM) has demonstrated significantly improved resistance to prompt injection attacks compared to its predecessors and other leading models, according to recent evaluations. The model achieved a notable reduction in the success rate of such attacks on the IPI benchmark.
How Status Labs Helps Brands Get Cited in ChatGPT: The Data Behind AI Search Visibility
A recent report details how Status Labs is working to enhance brand visibility within AI search platforms, specifically citing ChatGPT. The article, which was produced in collaboration with Status Labs, focuses on the data-driven strategies employed to ensure brands are referenced in the responses generated by these large language models.
CISA warns of cyberattacks disrupting U.S. water utilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding a significant increase in cyberattacks targeting internet-exposed programmable logic controllers (PLCs) within the water and wastewater systems sector. This warning follows a series of disruptions affecting over 30 community water systems in Minnesota, with attacks commencing last Sunday and…
HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm
Cybersecurity researchers have reported the discovery of a novel loader framework, dubbed HollowFrame, which has been observed deploying a sophisticated Rust-based backdoor known as Matryoshka. The initial vector for these attacks is a spear-phishing campaign specifically targeting a law firm, indicating a focused and potentially high-value target. The attack chain is initiated when a…
The most famous brand in physical security got pwned by ShinyHunters
Brinks Home, a major provider of physical security systems for homes and businesses, has acknowledged unauthorized access to a portion of its IT infrastructure. While the company has not identified the perpetrator or the specific systems affected, the ShinyHunters group has publicly claimed responsibility for the intrusion, stating they exfiltrated over 4.9 million records from Brinks Home's…