#безопасность
-
Dell patches max-severity flaws in Kubernetes storage modules
The company has fixed two maximum-severity vulnerabilities in its CSM authorization modules that let an unauthenticated attacker seize full administrative control over enterprise storage.
-
Epic halts product work to patch flaws threatening patients' records
The maker of MyChart, which holds records for over 320 million patients, has shelved most product development for weeks to fix vulnerabilities surfaced by an Anthropic AI model.
-
Microsoft’s X Account Hijacked for a Clippy Crypto Pump-and-Dump
Microsoft’s official X account, with over 13 million followers, was commandeered to promote a crypto token in an apparent pump-and-dump scheme.
-
Android 17 Locks Accessibility Services to Verified Tools Under Advanced Protection
Google is closing one of the main delivery channels for mobile malware: with Advanced Protection on, only verified apps classified as Accessibility Tools will reach the AccessibilityService API.
-
Debian ships a record-long list of Linux kernel fixes
Advisory DSA-6528-1 patches hundreds of kernel vulnerabilities that could lead to privilege escalation, denial of service or information leaks. In Debian stable they are fixed in version 6.12.111-1.
-
Fortinet warns of critical FortiMail flaw already exploited in the wild
Fortinet has disclosed a critical FortiMail vulnerability with a CVSS score of 9.8 that attackers are exploiting as a zero-day. Patches are not yet available for every affected version.
-
Autonomous AI agents tried to hack US and Canadian government sites
Autonomous AI agents used aggressive tactics, up to SQL injection, to dig out school statistics and archival divorce records. On the evidence available, they never reached any non-public data.
-
Two US federal agencies breached in a single month, spilling sensitive data
According to Ars Technica, two US federal agencies were breached within a single month, exposing a substantial trove of sensitive information.
-
Greg Kroah-Hartman on the LLM bug deluge: “don’t panic”
At Kernel Recipes 2026, Greg Kroah-Hartman explained how the Linux kernel's security team is coping with the flood of vulnerability reports unleashed by large language models.
-
The Connected Car as a Surveillance Platform
Researchers at Northeastern University and Consumer Reports examined how much modern cars spy on their drivers — and who ends up with the data.
-
OpenAI Shuts Down a Bid to Siphon Off Its Models' Reasoning
The company says it halted a coordinated campaign to illicitly extract the protected reasoning of its AI. The core of the activity is tied to people associated with China's Moonshot AI.
-
Matthew Green: sandboxes won't stop a worm made of AI agents
Cryptographer Matthew Green describes how two harmless properties of autonomous agents combine into the blueprint for a self-spreading worm.
-
Huntress Reports VMware ESXi Exploitation in the Wild
Researchers at Huntress have observed exploitation of a VMware ESXi hypervisor flaw that allows an attacker to escape the confines of a virtual machine.
-
MetaMask Exits Ethereum Validators After Security Incident
The crypto wallet maker says it is responding to an "ongoing security incident" affecting part of its infrastructure and is proactively exiting affected staking validators as a precaution.
-
No Warrant Needed: US Agents Can Search Your Phone at the Border
An immigration advocate is suing border agents who demanded his cell phone — a reminder that the "border exemption" to your rights is very real.
-
DIVD: Zammad zero-days let an AI agent breach its network
The Dutch Institute for Vulnerability Disclosure says its network was breached through a chain of two zero-day flaws in the open-source Zammad ticketing system — with an autonomous AI agent at the controls.
-
Hackers steal personal records of millions of US military personnel
The US Department of Defense is notifying current and former service members that their personal data was stolen during a months-long breach of Pentagon personnel records.
-
Google unveils Gemini 4 Argon — and immediately locks it down
Google says its new frontier model is so capable that, for now, only a set of "trusted cyber defenders" gets to use it.
-
Attackers Weaponize Zimbra Flaw to Plant Web Shells and Steal Auth Secrets
Microsoft reports that attackers exploited an already-patched Zimbra Collaboration Suite flaw to deploy web shells, read mailboxes, and harvest server-wide authentication secrets.
-
CISA flags critical pre-auth RCE flaw in MikroTik RouterOS
The U.S. cybersecurity agency warns of a flaw in the RouterOS web interface that lets an unauthenticated attacker run code as root with a single request.
- More