#безопасность
-
CISA Adds Exploited WSO2 and Adobe Commerce Flaws to Its KEV Catalog
The U.S. cybersecurity agency CISA has added two critical flaws in WSO2 and in Adobe Commerce and Magento to its KEV catalog, citing evidence of active attacks. Federal agencies must patch them by September 27, 2026.
-
Bitget crypto exchange hacked: $351.6 million stolen
Crypto exchange Bitget says attackers drained $351.6 million from its hot and warm wallets. Suspected North Korean hackers are behind the breach.
-
File Notification Attacks: Side-Channel Leaks on Linux, Android, Windows, and macOS
Researchers in Graz show that subscribing to filesystem change events lets an attacker without read access reconstruct user behavior — from keystroke timing to the list of websites someone visits.
-
Meta staff ordered ‘attorney/client privilege’ hats amid child safety fight
As Meta shields evidence in teen-harm lawsuits by invoking attorney-client privilege, plaintiffs point to a leaked order for baseball caps reading “a/c priv” as proof of a “culture of privilege abuse.”
-
Carbonato malware turns AI agents loose on exposed Docker hosts
A new worm-like botnet hijacks unprotected Docker daemons and deploys the GH0ST AI agent, which runs operator commands and harvests credentials.
-
Meta's Muse will happily hand over its whole filesystem
Two developers say they coaxed Meta's AI platform into zipping up and sharing its entire root filesystem with almost no effort. Meta insists it isn't a breach.
-
Cloudflare fixes cross-tenant data exposure in Containers
Accomplish researchers showed how a Workers Paid customer could read residual data from disks previously used by other tenants' containers on the same host.
-
Critical Roundcube flaw now under active exploitation
Canada's cyber security agency warns that a Roundcube Webmail vulnerability, patched back in May, is now being used in real-world attacks.
-
Two-Tier Encryption in Britain: Identical iPhones, Different Protection
Because of a secret UK government demand, some iPhone owners in the country keep stronger iCloud encryption while others can no longer switch it on.
-
A New Way to Break RSA Is Faster Than Anything Seen Before
Researchers have unveiled an attack on RSA that they say runs faster than anything known so far.
-
Schneier: Defense-Evading Malicious npm Packages Feel Like Nation-State Work
Bruce Schneier flagged a set of malicious npm packages built to slip past defenses. Their sophistication, he says, hints at a nation-state — though there is no direct evidence and no attribution.
-
Starlink ground station in Poland gutted by fire, officials suspect arson
A fire at a facility near Warsaw that carries internet traffic across the region and into Ukraine was set deliberately, says Deputy PM Krzysztof Gawkowski, who sees a Russian hand and an element of hybrid warfare.
-
CISA: Ransomware gangs now exploiting critical TeamCity flaw
The U.S. cybersecurity agency CISA warned that a critical JetBrains TeamCity flaw patched in July is now being abused by ransomware gangs.
-
TeamFiltration Campaign Cracks Seven Microsoft 365 Accounts via Default Passwords
The UNK_CondorFiltration password-spraying campaign hit more than 5,700 accounts across 28 Microsoft 365 tenants, mostly at Chilean retail and financial firms. All seven accounts that fell were forgotten service accounts with default passwords and no MFA.
-
Australia says an OpenAI agent broke into a government website
Australian officials say an OpenAI AI agent gained unauthorised access to a health-statistics portal back in June — possibly the first known case of an AI agent hacking a government site.
-
A documentation placeholder domain now serves ClickFix attacks
The third-party.com domain, used for years as a generic placeholder in developer docs and code samples, now shows a fake Cloudflare check that nudges Windows users into running malicious PowerShell.
-
Malware Sneaks Into HashiCorp Registry via Rogue Terraform Providers
Researchers found Go-based malware distributed through two Terraform providers and two Go modules in the HashiCorp registry — the first time the centralized repository has been used as a delivery channel for malicious payloads.
-
CLOSEDQUORUM: the malware that lets four AI models vote on its next move
Cisco Talos has detailed a Windows implant that, instead of taking orders from an attacker's server, asks several commercial AI services what to do and carries out whichever action wins the most votes.
-
MikroTrick: Taking Over MikroTik Routers Without a Password or Key
CERT Polska has detailed a chain of two RouterOS flaws that let attackers gain full administrative control of Internet-exposed MikroTik routers without ever completing authentication.
-
Critical WordPress RCE flaw: update without delay
A critical WordPress vulnerability can, under certain limited conditions, let an unauthenticated attacker run arbitrary code. Fixes have shipped for the current branch and been backported as far as version 4.7.
- More