#безопасность
-
PhantomRaven: An AI-Written npm Stealer Built to Chase Bug Bounties
CrowdStrike has linked a financially motivated threat actor to malicious npm packages that stole developer tokens. In the analysts' assessment, the stealer's code was almost certainly generated by a large language model.
-
Critical Check Point Vulnerability Opens Root Access to Management Servers
Check Point has released security updates for CVE-2026-91843, a critical vulnerability that allows code execution with root privileges on Security Management Server and Log Server management systems.
-
Lily: an automatic backdoor hunter for the commit and release stages
Researchers have unveiled Lily, a tool that plugs into CI pipelines and release-review processes to catch hidden backdoors in open-source software before they ever reach users.
-
Four Local Root Vulnerabilities in the Linux Kernel: DirtyAH6, TUNderflow, PPPoEject and DiagSpill
Researcher Asim Manizada has disclosed four vulnerabilities in the Linux kernel that let an unprivileged user gain root. The bugs are between 10 and 21 years old, and the fixes have already landed in the stable branches.
-
RatHat: The Android Trojan That Controls the Infected Device with AI
Researchers at Zimperium zLabs have discovered a new Android malware called RatHat, which uses an AI assistant to “intelligently” navigate the interface of an infected smartphone. Based on prompts found in Chinese, the experts link it to Chinese threat actors.
-
CrowdSec confirms source code leak from private repositories
CrowdSec has disclosed that part of its source code was leaked in May 2026. By its own assessment, customer data was not affected, and the likely point of entry was a compromised TanStack library.
-
Rust Developers Warned of Targeted Attacks on Their Accounts and Devices
The Rust security working group and the Crates.io team have reported an ongoing campaign against key project contributors and owners of popular crates. The goal: to spread malicious code across the language's ecosystem.
-
Brevo supply-chain attack: a stolen Cloudflare key infected customer sites
Attackers stole a Cloudflare API key and used an edge worker to inject ClickFix scripts into Brevo's sites and into widgets embedded on customer pages. Up to 100,000 sites may have been affected.
-
A Temporary PHP Patch from 2014 Lived On Through 20 Million Installs
Developer Jake Smith has deprecated his http_build_url polyfill — 174 lines of code written as a stopgap for AOL's CMS that spread across millions of sites.
-
OpenAI Discloses Six Cases of “Concerning” Behavior in Its Models
The company published accounts of six incidents in which experimental models concealed errors, used other people's API keys and posted data to public services — and along the way introduced a new framework for reporting AI misalignment.
-
Critical Flaw in Unbound's DNSSEC Validator Threatens Remote Code Execution
NLnet Labs has released Unbound 1.26.1, fixing a critical heap overflow in the DNSSEC validator (CVE-2026-81642) that could lead to RCE via a malicious DNS zone, along with eight other vulnerabilities.
-
Cisco Fixes a Critical 0-Day in Identity Services Engine Already Being Used in Attacks
The CVE-2026-76460 vulnerability allows authentication to be bypassed via the API and grants access to the device without credentials. Cisco and CISA strongly urge installing the updates immediately.
-
Keys Not Included: Recovering the Keys That Sign the Barcodes on US Driver's Licenses
Researcher Ryan Fahey describes recovering the keys used to sign the barcodes on American driver's licenses.
-
Cyberattack Knocks Out Meteor-Tracking Organization
A nonprofit dedicated to observing meteors has fallen victim to a cyberattack and will be effectively out of operation for several weeks.
-
AI's Embedded Safety Auditors: Independence in Question
Anthropic and OpenAI have promised to let outside experts inside their labs to assess model safety. Researchers welcome the unprecedented access but doubt they'll be able to work in a truly independent way.
-
Iranian hackers spy on activists with the CHOSEN BRICK spyware
Government agencies in the US, the UK and the Netherlands, together with the FBI, have warned about a Windows malware that Iran's intelligence services use against dissidents, activists and journalists around the world.
-
Iranian Strikes on Amazon Data Centers Led to Irrecoverable Loss of Customer Data
The military destruction of AWS data centers exceeded the level of stress Amazon's services are designed to withstand, and some user data was lost beyond any possibility of recovery.
-
Kaspersky: Three Groups Are Attacking Russian Companies — Backdoors, Ransomware and Wipers
Kaspersky Lab has detailed campaigns by the NightEagle, Hacking Cat and Toy Ghouls clusters against Russian enterprises: from stealthy espionage to destructive attacks.
-
One Extension Against Five AI Browsers: How to Bypass an Agent's Defenses
Researchers at Forever Security have shown that an ordinary browser extension can hijack the built-in AI assistants in Chrome, Comet, Edge, Opera Neon and the Claude extension. For now, the attacks remain demonstrations.
-
PlayStation 2 Security Chip Cracked After 26 Years
After four years of work, Canadian enthusiast DiscoStarslayer has managed to read the contents of the MechaCon chip — one of the last unsolved secrets of the original PS2.
- More