#безопасность
-
AI assistant session hijacked: the Shai-Hulud worm spread across a hundred repositories
Mandiant described an attack in which an attacker hijacked an active session of a developer's AI assistant and, through a poisoned package it had recommended, launched a self-propagating worm.
-
A Critical ScreenConnect Vulnerability Is Already Being Exploited in Attacks
CISA warns of active exploitation of a critical flaw in ConnectWise ScreenConnect and orders federal agencies to fix it within three days.
-
Critical WSO2 API Manager Vulnerability Allowing Admin-Token Forgery Is Already Being Exploited
Researchers at watchTowr have observed active attacks against WSO2 API Manager: attackers bypass JWT validation and gain administrator privileges. The vulnerability has been assigned the maximum severity rating.
-
Google Patches Actively Exploited 0-Day in Pixel
September's patch set for Pixel smartphones fixes 110 vulnerabilities, including a modem zero-day already being used in targeted attacks.
-
Ubuntu 26.10 Completes the Switch to Rust-Based coreutils
In the “Stonking Stingray” release, the last holdouts — cp, mv and rm — move to the memory-safe versions. Nothing changes for users; the gain is purely in security.
-
Jensen Huang: AI regulation isn't needed — companies will handle safety themselves
Speaking at the Dreamforce conference, the head of Nvidia declared that artificial intelligence is just “hardware and software,” and that its safety is a matter for engineering rather than legislation. The market, in his view, will punish anyone who ships an unsafe product.
-
Acronis: Actively Exploited Vulnerability in cPanel Backup Plugin
Acronis has reported a high-severity local privilege escalation vulnerability in its plugins for cPanel, WHM and Plesk. According to the company, the flaw is already being used in limited, targeted attacks.
-
25 Minutes to Admin Access: How an AI Agent Found a Live Baseten GitHub Token
Strix was vetting the inference provider Baseten before entrusting it with the company's data — and its autonomous agent obtained a token with admin rights to key repositories in 25 minutes.
-
Hack of Admin Menu Editor Pro Developer Turned Updates Into a Backdoor on 1,500 WordPress Sites
The attacker gained access to the site of the developer behind a popular plugin and distributed malicious updates that create a hidden administrator account. At least 230 customers were affected.
-
The Leak of 153 Million US Driver's Licenses — a National Security Threat
The dark-web service Nexus traded access to 153 million driver's licenses belonging to US and Canadian citizens, along with 3 million travel documents. The Lawfare author warns: data like this fuels not only fraudsters but also the intelligence services of America's adversaries.
-
BambooToken: Malware Controls Windows and Linux Through the IoT Protocol MQTT
A previously unknown malware framework called BambooToken, active since at least 2023, has adopted the lightweight MQTT protocol for covert communication with infected servers. According to Lumen researchers, the nature of the attacks points to a link with pro-Chinese operations.
-
Fedora 45 Beta: KMSCON Instead of the Kernel Console, GNOME 51, and New Security Rules
The Fedora Project has released the beta of its 45th release right on schedule. The distribution replaces the kernel's built-in console with KMSCON and tightens the default security settings.
-
Ransomware Gangs Join Attacks on Critical VMware vCenter RCE Flaw
CISA warns that ransomware operations have joined the exploitation of a critical vCenter vulnerability that Broadcom patched back in July.
-
Twenty-Five Years of Mass Surveillance: Time to Take Stock
In an essay for Lawfare, Bruce Schneier and Cindy Cohn argue that the architecture of total surveillance that emerged after 9/11 long ago outgrew the fight against terrorism and has become a routine tool for the police, ICE and private companies.
-
Critical LiteSpeed Enterprise Flaw Hands Out Root on Shared Hosting
cPanel warned that a defect in LiteSpeed Web Server Enterprise lets the owner of a single account take over an entire shared-hosting server. A patch is already out, but it's in no hurry to arrive automatically.
-
Microsoft Ships Emergency Fix for Its Record-Breaking September Windows 11 Patch
The largest set of fixes in the company's history closed nearly a thousand vulnerabilities — and broke some features at the same time. An out-of-band update had to be rushed out.
-
Critical Cisco Secure Email Gateway Vulnerability Exploited in Attacks
Cisco has warned of active exploitation of CVE-2026-76461, rated 9.8, which allows remote command execution with root privileges through a specially crafted email.
-
VPN Flaw Exposes Data of 246,000 Japanese Government Personnel
Japan's Digital Agency has reported a leak of roughly 246,000 records containing the personal data of public-sector employees: an attacker breached the system through a vulnerability in a VPN device.
-
Microsoft issues a “code of conduct” for AI: don’t hack systems and don’t deceive people
Microsoft has published a set of rules laying out the values and “red lines” for its own AI models — amid the industry’s growing focus on safety and control.
-
DDRop: A Cheap Interposer Breaks Intel TDX and AMD SEV-SNP
Researchers have demonstrated a hardware attack that forces a processor to read stale encrypted data, bypassing the protections of confidential computing in the cloud. The device used for the attack costs less than $200.
- More