#безопасность
-
ConnectWise Warns of New ScreenConnect Flaw — No Patch Yet
ConnectWise has disclosed temporary mitigations for a new vulnerability in its ScreenConnect remote access platform. A fix is promised later this week.
-
JSCeal: Crypto Malware Hijacks Google Sessions and Spoofs Exchange Traffic
Researchers at Check Point have dissected JSCeal — a compiled JavaScript malware that steals browser cookies, bypasses Google authentication, and tampers with crypto-exchange traffic.
-
N-able rushes out a fix for a critical RCE flaw in N-central
N-able has released an emergency update for its N-central remote monitoring platform, patching a maximum-severity vulnerability that allows arbitrary code execution without authentication.
-
GrapheneOS Overhauls Its Stock Apps and Secure Clipboard
The developers of GrapheneOS, a hardened mobile OS, have announced a reworking of their suite of default apps and their secure clipboard mechanism.
-
Security vs. “safety”: why AI agents keep escaping their sandboxes
Martin Alderson argues that the leading AI labs have confused security with model “safety” — and that this is exactly why their agents broke out of the sandbox.
-
REVSTEALER leaves four modules behind — one disables Windows Update and Defender to make room for a miner
Elastic Security Labs has documented four previously unknown programs tied to a new Windows stealer, REVSTEALER. Unlike the stealer itself, they persist on the system — and one of the modules muzzles the defenses to launch a cryptominer.
-
MikroTrick: attacks on MikroTik routers via internet-exposed SSH
CERT Polska warns: attackers are gaining full administrative control over MikroTik routers without authentication by exploiting an internet-accessible SSH service. The attacks have been recorded since at least September 2.
-
StyleSmuggler: An Unpatched Magento 0-Day Is Already Being Used to Break Into Stores
The Dutch firm Sansec has disclosed a critical vulnerability in Magento Open Source and Adobe Commerce that allows code execution on the server without authentication. Attacks are happening right now, and there's still no patch from Adobe.
-
Broadcom Patches Critical Vulnerability in VMware Workstation and Fusion
The integer overflow flaw lets an attacker with administrator privileges inside a virtual machine execute arbitrary code on the host system. There are no workarounds — only an update helps.
-
5,400 hacked sites serve up ClickFix payloads from the BNB blockchain
A large cybercriminal campaign is using thousands of compromised small-business sites to deliver malicious code hidden inside smart contracts on the BNB Smart Chain test network.
-
The “Trusting Trust” Attack via strip: How to Infect an Entire Linux Distribution
Researchers have shown that Ken Thompson's famous attack on the compiler isn't limited to compilers — they carried it out through the strip utility and planted a backdoor in nearly every binary in NixOS.
-
OpenAI Concealed Incident of AI Agents Hijacking a German Wiki
OpenAI's autonomous agents turned an obscure wiki into a covert message board where they swapped answers and tricks for getting around their constraints. The company chose not to disclose the incident, deeming it a model “misalignment” rather than a security breach.
-
Hackers Target Schools and Universities Through PaperCut Vulnerabilities
Attackers are chaining two recently discovered vulnerabilities in the PaperCut print management system to steal credentials at educational institutions across the US and Europe.
-
Actively Exploited Sandbox RCE Vulnerability in All Versions of Chromium
An entry has appeared in the NVD for the critical vulnerability CVE-2026-85046, which affects all versions of Chromium and, judging by its description, is already being used in attacks.
-
ASCII smuggling: invisible Unicode migrates from AI attacks to spam
A trick devised two years ago to sneak instructions into chatbots is now being used en masse by spammers to slip past email filters.
-
IDScan Hit With Lawsuits Over Breach of 153 Million Driver's Licenses
The identity-verification company is accused of compromising a database that hackers put up for sale on the dark web. The FBI is investigating.
-
Attacks on a Critical Authentication-Bypass Flaw in Citrix NetScaler Have Begun
Threat actors have started exploiting the critical CVE-2026-19490 vulnerability in Citrix NetScaler following the release of a working PoC exploit. The flaw allows authentication to be bypassed remotely and without privileges.
-
NetworkManager Catches AI Agents on the Word “biblioklept”
The project's developers came up with a clever trick: an instruction that forces rule-breaking AI bots to expose themselves.
-
39 Ways to Bypass Passkeys Without Breaking FIDO2 Cryptography
Researchers have documented at least 39 methods for compromising passkey-based authentication. None of them requires breaking the cryptography—they attack everything around it.
-
A Voting System Vulnerability: AI Reconstructed the Order of the Ballots
Nearly four years after the vulnerability was disclosed, an expert used an AI agent to exploit it again — analyzing voter behavior in the Georgia primary without ever touching the voting equipment.
- More