#безопасность
-
SonicWall Patches Two 0-Days in SMA 1000: Attackers Chain the Flaws Together
The company released updates for its SMA 1000 series VPN gateways after two vulnerabilities — one of them rated a maximum 10 on the CVSS scale — were actively exploited.
-
Windows 11 to enable memory protection on more devices — at the cost of gaming performance
Microsoft will start turning on memory integrity on eligible devices as soon as next month. The protection works at the kernel level, but on older processors it can lower frame rates in games.
-
The Sality Botnet Neutralized by Its Own P2P Protocol
The US Justice Department has announced the takedown of the peer-to-peer Sality network, active since 2003. Investigators turned the botnet's resilient P2P architecture against itself.
-
The “Vulnpocalypse” Is Reshaping the Economics of Bug Bounty Programs
Dark Reading argues that the avalanche of new vulnerabilities is repricing the bug bounty market.
-
FBI Probes Dark-Web Trade in Scans of 153 Million Driver's Licenses
A new service called Nexus is selling digital copies of more than 153 million driver's licenses belonging to U.S. and Canadian residents. The source appears to be a breach at a Louisiana-based identity-verification vendor.
-
JFrog Artifactory Critical Vulnerability Comes Under Attack Within Days
Attackers are exploiting a fresh authentication bypass flaw in JFrog Artifactory to mint themselves admin tokens. According to watchTowr, the attacks began just days after disclosure.
-
Leaked Training Materials Reveal the Talent Pipeline of Russia's Cyber Units
The leaked documents describe how university training turns into service with the intelligence and cyber structures of the General Staff. The materials present Russia's cyber capability as an institutional system rather than a collection of separate groups.
-
Nearly 22,000 Microsoft Exchange Servers Vulnerable to Mail Hijacking
Tens of thousands of unpatched Exchange servers remain exposed online, vulnerable to the CVE-2026-62911 authentication bypass. An exploit is already public, and the most unpatched systems are in the US and Germany.
-
BGP Hijacking Attack: Virtualizor Users Served a Malicious Update
Attackers hijacked the BGP routing of Softaculous's update infrastructure and, for several days, redirected the traffic to their own servers, delivering an infected package to some installations of the VPS control panel.
-
Criminals Don't Want Elegant Attacks — They Want Repeatable Ones
An analytical breakdown from The Hacker News explains why cybercrime has turned into a generics manufacturing business: attackers don't invent, they replicate what others have already built.
-
Stolen METR Key Handed Attackers Nearly $600,000 in AI Resources
METR, a nonprofit that evaluates frontier AI models, has disclosed two incidents: attackers made off with an API key and burned through someone else's compute credits, and later methodically probed its infrastructure.
-
GuardBreaker: hackers hide a nuclear-weapons prompt in their code to fool AI analysts
The pro-Russian group UAC-0099 embedded provocative text in a malicious script, designed to trip the safety mechanisms of language models and derail automated analysis.
-
Hackers Launch Mass Attacks on Critical Langflow and Ruby on Rails Vulnerabilities
VulnCheck researchers have observed active exploitation of two critical flaws in the AI platform Langflow and in Ruby on Rails: attackers are hunting for credentials and standing up command infrastructure.
-
Fresh PaperCut Vulnerabilities Exploited to Steal Data
Two recently patched zero-day vulnerabilities in PaperCut NG and MF are now being used by attackers to steal data from vulnerable print servers.
-
A Prompt Injection Hidden in a Court Filing
Bruce Schneier flagged a curious case: hidden instructions had been embedded in the text of a court document, addressed not to the judge but to an artificial intelligence.
-
Fire Ant Moves From Hypervisors to Cisco Routers
The Chinese cyber-espionage group Fire Ant is hijacking Cisco IOS XR routers, TACACS servers and Linux hosts, turning them into platforms for intercepting traffic and stealing credentials while blinding defenders' monitoring tools along the way.
-
US Justice Department Reworded Its Statement: Agencies Weren't Victims of Chinese Hackers, but Targets
The US Department of Justice has rewritten its press release about the cyber operation by the QTFY group: the agencies are now called “targets” rather than “victims” of the attacks. The change in wording indicates that only some of the organizations were actually breached.
-
Omarchy: any user process could get root without a password
In the Omarchy distribution, the default standard user was placed in the docker group, opening a path to root access for any process in the session. The issue was fixed in version 4.0.1.
-
In its ProtectEU strategy, the European Commission again pushes for encryption “backdoors”
Under the banner of “lawful access” for law enforcement, the EU returns to the idea of weakening end-to-end encryption. Critics warn: a backdoor would open the doors to everyone, hostile states included.
-
FulcrumSec claims theft of 86 GB of data from Manchester airports operator
The extortion group FulcrumSec has claimed responsibility for the breach of Manchester Airports Group, saying it stole around 86 GB of customer data. The samples point to a far more detailed leak than the company initially admitted.
- More