#безопасность
-
€30M Stolen from Commerzbank Accounts: Arrests in Brazil and Europe
Police have detained four suspects in Brazil and charged three more in Europe. The perpetrators exploited a vulnerability at a third-party provider and siphoned off around €30M from Commerzbank customer accounts.
-
US Courts Will Start Disclosing How Often the Government Uses Spyware
For the first time, the US judicial system will begin publishing statistics on how many times judges have authorized the interception of communications using hacking tools. The first data will appear in 2029.
-
macOS Screen Sharing Flaw Exploited to Mine Monero
The Dutch cybersecurity center is warning of active exploitation of an authentication-bypass vulnerability in macOS: attackers gain root access and install a cryptocurrency miner.
-
Shell investigates a “possible incident” after Clop claims theft of 89 GB of data
Oil and gas giant Shell has confirmed that it is looking into a potential breach after the ransomware group Clop claimed to have stolen 89 GB of corporate data.
-
RingCentral Data Breach Affects 1.6 Million Accounts
The ransomware group ShinyHunters stole personal data from users of the RingCentral cloud platform following a July breach. The leak was confirmed by the Have I Been Pwned service.
-
Apple Warns Spyware Victims Right on the iPhone Lock Screen
Apple has sent out a new wave of notifications to users whose devices, according to the company, have been targeted by government spyware. This time the alerts reached people in 110 countries.
-
Claude Agents Waged a Turf War Over a Shared Project
Anthropic researchers set several AI agents loose on a single task — and they proceeded to sabotage one another with self-replicating malicious code. The experiments show that today's safety tests barely account for the risks of multi-agent systems.
-
Zoom Hacked in a Single Day: AI Finds a Zero-Click Flaw in Annotations
A Security has discovered a critical vulnerability in Zoom that lets an attacker take over the device of any call participant without a single click. The real story isn't the bug itself, but the fact that a “nation-state-grade” exploit was put together using publicly available AI models in less than a day.
-
Trezor Data Breach: Nearly 14,000 Customers Affected by a Hack of Its Logistics Partner
Trezor, the maker of hardware cryptocurrency wallets, has reported a leak of customers' personal data following a breach at its shipping contractor, ShipMonk. The devices themselves and the company's systems were unaffected.
-
Microsoft closes the LegacyHive zero-day in Windows
In its August batch of updates, Microsoft fixed a vulnerability in the Windows User Profile Service that allowed local escalation to administrator privileges. The patch arrived a month after the PoC was published.
-
For the First Time, the US Will Allow Private Companies to Conduct Cyberattacks
A presidential memorandum authorizes select private firms to run offensive cyber operations against criminal groups — a first in US history.
-
WhatsApp Is Testing Scam Alert: On-Device Warnings About Fraudsters
The optional feature uses a local ML model to flag messages from strangers that show signs of fraud. The contents of the conversation never leave the device.
-
Azure Linux 3.0.20260809: Over 233 Vulnerability Fixes
Microsoft has released another monthly update to the stable Azure Linux 3.0 branch, bundling an impressive set of security patches.
-
Attacks on SharePoint: Public PoC Fuels Exploitation of an Authentication Bypass
After Rapid7 published a proof-of-concept exploit, attackers began actively exploiting the critical CVE-2026-55040 vulnerability in Microsoft SharePoint, which allows a JWT to be forged and lets an attacker impersonate any user.
-
Rsync 3.5: an “extraordinary” release closes 33 vulnerabilities
The popular file-synchronization utility has received an update that its developers have called “extraordinary” because of the sheer number of security issues it fixes.
-
A Duo of Android Malware Takes Out Loans and Relays Victims' Cards in Real Time
The new NFC relay tool WindRelay works in tandem with the RAT SpyNote: attackers gain remote access to a smartphone, take out a loan in the victim's name, and siphon off their bank card data live.
-
Terabytes of Credentials Leaked: A Supply-Chain Attack via LiteLLM
The compromise of LiteLLM, a popular AI-development tool, led to the theft of secrets from more than 2,500 organizations, among them Microsoft, Amazon, Cisco, Samsung and Salesforce.
-
Hackers Target Critical Adobe Commerce Flaw to Hijack Shopper Accounts
Attempts have been detected to exploit CVE-2026-71362 in the Adobe Commerce and Magento platforms, a flaw that allows unauthenticated takeover of other users' sessions.
-
Researcher Publishes New Windows 0-Day Despite Microsoft's Threats to Sue
A specialist going by the handle Nightmare Eclipse has disclosed ShieldBreak, a Windows Defender vulnerability that allows privileges to be escalated to full control of the system. There is no patch yet.
-
Device Takeover via Screen Sharing in Zoom — an AI Found the Flaw in 20 Prompts
Researchers uncovered vulnerabilities in Zoom that allowed an attacker to silently seize control of the device of any participant in a screen-sharing video call. The alarming part: the hole was found by a public AI tool in fewer than twenty prompts.
- More