#безопасность
-
18 Malicious npm Packages Target Alibaba Tooling Developers
Researchers have uncovered a targeted supply-chain attack: masquerading as private Alibaba packages, a cross-platform remote access trojan is being spread to Chinese-speaking developers.
-
INC Ransomware Emerges as the Top Exploiter of SonicWall SMA 1000 Vulnerabilities
According to Resecurity, since early August 2026 the INC Ransomware group has been actively exploiting a chain of vulnerabilities in SonicWall VPN appliances to breach corporate networks.
-
Three Attacks on Google Password Manager Let Attackers Hijack Passkey Accounts
Unit 42 researchers describe three ways malware running with ordinary user privileges on Windows can log into a victim's passkey-protected accounts — with no fingerprint, no PIN and no on-screen prompt of any kind.
-
Samsung Bans Smart TV Apps That Share Users' Internet with Strangers
Norwegian researchers found residential-proxy code in popular Samsung Smart TV apps that turns televisions into relays for other people's traffic. The company has promised to remove such programs.
-
Critical SQLite CVEs Turned Out to Be AI Fabrications
The JFrog blog breaks down a series of SQLite “vulnerabilities,” some of which made it into authoritative databases — all of them entirely fabricated by language models.
-
OpenAI Models Broke Out of the Sandbox and Attacked Another AI Company
Bruce Schneier unpacks the story of how, during internal testing, two OpenAI models left an isolated environment and tried to attack a third-party company. The genie, he says, is already out of the bottle.
-
Thermo Fisher Patches Flaw That Let Forensic DNA Files Be Tampered With Undetected
The company has released digitally signed updates for its Applied Biosystems software, but three legacy product lines won't get the fix. Researchers believe the flaw has existed in forensic lab files since 1995.
-
FaceHugger: Diffusers Vulnerabilities Bypass the trust_remote_code Safeguard
Researchers at Zafran Labs have disclosed three vulnerabilities in Hugging Face's Diffusers library that let malicious model repositories silently execute arbitrary code on the machine that loads them.
-
N-central Breach: The First Patch Didn't Close the Hole, Attackers Took Over MSP Servers
N-able reported that attackers exploited an authentication bypass in the N-central platform, gained administrative access to servers, and reached the client systems managed through them. The first fix turned out to be incomplete.
-
California launches DROP: one request wipes your data from hundreds of brokers
Since August 1, registered data brokers have been required to honor requests from California residents submitted through DROP, a single platform. Over the past six months, roughly 350,000 people have signed up for the service.
-
EU Age Verification Project to Require Hardware-Bound Attestation
Judging by its requirements, the European age-verification project for online users will rely on device-bound hardware attestation.
-
Chrome Prepares to Block New-Tab Hijacker Extensions
Google is developing a protection that will stop malicious programs from swapping out Chrome's start page and search engine through enterprise policies. The feature is still in development.
-
Why LLMs Won't Break Symmetric Cryptography
Cryptographer Jean-Philippe Aumasson comments on the new attacks found with an Anthropic model and explains why neural networks pose no threat to AES, SHA-3 and BLAKE3.
-
A False “Refutation” of the Collatz Conjecture Exposed a Bug in Lean's Kernel
A soundness bug has been found in the Lean proof system's kernel: with the help of AI, a formally accepted but incorrect “refutation” of the Collatz conjecture was constructed. Lean's author, Leonardo de Moura, has published a breakdown of what happened.
-
Pre-auth RCE in Apple Screen Sharing: root in 60 seconds thanks to a forgotten error code
A critical vulnerability has been found in the screensharingd daemon on macOS up to version 26.5: a bug in the SRP frame-length check lets an unauthenticated attacker gain root privileges with no password and no user interaction.
-
A Surveillance Treaty Dressed Up as Fighting Cybercrime: Canada Signs the UN Convention
Ottawa quietly signed the UN Convention against Cybercrime at the height of summer — a treaty it had itself opposed and declined to sign just nine months earlier. Rights advocates warn that behind the banner of fighting crime lies a global mechanism for cross-border surveillance.
-
Coldcard Vulnerability: $70M in Bitcoin Stolen in 41 Minutes
A bug in the Coldcard hardware wallet's firmware reduced seed-phrase generation to a predictable software generator. On July 30 an attacker drained 1,196 addresses, moving out 1,082.65 BTC.
-
The Adform Breach: A Swapped Script Rewrote Crypto Wallets on Clients' Sites
Attackers altered a JavaScript file belonging to the Adform advertising platform, turning it into an in-browser tool for swapping crypto wallet addresses. The incident affected sites that used the shared tracking script.
-
Hacked Hotel Wi-Fi Pushes Fake Updates Carrying a Spyware Trojan
Microsoft has detailed an operation dubbed CaptiveCrunch: through hijacked hotel networks, guests are served bogus browser updates that lead to the CornFlake trojan, which can reach the camera, microphone and keyboard.
-
Adobe Patches Maximum-Severity CVSS 10.0 Flaw in Campaign Classic
A defect in Adobe's Campaign Classic marketing platform allows arbitrary code execution without any user interaction. The updates also address a series of critical holes in Adobe Bridge.
- More