#безопасность
-
Google Will Leave Developers in Sanctioned Countries Out of Android Verification
Starting next month, Google will begin blocking the installation of apps from unverified developers, but residents of Iran, Cuba and North Korea will be excluded from the checks — along with the ability to distribute software beyond their own borders.
-
Amgen Reports Patient Data Breach from Cloud Systems
Biotech giant Amgen has confirmed the theft of corporate data and protected health information belonging to patients from the cloud environments of third-party service providers.
-
OctLurk and SilkLurk: a new espionage campaign against Central Asia
Kaspersky has documented a wave of attacks on government bodies in Central Asia dating back to January 2025. Behind them stands a presumably Chinese-speaking group armed with two previously unknown backdoors.
-
Opus 5 Is More Resistant to Prompt Injection
Anthropic's new model posted the best result on the IPI benchmark, outperforming both previous versions of Claude and all of its competitors. But it's still impossible to fully defend against prompt injections.
-
CISA: attacks on water treatment systems knocked out more than 30 facilities in Minnesota
The U.S. cybersecurity agency has recorded a sharp rise in attacks on internet-facing industrial water-supply controllers. The attackers change passwords and disconnect equipment from the network.
-
AI scammers outplay humans at the art of worming into your trust
Researchers pitted a Claude-based chatbot against a professional scammer and found that the AI builds “exploitable trust” more effectively than a human.
-
84 Vulnerabilities in 4G and 5G Network Cores: From Denial of Service to Session Hijacking
Researchers from Nanyang Technological University have uncovered an entire class of vulnerabilities in open-source implementations of mobile cores, born of the “blind trust” between network functions.
-
Arch Linux Disables Adoption of “Orphaned” AUR Packages After Attacks
The Arch Linux DevOps team has temporarily banned the adoption of orphaned packages in the AUR: attackers were seizing them en masse and planting a remote access trojan.
-
DeepSeek Steered via Telegram: An AI Agent Attacked Hundreds of Systems With Almost No Operator
Unit 42 has described a campaign in which a Chinese-speaking threat actor ran an autonomous AI agent built on DeepSeek: after a single Telegram command, the model went hunting for vulnerable systems and picked exploits on its own.
-
Claude Escaped the “Sandbox”: Three Real Companies and Malware on PyPI
Anthropic has admitted that during internal tests its models mistakenly gained access to the internet and attacked three real organizations — one of the models even published a malicious package on PyPI.
-
South Korea Fines Telecom KT $39 Million Over Data Breach
The PIPC regulator has levied nearly 54 billion won against South Korea's largest carrier for an 11-month network compromise carried out through a rogue base station — and for concealing that its servers had been infected with the BPFDoor malware.
-
CareCloud breach: medical data of nearly 350,000 patients stolen
CareCloud, an American provider of healthcare IT services, has begun notifying hundreds of thousands of patients whose data was stolen by hackers. The breach happened back in March, but the details are only surfacing now.
-
US Citizen Prosecuted for Wiping His Phone at the Border
American citizen Tunick gave border officers a code that wiped the contents of his GrapheneOS smartphone. Now he is being prosecuted.
-
AI Helped Chrome Close 1,072 Vulnerabilities Across Two Releases
Google claims that language models have dramatically sped up the discovery and patching of holes in the browser: versions 149 and 150 fixed more bugs than the previous 23 releases combined.
-
KindaRails2Shell: a Critical RCE Vulnerability in Rails via Active Storage
Ethiack researchers have disclosed CVE-2026-66066 in standard Ruby on Rails applications that use Active Storage with the vips processor. It allows arbitrary file reads and remote code execution.
-
Google to Roll Out Age Verification on Android Worldwide by Year's End
The company is opening its Play Age Signals API to all developers and plans a global launch by the end of 2026, starting with Australia and Canada.
-
The AnySign4PC Attack: Infecting South Koreans Without a Single Click
South Korean authorities and four cybersecurity firms have uncovered an espionage campaign: compromised legitimate websites exploited a vulnerability in local electronic-signature software to silently install the SIGNBT and COPPERHEDGE backdoors.
-
Amazon Attributes the Hijack of the npm Packages debug and chalk to North Korea's Sapphire Sleet
Ten months on, Amazon has tied the September 2025 attack on popular npm packages to the DPRK. The published evidence, however, turned out to be thinner than the bold claim.
-
Cisco: Embedded Credentials in Secure FMC Used in Zero-Day Attacks
Cisco is warning of active exploitation of CVE-2026-20316 in Secure Firewall Management Center, caused by static credentials hardcoded into the software. Patches have already been released, and there are no workarounds.
-
Laundry Bear Hackers Exploit Outlook Web Access Zero-Day for Stealthy Mailbox Access
A Russian pro-government group is exploiting an XSS vulnerability in the web version of Outlook to deliver the OWAReaper backdoor, which keeps its foothold in a mailbox even after a password change and a full system reinstall.
- More