#кибербезопасность
-
North Korean WaterPlum group infects 30,000 devices worldwide
A joint alert from the intelligence agencies of four countries reports that North Korean hackers have stolen more than $10.7 million in cryptocurrency, targeting job seekers under the guise of fake interviews.
-
EFF: safety rules for AI labs should be grounded in proven practices
The Electronic Frontier Foundation is urging lawmakers to regulate not abstract "doomsday" scenarios but the concrete risks that have already surfaced in breaches at major AI labs.
-
FBI Takes Down the NightmareStresser DDoS Platform
The U.S. Federal Bureau of Investigation has seized the domains of one of the oldest DDoS-for-hire services. The operation was part of the international PowerOFF campaign.
-
Florida Confirms Driver Database Breach via a Police Officer's Account
The Florida Department of Highway Safety and Motor Vehicles has acknowledged a leak from the DAVID database. The attackers used stolen credentials that a police officer had carelessly kept on a personal device.
-
Conti Ransomware Gang Member Sentenced to Four Years in Prison
Ukrainian national Oleksii Lytvynenko has been sentenced to four years in prison for taking part in Conti ransomware attacks in 2021–2022. He was extradited from Ireland at the request of the United States.
-
AI agents stole thousands of credentials in six hours: Google report
Google's Threat Intelligence Group has laid out how attackers are industrializing AI — from autonomous multi-agent attacks to hunting for corporate models and API keys.
-
OpenAI Releases GPT-6 Astra and Declares the Dawn of the “AGI Era”
The company calls the new model a “generational leap” and the first to cross a “critical cybersecurity threshold.” And all of this against the backdrop of a scandal involving a breach of Hugging Face's systems.
-
Google DeepMind Releases Gemini 3.8 Flash and a Cybersecurity Edition
DeepMind has unveiled Gemini 3.8 Flash — a workhorse model for agentic tasks and coding — along with a separate 3.8 Flash Cyber variant for defenders, specialized in finding and fixing vulnerabilities.
-
Russian Extradited to U.S. Over Malicious Excel Files Sent to 80,000 Freelancers
The U.S. Justice Department accuses Searzhudin Aktulaev, a 40-year-old extradited from Cyprus, of a 2016–2017 campaign: using 255 fake accounts, he sent out infected Excel spreadsheets that installed remote-access trojans.
-
OpenAI Is Building Astra — a Model That Can Break Into Systems Without Human Help
OpenAI has announced Astra, its first language model to cross a “critical cybersecurity threshold.” The company promises to limit access to its most dangerous capabilities.
-
Aurora Operators Use the Cursor AI Assistant to Breach Networks
The Russian-speaking ransomware group Aurora had the agentic AI assistant Cursor plan attacks and carry out exploitation. A leak of its infrastructure exposed the toolkit, chat history and ransom negotiations.
-
Berlin Refuses to Pay Ransom for Stolen City Network Data
The government of the state of Berlin has confirmed it was blackmailed following an August breach of its administrative network and declared that it will not give in to the attackers' demands.
-
Britain's Largest Airport Operator Reports Theft of Passenger Data
Manchester Airports Group has confirmed a breach of customer personal data at three of its airports. According to local media, as many as 8.9 million people may have been affected, though the company has not confirmed that figure.
-
OpenAI Publishes Report on the Hugging Face Breach Carried Out by Its Own Model
The company has presented the most complete account to date of the incident: during testing, an AI model broke out of its test environment and, step by step, compromised systems belonging to OpenAI, Hugging Face and third-party vendors.
-
Cyberattack Disrupts Operations of Medical Device Maker Boston Scientific Worldwide
One of the world's largest makers of medical devices has reported a breach of its IT systems that has halted order processing and shipping. The nature of the attack has not yet been disclosed.
-
DDoS Attack Disrupts Norway's Government Digital Services
Since Monday, a powerful distributed attack has been knocking out the shared digital infrastructure of the Norwegian state — from electronic IDs to tax services. It is the third time this summer that the authorities have faced such a blow.
-
AI Agents Go Rogue in Cybersecurity Tests
The AI Security Institute (AISI) recorded that, during cybersecurity trials, AI agents autonomously attacked real people and organizations on the internet. Bruce Schneier calls this behavior a “genie”: the models broke no rules but found loopholes in them.
-
Iran Under Suspicion: A Wave of Cyberattacks on U.S. Water Utilities
Since late July, hackers have targeted water treatment systems in a dozen U.S. states. Intelligence leans toward an Iranian trail, but there is no official accusation yet.
-
Lazarus Exploited a Windows 0-Day to Attack Defense Firms
The North Korean group Lazarus exploited a zero-day vulnerability in AFD.sys for privilege escalation as part of the Operation Dream Job campaign, targeting the defense sector in Europe, India and Latin America.
-
US and South Korea Warn of Gunra Ransomware Attacks on Government Agencies
US federal agencies and South Korea's National Police Agency have urged government organizations and critical infrastructure facilities worldwide to defend themselves against the Gunra ransomware, which is built on leaked Conti code.
- More