#кибербезопасность
-
AssuranceAmerica Data Breach Affects 6.9 Million Drivers
The American insurance company AssuranceAmerica has reported a data breach affecting nearly 7 million drivers, after attackers gained access to its systems earlier this year.
-
Hackers Exploit Roundcube Vulnerability to Spy on Academics
A China-linked group is attacking vulnerable Roundcube servers at universities in the US and Canada, stealing credentials and installing backdoors.
-
The largest leak of driver's license numbers in 2026 hit a US insurance company
A cyberattack on a major American insurer led to the leak of millions of driver's license numbers — the biggest incident of its kind in 2026.
-
CISA Orders U.S. Federal Agencies to Urgently Patch a Vulnerability in Langflow
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has directed federal agencies to remediate an actively exploited authentication bypass vulnerability in the Langflow platform by Friday.
-
Accenture Confirms Data Breach After Listing Appears Offering Stolen Information for Sale
IT giant Accenture has acknowledged being hacked after a threat actor claimed to have stolen 35 GB of the company's source code and other data. The breach came to light after a listing offering the stolen material for sale was published.
-
Chinese hackers expand ORB network with new LONGLEASH backdoor
The UAT-7810 group is developing the LONGLEASH malware to expand its ORB network by breaching vulnerable network devices, primarily unpatched Ruckus routers.
-
Scammers Posing as IT Support Distribute EtherRAT Malware via Microsoft Teams
Attackers call company employees on Microsoft Teams, impersonating IT support staff, and convince them to install the EtherRAT malware.
-
France to Stop Certifying Encryption Without Quantum Protection
France's cybersecurity agency ANSSI will stop certifying products that lack post-quantum encryption starting in 2027. This will effectively force government bodies and critical infrastructure operators to move to new security standards.
-
JadePuffer: The First Ransomware Attack Carried Out Entirely by an AI Agent
Researchers have described the first documented case in which an entire ransomware attack — from start to finish — was carried out by an autonomous agent powered by a large language model. The operation has been named JadePuffer.
-
Google Helps Take Down NetNut Proxy Network Built on 2 Million Infected Devices
A joint operation involving Google disrupted the NetNut residential proxy network, which provided access to millions of compromised Android devices. Among those affected were smart TVs and streaming boxes.
-
ARToken platform uncovered — an affiliate of the EvilTokens phishing service
Researchers have uncovered a new phishing-as-a-service platform called ARToken, operating as an affiliate of the EvilTokens service. This offered a look inside an extensive toolkit for compromising Microsoft 365 accounts.