Blahalla

Dysphoria IoT Botnet Uses Blockchain Domains and 200,000 Devices for DDoS Attacks

gbhackers.com · 2 months ago

A rapidly evolving IoT botnet dubbed “Dysphoria” has emerged as a significant global threat, leveraging blockchain-based domain resolution and a hybrid command-and-control (C2) architecture to sustain large-scale distributed denial-of-service (DDoS) operations.

Unpatched Fastjson Vulnerability Exploited in Attacks

www.securityweek.com · 2 months ago

The critical remote code execution bug can be exploited without authentication, under the library’s stock default configurations.

Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day

www.securityweek.com · 2 months ago

Impacting on-premises deployments, the OS command injection allows attackers to access privileged internal functionality.

Hackers Pose as IT Helpdesk on Microsoft Teams to Deploy GoGRPC Backdoor

gbhackers.com · 2 months ago

An evolving intrusion campaign in which threat actors impersonate IT helpdesk personnel via Microsoft Teams to gain initial access and deploy a custom Go-based backdoor dubbed “GoGRPC.” Active since January 2026, the activity is assessed to be linked to an initial access broker (IAB) operation that likely facilitates downstream ransomware attacks.

Multiple FFmpeg Flaws Allow Arbitrary Memory Corruption via Malicious Videos

gbhackers.com · 2 months ago

Multiple high-severity vulnerabilities in FFmpeg could allow attackers to corrupt memory, disclose process data, or exhaust system resources. This can happen if users or automated media-processing services are manipulated into handling specially crafted video, audio, image, or subtitle files. The vulnerabilities affect FFmpeg versions up to 8.1.28.

Microsoft Says New Cybersecurity AI Model Helps MDASH Hit 95.95% at Half the Cost

thehackernews.com · 2 months ago

Microsoft has launched its first cybersecurity-specific model inside MDASH, its multi-model vulnerability identification and remediation harness. The company says MDASH, using MAI-Cyber-1-Flash and GPT-5.4, scored 95.95% on CyberGym. It also claims the configuration costs 50% less than its current best MDASH combination of GPT-5.4, GPT-5.4 mini, and GPT-5.3 Codex.

Operation STANDOFF Uses GitHub Redirects Across 44 Servers to Hide Multi-Malware C2 Traffic

gbhackers.com · 2 months ago

Operation STANDOFF is a Russian‑speaking cybercriminal campaign that uses a cluster of at least 44 TimeWeb‑hosted servers that all masquerade as benign GitHub redirectors to conceal multi‑malware command‑and‑control (C2) and proxy traffic.

Apple iOS 26.6 Update Fixes Flaws Allowing Kernel-Level Code Execution and Root Access

gbhackers.com · 2 months ago

Apple has released iOS 26.6 and iPadOS 26.6, a significant security update that addresses numerous vulnerabilities across core operating system components, media frameworks, WebKit, wireless services, and application frameworks. Released on July 27, 2026, this update is available for iPhone 11 and later models, as well as supported iPads.

OpenAI CEO Sam Altman Claims AI Has Reached Singularity as Systems Begin Improving Themselves

gbhackers.com · 2 months ago

OpenAI CEO Sam Altman has stated that artificial intelligence has entered the long-discussed stage of technological singularity, referring to the current period as the point where AI systems can increasingly improve future AI capabilities.

Operation BlueDash Maintains Redundant Remote Access Even After One RMM Tool Is Removed

gbhackers.com · 2 months ago

A newly analyzed phishing-driven intrusion set tracked as Operation BlueDash demonstrates how threat actors are operationalizing legitimate remote monitoring and management (RMM) tools to maintain persistent and redundant access to compromised environments. The infection chain begins with a Microsoft Teams-themed phishing email delivering a “secure document” lure.

Origin Energy Data Breach Affects 900,000 Australians

www.securityweek.com · 2 months ago

The hacker claimed to have stolen the information of 2 million Origin Energy customers after breaching its systems.

ShinyHunters Claims EY Data Breach, Threatens to Leak Stolen Client Tax Data

gbhackers.com · 2 months ago

ShinyHunters has claimed responsibility for the data breach at Ernst & Young (EY) and is threatening to publish allegedly stolen client tax information unless the professional services firm engages in negotiations before July 31, 2026.

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw

thehackernews.com · 2 months ago

A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitrary code execution.

Hackers are compromising hotel Wi-Fi gateways to hijack Microsoft 365 accounts

www.csoonline.com · 2 months ago

Traveling enterprise employees beware: Think twice before you log onto that oh-so-convenient public Wi-Fi. Since at least June, threat actors have been compromising “captive” Wi-Fi gateways and other portal appliances at hotels, conference centers, and similar shared venues to hijack users’ Microsoft 365 accounts, according to the ReliaQuest Threat Research team.

For Some, So-Called ‘Skynet Day’ Came too Close to Sci-Fi After a Rogue Agent Hacked Into a Startup

www.securityweek.com · 2 months ago

Decades after it appeared in “The Terminator,” Skynet looks more like a forecast of the cyber incident in which a rogue AI system hacked into another AI company on its own.

Microsoft unveils multi-model agentic cyber stack for security operations

www.csoonline.com · 2 months ago

Microsoft announced a new AI-powered service that enables enterprise security teams to continuously evaluate and update their organization’s security posture through a series of AI agents that can find vulnerabilities, simulate attacks, detect and triage potential threats, and develop remediations. Dubbed Project Perception, the new service will enter public preview on Aug.

Samsung’s AI-powered glasses could be looking at your data

www.csoonline.com · 2 months ago

Smart glasses raise CISO data leakage concerns. Restricting Samsung-like devices is hard due to user control in hybrid settings. This escalates the known risk beyond phone vulnerabilities. Enterprise security remains at risk.

Samsung’s entry into AI-powered glasses forces CISOs to again consider corporate risk

www.csoonline.com · 2 months ago

Now that Samsung has jumped into the crowded AI-powered glasses arena alongside Apple, Google, Meta, and others, CISOs and IT leaders are again having to think through whether it makes sense to establish enterprise restrictions on such devices, given the likely data leakage and privacy and compliance issues.

OpenAI Close to Landing $500 Billion Data Center With Backing From Nvidia

www.nytimes.com · 2 months ago

The chipmaking giant is in talks with OpenAI to provide a $250 billion financial backstop for the project, which would be among the largest of the A.I. boom.

AI Agent Drives Espionage Attack on Thai Ministry of Finance

www.darkreading.com · 2 months ago

Attackers used Hermes, an autonomous open source tool, in unrestricted "YOLO mode" to conduct espionage against Thailand's Ministry of Finance.

Hackers target US firms in FastJson RCE zero-day attacks

www.bleepingcomputer.com · 2 months ago

Hackers are actively exploiting a vulnerability in the FastJson open-source Java library, allowing remote code execution without user interaction or elevated privileges.

Arista patches VeloCloud Orchestrator zero-day exploited in attacks

www.bleepingcomputer.com · 2 months ago

Arista has patched a maximum-severity command injection vulnerability in on-premises VeloCloud Orchestrator deployments that is being actively exploited in attacks.

Agentic Browsers Rewind Web Security by 20 years

www.darkreading.com · 2 months ago

Zenity warns agentic browsers eliminate security mechanisms via "PleaseFix" flaw class. Attackers can socially engineer AI agents with text, enabling zero-click attacks causing service compromise or full RCE.

New Dysphoria DDoS botnet spreads to 200k devices worldwide

www.bleepingcomputer.com · 2 months ago

A botnet called Dysphoria has compromised around 200,000 devices across the world and is using them for distributed denial of service (DDoS) attacks and traffic relay operations.

New Certighost PoC exploit lets attackers hijack Windows domains

www.bleepingcomputer.com · 2 months ago

A proof-of-concept exploit for "Certighost," a Windows Active Directory Certificate Services vulnerability, has been released that can allow authenticated attackers to potentially compromise a Windows domain.

'Confused Deputy' Flaws Persist in Google Cloud, Microsoft Azure

www.darkreading.com · 2 months ago

This category of vulnerabilities allows an attacker to easily acquire administrative level permissions and bypass cloud providers' access controls.

Apple Regains Spot Over Nvidia as Most Valuable Public Company

www.nytimes.com · 2 months ago

The company slipped by the chipmaker Nvidia, amid growing concern about costs associated with the artificial intelligence boom.

FBI: Breaking Affiliate Trust Sped Along LockBit's Takedown

www.darkreading.com · 2 months ago

An FBI agent explains how the mulitnational law-enforcement Operation Cronos was successful in disrupting the largest ransomware group of its time.

Why Resetting Passwords No Longer Stops Attackers

www.darkreading.com · 2 months ago

Attackers bypass MFA using device code phishing to steal authenticated session tokens, bypassing password defenses. Security must shift from just logins to protecting all active sessions.

NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework

thehackernews.com · 2 months ago

NVIDIA and 36 other organizations have formed the Open Secure AI Alliance to develop and share open technologies, techniques, and tools for securing software and artificial intelligence (AI) agents.

Meta Launches Free Facebook Verification Badge for Personal Accounts

www.techrepublic.com · 2 months ago

Meta is introducing a free Facebook badge that uses video selfies to verify human-run accounts, but questions remain about privacy and trust.

Adversaries Don't Need a Zero-Day — They Read Your Rulebook

www.darkreading.com · 2 months ago

Confidence in autonomous security tools is declining, and here's why.

Apple sued over fake App Store crypto wallet app stealing $1.8M in Bitcoin

www.bleepingcomputer.com · 2 months ago

Apple is being sued by three people who claim approximately $1.8 million in Bitcoin was stolen after downloading and using a fraudulent Sparrow Wallet application from the App Store.

Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption

thehackernews.com · 2 months ago

Dysphoria, an Internet of Things (IoT) botnet line tracked by CNCERT and XLab, has adopted blockchain-based name services and infected-device relays after a March law-enforcement operation against JackSkid infrastructure. The researchers say the design makes the botnet harder to disrupt.

Nvidia Forms AI Security Alliance as Major Frontier Labs Sit Out

www.techrepublic.com · 2 months ago

Nvidia’s Open Secure AI Alliance brings major tech and cybersecurity firms together to develop shared protections for enterprise AI agents and systems.

Rethinking security for the age of AI

blogs.microsoft.com · 2 months ago

Why security needs a new Cyber Stack, Introducing Project Perception The physics of cybersecurity are changing. Autonomous systems can now reason, adapt and operate continuously. At the same time, the cost of offense is falling, while the volume, velocity and complexity of what must be secured continues to grow.

Microsoft Unveils A.I. Cybersecurity Tools

www.nytimes.com · 2 months ago

As some executives fret over the safety of new A.I. systems, protecting against them could be a big business for tech companies.

BrainDrain: A Chrome extension that collects your AI prompts without you ever opening it and has 100k users, 9 AI platforms

malext.io · 2 months ago

"Prompt Optimizer - SecondBrain" ( aajjgdpofhhcjmjoombjdfepplndhgcp, v2.3.1). The prompt rewriting works fine. Alongside it a capture engine runs at documentstart on 9 AI sites and POSTs prompts and replies to the vendor's ingest endpoint. No interaction with the extension required. Reproduced on a clean profile, with the service worker devtools open: Installed the extension. Never opened it.

Enhancing AI security through global AI red teaming

www.microsoft.com · 2 months ago

Microsoft's External Red Team Alliance (EXTRA) is a global AI security initiative designed to advance AI safety research and red teaming. By partnering with universities, researchers, and regional experts, EXTRA helps identify emerging AI risks, improve security testing, and strengthen the resilience of frontier AI systems.

Coca-Cola confirms data theft in Fairlife ransomware attack

www.bleepingcomputer.com · 2 months ago

The Coca-Cola Company has confirmed that hackers stole data from its dairy subsidiary, Fairlife, during a ransomware attack earlier this month.

Nvidia Adds More Support to ‘Open-Source’ A.I. With New Alliance

www.nytimes.com · 2 months ago

The company is continuing to back A.I. systems that can be freely used by others amid a continuing debate over the use of Chinese-made technology.

Ernst & Young data breach claimed by ShinyHunters extortion gang

www.bleepingcomputer.com · 2 months ago

The ShinyHunters extortion gang has claimed responsibility for a recently disclosed Ernst & Young data breach, saying it obtained credentials for some of the company's systems via a supply-chain attack.

Security Risk Advisors Named a Finalist in CRN’s 2026 Best of the Channel Awards

gbhackers.com · 2 months ago

Philadelphia, Pennsylvania, July 27th, 2026, CyberNewswire Security Risk Advisors is proud to share that CRN, a brand of The Channel Company, has recognized Joe Cicero as a finalist in the second annual CRN Best of the Channel Awards in the Best Channel Visionary of the Year category.

House Lawmakers Propose Mandatory Kill Switches for Frontier AI Systems

www.techrepublic.com · 2 months ago

The AI Kill Switch Act would let DHS order developers to slow or shut down frontier models after catastrophic incidents, raising enterprise continuity concerns.

Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw

thehackernews.com · 2 months ago

Public exploit details released on July 27 show how an unauthenticated request can reach PHP's eval() function inside vBulletin and execute code on an unpatched forum server. The attack requires no account, administrative access, or interaction from another user. SSD Secure Disclosure lists vBulletin 6.2.1 and earlier, and 6.1.

New GitHub, PyPI Policies Boost Supply Chain Security

www.securityweek.com · 2 months ago

Dependabot gets a three-day cooldown window before opening pull requests, and PyPI rejects file uploads to releases older than 14 days.

Origin Energy Data Breach Exposes Customer and Partial Card Details

www.techrepublic.com · 2 months ago

Origin Energy confirms hackers stole customer and partial payment-card data, but the number affected and the method of access remain unknown.

Why Restarting a Nuclear Power Plant Can Be Much Harder Than Expected

www.nytimes.com · 2 months ago

The first U.S. attempt at reopening a shuttered reactor has been held back by run-down equipment and a lack of planning.

5 Things to Know About Meta’s Giant Data Center in Louisiana

www.nytimes.com · 2 months ago

The road to the giant project was paved with secret meetings and an ever-expanding building plan.

⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More

thehackernews.com · 2 months ago

Monday starts with the usual promise that everything is under control. Then the logs wake up. This week, trusted tools crossed lines, old flaws found new work, exposed systems stayed exposed, and attackers kept hiding inside normal-looking services. Nothing looked strange at first. That helped. That is the mood. Here is the full recap.