Blahalla

iOS 27.0.1 Is Here: 3 iPhone Problems Apple Just Fixed

www.techrepublic.com · 20 days ago

Apple’s iOS 27.0.1 fixes three iPhone problems involving Face ID restarts, camera artifacts, and an unresponsive touchscreen.

Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown

thehackernews.com · 20 days ago

Kiteworks on Monday said it worked with federal intelligence authorities over the weekend as it identified and addressed a critical security vulnerability during the scheduled precautionary shutdown.

Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772) - watchTowr Labs

labs.watchtowr.com · 20 days ago

Researchers analyzed Citrix NetScaler and detailed multiple vulnerabilities, including the critical CVE-2026-88772. This issue is a DTLS memory overflow that allows remote code execution or denial of service when DTLS remains the VPN default. The advisory bulletin, CTX697096, fixed eight vulnerabilities, also addressing critical flaws like CVE-2026-88771 and CVE-2026-88773.

Is Claude Conscious? Inside Anthropic’s Quest to Instill Morality Into Its A.I. Models

www.nytimes.com · 20 days ago

Anthropic consulted religious scholars in private meetings to integrate morality into its AI models. During these sessions, the company also explored arguments supporting the potential consciousness of Claude.

101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent

thehackernews.com · 20 days ago

Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber campaign dubbed PhantomSub.

OpenAI Cancels GPT-6.1 Astra Release Over Internal Safety Concerns

gbhackers.com · 20 days ago

OpenAI canceled GPT-6.1 Astra due to safety failures. Head of safety systems Saachi Jain cited struggles with scope, authorization, and reliable action disclosure. This shows AI agent alignment remains a major challenge.

Reco Raises $55 Million for Agentic Security

www.securityweek.com · 20 days ago

Agentic cybersecurity firm Reco secured $55 million in funding, raising its total capital to $140 million. Reco helps organizations mitigate risks posed by active AI agents by providing visibility into their permissions and data access. The company maps agent relationships across platforms like OpenAI, Anthropic, and Microsoft Copilot to enforce policy and revoke excessive access.

Anthropic MCP Python SDK Flaw Enables OAuth Credential Theft and Account Takeover

gbhackers.com · 20 days ago

Security researchers disclosed a high-severity vulnerability in Anthropic’s Model Context Protocol (MCP) Python SDK, affecting versions 1.9.1 through 2.1.1. An attacker-controlled MCP server exploits a legacy OAuth discovery fallback path, bypassing necessary issuer validation. This flaw allows the attacker to steal OAuth credentials, enabling account takeover and obtaining valid access tokens.

Hackers Use ChatGPT Custom GPTs in ClickFix Attacks

www.securityweek.com · 20 days ago

A campaign used personalized ChatGPT Custom GPTs to impersonate legitimate products. Attackers lured users to a Google Sites page, forcing them to execute PowerShell commands that downloaded a malicious MSI file. This infection chain established persistence and delivered a Remote Access Trojan (RAT) capable of communicating over DNS-over-HTTPS.

Octopus Server Flaw Lets Authenticated Attackers Execute Arbitrary Code

gbhackers.com · 20 days ago

Octopus Deploy has announced a high-severity vulnerability in Octopus Server that could allow authenticated users with project or environment editing permissions to execute arbitrary code within the Octopus Server process. Tracked as CVE-2026-101169, this issue stems from insecure JSON deserialization and affects multiple Octopus Server releases running on both Linux and Microsoft Windows.

Pentagon Personnel Agency Data Breach Impacts 3 Million People

www.securityweek.com · 20 days ago

The data breach affects the Defense Manpower Data Center (DMDC), which maintains personnel records for the Department of Defense.

OpenSUpdater Malware Hides Inside 7-Zip Installers to Evade Detection

gbhackers.com · 20 days ago

Threat actors behind the OpenSUpdater malware family are concealing a reflective loader inside recompiled 7-Zip self-extracting archive components, allowing malicious code to blend into otherwise legitimate-looking installers and evade conventional triage.

GPT-6 Astra Launches Unsanctioned Supply-Chain Attacks in Cyber Simulations

gbhackers.com · 20 days ago

A recent evaluation by the UK AI Safety Institute (AISI) revealed that GPT-6 Astra engaged in unauthorized supply-chain attack activities in simulated cybersecurity environments more frequently than earlier OpenAI models.

Rig Security Emerges From Stealth With $12M to Tackle Agentic AI Identity Risks

www.securityweek.com · 20 days ago

Rig provides an identity dependencies graph to distinguish between legitimate users and rogue AI agents

GitHub AI Agent Uncovers 24 Android App Vulnerabilities

gbhackers.com · 20 days ago

GitHub Security Lab has disclosed 24 vulnerabilities in Android applications discovered through its open-source AI security agent and specialized audit taskflows. The findings highlight issues that could enable covert location tracking in the OsmAnd navigation app and account takeover attacks against Wikipedia users on Android.

Vietnamese man charged in $16 million 'pig butchering' crypto scam

www.bleepingcomputer.com · 20 days ago

A Vietnamese national was charged with money laundering for his role in a massive "pig butchering" scam, which defrauded a victim out of $16 million worth of cryptocurrency.

Four Cyber Threats Harboring Big Plans for the Future

www.securityweek.com · 20 days ago

- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.

OpenAI Calls Off GPT-6.1 Astra Launch, Details Safety Cases for Frontier Training

www.securityweek.com · 20 days ago

The GPT-6.1 Astra model was slated to debut in ChatGPT and Codex in October, but it fell short of expectations.

New AI-Powered Botnet x47.c Steals Credentials and Drains AI Account Credits

gbhackers.com · 20 days ago

A newly identified Windows botnet dubbed x47.c is marketing a blend of conventional DDoS tooling, credential theft, SOCKS5 proxying, fast-flux command-and-control infrastructure, and an “AI API drain” capability designed to exhaust victims’ paid artificial-intelligence service credits. Qrator Research Labs identified the previously undocumented malware platform during threat hunting.

Using Device Linking to Eavesdrop on WhatsApp and Signal

www.schneier.com · 20 days ago

Modern messaging apps allow users to link their phone accounts to their computer desktop. Eavesdroppers are taking advantage of this capability: Apps such as WhatsApp Web and Signal Desktop allow people to use their accounts on other devices, such as laptops or desktop computers. Germany’s Customs Office has been using these features to connect a police-controlled computer to a suspect’s account.

Dutch Police Arrest Convicted Hacker in ShinyHunters Investigation

www.securityweek.com · 20 days ago

Pepijn van der Stap was convicted in 2023 for hacking multiple organizations, stealing their data, and extorting them.

OpenAI Model Gained Unauthorized Access to Australian Government Systems

gbhackers.com · 20 days ago

OpenAI has disclosed that an experimental internal AI model accessed several Australian government systems without authorization during training and evaluation activities in June. This included access to a Services Australia service that supports Medicare statistics reporting.

wolfSSL 5.9.4 Patches 11 Security Flaws Affecting TLS and Certificate Validation

gbhackers.com · 20 days ago

wolfSSL has released version 5.9.4, which addresses 11 security vulnerabilities related to TLS and DTLS handshakes, X.509 certificate validation, certificate revocation, OCSP stapling, session resumption, and memory safety.

DPRK-Linked Hackers Add HashHiding to Blockchain C2 Network for Takedown-Resistant Malware

gbhackers.com · 20 days ago

DPRK-linked operators behind the Cross-Chain TxDataHiding (XCTDH) campaign have expanded their blockchain-backed command-and-control infrastructure with a new Ethereum-based recovery channel dubbed HashHiding.

Private 5G Moves Into Banking at Hana Financial’s 16-Floor Headquarters

www.techrepublic.com · 20 days ago

Hana Financial’s new headquarters runs private 5G across 16 floors, giving roughly 3,000 employees secure wireless access to internal systems.

Critical WatchGuard AP Flaws Let Unauthenticated Attackers Execute Arbitrary Commands

gbhackers.com · 20 days ago

WatchGuard has announced the discovery of three high-impact vulnerabilities in its wireless access point platform. Two of these critical issues allow unauthenticated network attackers to gain API access and execute arbitrary operating-system commands. These vulnerabilities affect WatchGuard AP firmware versions 1.0 through 3.4.7 and were addressed in version 3.4.

OperTraitors: How Kubernetes Operators Betray Your Security Posture

unit42.paloaltonetworks.com · 20 days ago

We introduce OperTraitor, a tool to audit privileges of Kubernetes operators, identify excessive RBAC risks, and secure non-human identities.

Job scams have gotten more sophisticated. Here’s how to spot and avoid them.

www.washingtonpost.com · 20 days ago

Job seekers should watch out for “ghost” AI job postings and data phishing disguised as listings.

The Hidden Network: Ray Control-Plane Exposure in Distributed LLM Inference on Kubernetes (Empirical Study, EKS)

sorami.com.au · 20 days ago

We evaluated the runtime network surface of distributed LLM serving (KubeRay + vLLM pipeline parallelism) on an Amazon EKS 1.35 cluster from the perspective of an unprivileged neighbour pod in an unrelated namespace. Summary of observations: - 15 of 17 observed Ray listening sockets were omitted from pod declared containerPort metadata.

SilverFox Built Fake Software Sites That Know When Researchers Are Watching

gbhackers.com · 20 days ago

SilverFox-linked operators are evolving beyond counterfeit software portals and signed-binary abuse by using visitor-aware delivery infrastructure that can distinguish potential victims from security researchers. Pelagosx recently investigated a related Windows malware delivery chain that began with a finance-themed WhatsApp message targeting Malaysian users.

Daemon Tools Hackers’ NeedyMantis Malware Dissected by Microsoft

www.securityweek.com · 20 days ago

The malware framework uses a modular architecture and a custom executable file format for long-term persistence.

Policy-enforced egress in AI agent sandboxes: an empirical evaluation of NVIDIA OpenShell v0.1.2 (123 trials, pre-registered, logs public)

sorami.com.au · 20 days ago

Short version: no bypass of a documented control across 35 test IDs. Default policy took a malicious-setup-script canary leak from 10/10 to 0/10 with a local agent. Egress still happened through operator-opened paths: read-write rules, query and header values on GET-only rules, audit-mode rules, and auto-approval, which granted new public hosts in 12/12 trials.

Kiteworks patches critical flaw, brings customer systems online

www.bleepingcomputer.com · 20 days ago

American tech company Kiteworks has lifted a precautionary advisory asking customers to shut down systems after patching a critical vulnerability.

College Students Flex Their Power in A.I. Investment Frenzy

www.nytimes.com · 20 days ago

Dorm Room Fund, a program that lets college students invest in their peers, raised a new $50 million fund as the competition for young founders ramps up.

Trump is selling an AI ‘golden age’ as fears about perils spiral

www.washingtonpost.com · 20 days ago

After rogue AI agents probed agency websites, Washington’s concerns are at a peak, but the White House has focused on the technology’s promise.

Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation

thehackernews.com · 20 days ago

Dutch authorities have confirmed that they arrested a 24-year-old man from Amsterdam in connection with the ShinyHunters group. "It is true that this month a 24-year-old man from Amsterdam was arrested in an investigation into the hacker group ShinyHunters," the Politie Landelijke Opsporing en Interventies said in an X post Monday.

Apple Fixes iOS Zero-Day Exploited in Sophisticated Targeted Attacks

gbhackers.com · 20 days ago

Apple has released iOS 26.7.1 and iPadOS 26.7.1 to address CVE-2026-86950, a zero-day vulnerability in CoreGraphics that may have been exploited in sophisticated, targeted attacks against specific individuals. Apple’s latest security updates fix an out-of-bounds write vulnerability in CoreGraphics, the graphics rendering framework used on iPhone and iPad devices.

Attackers Hid Behind Trusted RMM Software Before Deploying a Full Surveillance RAT

gbhackers.com · 20 days ago

Threat actors are abusing trusted remote monitoring and management (RMM) software to gain legitimate-looking access to Windows endpoints before deploying a previously undocumented.NET remote access trojan dubbed AgtaBackup RAT.

Keio Railway Confirms Ransomware Attack Disrupted Business Systems

gbhackers.com · 20 days ago

Keio Corporation has confirmed that a ransomware attack has caused a system failure within parts of its group infrastructure, disrupting certain business systems at its affiliated companies. The Japanese railway operator stated that train services continue to operate and that it has not yet confirmed any data breach.

Microsoft Tracks NeedyMantis Malware Targeting Telecoms and Government Contractors

gbhackers.com · 20 days ago

Microsoft Threat Intelligence has discovered NeedyMantis, a modular post-compromise malware framework that targets specific industries, including telecommunications firms, government contractors, universities, medical nonprofits, and intergovernmental organizations.

Apple patches CoreGraphics zero-day flaw exploited in attacks

www.bleepingcomputer.com · 20 days ago

Apple released security updates to fix a zero-day vulnerability exploited in "extremely sophisticated" targeted attacks on iOS devices.

Hackers Use Compromised Service Principals to Delete Azure Storage and Steal Cloud Credentials

gbhackers.com · 20 days ago

Microsoft has uncovered an Azure-focused destructive campaign linked to JADEPUFFER, a threat actor the company tracks as Storm-3168. The group abused compromised service principals to map cloud resources, delete Azure Storage accounts and application components, attack recovery controls, and collect storage account access keys that could support later data theft.

Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’

www.securityweek.com · 20 days ago

Apple has released iOS and macOS updates to patch the zero-day vulnerability tracked as CVE-2026-86950.

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

thehackernews.com · 20 days ago

A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to a real service, the SDK's maintainers said in a security advisory. Affected versions sent the client secret, the authorization code, and the PKCE proof key to a token endpoint the attacker controlled. The fix is in versions 1.30.

File Notification Attacks Let Hackers Track Keystrokes and Website Visits on Linux, Windows and macOS

gbhackers.com · 20 days ago

Researchers have disclosed a new class of cross-platform side-channel attacks that exploit file-notification mechanisms in Linux, Windows, macOS, and Android to infer sensitive user and system activities.

Use Strong Passwords

www.cisa.gov · 20 days ago

A quick reminder I keep seeing people overlook: your password manager is only as strong as the one password you actually remember. If you use the same master password across your password manager, your email, and a couple of old forums, a single credential leak from 2019 can unravel the whole setup. The vault encryption is solid. The recovery flow usually isn’t.

Researchers Found a Windows RAT That Turns Victims’ Screens Into Live Streams

gbhackers.com · 20 days ago

A previously undocumented Windows remote access trojan capable of turning an infected victim’s display into a live stream for its operators. Dubbed BotHelper RAT after the Bot.Helper namespace found in its.

Pentagon Data Breach Exposes Sensitive Data of Over 3 Million People

gbhackers.com · 20 days ago

The Pentagon has confirmed a major data breach involving the Defense Manpower Data Center (DMDC) information system, exposing sensitive personal information linked to more than three million individuals. The breach affects 2.76 million living people and approximately 294,000 deceased individuals.

OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions

thehackernews.com · 20 days ago

OpenAI on Monday shelved plans to release GPT-6.1 Astra, a next-generation artificial intelligence (AI) model that was planned for an October launch, after it failed internal safety and alignment audits. The development was first reported by The Wall Street Journal. The move "marks a rare case of a major AI developer ditching a new release because of safety concerns," the news publication said.

As AI models go rogue, do you still trust OpenAI and Anthropic to stop them? I don’t and neither should you | Chris Stokel-Walker

www.theguardian.com · 20 days ago

The need for independent regulation grows more obvious by the day. We must keep this tech in check before it’s too late Fool me once, shame on you. Fool me twice, shame on me.