Blahalla

OpenAI Refocuses Cybersecurity Efforts on Patching Over Discovery

www.securityweek.com · 30 days ago

OpenAI has expanded its Daybreak cybersecurity initiative with a new suite of tools and partnerships.

Anthropic’s Fable 5 Model Jailbroken Within Days

www.schneier.com · 30 days ago

Fable 5 is the supposed safe version of Anthropic’s Mythos Preview, with guardrails to ensure that it can’t be used to create cyberattacks. Well, that restriction was bypassed within days.

Tata Electronics Data Breach Exposes 200,000+ Files Linked to Apple and Tesla, Hackers Claim

gbhackers.com · 30 days ago

Tata Electronics has reported a cybersecurity incident following claims from a ransomware-linked threat group that it has exfiltrated and published over 200,000 files related to Apple and Tesla’s manufacturing operations.

OpenAI rolls out AI-led push to fix open-source software flaws

www.csoonline.com · 30 days ago

OpenAI has launched a program with cybersecurity firm Trail of Bits to use AI to find and fix vulnerabilities in widely used open-source software, as enterprises face growing risks from flaws buried deep in their software supply chains.

Russian Initial Access Broker Behind FortiBleed Campaign

www.securityweek.com · 30 days ago

Using a custom sniffer, the threat actor has captured over 110 million credentials since at least February 2026.

Cloudflare patches Copy-Fail across every server in two days

blog.cloudflare.com · 30 days ago

Kind of crazy to look at the graph in this blog. CVE drops on 04/29, they develop a patch on 4/30, and deploy it across all of their servers on 05/01. Obviously they have the engineers to write BPF-LSM patches, but I think it points to a future where they can (almost) keep up with vulnerability disclosures.

Microsoft Uncovers Parallel Threat Activity From Two Cyberattackers in Single Intrusion

gbhackers.com · 30 days ago

Microsoft’s latest incident write-up shows that a single intrusion can mask two parallel threat activity streams, one tied to Storm-2603 and another to an unknown actor, making the attack far more complex than a conventional ransomware case.

New Cisco RCE was fixed

ssd-disclosure.com · 30 days ago

A vulnerability in Cisco Unified Communications Manager allows unauthenticated attackers to arbitrarily write files in the server which could be used to run arbitrary commands or code on the server.

Canadian Electricity Provider London Hydro Discloses Data Breach

www.securityweek.com · 30 days ago

Hackers stole customers’ names, addresses, email addresses, phone numbers, and account information.

China Takes Supercomputer Crown From U.S. For First Time Since 2017

www.nytimes.com · 30 days ago

A supercomputer in Shenzhen was declared the world’s fastest. It uses only standard microprocessors and not the special-purpose chips called graphics processing units.

Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT

thehackernews.com · 30 days ago

Cybersecurity researchers have discovered a set of malicious npm packages that are designed to deliver a Windows-based remote access trojan (RAT).

Critical libssh2 Vulnerability Lets Remote Attackers Execute Code via Crafted SSH Packets

gbhackers.com · 30 days ago

A critical security vulnerability has been identified in libssh2, a widely used client-side SSH library. This flaw allows remote attackers to execute code by sending specially crafted SSH packets. The vulnerability, tracked as CVE-2026-55200, has a CVSS score of 9.2 and affects libssh2 versions up to and including 1.11.1.

Trump Signs Executive Order Accelerating Post-Quantum Cryptography Migration

www.securityweek.com · 30 days ago

Federal agencies are required to transition high-value assets and high-impact systems to use PQC by the end of 2030 and 2031.

Cybercriminals Abuse TDS Infrastructure to Bypass Firewalls and Hide Malicious Destinations

gbhackers.com · 30 days ago

Cybercriminals are increasingly abusing traffic distribution systems (TDSs) to evade defenses, conceal malicious destinations, and funnel victims into phishing, fraud, and malware campaigns.

Critical FFmpeg Vulnerability Lets Hackers Execute Remote Code via Malicious Media Files

gbhackers.com · 30 days ago

A critical memory corruption vulnerability in FFmpeg has been disclosed, allowing for remote code execution through specially crafted media files. This flaw, tracked as CVE-2026-8461 and named “PixelSmash,” affects the MagicYUV decoder within FFmpeg’s libavcodec library and has a CVSS score of 8.8.

FlutterShell Malware Uses C2-Delivered JavaScript Payloads to Evade Sandbox Detection

gbhackers.com · 30 days ago

Targeted macOS endpoint monitoring, the CL-CRI-1089 cluster tied to Operation FlutterBridge repurposes the Flutter framework to deliver a novel macOS malware family dubbed FlutterShell.

Cybersecurity is no longer about protection. It’s about survival.

www.csoonline.com · 30 days ago

For years, cybersecurity professionals have been repeating the same warning: Every company will eventually be breached. Fine. Let’s accept that. Then why do so many organizations still behave as if the near sole purpose of cybersecurity is to prevent the breach from ever happening? That is the contradiction at the heart of modern cybersecurity strategy.

TASC CTF 2026: 1 July, Leonberg Germany | Web, Cryptography, Forensics, Network, OSINT | Mentorship prize for winning team | Participation is for free

www.schoenbrunn-tasc.de · 30 days ago

Posting here to let the community know about our upcoming CTF. TASC CTF 2026 📅 1 July 2026 📍 Riedwiesenstraße 1, 71229 Leonberg, Germany Challenge domains: Web Security Cryptography Digital Forensics Network Security OSINT Misc. Challenges Designed by our internal security practitioners to reflect real-world attack and defense scenarios.

Xsolis Data Breach Affects 1.4 Million Individuals

www.securityweek.com · 30 days ago

Threat actors gained access to personal and protected health information that Xsolis received from its clients.

CodeStorm Phishing Campaign Targets M365 Tenants With Token Reuse and Replay Attacks

gbhackers.com · 30 days ago

A multi-organization phishing campaign attributed to the CodeStorm family is actively targeting Microsoft 365 tenants with a tenant-aware AiTM (adversary-in-the-middle) phishing kit that combines rotating frontends and backend replay behavior under a stable controller path, /google.php.

Two Scattered Spider Hackers Convicted Over Transport for London Cyber Attack

gbhackers.com · 30 days ago

Two alleged members of the notorious Scattered Spider cybercrime collective have pleaded guilty to orchestrating a disruptive cyber attack against Transport for London (TfL). This marks a significant law enforcement victory against a group known for targeting large enterprises and critical infrastructure.

WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool

thehackernews.com · 30 days ago

Direct messages sent via WhatsApp are being used to distribute malicious Visual Basic Script (VBScript) files that lead to the installation of legitimate Remote Monitoring and Management (RMM) software. Per findings from Kaspersky, the active campaign is targeting users of WhatsApp Desktop and WhatsApp Web across Malaysia, Brazil, India, Mexico, Singapore, the U.K.

FortiBleed Campaign Uses FortigateSniffer to Harvest 110 Million Credentials From Fortinet Firewalls

gbhackers.com · 30 days ago

A large-scale credential harvesting campaign called “FortiBleed” has been uncovered, revealing how threat actors are exploiting Fortinet FortiGate firewalls to capture authentication data on an unprecedented scale.

OpenAI Launches Daybreak to Automate Vulnerability Patching With GPT-5.5-Cyber

gbhackers.com · 30 days ago

OpenAI has announced Daybreak, a new cybersecurity initiative aimed at automating vulnerability patching on a large scale using its latest GPT-5.5-Cyber model. This marks a shift from merely discovering vulnerabilities to focusing on end-to-end remediation.

CalPhishing Campaigns Use Outlook Calendar Invites to Deliver Persistent Phishing Lures

gbhackers.com · 30 days ago

A growing trend in which attackers weaponize Microsoft 365 collaboration features to deliver persistent phishing lures via Outlook calendar invites.

29-Year-Old Squid Proxy Vulnerability Exposes Authorization Headers and API Keys

gbhackers.com · 30 days ago

A recently disclosed vulnerability in Squid Proxy, tracked as CVE-2026-47729 and referred to as “Squidbleed,” is exposing sensitive user data, including HTTP authorization headers and API keys. This issue arises from a decades-old memory-handling flaw in Squid’s codebase, dating back to at least 1997.

OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws

thehackernews.com · a month ago

OpenAI on Monday said it's releasing an improved version of its GPT‑5.5‑Cyber model to trusted defenders as part of the Daybreak initiative, the artificial intelligence (AI) company announced last month. Calling GPT‑5.

Change your cyber risk strategy to meet AI threats, Five Eyes countries warn CSOs

www.csoonline.com · a month ago

CSOs must re-write their cyber risk strategies because threat actors are increasing using AI to evade defenses, says a group of national cybersecurity agencies, a call that one expert immediately complained is too vague to be of use.

GitHub Actions hardens checkout security to block ‘pwn request’ attacks

www.csoonline.com · a month ago

Stung by a surge in cyberattacks that have run amok in developer environments, GitHub has strengthened the security of actions/checkout to block ‘pwn request’ attacks that exploit insecure use of the pullrequesttarget workflow trigger to run an attacker’s code with the workflow’s full privileges.

Tesla Crash That Killed a Texas Woman Will be Investigated by Federal Regulators

www.nytimes.com · a month ago

The car’s driver-assistance system was in use when the crash killed a woman on Friday, the police said.

WhatsApp phishing attack uses fake business docs to hack PCs

www.bleepingcomputer.com · a month ago

An ongoing malware campaign is targeting WhatsApp users in multiple countries with deceptive messages that push VBScript files, leading to remote system access.

The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration

unit42.paloaltonetworks.com · a month ago

Unit 42 research details how attackers could exploit global name uniqueness in bucket hijacking to redirect cloud data streams across major CSPs.

JaredFromSubway MEV bot hacked in $15 million crypto theft

www.bleepingcomputer.com · a month ago

The JaredFromSubway Ethereum MEV (Maximal Extractable Value) bot suffered a $15 million loss after an attacker manipulated the opportunity-detection logic by creating fake cryptocurrency trading opportunities.

DifyTap Bugs Let Attackers 'Wiretap' AI Chat Histories

www.darkreading.com · a month ago

Four vulnerabilities allow attackers to exploit Dify, a platform for AI application building and management, to silently access and exfiltrate sensitive data.

FFmpeg fixes PixelSmash flaw in widely used video decoder

www.bleepingcomputer.com · a month ago

A newly disclosed FFmpeg flaw dubbed 'PixelSmash' could be exploited for remote code execution on Jellyfin servers under certain conditions, and can also trigger a denial-of-service condition in applications like Kodi, Emby, Nextcloud, PhotoPrism, and OBS Studio.

FortiBleed campaign used custom FortiGate sniffer to steal credentials

www.bleepingcomputer.com · a month ago

Security firm SOCRadar says the large-scale FortiBleed campaign targeting Fortinet FortiGate devices used custom sniffers to harvest authentication secrets from compromised firewalls and steal credentials.

New Apple Exploit Exposes Millions of iPhones Worldwide, No Software Fix Available

www.techrepublic.com · a month ago

Researchers disclosed usbliter8, a SecureROM exploit affecting older Apple devices that can bypass boot protections with physical access.

Guarding AI memory

www.microsoft.com · a month ago

What happens when threat actors target what AI remembers? Microsoft breaks down the risks and the defenses.

Microsoft Confirms Windows Recycle Bin Bug Affects All Supported Versions

www.techrepublic.com · a month ago

Microsoft confirmed a Windows June update bug that shows internal Recycle Bin file names during permanent deletion, with a fix planned.

ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack

thehackernews.com · a month ago

Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack after unknown threat actors managed to tamper with the official release channels and push backdoor code.

Microsoft says Windows 11 26H2 is coming soon, details upgrade process

www.bleepingcomputer.com · a month ago

Microsoft has confirmed that Windows 11 version 26H2 will be the next feature update and that devices running Windows 11 24H2 and 25H2 will be able to upgrade using a small enablement package.

Microsoft fixes AutoGen Studio flaw that enabled code execution

www.bleepingcomputer.com · a month ago

A vulnerability chain dubbed AutoJack in Microsoft's AutoGen Studio interface for prototyping AI agents could let attackers manipulate an agent into executing arbitrary commands on its host system simply by visiting a malicious webpage.

AWS Continuum offers devs help with securing code

www.csoonline.com · a month ago

AI coding agents are making it easier than ever to produce software. Ensuring that software is secure before deployment is another matter, one that AWS thinks AI should help with too. As enterprises adopt agentic development workflows, the volume of first-party code being created and modified is rising rapidly.

Klue breach exposed Salesforce CRM data through stolen OAuth tokens

www.csoonline.com · a month ago

An attacker broke into competitive-intelligence vendor Klue, stole OAuth tokens its customers use to connect to Salesforce and other platforms, and accessed data across multiple customer environments prompting the company to revoke customer OAuth tokens and disable affected integrations.

Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants

thehackernews.com · a month ago

Cybersecurity researchers have disclosed details of four vulnerabilities in Dify, an open-source agentic workflow platform with more than 146,000 GitHub stars, that could allow attackers to stealthily read artificial intelligence (AI) conversions from other customers' applications without requiring authentication. The vulnerabilities have been collectively codenamed DifyTap by Zafran Security.

Crypto Heist Fueled by Elaborate Fake Reputation-Boosting Campaign

www.darkreading.com · a month ago

Attackers are using multiple online channels, including GitHub, YouTube, and VirusTotal, to build an illusion of trust to spread a cross-platform clipboard hijacker.

One intrusion, two cyberattackers: Uncovering parallel threat activity

www.microsoft.com · a month ago

Ransomware case reveals two parallel threat actors, blending tactics and evasion, showing why isolated signals can often miss modern, overlapping cyberattacks.

29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests

thehackernews.com · a month ago

A heap over-read in the Squid web proxy can leak another user's cleartext HTTP request, including any credentials or session tokens it carries, to anyone already allowed to send traffic through the same proxy. The bug traces to a 1997 FTP-parsing change and is still live in Squid's default configuration. Researchers at Calif.

Mukesh Ambani’s Reliance AI Roadmap Puts Jio CallAgent Inside the Network

www.techrepublic.com · a month ago

Reliance’s AI roadmap puts Jio CallAgent inside the telecom network while tying India-scale AI ambitions to Jamnagar compute, local-language services, and enterprise compliance questions.

He Thought He Was Secure; His Phone Number Got Stolen Anyway

www.darkreading.com · a month ago

Threat actors can easily steal one-time passwords sent by text when they conduct a SIM swap attack. This can lead to account takeovers, so users must layer up their security measures.