Blahalla

Hackers Exploit Critical Cisco ISE Flaw to Bypass Authentication and Gain Root Access

gbhackers.com · a month ago

Cisco has issued an urgent security advisory regarding a critical authentication-bypass vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC). This vulnerability, tracked as CVE-2026-76460, has a maximum CVSS score of 10.0 and could allow unauthenticated remote attackers to gain unauthorized access to vulnerable devices.

China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America

thehackernews.com · a month ago

ESET researchers Alexandre Côté Cyr and Romain Dumont reported observing the China-aligned state-sponsored group FamousSparrow. FamousSparrow used this backdoor to target multiple countries in Latin America starting at least in August 2025.

OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads

thehackernews.com · a month ago

OpenAI disclosed six instances of "unexpected or concerning model behavior" that occurred over the last six months. The company also launched a new framework designed to improve transparency for reporting, tracking, and investigating model misalignment.

APT36 Targets Indian Government and Defense Organizations With New Rust Malware Arsenal

gbhackers.com · a month ago

Pakistan-nexus threat actor APT36 has launched a renewed espionage campaign targeting government and defense organizations in India and Afghanistan. Deploying a new Rust-based malware suite designed for covert command-and-control, data theft, and propagation into isolated networks.

On ‘Cupertino,’ Robert and Michelle King Go Online

www.nytimes.com · a month ago

The prolific producers target tech bigwigs in their newest show. “They’re really the stupidest and dumbest people,” Robert King said.

How Anthropic CEO Dario Amodei’s Writings Help Explain A.I. Fears

www.nytimes.com · a month ago

The collected essays of Dario Amodei help explain why some people are so worried about artificial intelligence.

AI has transformed the Pentagon’s aging networks into a national security risk

www.washingtonpost.com · a month ago

Outdated networks face growing cyber threats as AI makes it easier for adversaries to exploit vulnerabilities and launch disruptive attacks.

Chinese hackers use SparroWocky malware in govt espionage attacks

www.bleepingcomputer.com · a month ago

The China-linked espionage group FamousSparrow has been using a new backdoor named SparroWocky in attacks on government organizations in Latin America.

12 Serverless Security Options Compared (2026): Features & Pricing

gbhackers.com · a month ago

Quick Answer: There is no standalone serverless-security SKU worth buying in 2026 functions are a line item inside CNAPP or observability contracts. Datadog publishes per-function rates (the category’s only clean anchor); Prisma Cloud carries the deepest lineage (PureSec); Aqua, Sysdig, Wiz, CloudGuard, and Fortinet (Lacework) bill functions inside platform units.

16 governance tools for securing your AI fleet

www.csoonline.com · a month ago

Every DevOps team member knows that dealing with an AI is like being a circus lion tamer. The boss and the audience are happy when the lions sit on the pedestal and roar on cue, but there’s always the danger that they’ll go rogue and bring the whole show to a quick and disastrous end.

Microsoft shares workaround for Windows domain login issues

www.bleepingcomputer.com · a month ago

Microsoft shared a temporary fix on Wednesday for a known issue that prevents Windows 11 users from logging in with valid domain credentials after installing the September 2026 security updates.

RatHat Abuses Android Wireless Debugging to Gain Shell Access and Steal Banking PINs

gbhackers.com · a month ago

RatHat, a newly identified Android banking malware family that combines Accessibility abuse, local Android Debug Bridge (ADB) pairing, native shell-level components, and generative-AI-assisted interface automation.

BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS

thehackernews.com · a month ago

The Internet Systems Consortium (ISC) released BIND 9.20.29 and 9.21.26 to fix fourteen security flaws found in the open-source DNS server. One critical flaw affects BIND servers utilizing DNS-over-HTTPS (DoH). This flaw allows any sender to crash the server process with a single crafted request.

CISA Releases Guidance on Deploying Cyber Decoys

www.securityweek.com · a month ago

Complementing Zero Trust models, decoys enable organizations to detect, observe, and block malicious activity in their environments.

I need Help!!

qualtricsxm58zvyjjjt.qualtrics.com · a month ago

Guys, I am doing my thesis work and deadline is in 15 days. I don't have much time left to collect survey responses. could you please help me by participating in the survey? I need 100 responses atleast. Please.. https://qualtricsxm58zvyjjjt.qualtrics.

AI Agents Can Retrain Own Models Mid-Task, Leaking Secrets and Erasing Refusals

www.securityweek.com · a month ago

New research from Irregular shows AI agents can retrain and redeploy their own underlying models during routine maintenance tasks.

Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records

thehackernews.com · a month ago

Gyazo, Helpfeel's image-sharing service, announced a security breach that exposed 23.62 million user records, including email addresses and password hashes. The Kyoto-based company also exposed 490 million image metadata records, mostly containing IDs for images from January 2019 or earlier.

Cisco warns of max severity ISE zero-day exploited in attacks

www.bleepingcomputer.com · a month ago

Cisco has released security updates to address a maximum-severity Identity Services Engine vulnerability that attackers are actively exploiting in the wild.

Docker Sandboxes Vulnerabilities Let Malicious Guests Escape Workspace and Access Host Files

gbhackers.com · a month ago

Docker has released security fixes for two serious vulnerabilities in Docker Sandboxes that could let a malicious guest environment bypass workspace isolation and access sensitive resources on the host. These flaws, identified as CVE-2026-77179 and CVE-2026-79994, were addressed in Docker Sandboxes version 0.42.0, which was released on September 7.

Fragnesia primitive via Open vSwitch. Deterministic local privilege escalation.

blog.doyensec.com · a month ago

This is a deterministic local privilege escalation affecting the default install of the latest Arch, Fedora, Debian, Amazon Linux and RHEL distributions, having unprivileged user namespaces enabled, openvswitch auto-loading, and a stock kernel carrying the Fragnesia fix.

Hackers Turn AI Agent Into a Cyber Weapon After Deleting Its Safety Refusals

gbhackers.com · a month ago

A French-speaking cybercrime crew calling itself BlackHatSect0r && DXQRTXX allegedly disabled safety controls in a self-hosted AI agent and used the resulting system to automate mass credential harvesting, target discovery, phishing preparation, and attack orchestration. The internet-exposed server reportedly contained 4.

BlackHatSect0r Hackers Disable AI Safety Controls to Automate Credential Theft and Cyberattacks

gbhackers.com · a month ago

A French-speaking cybercrime crew calling itself BlackHatSect0r && DXQRTXX allegedly disabled safety controls in a self-hosted AI agent and used the resulting system to automate mass credential harvesting, target discovery, phishing preparation, and attack orchestration. The internet-exposed server reportedly contained 4.

OpenAI reveals cases of ‘concerning’ AI behaviour as it announces new disclosure system

www.theguardian.com · a month ago

Model adopting ‘jailbreak-like instructions’ among cases as firm says it is introducing new way of tracking AI misalignment OpenAI has disclosed six more examples of “unexpected or concerning” behaviour by its technology, as it warned the pace of development could not continue at “maximum speed for much longer”.

Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

thehackernews.com · a month ago

Cisco warned about a maximum-severity flaw, CVE-2026-76460, impacting Identity Services Engine (ISE). The vulnerability, which scored 10.0, allows unauthenticated, remote attackers to bypass authentication due to insufficient control on an API endpoint. Cisco urges users to patch the system immediately as this zero-day vulnerability is currently under active exploitation.

Jenkins Patches 20 Plugin Flaws Leading to RCE, XSS and Credential Theft

gbhackers.com · a month ago

Jenkins has released security updates addressing 20 vulnerabilities across 13 plugins, including multiple high-severity flaws that could allow authorized attackers to bypass Groovy sandbox protections and execute arbitrary code on Jenkins controllers.

Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day

www.securityweek.com · a month ago

Remote, unauthenticated attackers can exploit the vulnerability to bypass authentication via crafted requests.

NightEagle Hackers Abuse Microsoft Dev Tunnels and GhostContainer to Breach Russian Companies

gbhackers.com · a month ago

The NightEagle advanced persistent threat group, tracked as APT-Q-95, has expanded its operations to target businesses in Russia, combining stolen VPN credentials, a stealthy Microsoft Exchange backdoor, and legitimate tunneling technologies to move through victim networks.

NightEagle Hackers Target Russian Companies Using GhostContainer Backdoor

gbhackers.com · a month ago

The NightEagle advanced persistent threat group, tracked as APT-Q-95, has expanded its operations to target businesses in Russia, combining stolen VPN credentials, a stealthy Microsoft Exchange backdoor, and legitimate tunneling technologies to move through victim networks.

Critical Check Point Vulnerability Allows Remote Root Code Execution Without Authentication

gbhackers.com · a month ago

Check Point has issued a high-severity security alert for CVE-2026-91843, which is a critical stack overflow vulnerability in the login process of its Security Management and Log Server products.

U.S. Seizes NightmareStresser Domains Linked to Hundreds of Thousands of DDoS Attacks

thehackernews.com · a month ago

The U.S. Department of Justice (DoJ) announced the court-authorized seizure of internet domains associated with NightmareStresser. The seizure targets the DDoS-for-hire service using the domains nightmare-stresser[.]com and nightmarestresser[.]org. This action aims to disrupt the cybercriminal network providing denial-of-service capabilities.

OpenAI reveals new cases of AI models cheating, going off script

www.washingtonpost.com · a month ago

Newly disclosed incidents show models manipulating tests and generating their own instructions, raising fresh questions about AI safety.

Anthropic wants Claude to analyze your bank account and financial data

www.bleepingcomputer.com · a month ago

Anthropic is testing "Claude Money," a new feature allowing users to link personal bank accounts directly to the Claude AI. The system analyzes connected financial data, enabling users to query details about spending, bills, and savings. This capability parallels OpenAI's Finances tool, raising discussions about data privacy and regional availability.

OpenAI Discloses Six New Incidents of ‘Concerning' A.I. Behavior

www.nytimes.com · a month ago

The AI company released a new framework designed for system safety. This structure establishes guidelines for reporting malfunctions when the AI's systems fail.

Judge Orders Data Sharing and Other Fixes to Solve Google’s Ad Tech Monopoly

www.nytimes.com · a month ago

The article examines regulatory measures affecting a major tech company's ad-tech business. These remedies fall short of the government's demanded breakup. Consequently, the new measures effectively ensure the tech titan's core operations remain largely unscathed.

Smashing Security podcast #485: These researchers got drunk to hack an LG TV

grahamcluley.com · a month ago

Researchers struggled to test security risks in LG smart TVs because the manufacturer's terms and conditions forbade such testing. Meanwhile, the podcast details "Awesome," an Android malware that steals user data and demands a ransom. Additionally, expert Andy Hornegold warns that cybercriminals now target the mid-market, employing AI to quickly escalate initial access to full ransomware attacks.

The Hacker's Guide to Attacking AI Agents

darkmarc.substack.com · a month ago

To assess agentic AI systems, attackers must define the system's true attack surface. This involves analyzing how the language model connects to external tools with authority. Security professionals must investigate five key areas: untrusted input sources, enabled tools, operating privilege, downstream processing methods, and potential data output paths.

AI Security Spending Jumps as Fear Outpaces Proof of Value

www.darkreading.com · a month ago

CISOs are not waiting for AI to prove its cybersecurity value before investing in the technology. Is it the right move?

Windows 11 KB5124008 update breaks domain trust for some users

www.bleepingcomputer.com · a month ago

Win 11 KB5124008 update may break domain trust on enterprise systems, blocking valid logins. Failure links to Windows Machine Identity Isolation. Microsoft is investigating the root cause.

Iranian hackers use CHOSEN BRICK Windows malware to spy on targets

www.bleepingcomputer.com · a month ago

Iranian hackers use CHOSEN BRICK malware via WhatsApp/Telegram social engineering to spy on dissidents/journalists. It steals screenshots, audio, and emails, exfiltrating data.

LinkedIn fights for the right to tell customers when the feds want their data

www.csoonline.com · a month ago

Microsoft CLO Jon Palmer urges lawmakers to limit secret government subpoenas for LinkedIn users. He advocates for narrow scope and requires specific evidence to uphold 4th and 1st Amendment rights.

Malware bypasses browser checks to force install Chrome, Edge extensions

www.bleepingcomputer.com · a month ago

A banking malware operation active since mid-2025 has been using a toolkit named KREMLIN to install malicious Chrome and Edge extensions that steal credentials, session tokens, and sensitive data.

China’s Answer to AI Safety: More Controls, Not Slower Development

www.techrepublic.com · a month ago

China emphasizes technical controls for AI agents, contrasting with the ongoing U.S. debate over slowing frontier AI capability advancement. U.S. lawmakers debate mandatory national safety standards and kill switches for powerful AI models. Conversely, China develops guidelines focusing on controllability and safety measures across the entire design, development, and operation of AI agents.

Data Broker Radaris Loses Domains in Privacy Fight

krebsonsecurity.com · a month ago

The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information from its vast empire of people-search services online.

Fighting Your Dragons Through Tough Tech Times

www.darkreading.com · a month ago

Cybersecurity industry veteran Hal Pomeranz gives a pep talk on career anxiety and self-doubt and shares how to build meaningful connections during historical tech industry downturns.

Spain's data agency gets first report of AI-powered data breach

www.bleepingcomputer.com · a month ago

The Spanish Data Protection Agency (AEPD) was notified of an attack allegedly carried out with an AI agent powered by a known large language model (LLM).

SilkParasite Infrastructure Exposed: pivoting from one page hash and a single TLS cert to a 13-server SpiceRAT cluster

hunt.io · a month ago

Researchers found SpiceRAT C2 servers targeting Central Asia's energy/government sectors since late 2025. The cluster used TLC certificates to impersonate entities like Uzbekistan's state railway. This links SpiceRAT, NodeEdgeRAT, and NomadRAT for geopolitical targeting.

BragJack Attack Can Turn a Browser's Agentic AI Against It

www.darkreading.com · a month ago

Researcher Gal Weizman found BragJack, an attack exploiting a flaw in browser AI assistants. It allows malicious extensions to force actions, bypassing guardrails. Google and Microsoft issued CVE-2026-0628 and CVE-2026-55945 for the vulnerabilities.

First Agentic AI Data Breach Reported to Spanish Regulator

www.securityweek.com · a month ago

The Spanish Data Protection Agency (AEPD) reported the first known personal data breach executed by an AI agent. The attack successfully chained together a login, vulnerability discovery, and modification of personal data. AEPD stressed that defenses must adopt AI tools and incorporate detection mechanisms to respond quickly.

Big Tech’s AI safety rift signals disruption and disparity for enterprises

www.csoonline.com · a month ago

AI model security is challenging due to company disagreement. Zuckerberg favors neutral evaluators, differing from rivals' calls for coordination. Orgs must treat frontier AI as a variable supply, not assuming consistent access.

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL VPN Denial of Service Vulnerability

sec.cloudapps.cisco.com · a month ago

A Denial of Service vulnerability (CVE-2024-20260) impacts Cisco Secure Firewall ASA and FTD Software. Attackers exploit this flaw through the VPN and management web servers by sending a large volume of SSL/TLS connections. This action exhausts system memory or buffer blocks, causing severe service disruption.