Blahalla

Google’s Early Access is creating a blind spot for malicious apps

www.csoonline.com · a month ago

Bitdefender Labs found Google's Early Access allows deceptive apps (e.g., fake casinos, misleading utilities) an advantage due to no public ratings. Some apps can intercept 2FA codes or silently load web views.

PaperCut Flaws Exploited in AI-Powered Attacks

www.securityweek.com · a month ago

A Russian-speaking group used AI to build and deploy exploits targeting PaperCut NG/MF vulnerabilities CVE-2026-82078 and CVE-2026-81578. The campaign impacted 440 deployments across 395 organizations in 48 countries, achieving remote code execution and credential harvesting. The group successfully gained domain admin privileges in 12 instances, signaling a focus on access development.

The Ezra Klein Show: The A.I. Revolt Is Here

www.nytimes.com · a month ago

The A.I. giants weren’t prepared for this.

Trezor: 347,000 users targeted in phishing attacks after Brevo breach

www.bleepingcomputer.com · a month ago

Trezor disclosed that a phishing campaign, leveraging a breach at its email provider Brevo, targeted 347,000 customer email addresses. Attackers sent fake "security alert" emails, claiming a vulnerability in STM32 microcontrollers and attempting to trick users into entering wallet backups. Trezor limited the damage by quickly taking down the malicious domain, ultimately affecting 2,500 customers.

CISA Urges Service Providers to Provide Transparent Updates During Major IT and OT Outages

gbhackers.com · a month ago

CISA and FBI guide service providers on IT/OT outages. During disruptions, acknowledge outages, name affected services, and give workarounds. Do not speculate on root causes.

Hackers Use AI-Assisted CEO Emails to Trick Finance Teams Into Sending $50,000 Payments.

gbhackers.com · a month ago

AI phishing using C-suite impersonation and fake ServiceNow invoices defrauded finance teams of $50k via ACH payments. Microsoft detected over one million related messages, showing scalable BEC threats.

Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors

thehackernews.com · a month ago

Cloud security company Wiz reported that attackers chained two flaws in JFrog Artifactory to take administrator control of self-hosted servers and plant backdoors. Wiz observed the exploitation between August 15 and September 8. The vulnerability exposed only servers that had not applied patches, despite JFrog having fixed the flaws previously.

12 Best Server Security Solutions Compared (2026): Features & Pricing

gbhackers.com · a month ago

Ransomware targets demand layered defense. Twelve solutions rated by 5 criteria. CrowdStrike and SentinelOne lead EDR. Trend Micro Deep Security offers virtual patching, and Microsoft Defender for Servers anchors Azure/hybrid protection.

12 Best Ransomware Protection Solutions Compared (2026): Features & Pricing

gbhackers.com · a month ago

No single product stops ransomware. Layered defense requires EDR (CrowdStrike/SentinelOne), detection, and data recovery (Rubrik/Acronis). Organizations must prevent execution, detect spread, contain breaches, and recover data fast.

China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor

thehackernews.com · a month ago

Gen Digital reported that a China-linked hacking group exploited a flaw in Sogou Input Method, a popular Windows typing tool. The attack utilized a crafted link, successfully installing a backdoor on victims' computers. This vulnerability allowed the attacker to gain full control over the logged-in user's system.

Mantax OTAX Android Ransomware Spies on Users, Steals OTPs and Encrypts Files

gbhackers.com · a month ago

The Mantax OTAX malware family combines ransomware, spyware, and credential theft into a single Android infection chain. Attackers distribute the malware via sideloaded APKs, bypassing official Play Store scrutiny. Mantax OTAX steals PINs, intercepts one-time passwords, and accesses sensitive data like messages and call logs before encrypting files.

12 Best Endpoint Encryption Software Compared (2026): Features & Pricing

gbhackers.com · a month ago

Centralized management is key for encryption tools like BitLocker/VeraCrypt. Businesses need budgets for escrow/compliance. Platforms like Sophos Central enforce unified, multi-OS policy across SMB to enterprise fleets.

11 Best Device Control & USB Security Tools Compared (2026): Features & Pricing

gbhackers.com · a month ago

Eleven device control tools were assessed. CoSoSys Endpoint Protector topped for cross-platform control (Win, Mac, Lin). Ivanti DeviceLock offers deep Windows peripheral control, while Symantec, Forcepoint, and Digital Guardian provide enterprise DLP.

12 Best Endpoint Privilege Management (EPM) Tools Compared (2026): Features & Pricing

gbhackers.com · a month ago

EPM blocks ransomware/privilege escalation by removing local admin rights. Leaders include CyberArk and BeyondTrust; Delinea is mid-market friendly. Smaller orgs use Admin By Request or CyberFOX, while Microsoft Intune EPM suits Entra.

Conti ransomware gang member sentenced to 4 years in prison

www.bleepingcomputer.com · a month ago

Oleksii Lytvynenko received a four-year prison sentence for his role in the Conti ransomware operation during 2021 and 2022. Lytvynenko pleaded guilty to wire fraud, admitting he stole victim data and developed malicious tools for the cybercrime gang. Conti attacked numerous networks across 47 US states and 31 foreign countries, resulting in over $150 million in estimated payouts.

PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws

thehackernews.com · a month ago

PaperCut released a security maintenance release that replaces prior emergency patches. This update addresses two flaws actively exploited in the wild. Customers can download versions 26.0.5, 25.0.13, and 24.1.10 to secure their software.

Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware

thehackernews.com · a month ago

Cisco revealed that three threat clusters, linked to ransomware and state-sponsored attacks, exploited two recently patched Secure Firewall Management Center (FMC) vulnerabilities. These attacks leverage CVE-2026-20079, an authentication bypass flaw in the FMC web interface. The vulnerability allows remote, unauthenticated attackers to bypass critical security features.

Hackers Deploy New SloppyRAT via ClickFix to Enable Ransomware Lateral Movement

gbhackers.com · a month ago

A new Windows RAT, SloppyRAT, serves as an intrusion-enablement tool for ransomware, first appearing in June 2026. The malware is delivered through a multi-stage ClickFix chain, exploiting finger.exe for initial command retrieval. SloppyRAT supports lateral movement and host reconnaissance by mapping typical PowerShell commands directly into C++, bypassing standard execution visibility.

Hackers Abuse Claude AI Agents to Automate Cyberattacks, Exploitation and Data Theft

gbhackers.com · a month ago

AI agents automate complex cyberattacks. Midnight Blizzard targeted European/Ukrainian govts, defense, intel sectors. Attacks included infra acquisition, credential harvesting, and malware evasion.

New AI Attack Hides Malicious Instructions in Normal-Looking Text to Evade Safety Filters

gbhackers.com · a month ago

A newly disclosed prompt-crafting technique can hide policy-violating instructions inside ordinary-looking English prose, allowing malicious requests to pass through lightweight LLM safety filters before being recovered and processed by a more capable downstream model.

WordPress Blocks High-Risk Plugin Releases With New AI-Powered Automated Security Review

gbhackers.com · a month ago

WordPress has launched an automated security review system that uses multiple AI models and Jetpack Scan to analyze every plugin release before distributing it to websites via the WordPress.org update API. This new control is designed to prevent vulnerable or malicious plugin updates from reaching millions of WordPress installations through dashboard-based, one-click updates.

Critical Cisco FMC Flaws Actively Exploited to Gain Root Access and Deploy Malware

gbhackers.com · a month ago

Cisco Talos has warned that threat actors are actively exploiting two vulnerabilities in Cisco Secure Firewall Management Center (FMC) Software. These vulnerabilities can lead to unauthorized access, root-level code execution, credential theft, network reconnaissance, and malware deployment.

Critical Check Point VPN Flaws Let Unauthenticated Attackers Execute Remote Code

gbhackers.com · a month ago

Check Point has announced two critical vulnerabilities in its VPN technology that could allow unauthenticated remote attackers to execute arbitrary code on affected security gateways under certain conditions. These vulnerabilities, tracked as CVE-2026-85102 and CVE-2026-85103, impact both Remote Access VPN and Site-to-Site VPN functionalities.

Attackers are weaponizing the gap between Chromium fixes and Chrome patches

www.csoonline.com · a month ago

A new exploit kit is revealing the perils of the “patch later” mentality. According to the Proofpoint Threat Research team, espionage-motivated threat actors are using a new malicious toolkit to chain together four separate Chrome browser and Microsoft Windows vulnerabilities to allow them to launch targeted spear phishing campaigns.

Indonesia Hit by Android Banking App-Cloning Campaign

www.darkreading.com · a month ago

The GoldFactory threat group exploits the Android Work Profile feature to deliver the Gigabud Trojan, while Mantax Otax spreads separately.

The ultimate guide to hacking APIs in 2026 has been updated

labs.detectify.com · a month ago

Back in 2021 I wrote a "how to hack APIs" blog for Detectify that got loads of traction, but it's way out of date now. I rewrote it for 2026 to include a bunch of the newer popular technologies and AI.

Could A.I. Really Kill All Humans?

www.nytimes.com · a month ago

After an Anthropic researcher quit, warning that the A.I. race is “gambling with our lives,” Cade Metz joined Natalie Kitroeff on “The Call” to break down what’s at stake.

No Extensions? You Forgot One: Writing Shared Objects to RCE via SQLite's dbpage

gabdevele.dev · a month ago

A novel technique for writing ELF shared objects and achieving code execution in Python, Ruby, and Node.js using the sqlitedbpage virtual table.

New Android malware encrypts files, steals data, and harasses victims

www.bleepingcomputer.com · a month ago

A new Android malware strain called Mantax Otax combines ransomware and spyware capabilities to encrypt files, steal sensitive data, and spam and harass victims.

Voice Callers Exploit BYOD to Reach Microsoft 365, Corporate Data

www.darkreading.com · a month ago

Threat actors are leveraging Microsoft's Graph API to identify lucrative targets, then passing their access to extortion groups like ShinyHunters.

September Windows Server updates break Remote Desktop Services

www.bleepingcomputer.com · a month ago

Windows admins report that the September 2026 security updates are causing Remote Desktop Services (RDS) failures on Windows Server 2019, 2022, and 2025 servers, preventing users from connecting and, in some cases, requiring a hard reset to restore functionality.

Mandiant Founder Kevin Mandia Joins Amazon Board

www.securityweek.com · a month ago

Mandiant founder and cybersecurity veteran brings more than 30 years of public and private sector experience to Amazon’s board.

US Accuses Six Chinese AI Firms of Distilling Frontier ModelsUS Accuses Six Chinese AI Firms of Distilling Frontier Models

www.techrepublic.com · a month ago

US agencies accuse six Chinese AI firms of distilling frontier models and recommend new defenses that could affect enterprise AI access and API use.

Surfshark VPN says hackers breached internal testing, proxy servers

www.bleepingcomputer.com · a month ago

Surfshark disclosed that hackers accessed one of its internal test servers after a configuration error exposed it to the internet.

CISA’s ChatGPT Incident Exposes a Bigger AI Governance Problem

www.techrepublic.com · a month ago

CISA’s ChatGPT incident exposes a growing AI governance gap as enterprises struggle to define who is accountable for actions taken by AI agents.

Microsoft Excel KB5002914 update breaks copy and paste for some users

www.bleepingcomputer.com · a month ago

Microsoft Excel users report that this week's KB5002914 Office security update is breaking copy-and-paste operations and formula dragging, with affected users saying that removing or rolling back the update restores normal functionality.

🕵️‍♂️ SonicWall SMA1000 (CVE-2026-15409): SSRF to Erlang RCE chained into automated DCSync from the appliance

hunt.io · a month ago

CVE-2026-15409 is an unauthenticated SSRF in the SMA1000 WorkPlace interface. The chain is the interesting part. The /wsproxy WebSocket endpoint is used to reach a locally bound Erlang distribution node ( [email protected] on port 1050), the Erlang handshake is completed with a hardcoded cookie, and os:cmd() gives command execution as the couchdb user. From there the operator read policyfile.

ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories

thehackernews.com · a month ago

A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?” An extension asks for access and takes too much. A trusted service becomes part of a phishing chain. An old bug still gets results. An exposed system stays exposed. A package looks useful right up until it isn’t.

California’s Governor to Sign Landmark Online Child Safety Bills

www.nytimes.com · a month ago

Gov. Gavin Newsom will sign a bill that prohibits social media platforms from providing addictive features to users under the age of 16, the first law of its kind in the nation.

Protecting organizations from AI-assisted executive impersonation and invoice fraud

www.microsoft.com · a month ago

Microsoft examines an AI-assisted business email compromise campaign that used executive impersonation and fake invoices to target finance teams with ACH payment fraud.

Anthropic Says It Blocked Possible Efforts to Build Biological Weapons

www.nytimes.com · a month ago

In a new report, the A.I. start-up added that it could not determine if the research was legitimate or nefarious, leading the company to shut down the work.

OpenMatter Network Realigns Leadership Team to Accelerate Global Commercial Growth

gbhackers.com · a month ago

OpenMatter Network realigned leadership. Renee Davis is the new CBO for commercial growth. Chris Biele is VP of Operations and Partnerships, handling enterprise relations.

Cybersecurity M&A Roundup: 33 Deals Announced in August 2026

www.securityweek.com · a month ago

Brinqa bought PlexTrac for CTEM. Datavault AI acquired CyberCatch to boost compliance. Fortinet bought Virtue AI for AI security. Cribl absorbed Radiant Security for alert triage.

Detect and disrupt AI-themed attacks with Microsoft Defender

www.microsoft.com · a month ago

See how Microsoft Defender detects and disrupts AI-themed phishing, malware, and multi-stage attacks across the attack chain.

How the New iPhone Duo’s Glass Screen Bends Without Breaking

www.nytimes.com · a month ago

The screens of foldable phones are a triumph of materials science and microengineering.

AI-powered attack exploited PaperCut flaws to hack 395 organizations

www.bleepingcomputer.com · a month ago

AI agents used Codex/DeepSeek to hit 395 orgs in 48 countries. They exploited CVE-2026-81578, CVE-2026-82078, and CVE-2021-42278/42287 on PaperCut NG/MF. Attackers harvested credentials from 280 victims, gaining admin rights via DCSync.

Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers

www.bleepingcomputer.com · a month ago

Cisco Talos reports that three threat clusters exploited two vulnerabilities in Cisco Secure Firewall Management Center (FMC): CVE-2026-20079 and CVE-2026-20316. These flaws enable attackers to bypass authentication and steal credentials from the FMC device. The threat clusters used the compromised systems to deploy Qilin ransomware and Cyclops Blink malware, gaining access to internal networks.

Glass Thinner Than a Human Hair: How the New iPhone Bends but Doesn’t Break

www.nytimes.com · a month ago

The screens of foldable phones are a triumph of materials science and microengineering.

AI researcher who warned of ‘disaster’ is now a target of the right

www.washingtonpost.com · a month ago

AI researcher Jacob Coxon quit Anthropic, warning that the superintelligence industry "gambling with our lives." His warnings quickly attracted attention from members of Congress, who subsequently called for industry regulatory checks. Despite the focus on safety, Coxon also faced accusations from the political right claiming he acted as a political plant.

Nightmare-Eclipse Strikes Again with 'ShieldCrash' Windows Exploit

www.darkreading.com · a month ago

Security researcher Nightmare-Eclipse released the "ShieldCrash" zero-day exploit, targeting Windows Defender. This exploit bypasses patches for CVE-2026-69414, a privilege escalation flaw within the Microsoft Malware Protection Engine. The proof-of-concept demonstrates an arbitrary file read as SYSTEM, furthering the researcher's public dispute with Microsoft.