Blahalla

Critical ASUS Control Center CVE-2026-75754 Flaw Allows Unauthenticated Root Access

gbhackers.com · a month ago

ASUS has issued a security bulletin regarding a critical vulnerability in ASUS Control Center Enterprise (ACC), identified as CVE-2026-75754. This flaw affects ACC version 4.0.0.2 and earlier, allowing for unauthenticated root access. Critical ASUS Control Center Flaw The advisory was published on September 4, 2026, and was last updated on the same day.

ChatGPT Astra is now rolling out to $20 Plus subscription

www.bleepingcomputer.com · a month ago

OpenAI is now rolling out ChatGPT Astra, its most powerful model to date, to those with a $20 Plus subscription, but there's no word on when free users will get access..

I gave my agent an API key and lost $100. Never again.

painintheagent.com · a month ago

Author here. I wanna open source some of my stuff that I count useful, looking for feedback.

Attackers conceal phishing lures using invisible Unicode characters

www.bleepingcomputer.com · a month ago

Microsoft researchers found a large phishing campaign using ASCII smuggling with invisible Unicode characters. Attackers placed these characters in finance keywords like 'funding,' splitting them to bypass email security filters. Microsoft advises defenders to strip or normalize Unicode tag characters before running detection checks or feeding email content to AI assistants.

Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

thehackernews.com · a month ago

CERT Polska issued an attack warning about MikroTik routers, detailing how attackers exploit the SSH remote-access service. Adversaries gain full administrative control through this service, which is reachable from the internet, without needing authentication. Successful attacks began on or around September 2.

How a Blacklisted Chinese Tech Giant Kept Buying America’s Best A.I. Chips

www.nytimes.com · a month ago

Washington imposed sanctions on Inspur for its work with the Chinese military. However, the company's subsidiary continued shipping high-end Nvidia chips. These chips supplied leading artificial intelligence firms across China.

These teachers are moving from AI policing to AI acceptance

www.washingtonpost.com · a month ago

Educators are redesigning classes to help students prove their genuine learning skills while combating AI-generated cheating. One director at the University of Baltimore advised instructors to use free apps like Brisk for more efficient grading. Ultimately, teachers are shifting pedagogy to require original demonstration of knowledge rather than relying solely on written essays.

She lost her sight. Her billionaire father bet on a daring new treatment.

www.washingtonpost.com · a month ago

In a first, cell parts were transferred from the leg of Bill Ackman’s 26-year-old daughter to her eyes to help restore her vision.

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

thehackernews.com · a month ago

Elastic Security Labs documented four unreported modules linked to REVSTEALER, a Windows information stealer. These modules persist on an infected machine even after the stealer deletes itself. One specific module disables Windows Update and Microsoft Defender before executing a cryptocurrency miner.

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

thehackernews.com · a month ago

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server without logging in, Dutch e-commerce security company Sansec said in an advisory published on September 5. Sansec, which discovered the flaw and named it StyleSmuggler, said attacks started on September 4.

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

thehackernews.com · a month ago

JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentified threat actors exploited a recently disclosed critical vulnerability in TeamCity to breach its own environment. "Cadence users should immediately revoke or rotate all credentials and secrets that may have been used to run their Cadence executions," JetBrains said.

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

thehackernews.com · a month ago

Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution under certain conditions. The vulnerability, tracked as CVE-2026-59346 (CVSS score: 9.3), is an integer-overflow vulnerability that a local attacker with elevated privileges can exploit to run arbitrary code.

Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain

www.bleepingcomputer.com · a month ago

A massive cybercriminal operation is leveraging thousands of compromised small-business websites to deliver ClickFix payloads stored in smart contracts on the BNB Smart Chain (BSC).

Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted

thehackernews.com · a month ago

Hardware wallet manufacturer Trezor on Friday disclosed that another 67,000 customers from the U.S. have been impacted in a breach at its shipping provider ShipMonk. The exposed information includes customer names, email addresses, phone numbers, shipping addresses, and order numbers between November 2019 and August 2021.

Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites

www.securityweek.com · a month ago

Tracked as CVE-2026-32475 (CVSS score of 9.8), the bug described as an arbitrary file upload issue in the function that handles form submissions.

OpenAI admits it didn't disclose rogue AI wiki hijacking incident

www.bleepingcomputer.com · a month ago

OpenAI admits it did not disclose an incident where autonomous AI agents hijacked a German wiki, created 18,000 posts, shared answers, and bypassed restrictions, saying it treated the activity as model "misalignment" rather than a security breach.

Chainguard Hits 1 Billion Build Manifests With AI-Powered Software Supply Chain Security

gbhackers.com · a month ago

Chainguard has surpassed 1 billion container build manifests, doubling production from 500 million in six months as it expands its AI-assisted software supply-chain security platform. The company now maintains more than 3,000 unique container images and 675,000 image versions. The milestone reflects more than raw build volume.

Russian Hackers Deploy New HOOKEDGE Backdoor in Espionage Attacks Across Europe

gbhackers.com · a month ago

Russian state-sponsored threat actor BlueDelta, also tracked as APT28, Fancy Bear, and Forest Blizzard, has deployed a lightweight Windows backdoor named HOOKEDGE in espionage operations targeting government, diplomatic, and defense-manufacturing organizations across Europe.

Authors Wrangle With Publishers Over $1.5 Billion Anthropic A.I. Settlement

www.nytimes.com · a month ago

The tech giant must pay $3,000 per pirated book that it used to train its chatbot. Many authors fear they could lose funds to others in the book business.

Kenyans Made a Living Writing College Essays. Then A.I. Arrived.

www.nytimes.com · a month ago

Thousands of Kenyans made a living writing essays for overseas students. With A.I., the work has dried up, a warning for online gig work that has been a global lifeline.

The Generation That’s Never Had to Say ‘Hello?’

www.nytimes.com · a month ago

Now that there’s rarely any mystery to who’s calling, Gen Z has adopted a range of custom phone greetings, including no greeting at all.

The best time to buy an iPhone may be right this minute

www.washingtonpost.com · a month ago

Whatever your favorite smartphone, it’s going to cost more. Blame inflation driven by the AI boom.

Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel

thehackernews.com · a month ago

A group of AI safety researchers says a fleet of autonomous agents that identified themselves as OpenAI systems left about 18,000 posts on a dormant 25-year-old German wiki between May and July 2026, using the site as a shared board to pool answers to a timed web task and pass around a way out of their sandbox.

New Panzer Ransomware Hits 16 Victims Across 11 Countries With Data Theft and Encryption

gbhackers.com · a month ago

Panzer ransomware has emerged as a new Ransomware-as-a-Service (RaaS) operation, publishing 16 alleged victims across 11 countries while combining data theft with file encryption.

Million-dollar phishing campaign uses invisible Unicode characters to bypass email filters

cyberworldops.eu · a month ago

https://cyberworldops.eu/en/million-dollar-phishing-campaign-uses-invisible-unicode-characters-to

12-Year-Old PostgreSQL Flaw Lets Attackers Execute Code and Take Over Database Servers

gbhackers.com · a month ago

A critical PostgreSQL vulnerability dubbed PostGREShell could allow low-privileged replication accounts to execute attacker-controlled code, escalate to database superuser, and establish persistent backdoors on affected servers. Tracked as CVE-2026-6471, the flaw reportedly affected PostgreSQL releases from version 9.4 onward, leaving a dangerous plugin-loading path exposed for roughly 12 years.

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

thehackernews.com · a month ago

Threat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft in attacks targeting the education sector in the U.S. and Europe.

Hackers Use Frontier AI Agents to Breach Enterprise Network in Under 10 Hours

gbhackers.com · a month ago

A threat actor used frontier artificial-intelligence models and attack-specific agentic frameworks to breach an enterprise environment, harvest root credentials, and hijack cloud AI infrastructure in less than 10 hours. The investigation, documented by Palo Alto Networks Unit 42, highlights a significant shift in intrusion operations.

CARS24 Data Breach Exposes 3,100 Customer Records, Leads Allegedly Sold for ₹1,000 Each

gbhackers.com · a month ago

Used-car platform CARS24 has alleged that confidential information belonging to approximately 3,100 customers was stolen and supplied to a rival business and outside dealers. The company claims that leads were offered for about ₹1,000 each, resulting in an estimated commercial loss of ₹5.70 crore.

Court Filings In A.I. Suit Invoke Copyright Law, Culture and Sports

www.nytimes.com · a month ago

Filings made Friday in The New York Times’s closely watched lawsuit against OpenAI and Microsoft included a range of copyright law and cultural references.

Friday Squid Blogging: Squid on a Stick at the New York State Fair

www.schneier.com · a month ago

Looks tasty. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.

F.B.I. Investigates Sale of Millions of Stolen Driver’s Licenses

www.nytimes.com · a month ago

The blog Krebs on Security reported on an identity theft service trying to sell scans of licenses and other documents belonging to people in Canada and the United States.

ChatGPT-maker OpenAI allegedly suffered another rogue AI breakout

www.washingtonpost.com · a month ago

Artificial-intelligence agents left 18,000 messages for one another online, independent researchers claim.

How to secure edge AI in customer-owned environments

www.microsoft.com · a month ago

As AI moves into customer-owned environments, organizations need new ways to verify the systems, software, and AI assets they trust before releasing sensitive data, credentials, and models.

Tumbler Ridge Shooting Survivors File 30 Lawsuits Against OpenAI

www.nytimes.com · a month ago

Survivors contend that the company should have notified police when it shut down the alleged shooter’s ChatGPT account eight months before the February British Columbia attack. They claim the company’s actions failed to prevent the subsequent shooting incident.

IDScan sued over alleged data breach affecting 153 million drivers

www.bleepingcomputer.com · a month ago

Multiple lawsuits have been filed against identity verification company IDScan after hackers allegedly breached the service and offered to sell more than 153 million driver's licenses.

Using a VM to Contain an AI Agent

www.schneier.com · a month ago

It won’t work: My suspicion was that GPT 5.6-Cyber would succeed, but the frequency and manner of its success removed all doubt. We have to reassess sandboxing quality for capable AI agents, and in general the software stack with which they interact. An off-the-shelf VM is not enough to contain a modern, cyber-capable AI agent. There is simply too much attack surface.

In Other News: Microsoft’s Cloud Patches, Hacked Dropbox Accounts, Guardio’s $1.1B Valuation

www.securityweek.com · a month ago

Noteworthy stories that might have slipped under the radar: Microsoft rolled out patches for cloud services, hackers compromised 5,000 Dropbox accounts, and Guardio is now valued at $1.1 billion.

HPE Patches Critical RCE Vulnerabilities in AOS-CX

www.securityweek.com · a month ago

Nearly two dozen issues, tracked collectively as CVE-2026-73749 (CVSS score of 9.8), were addressed with the updates.

OpenAI Pledges $1 Billion to Bring Frontier AI to Critical Infrastructure Defenders

www.securityweek.com · a month ago

The Daybreak initiative will provide subsidized AI cyber capabilities, training and technical assistance, though OpenAI has disclosed few details about costs and eligibility.

Companies Have Six Months to Prepare for Automated Attacks

www.darkreading.com · a month ago

Frontier AI models have already demonstrated they can autonomously, and in some cases, inadvertently, conduct end-to-end compromises, but the situation will become more urgent very soon.

Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters

thehackernews.com · a month ago

Microsoft is alerting of a "high-volume phishing campaign" that's using invisible Unicode tag characters to bypass email filters. "Instead of using these characters to hide instructions from people while exposing them to AI models, the attacker used them to split financial lure words such as 'funding' to prevent email filters from parsing them," the Microsoft Security Research team said.

CISA Flags Old ownCloud Flaw After Reported Philippine Nuclear Data Theft

www.techrepublic.com · a month ago

CISA added CVE-2023-49105 to its exploited-flaws catalog after researchers tied the old ownCloud bug to reported Philippine nuclear data theft.

Self-hosted Coder: check whether you pulled a registry module on Aug 31. no CVE, so nothing will flag it for you

www.optimuslabs.io · a month ago

On Aug 31, rogue origins were added to the Cloudflare pool in front of registry.coder.com. For roughly 14 hours, 07:35, 21:45 UTC, the real registry domain served Terraform modules carrying an extra data "external" "telemetry" block that shelled out to dlp-docker.sh and posted your environment to www[.]coder-infra[.]com.

Critical Citrix NetScaler auth bypass now leveraged in attacks

www.bleepingcomputer.com · a month ago

Attackers have begun targeting a critical-severity Citrix NetScaler auth bypass flaw (CVE-2026-19490) in the wild, according to vulnerability intelligence company Previdian.

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

thehackernews.com · a month ago

PostgreSQL has released updates to address a security flaw that allows an account with the REPLICATION attribute to run arbitrary code as the operating-system user running the database server. The flaw, tracked as CVE-2026-6471 (CVSS score: 7.2), has been present since logical decoding was introduced in PostgreSQL 9.4 in 2014. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.

Corporate America Is Getting Hooked on Open-Source A.I.

www.nytimes.com · a month ago

Companies like AT&T are increasingly using cheap, freely available artificial intelligence models over expensive ones from Anthropic and OpenAI.

New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic

thehackernews.com · a month ago

A previously undocumented Linux toolkit has been found compiled directly into the trojanized HAProxy load balancers of two South Korean organizations, where it intercepted web traffic and served altered pages to selected visitors. The attackers named the implant ted in debug strings left in the binary.

Microsoft says some users can’t open the Teams desktop client

www.bleepingcomputer.com · a month ago

Microsoft is working to resolve a known issue that causes delays or blocks some users from opening the Microsoft Teams desktop client on Windows systems.

39 New Methods That Compromise Passkey Authentication

www.bleepingcomputer.com · a month ago

Passkeys eliminate many password-based attacks, but researchers have documented 39 methods for compromising authentication built around them. Token explains how attackers can abuse authentication prompts, synced credentials, enrollment, recovery, and other trust boundaries without breaking FIDO2 cryptography.