Blahalla

Critical WordPress TranslatePress Flaw Lets Attackers Take Over Admin Accounts

gbhackers.com · a month ago

A critical vulnerability in the TranslatePress multilingual WordPress plugin could enable unauthenticated attackers to take control of administrator accounts and fully compromise affected websites. This vulnerability, tracked as CVE-2026-19632, has a CVSS score of 9.8 and affects all TranslatePress versions up to 3.3.1. The flaw affects a plugin installed on over 400,000 WordPress sites.

Google Chrome 152 Patches 327 Security Flaws, Including 10 Critical Vulnerabilities

gbhackers.com · a month ago

Google has released Chrome version 152 for Windows, macOS, and Linux, addressing 327 security vulnerabilities, including 10 rated as Critical. This stable-channel update is being rolled out as version 152.0.7977.64 for Linux and 152.0.7977.64/.65 for Windows and macOS.

Chrome 152 Patches Over 300 Vulnerabilities

www.securityweek.com · a month ago

Most of the flaws were discovered by Google using AI, but researchers are still discovering high-value Chrome vulnerabilities.

OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation

thehackernews.com · a month ago

OpenAI on Tuesday said it banned a cluster of Russian ChatGPT accounts that used VPNs to bypass access restrictions and run an influence operation, which relied on its artificial intelligence (AI) tool to generate social media posts and comments that were shared on Substack, Telegram, X, Facebook and LinkedIn.

NVIDIA NemoClaw Vulnerability Lets Attackers Hijack AI Agents via DNS Rebinding

gbhackers.com · a month ago

A critical vulnerability in NVIDIA NemoClaw, tracked as CVE-2026-65105, could enable attackers to gain persistent control of locally deployed AI agents through a single visit to a malicious website. Researchers Elad Luz and Ofek Itach from Oasis Security discovered that NemoClaw’s local Ollama configuration exposes an unauthenticated API, making it susceptible to DNS rebinding attacks.

Microsoft SharePoint Flaws Let Unauthenticated Attackers Execute Remote Code

gbhackers.com · a month ago

Microsoft SharePoint Server administrators are being urged to patch two vulnerabilities that could be combined to allow unauthenticated remote code execution on exposed on-premises servers. The flaws, tracked as CVE-2026-55040 and CVE-2026-63520, affect SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Enterprise Server 2016.

Interpol's Jackal IV Disrupts West African Crime Infrastructure

www.darkreading.com · a month ago

The international law enforcement operation focused on disrupting crime-as-a-service networks and supporting infrastructure behind groups like Black Axe.

28,000 Exposed .git Repositories Leak Active AWS, OpenAI, Stripe and GitHub Credentials

gbhackers.com · a month ago

A large-scale internet scan has uncovered 28,000 publicly accessible.git repositories exposing credentials for AWS, OpenAI, Stripe, GitHub, and other services, illustrating how a basic web server misconfiguration can turn source code history into an immediate cloud access risk. The research, published by attack-surface management firm Intruder, examined 3.

Who is accountable when your AI agent goes rogue?

www.csoonline.com · a month ago

AI agents can go to great lengths to complete the tasks their operators assign, and as a series of recent incidents showed, this can include exploiting third-party systems, manipulating people, and distributing malicious code.

Nigeria Looks to Sovereign Cloud for Cyber, National Security

www.darkreading.com · a month ago

The West African nation launched financing, procurement, and infrastructure policies to boost its sovereign cloud initiative and increase domestic technical knowledge.

INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown

thehackernews.com · a month ago

An eight-month INTERPOL operation targeting West African organized crime groups has led to arrests of 58 people and the identification of 263 suspects. "The operation, which brought together 22 countries from six continents, is a response to the escalating global threat posed by West African criminal networks, such as the Black Axe and other similar groups," INTERPOL said.

Linux Turns 35 as Open-Source Kernel Powers Global Critical Infrastructure

gbhackers.com · a month ago

Linux has now reached 35 years old, serving as a reminder of the modern world’s reliance on an open-source kernel. On August 25, 1991, a 21-year-old student at the University of Helsinki, Linus Torvalds, announced his work on the comp.os newsgroup.minix Usenet group.

Sensitive Information Exposed in Nutex Health Data Breach

www.securityweek.com · a month ago

Nutex Health has informed the SEC that it recently detected unauthorized access and data exfiltration.

Newly SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode

thehackernews.com · a month ago

An independent malware researcher has documented a previously unreported Windows backdoor, dubbed SLEEPWALKER, that stays inert in memory until a specifically crafted network packet reaches the machine and then runs commands written in a 23-instruction language of its own design.

Bill Gates Is Warning That A.I. Is More Dangerous Than Big Tech Will Admit

www.nytimes.com · a month ago

In an hourlong interview, he said his industry was downplaying the risks, which he believes include mass unemployment and bioterrorism.

Bill Gates was an AI optimist. Now he’s scared of what could go wrong.

www.washingtonpost.com · a month ago

In a new essay, the Microsoft co-founder sounds the alarm about AI’s risks to safety and security, jobs and children’s well-being.

AI-Powered Balonx Sistema PhaaS Harvests Credentials From Over 1,100 Banking Users

gbhackers.com · a month ago

Mexico’s financial sector is facing an industrialized phishing Balonx Sistema, a Mexico-focused Phishing-as-a-Service (PhaaS) platform that has harvested credentials and financial data from more than 1,100 banking users since at least October 2025.

OpenSSL Flaws Allow Remote Attackers to Crash Servers With Malformed Packets

gbhackers.com · a month ago

OpenSSL has released security updates addressing nine vulnerabilities that could allow remote attackers to crash QUIC, DTLS, CMS, CMP, and TLS-enabled applications through malformed network packets or cryptographic messages. The advisory dated August 25, 2026, highlights three moderate-severity issues and six low-severity flaws.

Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

thehackernews.com · a month ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea. The vulnerability in question is CVE-2026-60004 (CVSS score: 9.

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

thehackernews.com · a month ago

Cybersecurity researchers have disclosed details of a phishing-as-a-service (PhaaS) platform built to strip Apple's Activation Lock from stolen devices, using rented AI voice agents that call theft victims posing as Apple Support and ask for their device passcode.

Hackers Hide Malware Inside Plain English Words to Infect Windows Users With Amatera Stealer

gbhackers.com · a month ago

Threat actors behind ClearFake campaigns are using a newly identified loader, WordlistLoader, to deliver the Amatera Stealer to Windows systems. The loader disguises executable shellcode as sequences of ordinary English words, helping malware evade static inspection before reconstructing and launching the final payload in memory.

CISA Warns of Exploited Gitea Vulnerability

www.securityweek.com · a month ago

CVE-2026-60004 is a remote code execution vulnerability patched by Gitea developers in late July with the release of version 1.27.1.

Microsoft Teams Outage Disrupts Meetings and Screen Sharing for Users

gbhackers.com · a month ago

Microsoft confirmed that some customers were unable to use multiple features of Microsoft Teams. However, the company reported that monitoring indicated the disruption was largely under control. In a customer update posted at 7:26 a.m.

CISA Red Team Achieves Full Domain Compromise Across Critical Infrastructure Networks

gbhackers.com · a month ago

CISA’s latest red team assessment shows how common failures in Active Directory, cloud identity, and SOC processes can turn a phishing foothold into an enterprise-wide compromise.

Core Werewolf Hackers Deploy New CoreRAT Malware Against Russian Government and Defense Organizations

gbhackers.com · a month ago

The Core Werewolf espionage cluster has introduced a previously undocumented remote access trojan dubbed CoreRAT in targeted attacks on Russian public-sector bodies and defense-industry organizations.

WhatsApp Passkeys Now Protect Over 1 Billion Users Against Account Takeover Attacks

gbhackers.com · a month ago

WhatsApp has announced that over one billion people now use passkeys to secure their accounts, enhancing phishing-resistant authentication across one of the world’s largest messaging platforms. This update, revealed on August 25, introduces support for multiple passkeys, stronger two-step verification credentials, and additional context for calls from unknown numbers.

U.S. ‘Economic D-Day’ Targets More Than Just Iranian Oil

www.nytimes.com · a month ago

The United States threatened sanctions for any country or entity that engages with Iran’s gold, digital assets, aviation, shipping and tech industries. Here’s why that matters.

Instagram Chief Says ‘No Silver Bullets’ for Teen Safety in Bellwether Trial

www.nytimes.com · a month ago

Adam Mosseri testified in a case brought by states that claim the Meta-owned app created addictive features to hook young users.

LACMA data breach last year exposed social security and medical data

www.bleepingcomputer.com · a month ago

The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information.

Hackers abuse npm mirrors to host phishing redirect pages

www.bleepingcomputer.com · a month ago

Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites.

Hidden Prompts Trick AI Into False Email Summaries

www.darkreading.com · a month ago

With some simple HTML that's invisible to users, attackers can manipulate AI-powered email summarizers into producing malicious information.

AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes

www.bleepingcomputer.com · a month ago

A newly uncovered phishing-as-a-service (PhaaS) platform called AnonyMousKIT automates the retrieval of codes used to unlock stolen Apple devices and disable the Activation Lock feature.

Finding Nemo(Claw): Networking Issue Allows for LLM Poisoning in OpenClaw

www.darkreading.com · a month ago

Attackers can exploit a security bug in NVIDIA's tool to gain unauthenticated access to the local model server through the Ollama API, paving the way for persistent AI agent corruption.

Unauthenticated remote uninstall in my own EDR agent, and the four other auth bugs that turned out to be the same bug

d3vhex.github.io · a month ago

Sentora is my own project, so this is a postmortem on my own code, not someone else's. The agent shipped this: @/app.post("/selfdestruct") async def selfdestruct(request: Request): threading.Thread(target=performdestruction, daemon=True).start() return sanicjson({"status": "Destruction initiated"}) No auth. Listening on 0.0.0.0:9099. performdestruction() ran rm -rf "$(pwd)".

The Password Notebook Is Back — but Is It Actually Safer?

www.techrepublic.com · a month ago

Password notebooks are making an unexpected comeback as infostealers and browser attacks revive debate over the safest way to store credentials.

U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches

thehackernews.com · a month ago

The U.S. Department of the Treasury has announced fresh sanctions on Iranian cyber actors as part of what it called an "unprecedented, whole-of-government, economic campaign" against the nation and its enablers. "We are launching an economic onslaught against Iran's financial connections around the globe.

SpaceX to Spend $100 Billion on New Spaceport in Louisiana

www.nytimes.com · a month ago

It would be the rocket company’s second private launch site after Starbase, its headquarters in South Texas.

TikTok Agrees to $400M Settlement Over Children’s Privacy

www.techrepublic.com · a month ago

TikTok and ByteDance agree to pay up to $400 million to settle US allegations involving children’s data, parental consent and account deletion.

E.P.A. Moves to Curb Public Input on Air Pollution Permits for Data Centers

www.nytimes.com · a month ago

Under the proposal, states would no longer need to provide public notice or solicit comments on air pollution permits for data centers and other projects.

Linux Foundation to Govern TRACE, an Open Standard for AI Runtime Attestation

www.securityweek.com · a month ago

TRACE was developed by AMD, Intel, Microsoft, OPAQUE, and TII and contributed to the Linux Foundation.

The patch window is collapsing: Why security needs a new control plane

azure.microsoft.com · a month ago

Organizations need protection that operates in the gap between discovery and remediation.

Massive DDoS attack disrupts Norway’s government digital services

www.bleepingcomputer.com · a month ago

A large distributed denial-of-service (DDoS) attack has disrupted Norway's shared government digital infrastructure since Monday, affecting services used by the public sector.

Microsoft Teams’ New Policy Lets Admins Automatically Block Meeting Bots

www.techrepublic.com · a month ago

Microsoft Teams is adding a policy that lets IT admins automatically block detected external meeting bots instead of relying on organizer approval.

Is Cyber Facing an Affordability Crisis?

www.darkreading.com · a month ago

As breach costs reach record highs and defense spending nears $240 billion, small businesses are dangerously exposed, threatening supply chain security.

Hospital operator Nutex Health says data stolen in cyberattack

www.bleepingcomputer.com · a month ago

Healthcare and services provider Nutex is investigating a data breach incident where an unauthorized third party exfiltrated information from company servers.

Alice Raises $140M to Expand AI Model Defenses and Enterprise Guardrails

www.securityweek.com · a month ago

The company, previously known as ActiveFence, has raised a total of $280 million from investors.

A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw

thehackernews.com · a month ago

Oasis Security has disclosed a weakness in NVIDIA NemoClaw that could let an attacker-controlled webpage take unauthenticated control of the local Ollama instance serving an AI agent and plant hidden instructions inside the model itself.

From Fake Workers to Account Recovery: The Growing Identity Verification Risk

www.bleepingcomputer.com · a month ago

Attackers are increasingly targeting the processes used to establish or recover identity rather than attacking the login itself. Specops explains how stronger identity verification can help organizations prevent fake workers and social engineering attacks from gaining legitimate access.

Microsoft PowerToys adds Alt+Tab-style switching for an app's windows

www.bleepingcomputer.com · a month ago

Microsoft updated its Windows PowerToys toolset with a new utility dubbed "Window Hopper" that lets users switch between an app's windows more quickly.

CVE-2026-8508: Trust-Boundary Bypass in Zyxel social_login.cgi Facebook Identity Handling

minanagehsalalma.github.io · a month ago

Technical analysis of CVE-2026-8508, a pre-auth captive-portal bypass in Zyxel's social-login flow. The post covers the vulnerable execution path, root cause, affected firmware scope, and the firmware-emulation methodology used during analysis.