Blahalla

Microsoft blames Windows gaming issues on RGB lighting devices

www.bleepingcomputer.com · 2 months ago

Microsoft says ongoing issues causing games to crash or fail to launch after installing the August 2026 Windows updates may be caused by peripherals with RGB lighting.

Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini

www.securityweek.com · 2 months ago

Researchers say the new ‘Cryptographic Context Injection’ technique conceals malicious instructions until they are decrypted inside a trusted execution environment.

New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets

www.securityweek.com · 2 months ago

Researchers say iAuthFlow V2 can register an attacker-controlled passkey, enabling persistent access even after passwords are changed and active sessions revoked.

Is Online Privacy Possible? How Digital Identities Can Help

www.bleepingcomputer.com · 2 months ago

Using the same email, phone number, payment method, and other identifiers makes it easier for data brokers and attackers to profile your activity. Anonyome Labs explains how separate digital personas can reduce correlation and limit the impact of breaches, spam, and identity theft.

Calling on Cyber Pros to Help Defend City Hall

www.darkreading.com · 2 months ago

Government agencies with smaller budgets need support, and here's how you can help.

Microsoft rolls out Classic Outlook theme for New Outlook users

www.bleepingcomputer.com · 2 months ago

Microsoft has started rolling out a Classic Outlook theme for users of Outlook on the web and the New Outlook for Windows.

OpenAI Adds Controls That Should've Been There Already

www.darkreading.com · 2 months ago

The new AI security controls follow the Hugging Face incident last month, though many of these additions perhaps should have been in place prior to the frontier models escaping.

Hardware Makers Implement Post-Quantum Cryptography as Security Threats Near

www.darkreading.com · 2 months ago

The coming threat of super-powerful computers capable of cracking today’s algorithms requires upgrading encryption now. Tech companies have begun building defenses.

US Bank Investigates Alleged Data Breach After LockBit Ransomware Extortion Claim

gbhackers.com · 2 months ago

US Bank is currently investigating claims made by the LockBit ransomware group, which alleges that it breached the bank and stole sensitive data. The group has set a deadline of September 3 for the bank to meet an undisclosed extortion demand.

Critical Isolated-vm Vulnerability Leads to RCE on Host

www.securityweek.com · 2 months ago

The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process.

CISA orders feds to patch actively exploited TrueConf Server flaws

www.bleepingcomputer.com · 2 months ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. federal agencies to prioritize patching two actively exploited vulnerabilities in the TrueConf Server self-hosted communications platform.

UAT-10147 Compromises Web Servers to Deploy BadIIS for SEO Fraud and Data Theft

gbhackers.com · 2 months ago

A Chinese-speaking cybercrime group, tracked as UAT-10147, targeting vulnerable Windows and Linux web servers worldwide to deploy BadIIS malware, steal data, and manipulate search engine results for financial gain. Talos observed victims in Brazil, Bolivia, China, Canada, and Vietnam, spanning government, education, media, technology, and gaming organizations.

Critical N-Able PassPortal Extension Flaw Gives Attackers Full Password Vault Access

gbhackers.com · 2 months ago

Cybersecurity researchers have revealed a critical vulnerability in N-able’s PassPortal browser extension that could have allowed a malicious website or embedded iframe to obtain authentication materials and take control of a user’s password vault. This vulnerability, tracked as CVE-2026-15580, affects PassPortal version 3.49.5 and has a CVSS v4.0 base score of 9.4.

Wazuh and AI For Enhanced SOC Workflows

thehackernews.com · 2 months ago

Artificial Intelligence (AI) has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repetitive tasks, uncover patterns hidden within large datasets, and support faster decision-making. Cybersecurity has experienced a similar transformation.

OpenAI Frontier Models Get Zero Data Retention With Private Safety Processing

gbhackers.com · 2 months ago

OpenAI has reaffirmed its commitment to Zero Data Retention (ZDR) for eligible API customers using frontier models while introducing the new Private Safety Processing. This safety architecture is designed to detect multi-session misuse without exposing the underlying prompts or responses to OpenAI personnel.

Microsoft warns of max severity Entra ID flaw exploited in attacks

www.bleepingcomputer.com · 2 months ago

Microsoft has patched a maximum-severity vulnerability in the Entra ID identity and access management (IAM) platform that has been exploited in attacks.

OpenAI’s Two-Week Pause + Jill Lepore on the Threat of the “Artificial State” + Train of Thought

www.nytimes.com · 2 months ago

“It is the first time that we know of that a major lab has voluntarily slowed down.

Hackers abuse FTP server banners to deliver new Windows malware

www.bleepingcomputer.com · 2 months ago

Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented remote access trojans named E4del and PINHOLE.

Hackers Hide Agent Tesla Malware Behind Emojis to Steal Browser and Email Passwords

gbhackers.com · 2 months ago

A business email compromise campaign is using emoji-filled JScript to conceal an Agent Tesla v4 infostealer designed to steal browser, email, and messaging credentials. The operation pairs a convincing bank-payment lure with a fileless execution chain that keeps the final malware payload out of sight of traditional disk-based scanning.

SickKids data breach exposes employee and job applicant info

www.bleepingcomputer.com · 2 months ago

Toronto's Hospital for Sick Children (SickKids) says a cybersecurity incident exposed the personal information of some current and former employees and job applicants, stemming from a flaw in third-party software. Clinical systems and patient records were not affected.

Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0

thehackernews.com · 2 months ago

Cisco has published another round of security updates for Crosswork platforms and Secure Workload Software as part of a continued comprehensive internal security review. Four of the security vulnerabilities affect Crosswork Data Gateway, Crosswork Network Controller, and Crosswork Planning, regardless of the device configuration.

Quarkslab Says Anti-Reversing Software Should Return Plausible Wrong Answers Instead of Crashing

gbhackers.com · 2 months ago

Quarkslab has argued that LLM-assisted reverse engineering does not make obfuscation obsolete, but it changes the defender’s threat model. Its latest experiment found that autonomous coding agents routinely avoid difficult deobfuscation, pivot to dynamic analysis, and often stop once they obtain an answer that appears credible even if it is wrong.

California set to ban ‘addictive’ social media features to protect teens

www.washingtonpost.com · 2 months ago

Advocates say legislation in the nation’s most populous state would carry particular weight in the national movement to curb tech’s influence on young people.

OpenAI adds an AI safety layer to detect misuse without retaining enterprise data

www.csoonline.com · 2 months ago

OpenAI is adding a new safety capability that allows enterprises to detect misuse of its AI systems across multiple interactions without retaining prompts or responses, enabling risk monitoring while preserving its Zero Data Retention (ZDR) commitments. “OpenAI does not retain…prompts or model responses after a request is processed,” the company said in a blog post, describing its ZDR approach.

More Incidents of AIs Going Rogue in Cybersecurity Challenges

www.schneier.com · 2 months ago

The AI Security Institute has a new report of AI systems engaging in “unsanctioned behavior”, what I have been calling “ genie behavior, while being tested on their cybersecurity capabilities. The incident stemmed from a single evaluation where agents were given a task of solving a cyber security challenge. We ran this challenge 122 times across several models.

Backdoored Rust packages hit crates.io, exposing developers to malware at build time

www.csoonline.com · 2 months ago

Malicious versions of three Rust packages, including the widely used arrayref, were published to the crates.io registry on August 20, carrying a backdoor that executed automatically when affected projects were compiled. Security researchers at Wiz said the attack also shares infrastructure with recent supply-chain campaigns attributed to North Korean threat actors.

Critical Spring Security LDAP Flaw Lets Remote Attackers Read and Modify Directory Data

gbhackers.com · 2 months ago

A critical vulnerability has been identified in the embedded UnboundID LDAP server within Spring Security. This flaw could allow remote attackers to authenticate using a well-known administrative bind DN, granting them the ability to read or modify data stored in an application’s in-memory LDAP directory.

Rust Supply Chain Attack Linked to North Korean Hackers

www.securityweek.com · 2 months ago

Hackers pushed a poisoned arrayref version that added a dependency to fetch a malicious payload from a remote server.

Head Mare APT Exploits TrueConf Server RCE Flaws to Deliver PhantomCore Malware

gbhackers.com · 2 months ago

The Head Mare APT group has been linked to a supply chain compromise involving unpatched TrueConf Server instances, which enabled the delivery of PhantomCore malware to video conference participants. Kaspersky researchers identified this activity while investigating attacks against Russian organizations.

Flock Cameras. Canoodling Lawyers. How Much Surveillance Are We Comfortable With?

www.nytimes.com · 2 months ago

Americans say they hate prying cameras. But they can’t look away.

AI threats are everywhere. A risk-first CISO decides what to prioritize

www.csoonline.com · 2 months ago

The good news? AI gives cyber defenders some of the best discovery tooling they’ve ever had. The bad news? It gives attackers the same capability. This duality has left CISOs managing AI on two simultaneous fronts. Outside the organization, attackers are using AI to make phishing more convincing, automate reconnaissance and compress the time between vulnerability disclosure and exploitation.

Google Chrome 151 Update Fixes 7 Security Flaws Enabling Remote Code Execution and Sandbox Escape

gbhackers.com · 2 months ago

Google has released Chrome version 151 to the Stable channel for desktop platforms, addressing seven security vulnerabilities. Among these vulnerabilities is a critical use-after-free flaw, along with several high-severity issues affecting various components of the browser, including V8, DOM, Workers, networking, and Linux toolkit theming. The update is being rolled out as version 151.0.7922.173/.

Contractors’ CMMC Confidence Rises as Ability to Prove It Falls Behind

www.securityweek.com · 2 months ago

Two industry surveys released this week by Kiteworks and CyberSheath paint a consistent picture of the defense industrial base.

Ransomware takes aim at enterprise resilience

www.csoonline.com · 2 months ago

Ransomware remains one of the most disruptive cyber threats organizations face. Companies have strengthened their cyber defenses over the years, but attackers in 2026 have become faster, more targeted, and increasingly reliant on AI, forcing the need for a change in how organizations approach cyber resilience.

Microsoft Rolls Out 22 Fresh Security Patches

www.securityweek.com · 2 months ago

Most of the fixes resolve code execution, privilege escalation, and information disclosure vulnerabilities.

Russia-Linked Hackers Exploit Legitimate Login Flows to Bypass 2FA and Steal Account Access

gbhackers.com · 2 months ago

Three suspected Russian cyber espionage clusters abusing legitimate authentication mechanisms to hijack accounts belonging to academics, diplomats, defense personnel, government staff, and think-tank researchers across Europe and the United States.

Peer2Profit Turns Employee Devices Into AstroProxy Nodes That Can Expose Internal Networks

gbhackers.com · 2 months ago

Residential proxy networks have become a key enabler for fraud, credential stuffing, account takeover, spam, and large-scale automated abuse.

CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities

www.securityweek.com · 2 months ago

The Head Mare hacktivist group has been exploiting the bugs to deploy the PhantomCore malware.

GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure

thehackernews.com · 2 months ago

A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-19478 (CVSS score: 9.

New Manic Android Malware Targets 169 Apps, Steals PINs and Exfiltrates Data via Wi-Fi Mesh

gbhackers.com · 2 months ago

A newly discovered Android malware family called Manic, which combines banking fraud functions with advanced spyware and remote device control capabilities. The operation’s active infrastructure dates back to February 2026, with early wrappers and implants emerging in late May.

Hackers Use Fake Google Gemini Installer to Deploy Vidar Stealer and Steal Browser Credentials

gbhackers.com · 2 months ago

Threat actors are exploiting interest in generative AI software to distribute the Vidar information stealer through a fake Google Gemini installer hosted via Google Colab. Darktrace investigated the July 2026 intrusion in an EMEA customer environment, where a user downloaded and executed a malicious file named DownloadGoogleGeminiForWindows.

Compromised Rust Crate With 18,000+ Downloads Steals Source Code During Builds

gbhackers.com · 2 months ago

A malicious update to the Rust crate called onering has been discovered, which exfiltrates source code changes from developers’ machines during the build process. Security researchers identified this behavior in version 1.4.1 of the package on June 10, 2026.

Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution

thehackernews.com · 2 months ago

Microsoft on Thursday warned of a maximum-severity security flaw in Entra ID that it said has been exploited in the wild, but noted that no customer action is required. The vulnerability, tracked as CVE-2026-69836 (CVSS score: 10.0), is a case of remote code execution impacting the tech giant's cloud-based identity and access management service.

Windows Defender Driver Abuse Enables Kernel-Level EDR and Antivirus Bypass

gbhackers.com · 2 months ago

Security researcher Jiří Vinopal has published a detailed analysis of BTR.sys, the Microsoft Defender Boot-Time Removal driver. His research reveals how this legitimate, Microsoft-signed component can be exploited to perform file and registry operations under attacker control from kernel mode.

Microsoft Entra ID RCE Flaw Lets Unauthorized Attackers Execute Code Remotely

gbhackers.com · 2 months ago

Microsoft has disclosed a critical remote code execution vulnerability in Microsoft Entra ID, identified as CVE-2026-69836. This flaw could enable unauthorized attackers to execute arbitrary code remotely. Released on August 20, 2026, it carries a maximum CVSS 3.1 base score of 10.0.

SilkParasite Uses Google Drive as C2 to Hide RAT Traffic Inside Trusted Cloud Services

gbhackers.com · 2 months ago

SilkParasite, a long-running cyberespionage operation targeting government bodies across Central Asia through a compact but highly mature arsenal of remote access trojans.

New Jersey Teenager Drops Bellwether Social Media Addiction Lawsuit

www.nytimes.com · 2 months ago

Nine personal injury lawsuits could expose Meta, YouTube, Snap, and TikTok to financial damages. These cases allege that platform designs contributed to harm, potentially forcing major changes to the companies' operations.

Critical flaw patched in popular JavaScript sandbox used in AI projects

www.csoonline.com · 2 months ago

Researchers from Edor Labs discovered a critical sandbox escape vulnerability, a type confusion, in the isolated-vm library. This flaw resides in the library's C++ glue code, potentially allowing attackers to achieve remote code execution by hijacking host control flow. Because isolated-vm supports AI frameworks like n8n and Sim.ai, developers quickly released patches in versions 7.0.1 and 6.2.0.

ICE Warns Employees Against Meta Smart Glasses

www.techrepublic.com · 2 months ago

ICE warned employees against using Meta smart glasses on duty as DHS seeks $7.5 million to develop biometric-enabled prototypes for field agents.

New CUSTODY Framework Constrains AI Agents Inside the Network

www.darkreading.com · 2 months ago

Cybersecurity expert Jake Williams released the CUSTODY framework following OpenAI's models breaching Hugging Face. This new framework helps security professionals contain autonomous AI agents within a private network perimeter. CUSTODY defines strict controls, using the acronym to guide safe AI deployment and management.