tsecurity.de - News Radar & Live Feeds

Case study: ManageWP Blocks 11.9M+ Threats in 6 Months with Patchstack

Tue, 01 Sep 2026 23:36:18 +0200

11.9M+ Threats blocked by Patchstack in 6 months Zero Hours of sleep lost Run one WordPress site and a vulnerability is a single bad day. Run an agency, and it’s a portfolio-wide panic event that results in lost sleep and enough caffeine to take down a horse. Updates can’t close that gap alone, especially when attackers weaponize the most-targeted... Weiterlesen

Unauthenticated PHP Object Injection to Remote Code Execution on GiveWP

Tue, 01 Sep 2026 23:36:13 +0200

GiveWP Unauthenticated PHP Object Injection to Remote Code Execution 100,000 CVSS 10.0 This blog post is about an unauthenticated remote code execution vulnerability in the GiveWP plugin. An attacker with no account can run arbitrary commands on the server of a GiveWP site that has one published donation form and one active payment gateway which,... Weiterlesen

Berlin Senate Passwort.docx Breach: Ahab of the East Sea Cover Story

Tue, 01 Sep 2026 23:34:48 +0200

Russians are having a laugh about Ahab on the East Sea 1-2-3. And then there’s Sunshine 13. These were passwords disclosed in the Berlin Senate breach. The “Ahabostsee123”, is in fact a yacht for vacations in the Baltic. Much of the press seems to be wagging a finger about BSI recommendations, calling the passwords weak. … Continue reading Berlin... Weiterlesen

MY TAKE: ChatGPT’s five-hour outage coincided with a model retirement its incident record omits

Tue, 01 Sep 2026 23:34:44 +0200

Millions of people rely on ChatGPT Work. For more than five hours Monday, it would not run. I was one of the people watching it fail. The trouble began at 8:04 a.m. Pacific and ran through the heart of the American workday. OpenAI declared recovery at 1:28 p.m. Its incident record lists elevated latency, elevated errors, a mitigation and a... Weiterlesen

Applying Zero Trust Principles to Agents - Kieran Human - ASW #397

Tue, 01 Sep 2026 23:34:37 +0200

Sandboxing, least privilege, and monitoring are well-established controls in terms of the defenses they provide against unexpected and unauthorized actions. But being well-established in theory doesn't always translate to successful in practice. Kieran Human talks about some of the properties that a good sandbox should have and how monitoring creates a feedback loop to refine allow lists and access controls. In practice, the potential unpredictable behavior of an agent isn't much different from malware. We talk through some of the ways orgs can securely deploy agents without unnecessarily increasing their attack surface.

Resources

This interview is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!

Visit https://www.securityweekly.com/asw for all the latest episodes!

Show Notes: https://securityweekly.com/asw-397

Connecting Cyber Risks to Board Outcomes & BHUSA interviews from Mimecast & Zscaler - Leslie Nielsen, Brett Stone-Gross, Dan Bowden - BSW #462

Tue, 01 Sep 2026 23:34:35 +0200

The threat landscape has become more interconnected, disruptive, and complex. Ransomware is now as much about extortion and data theft as it is about encryption. Supply chain events can create outages that ripple far beyond the initial target, and business interruption increasingly comes from third-party and cloud dependencies. How should CISOs prepare for these scenarios?

Dan Bowden, Global Business CISO at Marsh, joins Business Security Weekly to discuss how to connect cyber risk to the outcomes boards care about most: resilience, financial exposure, regulatory impact, and reputation. CISOs need to position cyber as an enterprise risk, not a technical risk, that can be measured, prioritized, and managed alongside other strategic risks. Dan will discuss the results of Marsh's Cyber Catalyst research and Global Cyber Claims Report.

Visit https://securityweekly.com/infosecworld2026 and save 30% on your ISW pass with code: ISW26-SWSAVINGS

The Agent Is the New Insider: Why Human Risk Doesn't Stop at People: Black Hat Interview with Leslie Nielson, CISO at Mimecast

AI agents now act with the same credentials and access as the humans who deployed them, but without the judgment or accountability that comes with actual employment. Mimecast CISO Leslie Nielsen argues that treating agentic AI as a brand new, standalone security category is the wrong instinct: agents are an extension of human risk, and the controls organizations already use to manage people are the right foundation for managing machines. In this conversation, Nielsen unpacks the growing gap between security leaders who expect AI driven attacks and those who feel prepared for them, and what that gap means for CISOs walking the floor at Black Hat.

Segment Resources:

Mimecast's new whitepaper Securing The Agentic Enterprise: https://assets.mimecast.com/api/public/content/securing-the-agentic-enterprise?v=ea66db05 Mimecast's landing page for thought leadership resources: https://www.workprotected.com/ Mimecast's State of Human Risk Report: https://www.mimecast.com/resources/ebooks/state-of-human-risk/ Mimecast's Threat Intelligence Hub: https://www.mimecast.com/threat-intelligence-hub/

For more information about Mimecast please visit: https://securityweekly.com/mimecastbh

Ransomware Moves up the Org Chart: Managers Are Prime Targets: Black Hat Interview with Brett Stone-Gross, Sr. Director, Threat Intelligence at Zscaler

When a ransomware attack makes headlines, attention usually turns to the organization that was breached, the systems encrypted, data stolen, and disruption or ransom demand that followed. Less, if anything, is revealed about the employees compromised at the start of the attack, and what makes those individuals valuable targets.

New Zscaler ThreatLabz research examines this early stage of a real-world ransomware attack. ThreatLabz identified victims of a campaign associated with a ransomware group known for gaining initial access, stealing large amounts of corporate data, and selectively encrypting critical systems. The findings show who those victims were and how their roles and authority could help an attacker move deeper into an organization.

This is part of ongoing ransomware research by ThreatLabz. The Zscaler ThreatLabz 2026 Ransomware Report, coming in the next two months, will include additional data on ransomware victims, the latest ransomware trends, targets, and tactics, and the risks enterprises should prepare for next.

This segment is sponsored by Zscaler. Visit https://securityweekly.com/zscalerbh to learn more about them!

Visit https://www.securityweekly.com/bsw for all the latest episodes!

Show Notes: https://securityweekly.com/bsw-462

Hacking All The Devices, with AI? - Rob Allen - PSW #941

Tue, 01 Sep 2026 23:34:34 +0200

Rob Allen from ThreatLocker joins us to discuss securing agentic AI with zero-trust controls, least privilege, and access controls to limit what agents can access and do.

This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!

In the security news this week:

Sixteen-year-old Linux LPEs still work
Ubiquiti UniFi, patch it, also light on details
If you remember magicJack, you too are old
Slovakia doesn't trust its own speed cameras
More homework on NIST's vulnerability database
Your webcam, mic, and key light, all owned
Printer moonlights as Minecraft server
Zombie credit cards
Your car's infotainment system fuels botnets
Feds warn about AI-powered PLC attacks
Can an AI actually reverse engineer its way out?
Denver International's security breach, volume six
Charlotte's breach and a parking company
Why your ancient tech might be the safe one
Microsoft counts billions of phishing emails
A password vault that leaked to any website
Australia sells password books at the post office
Another perfect ten, this time in Entra ID
Cisco's bug scores read like Olympic gymnastics

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-941

Life as a CISO in Hollywood: Keeping New Films Leak-Free & 4 Black Hat Interviews - Dan Meacham, Ellen Boehm, Ronan Murphy, Frank Vukovits, John Hultquist - ESW #474

Tue, 01 Sep 2026 23:34:32 +0200

Interview with Dan Meacham, CISO at Legendary Entertainment

Dan Meacham joined us to share a preview of his leadership panel at InfoSec World. At this CRA event in October, Dan will be discussing The Augmented Defender - What AI Actually Changes on the Front Line with Daniel Bowden, the Global CISO at Marsh.

Dan dives into the unique world of securing data and assets when film production is largely handled by partners and contractors, working from systems you'll likely have limited access to and definitely can't install agents on. It's a fascinating conversation you should check out!

Visit https://securityweekly.com/infosecworld2026 and save 30% on your ISW pass with code: ISW26-SWSAVINGS

Black Hat Interview 1 - Google Cloud

Outpacing the Adversary with AI Threat Defense - Black Hat interview with John Hultquist, Chief Analyst, Google Threat Intelligence Group at Google

The cybersecurity landscape is undergoing a radical shift. AI is no longer just a productivity accelerator for developers and analysts—it has become actively weaponized by sophisticated threat actors to discover and exploit vulnerabilities at unprecedented speed. We'll discuss Google's own approach to combating today's threats and the need for security teams to transform vulnerability management with machine-speed defense.

Segment Resources:

This segment is sponsored by Google Cloud. Visit https://securityweekly.com/googlebh to learn more!

Black Hat Interview 2 - Forcepoint

Decoding Agentic: Securing the Data Layer AI Just Set on Fire - Black Hat interview with Ronan Murphy, Chief Data Strategy Officer of Forcepoint

AI didn't ask permission — and it permanently changed what data risk looks like. Forcepoint Chief Data Strategy officer and member of the Artificial Intelligence Advisory Council in Ireland, shares insights on a clear call to action for agentic enterprises: stop locking AI down and start securing it where the risk actually lives, in the data itself. Learn why data trust is the foundation of the agentic era and how the world's leading enterprises are ending the false choice between AI innovation and data safety.

Segment Resources:

This segment is sponsored by Forcepoint. Visit https://securityweekly.com/forcepointbh to learn more!

Black Hat Interview 3 - Keyfactor

From Secrets to Verified Workload Identity—at Enterprise Scale - Black Hat interview with Ellen Boehm, SVP, Strategy & AI Innovation at Keyfactor

As AI agents become autonomous participants inside enterprise environments, organizations can no longer rely on static credentials and traditional identity models to establish trust. Enterprise AI is driving a shift from possession-based access to cryptographically verified identity, as AI agents, cloud-native workloads, and automated services increasingly make decisions and interact with critical systems. In this discussion, we'll discuss why organizations need to continuously establish trust, govern machine identities and cryptography, and build a resilient foundation for securing AI across increasingly dynamic environments.

Segment Resources:

This segment is sponsored by Keyfactor. Visit https://securityweekly.com/keyfactorbh to learn more!

Black Hat Interview 4 - Delinea

Delinea Delivers Runtime Authorization for AI Agents, Closing Access Control Gap - Black Hat interview with Frank Vukovits, Chief Security Scientist at Delinea

As AI agents move from experiments to autonomous operators inside production databases, cloud consoles, and Kubernetes clusters, enterprises face a new problem: agents with legitimate credentials taking actions no one authorized. Frank breaks down why verifying access at connection time is no longer enough and what it takes to enforce policy on every agent action before it executes. He explains how runtime authorization closes the gap between hiding credentials and actually controlling what agents do once they're inside a session.

This segment is sponsored by Delinea. Visit https://securityweekly.com/delineabh to learn more!

Visit https://www.securityweekly.com/esw for all the latest episodes!

Show Notes: https://securityweekly.com/esw-474

Fixing Software Weaknesses Rather Than Just Finding More Flaws - Gil Geron, Nidhi Aggarwal, Braden Russell - ASW #398

Tue, 01 Sep 2026 23:34:25 +0200

AppSec has always emphasized techniques and tools for discovering vulns, along with taxonomies and lists for describing them. But just piling up more CVEs into a prioritized patching queue has never been an effective strategy. Nidhi Aggarwal talks about some of the economics and decisions that orgs evaluate when figuring out how to improve and protect their software. LLMs might be effective assistants in generating code, but only when they have the context of secure patterns to follow. We also talk about what some of the bug bounty data reveals in terms of successful researchers finding more impactful vulns and why the combination of domain expertise and curiosity remains profitable.

Segment Resources

https://www.hackerone.com/blog/finding-fast-fixing-slow-rising-exposure-debt

Vulnerability discovery and remediation gap in the AI era

AI-generated code is changing how vulnerabilities are created, discovered, and managed. This segment explores why finding more vulnerabilities doesn't necessarily mean reducing exposure, how teams can validate exploitability and prioritize real risk, and where agentic AI can support defenders without replacing human security expertise. It also looks at what continuous threat exposure management means for enterprise security teams in practice.

Everyone's a Builder Now: Securing the AI-Powered Enterprise: Black Hat Interview with Gil Geron, CEO of Orca Security

AI is fundamentally changing software development, turning employees across the business into builders and reshaping how organizations think about innovation and risk. In this session, Orca Security CEO Gil Geron explores what this shift means for enterprise leaders and why security must evolve alongside the next generation of AI-powered software creation.

Segment Resources:

This segment is sponsored by Orca Security. Visit https://securityweekly.com/orcabh to learn more about them!

Bugcrowd Launches Pathseeker: Flipping the Script on Traditional Pentesting: Black Hat Interview with Braden Russell, CTO of Bugcrowd

Bugcrowd is launching Savant Pathseeker, the first product in its new Agentic Offensive Testing line, which combines continuous agentic pentesting with on-demand human validation. The launch comes as the security industry grapples with a growing "AI slop" problem, where unchecked AI-generated vulnerability reports have overwhelmed bug bounty programs and even forced some, like Curl, to shut theirs down. Braden will unpack how Bugcrowd is positioning Savant Pathseeker as a response to that industry-wide trust problem, not just a new product launch.

Segment Resources:

Apply for early access at https://securityweekly.com/bugcrowdbh

Visit https://www.securityweekly.com/asw for all the latest episodes!

Show Notes: https://securityweekly.com/asw-398

Victorians, TONIC, RevStealer, Fireant, OpenClaw, PowerShell, SuperBox, Aaran Leyland - SWN #612

Tue, 01 Sep 2026 23:34:24 +0200

Victorian Bug Bounties, TONIC, RevStealer, Fireant, OpenClaw, PowerShell, SuperBox, Nimbus Manticore, Isambard Kingdom Brunel, Rote Tod, Aaran Leyland, and More on the Security Weekly News.

Visit https://www.securityweekly.com/swn for all the latest episodes!

Show Notes: https://securityweekly.com/swn-612

Generative AI: This Is How You Can Use ChatGPT Safely

Tue, 01 Sep 2026 23:34:15 +0200

Generative AI has now become a tool of the day-to-day. It is used by people to plan trips, explain hard ideas, write e-mail, to take notes and to explore new topics. There is a benefit to that convenience, but there's also a responsibility. A chatbot can give confident answers that are incomplete, out-of-date and wrong. AI can receive information... Weiterlesen

Major Cyber Attacks, Data Breaches, Ransomware Attacks in August 2026

Tue, 01 Sep 2026 23:34:13 +0200

August 2026 saw cyber threats cut across an unusually diverse range of sectors, from logistics and financial services to healthcare, government and critical infrastructure. Major incidents involving CEVA Logistics, the French Tax Authority, Sakura Internet, RingCentral, SafePal, CareCloud and Apollo Global Management demonstrated that both large... Weiterlesen

Understanding the Impact of Ransomware on Businesses

Tue, 01 Sep 2026 23:33:57 +0200

Ransomware is a huge digital threat to companies today. Hackers use this bad software to lock your files and demand money. If you do not pay them, you lose your data forever. Over the past few years, these attacks have become much worse. Attackers now steal confidential files before locking your computer screen. They threaten […] The post... Weiterlesen

OpenAI’s Apple Messages Tool Raises Privacy Concerns Over Decrypted Chats

Tue, 01 Sep 2026 23:33:38 +0200

OpenAI recently introduced a new Apple Messages plugin for its desktop application on Mac computers. This tool allows ChatGPT to connect with conversations at work as well as at home in the Messages app. It also allows users to request information from the AI, such as looking up previous chat history, summarizing large texts, and […] The post... Weiterlesen

Android 17 Adds New Security Controls to Protect Users on Wi-Fi and Mobile Networks

Tue, 01 Sep 2026 23:33:24 +0200

Google has added several network security features to Android 17 that give users more privacy when they use Wi-Fi, browse the web or connect to mobile networks. The changes cover local network access, web traffic, digital certificates and older cellular networks. Together, they aim to limit what apps, network operators and attackers can learn... Weiterlesen

Meet Manic: The Android Malware With a Sneaky Backup Plan

Tue, 01 Sep 2026 23:33:19 +0200

Every so often a piece of malware comes along with a trick clever enough to make security researchers pause and take note. Manic is one of those. It’s a new Android threat, and it does something most malware never bothers with. When an infected phone loses internet access, Manic finds a way to keep stealing anyway. It’s criminal behaviors include... Weiterlesen

Critical GiveWP Flaw Lets Attackers Run Commands on WordPress Servers

Tue, 01 Sep 2026 23:33:05 +0200

A critical GiveWP flaw lets unauthenticated attackers execute server commands. Version 4.16.7.2 fixes the PHP object injection chain. A critical vulnerability in GiveWP, one of the most widely used WordPress plugins for online donations and fundraising, can let an unauthenticated attacker execute commands on the server. Patchstack disclosed the... Weiterlesen

Infostealers Are Hijacking Claude Sessions and Draining Subscriptions

Tue, 01 Sep 2026 23:33:03 +0200

Infostealers can steal active Claude sessions, bypass 2FA and drain paid usage. Anthropic is revoking access and refunding unauthorized charges. Anthropic confirmed that several infostealer malware can hijack an active Claude login session and let attackers burn through your usage without ever touching your password. “Our investigation is ongoing.... Weiterlesen

ValleyRAT: When Legitimate Software Becomes a Malware Delivery Tool

Tue, 01 Sep 2026 23:33:01 +0200

ValleyRAT hides behind legitimate adware, using DLL sideloading to evade detection, steal data and give Silver Fox control of infected systems. ValleyRAT doesn’t always need to disguise itself as a cracked game or a fake browser update. It can also hide behind something much more ordinary: an application that looks like adware and appears to serve... Weiterlesen

U.S. CISA adds PaperCut NG/MF flaws to its Known Exploited Vulnerabilities catalog

Tue, 01 Sep 2026 23:33:00 +0200

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds PaperCut NG/MF flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-81578 (CVSS score of 8.8) PaperCut NG/MF Missing... Weiterlesen

Chaotic Eclipse Releases Kaspersky Zero-Day HardBreacher

Tue, 01 Sep 2026 23:32:58 +0200

Chaotic Eclipse released HardBreacher, a PoC exploit for a Kaspersky Endpoint Security privilege escalation flaw, adding another zero-day to his list. Security researcher Chaotic Eclipse, also known as INFINITE NIGHTMARE, MSNightmare and Nightmare-Eclipse, released a new zero-day exploit targeting Kaspersky Endpoint Security. The researcher named... Weiterlesen

Chaotic Eclipse Releases GenDigital Avast Antivirus ZeroDay PrettyPrague

Tue, 01 Sep 2026 23:32:57 +0200

Chaotic Eclipse released PrettyPrague, a PoC exploit for a GenDigital Avast Antivirus ZeroDay Elevation of Privileges Vulnerability Security researcher Chaotic Eclipse, also known as INFINITE NIGHTMARE, MSNightmare and Nightmare-Eclipse, released a new zero-day exploit targeting GenDigital Avast Antivirus. The researcher named the exploit... Weiterlesen

9 Proofpoint alternatives. Pros & cons of the leading options

Tue, 01 Sep 2026 23:32:52 +0200

Proofpoint catches malicious traffic and blocks data exfiltration well, with solid coverage for business email compromise, phishing, and malware. But it’s built for the enterprise, and it shows. G2 reviewers flagged a steep learning curve and steep pricing, and suggested Proofpoint’s support would need improving. The platform’s also in flux.... Weiterlesen

What the DfE’s cyber security update means for multi-academy trusts

Tue, 01 Sep 2026 23:32:46 +0200

Before dawn on 10 July 2024, one ransomware attack took down ten schools inside the same multi-academy trust at once. Every control that eventually stopped it was something the Department for Education’s own cyber security standard already asked for, well before the attack. That’s a case DfE has published on its own Cyber Security Hub, […] The... Weiterlesen

Fake Claude Opus 5 app delivers malware and wipes its own tracks

Tue, 01 Sep 2026 23:32:43 +0200

A malicious GitHub repository impersonating Anthropic and claiming to offer free access to “Claude Opus 5” is delivering RevStealer, Windows information-stealing malware that targets passwords, cryptocurrency wallet data and login credentials, according to Morphisec. Repository README using Claude Opus 5 branding and a “Free” hook (Source:... Weiterlesen

Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks

Tue, 01 Sep 2026 23:32:41 +0200

A coordinated voice-phishing (vishing) campaign, named Spring Ring, used fake IT support accounts on Microsoft Teams to trick employees into installing malware or granting remote access to their computers, according to Unit 42, Palo Alto Networks’ threat intelligence team. The campaign ran between January and April 2026 and reached more than 150... Weiterlesen

CISA review makes the case for eliminating vulnerability classes

Tue, 01 Sep 2026 23:32:39 +0200

For years, the security industry has treated vulnerabilities as an endless queue of individual fixes. A recent CISA review argues that this is precisely why attackers keep winning. The solution to this problem, they believe, is eliminating entire categories of weaknesses at the source. “By reducing these root causes during software development,... Weiterlesen

Fake Codex Download Uses Google Sites to Deliver macOS Malware

Tue, 01 Sep 2026 23:32:36 +0200

Fake Codex pages used Google Sites, sponsored search and ClickFix to target Mac users Weiterlesen

Fake Minecraft Clients Deliver WeedHack Malware Despite Infrastructure Takedown

Tue, 01 Sep 2026 23:32:35 +0200

A threat actor keeps spreading the WeedHack malware to Minecraft players despite its original infrastructure taken down in July Weiterlesen

Four in Five AI Tools Run with No IT Oversight, New Research Finds

Tue, 01 Sep 2026 23:32:32 +0200

Reco report reveals growing shadow AI problem and surge in vulnerability disclosures Weiterlesen

Tortoiseshell Expands Malware Toolset With New Backdoor, SSH Tunnel

Tue, 01 Sep 2026 23:32:30 +0200

Group-IB uncovered new Tortoiseshell infrastructure, including a backdoor and SSH tunneling tool Weiterlesen

OpenAI: Hugging Face Incident a “Warning Shot” to the World

Tue, 01 Sep 2026 23:32:29 +0200

OpenAI reveals that unauthorized message boards were at the heart of the recent Hugging Face breach Weiterlesen

Threat Actors Abuse Cursor Agent AI to Assist Ransomware Operations

Tue, 01 Sep 2026 23:32:26 +0200

Aurora ransomware operators are abusing SpaceX’s Cursor Agent AI tool to conduct tasks such as reconnaissance and exploitation activities Weiterlesen

Window to Tackle Surge in AI-Enabled Cyber Attacks Narrowing, Tech Giants Warn

Tue, 01 Sep 2026 23:32:25 +0200

More than 100 companies, including OpenAI, Anthropic, Google and Microsoft, have urged collective action to unlock the power of AI to protect critical public services Weiterlesen

Slopsquatting in the Supply Chain: Weaponized AI Hallucinations

Tue, 01 Sep 2026 23:32:18 +0200

In this interview with Snyk CTO Manoj Nair, we examine how attackers weaponize recurring LLM package hallucinations before developers even hit "run." Weiterlesen

Cursor customers will lose access to OpenAI coding models in November

Tue, 01 Sep 2026 23:32:13 +0200

OpenAI will stop AI coding platform Cursor from accessing its models from November 12, following the acquisition of Cursor parent Anysphere by Elon Musk‘s SpaceX. “Today, we notified SpaceX that we intend to wind down our contract providing OpenAI models to Cursor, with a proposed shutoff date of November 12, 2026,” the company wrote in a blog... Weiterlesen

ChatGPT for Teens Adds New Safeguards — but Safety Gaps Remain

Tue, 01 Sep 2026 23:32:06 +0200

ChatGPT for Teens adds stronger protections for users ages 13 to 17, but parents still face limits around monitoring, age prediction, and AI safety. The post ChatGPT for Teens Adds New Safeguards — but Safety Gaps Remain appeared first on TechRepublic. Weiterlesen

OpenAI Bans Russian ChatGPT Accounts Used in Covert Influence Campaign

Tue, 01 Sep 2026 23:32:04 +0200

OpenAI banned Russian ChatGPT accounts tied to a covert influence campaign involving copied research, fake attribution and coordinated social posts. The post OpenAI Bans Russian ChatGPT Accounts Used in Covert Influence Campaign appeared first on TechRepublic. Weiterlesen

Fake GTA 6 Demo Spreads Malware: How to Spot the Scam

Tue, 01 Sep 2026 23:32:02 +0200

There is no legitimate GTA 6 demo. Fake Rockstar sites are distributing Vidar malware that targets passwords, cookies, and logged-in browser sessions. The post Fake GTA 6 Demo Spreads Malware: How to Spot the Scam appeared first on TechRepublic. Weiterlesen

Gunra ransomware: what you need to know

Tue, 01 Sep 2026 23:32:00 +0200

The ransomware gang Gunra has been creating havoc - exploiting unpatched VPNs and firewalls to steal data, encrypt systems, and extort victims across healthcare, finance, manufacturing, and more. Read more in my article on the Fortra blog. Weiterlesen

Smashing Security podcast #482: This hacker leaked GTA 6 – and launched their own cryptocurrency

Tue, 01 Sep 2026 23:31:57 +0200

A hacker calling themselves "CYBERLEEK" has been leaking gameplay footage from GTA 6 ahead of its official reveal this week - but they're not asking Rockstar Games for a ransom. Instead, they've launched their own cryptocurrency, promising to release ever more juicy clips from a virtual strip club... Meanwhile, your smart TV might be doing more... Weiterlesen

Shai-Hulud hackers: two men charged over TeamPCP’s global supply chain crime spree that hit OpenAI, and thousands more

Tue, 01 Sep 2026 23:31:52 +0200

More than 1,000 organisations, 500,000 stolen credentials, and one self-propagating worm named after a Dune sandworm - two men now face charges over TeamPCP's global hacking spree. Read more in my article on the Hot for Security blog. Weiterlesen

Spyware for Babies

Tue, 01 Sep 2026 23:31:47 +0200

The New York Times has a long article (alt link) on surveillance systems aimed at babies. They are increasingly using AI. Nanit and its rivals want to own 24/7 health tracking for the sub-four-foot set. And their already astonishing levels of baby data collection are just the beginning. Nanit recently raised $50 million from investors to expand... Weiterlesen

LLM-Based Social Engineering Scams

Tue, 01 Sep 2026 23:31:45 +0200

OpenAI disrupted a social engineering group from Cambodia that used ChatGPT. Its scope is impressive: The network simultaneously conducted multiple types of scams, often blending elements from different schemes. For instance, operators used dating personas to build trust before introducing fraudulent investment opportunities involving... Weiterlesen

AI Doesn’t Mean the End of Mathematics—at Least Not Yet

Tue, 01 Sep 2026 23:31:43 +0200

This essay was written with Kasra Rafi, and originally appeared in The Guardian. Earlier this month, about 40 top mathematicians gathered at OpenAI’s offices to discuss the future of their profession. The meeting was off-the-record, but if recent articles by mathematicians are any guide, it was mostly pretty glum. People fear for their jobs, their... Weiterlesen

Leaked Russian Cyber-Operations Training Materials

Tue, 01 Sep 2026 23:31:41 +0200

This is interesting: The records describe a force-generation mechanism for several General Staff components, including the GRU, Main Operational Directorate, and 8th Directorate, which is associated with protected communications, cryptography, and information security. […] The reporting also linked a 2024 Department No. 4 graduate, Aleksei... Weiterlesen

What’s the Scam?

Tue, 01 Sep 2026 23:31:34 +0200

To subscribe to my monthly email newsletter, you have to enter your information on the webpage, and then reply to an automatically generated email. This is, of course, to prevent people from subscribing addresses other than their own. Starting last weekend, I have been receiving a lot of individual responses to those emails. Always one line: Thank... Weiterlesen

The Vulnerability Gap: Why Discovery Is Outrunning Repair

Tue, 01 Sep 2026 23:31:32 +0200

The combination of AI both discovering more vulnerabilities at a faster pace and the tightening regulatory environment is making this an all-hands-on-deck moment for the cybersecurity community. Weiterlesen

ToxicPanda Banking Trojan Matures Into Enterprise Threat

Tue, 01 Sep 2026 23:31:30 +0200

The latest version of the Android malware has new features that expand its global reach and put more than users' financial applications at risk. Weiterlesen

Tricky 'SynkLoader' Multitool May Herald Ransomware

Tue, 01 Sep 2026 23:31:29 +0200

An advanced, multilingual malware family brings back a trick from yesteryear — screen hijacking — for effective password theft, along with a slew of novel features. Weiterlesen

Foul Language: WordlistLoader Disguises Malware as Ordinary Text

Tue, 01 Sep 2026 23:31:27 +0200

ClickFix-style threat campaigns are using a new trick to evade detection and deliver Amatera, an increasingly prevalent infostealer. Weiterlesen

Exploited Zimbra Flaw Highlights Shrinking Window to Patch

Tue, 01 Sep 2026 23:31:26 +0200

CISA issued a three-day deadline for agencies to patch a Zimbra security vulnerability, CVE-2026-73570, which allows full takeover of a user's communications. Weiterlesen

Finding Nemo(Claw): Networking Issue Allows for LLM Poisoning in OpenClaw

Tue, 01 Sep 2026 23:31:25 +0200

Attackers can exploit a security bug in Nvidia's tool to gain unauthenticated access to the local model server through the Ollama API, paving the way for persistent AI agent corruption. Weiterlesen

Android Malware Hijacks Update System for Car Head Units

Tue, 01 Sep 2026 23:31:23 +0200

Threat actors behind a notorious click-fraud botnet have set their sights on vehicle infotainment modules and are abusing legitimate functionality to spread infections. Weiterlesen

Dark Caracal Adds New Malware to Cyber Espionage Arsenal

Tue, 01 Sep 2026 23:31:22 +0200

GoCaracal is a new modular malware framework that broadens Dark Caracal's capabilities to steal data and maintain access to victims. Weiterlesen

Agentic AI Risks, CVE Program Concerns Permeate Black Hat USA 2026

Tue, 01 Sep 2026 23:31:21 +0200

This installment of the Reporters' Notebook video series discusses the topics that dominated the cybersecurity conference, such as AI's effects on vulnerability reporting and security research. Weiterlesen

The Vulnpocalypse Is Repricing the Bug Bounty Economy

Tue, 01 Sep 2026 23:31:19 +0200

The surge in AI-powered vulnerability reports is driving down bug bounty prices, and that could spell trouble for independent researchers. Weiterlesen

Hundreds of OpenAI Agents Invaded Hugging Face Servers

Tue, 01 Sep 2026 23:31:18 +0200

The Hugging Face incident was bigger and worse than previously thought, with approximately 700 agents collaborating on a sophisticated, multistage attack. Weiterlesen

AI Model Rules Are Not Security Controls

Tue, 01 Sep 2026 23:31:15 +0200

OpenAI's Hugging Face attack postmortem shows agents don't care about rules — they need strong controls. Weiterlesen

AI Model Evaluator METR Hit by Credential Theft, Probing

Tue, 01 Sep 2026 23:31:14 +0200

In one attack, threat actors stole an API key that ultimately led to the consumption of $600,000 in public AI model credits for the security nonprofit. Weiterlesen

Critical Langflow Flaw Exploited as Attacks on AI Platform Rise

Tue, 01 Sep 2026 23:31:13 +0200

The attacks targeting CVE-2026-0768 are the latest threat against the low-code AI development platform, which is receiving more attention from adversaries this year. Weiterlesen

Stronger Security Drives Ransomware Groups to Recruit From Within

Tue, 01 Sep 2026 23:31:12 +0200

Some security researchers have observed an uptick in insider-assisted ransomware attacks, but malicious insiders pose other threats that cost companies millions. Weiterlesen

Attackers Pounce on Critical Artifactory Flaw Following Disclosure

Tue, 01 Sep 2026 23:31:10 +0200

CVE-2026-82329 is an authentication bypass flaw in JFrog's repository manager that enables bad actors to gain admin-level access on affected systems. Weiterlesen

‘We are about to see the greatest boom in people starting smaller businesses that we’ve ever seen’: OpenAI CEO Sam Altman thinks AI will spark a new wave of entrepreneurship

Tue, 01 Sep 2026 23:31:08 +0200

OpenAI CEO Sam Altman believes AI could spark a new wave of small businesses, but the tech industry has a lot of work to do convincing entrepreneurs how the technology can help. Speaking on the David Senra podcast, Altman suggested AI could help break down traditional barriers for entrepreneurs, particularly in terms of financing and technical... Weiterlesen

Zero-click email attacks: What businesses need to know

Tue, 01 Sep 2026 23:31:06 +0200

Zero-click attacks bring to mind the advanced spyware typically targeted at a specific subset of users. Infamous examples, such as the Pegasus spyware that targeted the family of murdered Saudi dissident Jamal Khashoggi, saw a user compromised simply by receiving a WhatsApp or iMessage. But now, email is being used in a zero-click phishing... Weiterlesen

Hackers have breached hundreds of Zimbra servers, despite a patch having been available for weeks

Tue, 01 Sep 2026 23:31:05 +0200

Hundreds of internet-facing Zimbra instances have been compromised through a vulnerability that was patched last month, researchers have warned. The Zimbra Collaboration Suite (ZCS) hosts email, calendars, contacts, and administrative services. It has hundreds of millions of users, including thousands of businesses and hundreds of government... Weiterlesen

Six things OpenAI learned about AI from the Hugging Face incident

Tue, 01 Sep 2026 23:31:03 +0200

OpenAI has admitted it should have spotted its AI had gone off the rails sooner, saying that early signs that agents were misbehaving "could have triggered an earlier response."The admission comes as part of a series of reports into the July incident in which OpenAI models dodged internal controls and compromised a Hugging Face production... Weiterlesen

Security researchers warn of AI-powered PLC attacks in wake of Siemens advisories

Tue, 01 Sep 2026 23:31:02 +0200

Security researchers have successfully used AI to port a remote code execution (RCE) exploit between two programmable logic controllers (PLCs). While the experiment still required significant human expertise to negotiate dead ends and false leads, it showed how AI could make it easier to carry out attacks against embedded and industrial... Weiterlesen

Künstliche Intelligenz: Chat-GPT zeigt jetzt Werbung

Tue, 01 Sep 2026 23:30:58 +0200

Sam Altman wollte eigentlich keine Werbung in seinem KI-Tool. Jetzt ist sie aber da, auch in Deutschland. Und mit ihr die Frage, wie viel ein KI-Konzern über seine Nutzer wissen darf. Weiterlesen

OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation

Tue, 01 Sep 2026 23:30:57 +0200

OpenAI on Tuesday said it banned a cluster of Russian ChatGPT accounts that used VPNs to bypass access restrictions and run an influence operation, which relied on its artificial intelligence (AI) tool to generate social media posts and comments that were shared on Substack, Telegram, X, Facebook and LinkedIn. The accounts "were being used to... Weiterlesen

Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code

Tue, 01 Sep 2026 23:30:56 +0200

The CERT Coordination Center (CERT/CC) has disclosed two unpatched vulnerabilities in Kaltura's HTML5 video player library that allow a remote, unauthenticated attacker to read arbitrary files from a server and execute code on it. The flaws, tracked as CVE-2026-19913 and CVE-2026-19912, both stem from the same unsafe deserialization in the... Weiterlesen

Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler

Tue, 01 Sep 2026 23:30:54 +0200

Cybersecurity researchers have discovered additional infrastructure and previously undocumented malware associated with Nimbus Manticore, an Iranian state-sponsored hacking group affiliated with the Islamic Revolutionary Guard Corps (IRGC). Group-IB, in a new analysis published today, described the cyber espionage actor as among the most active... Weiterlesen

CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs

Tue, 01 Sep 2026 23:30:53 +0200

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added six flaws to its Known Exploited Vulnerabilities (KEV) catalog, including a high-severity security vulnerability impacting Citrix NetScaler ADC and NetScaler Gateway, citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2019-1068 - A... Weiterlesen

New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access

Tue, 01 Sep 2026 23:30:52 +0200

Academic researchers have disclosed a Rowhammer attack impacting NVIDIA workstation GPUs with GDDR6 memory that defeats error correction codes (ECC), the mitigation NVIDIA recommends against GPU Rowhammer, and enables denial-of-service (DoS) and privilege escalation to a root shell. Dubbed GPUThor, the attack was developed by researchers at the... Weiterlesen

GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address

Tue, 01 Sep 2026 23:30:50 +0200

Threat actors linked by Arctic Wolf to Dark Caracal with medium confidence deployed a previously undocumented Go-based malware framework, GoCaracal, during a June 2026 intrusion at an unnamed communications organization in Venezuela. GoCaracal provides operators with remote shell access and payload execution, while the extended profile adds... Weiterlesen

Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers

Tue, 01 Sep 2026 23:30:49 +0200

Cybersecurity researchers have disclosed details of a vulnerability in Amazon Kiro, an artificial intelligence (AI)-powered, agentic integrated development environment (IDE), that could facilitate data exfiltration via prompt injection and Kiro Powers. The security flaw, which does not have a CVE identifier, works against Kiro IDE 0.7.45 on... Weiterlesen

ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories

Tue, 01 Sep 2026 23:30:47 +0200

A fake login page. A fake security scan. A fake productivity app. Apparently, pretending to be useful is still one of the easier ways into a machine. The rest of the week gets stranger: botnets borrowing AI, command traffic hiding in public infrastructure, malicious tools waiting before showing their real behavior, exposed systems getting scanned,... Weiterlesen

Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE

Tue, 01 Sep 2026 23:30:46 +0200

Credit: Hacktron Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via specially crafted AVIF image files and the other through a path traversal flaw affecting servers that use a Windows filesystem. The Windows path... Weiterlesen

OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face

Tue, 01 Sep 2026 23:30:44 +0200

OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence (AI)-powered hack of Hugging Face last month, adding that it found evidence of misaligned behavior as early as late May. The incident, the company said, took place during cybersecurity evaluations of several OpenAI models, and that it was mainly... Weiterlesen

PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions

Tue, 01 Sep 2026 23:30:42 +0200

PaperCut has alerted customers that bad actors are actively exploiting a vulnerability impacting all versions of its PaperCut NG and PaperCut MF print management software in zero-day attacks. The company has released an emergency patch for v25 and v26 to address the issue. It said it's "aware of confirmed customer incidents and is treating this... Weiterlesen

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

Tue, 01 Sep 2026 23:30:41 +0200

cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the root user. The vulnerability, assigned the CVE identifier CVE-2026-65643, impacts all supported versions of cPanel & WHM. cPanel described the issue as a critical... Weiterlesen

China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access

Tue, 01 Sep 2026 23:30:40 +0200

VulnCheck has disclosed two previously undocumented factory implants in firmware for routers built by Shenzhen Zhibotong Electronics (ZBT), each of which gives an unauthenticated remote attacker the ability to run commands as root on affected devices. The implants, named SPEAKINGSTONE and DARKLANTERN by the company's zero-day research team, are... Weiterlesen

Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL

Tue, 01 Sep 2026 23:30:38 +0200

ServiceNow has released patches for four security flaws impacting the ServiceNow AI Platform, three of them rated 10.0 on the CVSS scoring system and exploitable, in certain circumstances, by an unauthenticated attacker. The company said it deployed a security update to hosted instances and provided the update to its partners and self-hosted... Weiterlesen

Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth

Tue, 01 Sep 2026 23:30:37 +0200

Security researcher Olivier Laflamme has disclosed two independent root remote code execution (RCE) chains affecting the Unitree G1 EDU, including a Bluetooth Low Energy (BLE) path that can reach root on the robot's Locomotion PC. The flaws are tracked as CVE-2026-76639 and CVE-2026-76640, with the first involving a network-adjacent path through... Weiterlesen

ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body

Tue, 01 Sep 2026 23:30:36 +0200

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting ownCloud to its Known Exploited Vulnerabilities (KEV) catalog following reports that a Chinese-speaking threat actor weaponized the vulnerability to target a nuclear research body in the Philippines. The vulnerability, tracked as... Weiterlesen

Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication

Tue, 01 Sep 2026 23:30:34 +0200

Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible instances, as the company released a fresh emergency fix with additional hardening. "This vulnerability gives an unauthenticated attacker remote control over PaperCut's trusted configuration, which could be used to execute... Weiterlesen

Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable

Tue, 01 Sep 2026 23:30:33 +0200

Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August 20 and August 25, 2026. The vulnerability, designated GHSA-7g4w-cg88-2cq2, is rated Critical by Cosmos Labs and was published without a CVE identifier, a weakness classification, or a CVSS... Weiterlesen

Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Tue, 01 Sep 2026 23:30:31 +0200

Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution. The vulnerabilities, according to Wordfence and Patchstack, are listed below - CVE-2026-76581 (CVSS... Weiterlesen

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets

Tue, 01 Sep 2026 23:30:30 +0200

Threat actors associated with Aurora (aka Aur0ra) ransomware have been observed using SpaceX's artificial intelligence (AI)-powered coding assistant Cursor to break into target networks, according to findings from CloudSEK and Gambit Security. The two independent analyses are based on exposed infrastructure associated with the Russian-speaking... Weiterlesen

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

Tue, 01 Sep 2026 23:30:28 +0200

The threat actor known as Silver Fox has been observed distributing the ValleyRAT backdoor disguised as a signed Chinese adware application, running the malware under a trusted process to slip past users who add such software to their antivirus exclusions. Russian cybersecurity vendor Kaspersky said the attackers built the disguise around QN... Weiterlesen

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

Tue, 01 Sep 2026 23:30:26 +0200

Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck. The vulnerabilities in question are listed below - CVE-2026-0768 (CVSS score: 9.8) - A lack of proper validation of a user-supplied input vulnerability that could be exploited to execute arbitrary Python code in the... Weiterlesen

Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis

Tue, 01 Sep 2026 23:30:23 +0200

Cybersecurity researchers have disclosed a new technique dubbed GuardBreaker that's been put to use by a Russia-aligned threat actor known as UAC-0099 against a target in Ukraine with an aim to interfere with artificial intelligence (AI)-assisted analysis. The idea, ESET said in a series of posts on X, is to deliberately trip a large language... Weiterlesen

Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests

Tue, 01 Sep 2026 23:30:20 +0200

The Iranian Nimbus Manticore hacking group has been attributed to two previously undocumented malware families that highlight the continued evolution of its toolset and likely expand its targeting footprint to infect Linux and Apple macOS systems using cross-platform remote access trojans (RATs) developed using Node.js and JavaScript. Russian... Weiterlesen

13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

Tue, 01 Sep 2026 23:30:19 +0200

Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into Vietnamese movie and comic streaming sites that install those libraries and initiate the deployment of spyware aimed at unpatched iOS devices. "The injected code runs two operations against a site's... Weiterlesen

Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure

Tue, 01 Sep 2026 23:30:15 +0200

Threat actors are exploiting a newly patched critical security flaw impacting JFrog Artifactory merely days after public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-82329 (CVSS score: 9.8), a case of authentication bypass that could lead to administrative access in Artifactory. "JFrog Artifactory contains an... Weiterlesen

The State of Ransomware in Education 2026

Tue, 01 Sep 2026 23:30:13 +0200

Insights from 226 IT and cybersecurity leaders across the education sector in 17 countries whose organizations were hit by ransomware in the past year. Weiterlesen

Ungentlemanly behavior: Insights into a ransomware operation

Tue, 01 Sep 2026 23:30:10 +0200

Analysis of 15 intrusions revealed tradecraft used by GOLD SHERWOOD affiliates Weiterlesen

ChatGPT for Teens Adds New Safeguards — but Safety Gaps Remain

Tue, 01 Sep 2026 23:29:53 +0200

OpenAI Bans Russian ChatGPT Accounts Used in Covert Influence Campaign

Tue, 01 Sep 2026 23:29:52 +0200

Fake GTA 6 Demo Spreads Malware: How to Spot the Scam

Tue, 01 Sep 2026 23:29:51 +0200

Gunra ransomware: what you need to know

Tue, 01 Sep 2026 23:29:49 +0200

Smashing Security podcast #482: This hacker leaked GTA 6 – and launched their own cryptocurrency

Tue, 01 Sep 2026 23:29:47 +0200

Shai-Hulud hackers: two men charged over TeamPCP’s global supply chain crime spree that hit OpenAI, and thousands more

Tue, 01 Sep 2026 23:29:45 +0200

Android-Malware blockiert Google Play per VPN-Trick

Tue, 01 Sep 2026 23:29:42 +0200

Die Android-Malware ToxicPanda wird immer gefährlicher: Sie blockiert Google Play, kapert Sicherheitsfunktionen und späht Banking-Apps aus. Weiterlesen

Windows 11: Falsche Defender-Warnungen und kaputte Mauszeiger

Tue, 01 Sep 2026 23:29:40 +0200

Microsoft bestätigt mehrere Bugs in Windows 11: Nach Updates gibt es falsche Defender-Warnungen und außerdem Probleme mit Mauszeigern und Hintergrundbildern. Weiterlesen

Denial of Service in python-httplib2 (SUSE)

Tue, 01 Sep 2026 23:29:33 +0200

Preisgabe von Informationen in Pillow (Ubuntu)

Tue, 01 Sep 2026 23:29:31 +0200

Ausführen von Code mit höheren Privilegien in sudo-rs (Ubuntu)

Tue, 01 Sep 2026 23:29:29 +0200

The Just Security Podcast: Murder on the High Seas Part VI

Tue, 01 Sep 2026 23:29:28 +0200

Watch the Episode: Co-Hosts Tess Bridgeman and Rachel Goldbrenner are joined by Rebecca Ingber and Brian Finucane to discuss how the Trump administration’s campaign of lethal strikes against suspected drug traffickers in the Caribbean and eastern Pacific has escalated and evolved in the year since the strikes began. The conversation examines the... Weiterlesen

How to Change Size Of Taskbar in Windows 11

Tue, 01 Sep 2026 23:29:09 +0200

Key TakeawaysWindows 11 introduces a new taskbar design, which some users may find too large and want to resize.To change the taskbar size in Windows 11, users can make adjustments in the Registry Editor.By following a step-by-step guide, users can enable a smaller taskbar in Windows 11 and revert to the default size if needed.Windows […] The post... Weiterlesen

Top 5 Ways to Enable Hibernate Mode on Windows 11

Tue, 01 Sep 2026 23:28:58 +0200

Key TakeawaysHibernate mode on Windows 11 allows you to save battery life and resume where you left off, similar to sleep mode.Enabling Hibernate mode requires using Command Prompt and entering specific commands to enable the feature.To configure Hibernate mode on Windows 11, you can set the time for inactivity before the PC goes into hibernate... Weiterlesen

Post-DEF CON phishing campaign delivered AMOS and NetSupport malware

Tue, 01 Sep 2026 23:28:15 +0200

A phishing campaign targeting attendees of Black Hat and DEF CON conferences involved distributing information-stealing malware and remote access malware via a malicious Google Doc and fake DocSend installers for macOS and Windows. The Huntress team learned about the phishing attack after one of its researchers received a direct message on X on... Weiterlesen

OpenAI Bans Russia ChatGPT Accounts Used to Run Covert Influence Operation

Tue, 01 Sep 2026 23:28:12 +0200

OpenAI Bans Russian ChatGPT accounts participating in a covert online influence operation aimed at manufacturing authority and promoting narratives favorable to Moscow. The campaign leveraged generative AI tools alongside an elaborate network of fake digital infrastructure, including a front think tank, plagiarized academic work, and a biased... Weiterlesen

Fake GTA 6 Demo Alert: One Click Could Steal Your Passwords

Tue, 01 Sep 2026 23:28:11 +0200

Cybercriminals are always looking for new ways to exploit popular trends. This time, they are taking advantage of the huge excitement around GTA 6 by creating fake demo websites developed to spread password-stealing malware. Security researchers at Malwarebytes have discovered an active malware campaign targeting fans eagerly waiting for Grand... Weiterlesen

Kubernetes 1.37 advances workload-aware scheduling and cluster networking

Tue, 01 Sep 2026 23:28:08 +0200

When the open-source Kubernetes cloud-native project got started more than a decade ago, AI was not a major concern. Times have changed. Kubernetes 1.37 is now out, extending its networking and scheduling capabilities as more organizations run AI and machine learning workloads on the platform. The new release is the second major update for the... Weiterlesen

OpenAI confirms ChatGPT outage as users report errors

Tue, 01 Sep 2026 23:28:04 +0200

ChatGPT Work is experiencing a partial outage, and users across multiple subscription plans may be unable to start or continue tasks. [...] Weiterlesen

Five Venezuelans plead guilty to ATM jackpotting attacks in US

Tue, 01 Sep 2026 23:28:02 +0200

Five Venezuelan nationals pleaded guilty to attempting to empty automated teller machines (ATMs) using malware in a series of ATM jackpotting attacks. [...] Weiterlesen

Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks

Tue, 01 Sep 2026 23:28:00 +0200

Nearly 22,000 Microsoft Exchange servers exposed online remain unpatched against a high-severity authentication bypass vulnerability that allows attackers to hijack all user mailboxes. [...] Weiterlesen

Critical Langflow flaw exploited to steal OpenAI and AWS keys

Tue, 01 Sep 2026 23:27:57 +0200

Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open-source framework for building AI applications, to steal credentials, tokens, and keys. [...] Weiterlesen

Aesto Health says data breach affects over 9.5 million patients

Tue, 01 Sep 2026 23:27:54 +0200

Aesto LLC, operating as Aesto Health, disclosed that a data breach discovered recently affects more than 9.5 million individuals. [...] Weiterlesen

Hackers abuse Faronics Deploy admin tool to install ScreenConnect

Tue, 01 Sep 2026 23:27:51 +0200

Phishing actors are abusing the legitimate Faronics Deploy endpoint-management platform to gain remote administrative control over victim computers and install the ScreenConnect remote support software. [...] Weiterlesen

Exploit „HardBreacher“ für Kaspersky Endpoint Security veröffentlicht

Tue, 01 Sep 2026 23:27:49 +0200

Der unter dem Namen Nightmare Eclipse auftretende Sicherheitsforscher hat einen Zero-Day-Exploit in Kaspersky Endpoint Security veröffentlicht. Nightmare Eclipse hatte in den vergangenen Monaten bereits mehrere Machbarkeitsnachweise für Sicherheitslücken veröffentlicht, überwiegend in Windows sowie Microsoft Defender, nachdem der Forscher... Weiterlesen

Firefox aktiviert JPEG-XL-Unterstützung ab Version 157 standardmäßig

Tue, 01 Sep 2026 23:27:48 +0200

Mozilla plant, die Unterstützung für das Bildformat JPEG XL mit Firefox 157 Ende September auf allen Plattformen standardmäßig zu aktivieren. Firefox Nightly nutzt die Funktion bereits jetzt standardmäßig, um sie vor der endgültigen Veröffentlichung ausgiebig zu testen. Mozilla-Entwickler Timothy Nikkel kündigte den Schritt in einer offiziellen... Weiterlesen

Tim Cook verabschiedet sich als Apple-CEO mit persönlicher Nachricht

Tue, 01 Sep 2026 23:27:46 +0200

Am 31. August, seinem letzten Tag als Apple-Chef, richtete Tim Cook eine persönliche Abschiedsnachricht an die Belegschaft des Unternehmens. In der von 9to5Mac veröffentlichten E-Mail an die Beschäftigten beginnt Cook mit den Worten: „Heute ist mein letzter Tag als CEO von Apple.“ Tim Cook, ehemaliger CEO von Apple Im weiteren Verlauf blickt er... Weiterlesen

Beste Antivirus-App für Android 2026 im Test - Cybernews

Tue, 01 Sep 2026 23:27:38 +0200

AISI Deutschland: Neues KI-Sicherheitsinstitut nimmt Arbeit auf - CPM Security Network

Tue, 01 Sep 2026 23:27:35 +0200

Aufgabenteilung zwischen BSI und BNetzA. In einer ersten Phase erfolgt eine Aufgabenteilung entlang der Dimensionen (Cyber-)Security, die beim BSI ... Weiterlesen

Post-Quanten-Kryptografie: Giesecke+Devrient entwickelt quantensichere Identitätskarten

Tue, 01 Sep 2026 23:27:33 +0200

Der Fortinet „State of Operational Technology and Cybersecurity Report 2026“ zeigt Fortschritte bei Reifegrad und Netzwerktransparenz, aber weiterhin ... Weiterlesen

Utax erweitert Cloud Print and Scan für den Unternehmenseinsatz - connect-professional

Tue, 01 Sep 2026 23:27:27 +0200

... IT-Steuerung zentral verankert bleibt. Erleichterungen beim ... cloud-security-bild-ar-th-shutterstock-2141978517. Repräsentative Umfrage des ... Weiterlesen

Sicherheitsupdates für Hoymiles-Wechselrichter (30.8. 2026) - BornCity

Tue, 01 Sep 2026 23:27:26 +0200

Ein Sicherheitsforscher hatte in Kooperation mit dem Chaos Computer Club (CCC) verheerende Sicherheitslücken bei Wechselrichtern für Balkon- und ... Weiterlesen

Red Hat: Wettlauf gegen die Zeit – So halten Unternehmen dem Tempo von KI-gestützten ...

Tue, 01 Sep 2026 23:27:25 +0200

Jan Wildeboer, EMEA Evangelist bei Red Hat, stellt vier Maßnahmen vor, mit denen sich die eigene IT an die neue Geschwindigkeit von Bedrohungen ... Weiterlesen

Exploit „HardBreacher“ für Kaspersky Endpoint Security veröffentlicht - it-daily.net

Tue, 01 Sep 2026 23:27:24 +0200

Der unter dem Namen Nightmare Eclipse auftretende Sicherheitsforscher hat einen Zero-Day-Exploit in Kaspersky Endpoint Security veröffentlicht. Weiterlesen

PV-Wechselrichter: Hoymiles liefert Sicherheitsupdate aus | heise online

Tue, 01 Sep 2026 23:27:18 +0200

Security · IT & Tech · Developer · KI · Entertainment · Wissenschaft · Bestenlisten · Digital Health · Foren · Alle Themen. Anzeige. Special: ... Weiterlesen

September-Termin: heise security Tour mit Vorträgen zu KI, Lieferketten und mehr

Tue, 01 Sep 2026 23:27:17 +0200

Die Eintageskonferenz für Sicherheitsverantwortliche mit praxisrelevantem Wissen zu aktuellen Herausforderungen der IT-Sicherheit: KI, ... Weiterlesen

Berufe: Diese IT-Jobs werden auch in Zukunft gefragt sein - Handelsblatt

Tue, 01 Sep 2026 23:26:52 +0200

Besonders Softwareentwickler, IT-Testmanager und IT-Administratoren werden seltener gesucht. Hoch bleibt dagegen die Nachfrage nach IT-Security- ... Weiterlesen

Cybersecurity: Es gibt keinen Platz für Nachlässigkeiten - it-daily.net

Tue, 01 Sep 2026 23:26:28 +0200

Und das am besten, bevor es einen schwerwiegenden Sicherheitsvorfall gibt. Cybersecurity Open Source. Weiterlesen

Data Contracts: Fundament für vertrauenswürdige Data Products - BigData-Insider

Tue, 01 Sep 2026 23:26:24 +0200

Artenschutz neu gedacht: Ein Ansatz aus der IT-Security. Wenn Künstliche ... Data Products, Data Marketplaces und Data Contracts werden in ... Weiterlesen

Cyber-Training für die Bundeswehr mit dem SANS Institute - ESUT

Tue, 01 Sep 2026 23:26:15 +0200

Das Schulungsprogramm deckt praxisnahe Disziplinen ab, darunter Incident Response, digitale Forensik, Cloud Security, Penetrationstests und die ... Weiterlesen

Thomas Kirn wird Chief Revenue Officer bei Gfos - IT&Production

Tue, 01 Sep 2026 23:25:53 +0200

Dragos, Cybersicherheitsspezialist für OT-Umgebungen, analysiert in einem Bericht aktuelle Cyberbedrohungen für industrielle und kritische ... Weiterlesen

You don't want this Sleepwalker backdoor on your Windows machine

Tue, 01 Sep 2026 23:25:50 +0200

Like a sleeper cell awaiting activation, a never-before-seen Windows backdoor dubbed Sleepwalker waits silently in memory for one specifically crafted network packet to wake it up and deliver commands using the malware's 23-instruction language. The commands can do everything from running code directly in memory to moving data off the computer.... Weiterlesen

Crooks push Mac malware through fake OpenAI Codex ads

Tue, 01 Sep 2026 23:25:48 +0200

Cybercrims are using fake OpenAI Codex download pages to trick Mac developers into running malware disguised as installation commands. Researchers at Cato Networks uncovered the campaign after spotting sponsored Google search results targeting people looking to download Codex for macOS. The ads direct would-be users to a convincing-looking... Weiterlesen

CISA slaps its tightest three-day patching deadline on perfect-10 Oracle flaw

Tue, 01 Sep 2026 23:25:46 +0200

The US Cybersecurity and Infrastructure Security Agency (CISA) just dished out another three-day deadline for patching an actively exploited vulnerability, the most urgent in its wheelhouse. The culprit: a max-severity Oracle bug affecting Windows VMs. Tracked as CVE-2026-21962 (10.0), the improper access control (CWE-284) flaw affects Oracle’s... Weiterlesen

OpenAI explains how its naughty AI agents attacked Hugging Face

Tue, 01 Sep 2026 23:25:44 +0200

OpenAI has published its technical report detailing "the Hugging Face incident," the compromise of the eponymous LLM repository by unreleased, ill-supervised AI models. The incident, widely reported, has prompted concern among technical types, the public, and lawmakers about how automated software was able to escape containment and hack an... Weiterlesen

ATF responds to 'major' cybersecurity incident after ransomware gang's claims

Tue, 01 Sep 2026 23:25:41 +0200

The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) said it’s responding to a “major” cybersecurity incident shortly after the Qilin ransomware gang posted the US federal law enforcement agency on its leak site. An ATF spokesperson told The Register the intruders accessed a “standalone computer system containing information about targets... Weiterlesen

Industry that built the problem offers to sell you the solution

Tue, 01 Sep 2026 23:25:39 +0200

OpenAI has gathered more than 100 of the world's biggest tech and infosec companies to warn that cyber defense is in trouble - a reassuring development given quite a few of them helped build the technology involved. The open letter has more than 100 names attached to it, including many of the companies with the most to gain – or lose – from what... Weiterlesen

CISA: Most exploited vulnerabilities should have been eradicated decades ago

Tue, 01 Sep 2026 23:25:37 +0200

CISA is still crying out for software vendors to adopt Secure by Design (SBD) development practices, and says in its latest review that longstanding vulnerability classes are still the most exploited. The agency examined soft spots across 2024 and 2025, finding that the majority of those that receive CVEs and make it to the Known Exploited... Weiterlesen

Anthropic cracks down on hijacked user accounts mining AI tokens

Tue, 01 Sep 2026 23:25:35 +0200

Rather than paying for their own Claude usage, crims are using malware to steal access to other people's accounts. Aware of this issue, Anthropic has signed at least one affected user out and removed the saved payment method to stop stolen sessions being abused. According to an email shared by Reddit user WorriedAssociate7029, who sent a copy to... Weiterlesen

Attack hides malware in PNGs and drops custom reverse tunnel on victims' machines

Tue, 01 Sep 2026 23:25:34 +0200

An unknown miscreant is using "TerminalFix" to trick unsuspecting users into running PowerShell commands that infect their computers with a reverse tunnel granting attackers access to their networks. Some of the malware is even hidden inside PNG graphics the PC downloads. TerminalFix is the latest variant of the wildly popular ClickFix initial... Weiterlesen

33-hour BGP hijack of Softaculous traffic prompts security scramble

Tue, 01 Sep 2026 23:25:32 +0200

Softaculous and Virtualizor customers are being urged to reset credentials and inspect their servers after a 33-hour BGP hijacking incident diverted traffic and delivered malware to a handful of installations. Softaculous makes software for the web hosting industry, while its Virtualizor control panel is used by providers and administrators to... Weiterlesen

Anthropic pledges to try harder to keep models under control, asks partners to chip in

Tue, 01 Sep 2026 23:25:26 +0200

Anthropic says it's taking steps to limit the misbehavior of its AI models after a review found Claude models going beyond the scope of fictional cybersecurity tests and gaining unauthorized access to real computer systems. The biz wants its partners to step up their security too, seeing as the incidents occurred in third-party environments that... Weiterlesen

Firefox helps iPhone users bypass ads on web sites while making money showing its own ads

Tue, 01 Sep 2026 23:25:22 +0200

After several weeks of anticipation, Mozilla has started rolling out ad blocking to the iOS version of its popular browser, but you can still expect to see ads on Mozilla's own pages, including the new tab page. The org officially rolled out the new native ad blocking feature for iOS Firefox on Tuesday, moving it out of the experimental phase,... Weiterlesen

Attacker stole a METR API key, used $600K worth of credits, and no one noticed for weeks

Tue, 01 Sep 2026 23:25:20 +0200

AI model testing organization METR has disclosed two attacks that happened earlier this year, including one in which an attacker stole an API key and spent three weeks consuming public-model credits worth about $600,000. METR (short for Model Evaluation and Threat Research) found no evidence that the attackers accessed sensitive information in... Weiterlesen

Another Artifactory CVE under attack by AI agents or humans

Tue, 01 Sep 2026 23:25:18 +0200

Security researchers reported that someone is exploiting CVE-2026-82329, a critical JFrog Artifactory authentication-bypass bug, just days after the vendor patched the 9.8-rated flaw. And we don't know if that someone is human. Artifactory is a widely used tool for managing software artifacts, packages, binaries, and AI models. It’s also popular... Weiterlesen

The State of Ransomware in Education 2026

Tue, 01 Sep 2026 23:25:16 +0200

Insights from 226 IT and cybersecurity leaders across the education sector in 17 countries whose organizations were hit by ransomware in the past year. Weiterlesen

Ungentlemanly behavior: Insights into a ransomware operation

Tue, 01 Sep 2026 23:25:14 +0200

Analysis of 15 intrusions revealed tradecraft used by GOLD SHERWOOD affiliates Weiterlesen

Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild

Tue, 01 Sep 2026 23:25:08 +0200

Exploitation of the authentication bypass vulnerability CVE-2026-82329 started just days after its public disclosure. The post Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild appeared first on SecurityWeek. Weiterlesen

Ransomware Gang Claims Nutex Health Data Breach

Tue, 01 Sep 2026 23:25:06 +0200

The company has notified the SEC that hackers accessed patient, employee, provider, business, and financial information. The post Ransomware Gang Claims Nutex Health Data Breach appeared first on SecurityWeek. Weiterlesen

Five Venezuelans Plead Guilty in US Court to ATM Jackpotting

Tue, 01 Sep 2026 23:25:03 +0200

The defendants unsuccessfully attempted to physically install malware on ATMs to force them to dispense cash. The post Five Venezuelans Plead Guilty in US Court to ATM Jackpotting appeared first on SecurityWeek. Weiterlesen

Hackers Start Exploiting Critical Langflow Vulnerability

Tue, 01 Sep 2026 23:25:01 +0200

Tracked as CVE-2026-0768, the security defect allows unauthenticated attackers to execute arbitrary Python code remotely. The post Hackers Start Exploiting Critical Langflow Vulnerability appeared first on SecurityWeek. Weiterlesen

Experiment: Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars

Tue, 01 Sep 2026 23:24:59 +0200

Forescout researchers used Claude AI to port a remote code execution exploit between WAGO PLC models. The post Experiment: Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars appeared first on SecurityWeek. Weiterlesen

Coast Guard Establishes Office of Maritime Cybersecurity Policy

Tue, 01 Sep 2026 23:24:57 +0200

The new office will serve as the central authority for cybersecurity policy covering US ports, vessels, and maritime facilities. The post Coast Guard Establishes Office of Maritime Cybersecurity Policy appeared first on SecurityWeek. Weiterlesen

Sevii Targets AI-Speed Attacks With Preemptive Autonomous Defense

Tue, 01 Sep 2026 23:24:56 +0200

Sevii has expanded its ADR platform with AI agents designed to investigate, contain, and remediate AI-driven attacks within minutes. The post Sevii Targets AI-Speed Attacks With Preemptive Autonomous Defense appeared first on SecurityWeek. Weiterlesen

Palo Alto Networks Acquires AI Agent Platform Console

Tue, 01 Sep 2026 23:24:54 +0200

The cybersecurity giant announced the acquisition alongside quarterly results showing a 34% increase in revenue and strong growth in next-generation security ARR. The post Palo Alto Networks Acquires AI Agent Platform Console appeared first on SecurityWeek. Weiterlesen

107 Ransomware-Opfer bringen Deutschland auf Rekordniveau

Tue, 01 Sep 2026 23:24:51 +0200

Im Juni und Juli 2026 hat ransomware.live in Deutschland 107 Opfer von Ransomware ermittelt, rund dreimal so viele wie im Vorjahreszeitraum mit 36 Fällen. Allein 58 Opfer im Juli bedeuten ein monatliches Allzeithoch seit Beginn der Aufzeichnungen 2023. Deutschland liegt damit weltweit auf Platz zwei der am häufigsten angegriffenen Länder. (Bild:... Weiterlesen

Google patcht unberechtigte Datenbankabfrage in SecOps

Tue, 01 Sep 2026 23:24:49 +0200

Eine SQL-Injection-Schwachstelle im Legacy-Dashboard-Widget von Google SecOps ermöglicht authentifizierten Angreifern, SQL-Abfragen auszuführen. Google hat die Sicherheitslücke in der Cloud gepatcht. (Bild: Midjourney / KI-generiert) Weiterlesen

Velero sichert Kubernetes-Ressourcen und Volumes

Tue, 01 Sep 2026 23:24:48 +0200

Velero sichert Ressourcen und Persistent Volumes eines Kubernetes-Clusters und stellt sie nach einem Ausfall wieder her. Ein Controller im Cluster und ein lokaler CLI-Client steuern Backups, Migrationen und Replikationen. Als Ablage dienen S3, Google Cloud Storage, Azure Blob und S3-kompatible Ziele. (Bild: Gemini / KI-generiert) Weiterlesen

Kritischer Out-of-Bounds Write in Dell PowerStore

Tue, 01 Sep 2026 23:24:46 +0200

Eine Out-of-Bounds-Write-Schwachstelle in Dell PowerStore SDNAS ermöglicht es unauthentizierten Angreifern, das System zum Absturz zu bringen oder Remote Code auszuführen. Betroffene sind zwölf PowerStore-Modelle, Patches sind verfügbar. (Bild: © Ronny - stock.adobe.com) Weiterlesen

Controlware kombiniert MDR und VMS für mehr Cybersecurity

Tue, 01 Sep 2026 23:24:45 +0200

Controlware erweitert sein Cyber-Defense-Portfolio um Managed Detection & Response und Vulnerability Management Services. Der kombinierte Ansatz soll Bedrohungen schneller erkennen, Schwachstellen priorisieren und interne IT-Teams entlasten. (Bild: Dall-E / KI-generiert) Weiterlesen

Azul verkürzt Java-Patch-Zyklus auf monatliche Sicherheitsupdates

Tue, 01 Sep 2026 23:24:43 +0200

Azul verkürzt den Abstand zwischen kritischen Java-Sicherheitsfixes von drei Monaten auf einen planbaren Monatsrhythmus. Die Updates sollen nur CVE-bezogene Änderungen enthalten und damit das Risiko unerwünschter Regressionen begrenzen. (Bild: Dall-E / KI-generiert) Weiterlesen

Broadcom Pledges to Lock Down Open Source Python, Java Libraries

Tue, 01 Sep 2026 23:24:41 +0200

Broadcom is launching "TrueSource," an effort to curate and secure open-source components used with its Tanzu platform, including Spring, RabbitMQ, and libraries across Java, Python, and Node.js. "The idea is to provide a set of solutions focused on providing clean and secure artefacts," Purnima Padmanabhan, vice president of Broadcom's Tanzu... Weiterlesen

Anthropic Signs $35 Billion Cloud Deal With Nvidia-Backed Lambda

Tue, 01 Sep 2026 23:24:40 +0200

Anthropic has reportedly signed a $35 billion cloud-computing deal with Nvidia-backed Lambda for a roughly 350-megawatt Texas data center being developed by Hut 8. "Lambda will install Nvidia chips at the Hut 8 facility, with the arrangement designed to expand the pool of Nvidia computing resources available to power Anthropic's Claude AI... Weiterlesen

OpenClaw 2.0 Is Here, Ushering In the Era of 'Multiplayer' AI Coding

Tue, 01 Sep 2026 23:24:38 +0200

An anonymous reader quotes a report from VentureBeat: The viral fervor we saw earlier this year around OpenClaw, the open source AI harness that turns powerful language models into autonomous workers the user can message via their favorite channels (Telegram, iMessage, WhatsApp, Discord etc), has cooled off substantially from its peak in March... Weiterlesen

BT's Old Copper Landline Network Could Be Worth Over $2 Billion

Tue, 01 Sep 2026 23:24:36 +0200

BT could make more than $2.7 billion by recycling copper from its aging UK landline network as BT subsidiary Openreach replaces legacy wiring with full-fiber broadband. Engadget reports: BT's recovered copper was previously valued at around $2 billion. But prices have surged, thanks to rising global demand tied to AI data centers, renewable energy... Weiterlesen

Dyson Made a Camera-Equipped Toothbrush That Flosses For You

Tue, 01 Sep 2026 23:24:35 +0200

Dyson is entering oral care with the $499 CameraJet, a smart toothbrush that uses a tiny camera and on-device AI to detect gaps between teeth and automatically blast them with mouthwash while you brush. Regular toothpaste and mouthwash will work with the CameraJet, but Dyson plans to sell its own non- or low-foaming formulas designed to give the... Weiterlesen

Anthropic's Claude Fable 5.1 and Mythos 5.1 Arrive With a 75% Cost Reduction For Fable Cache Reads

Tue, 01 Sep 2026 23:24:33 +0200

Anthropic has released Claude Fable 5.1 and Mythos 5.1, two versions of the same underlying model aimed at longer-running agentic work. "For enterprise buyers, however, the release is about more than another round of benchmark gains," reports VentureBeat. "Anthropic is simultaneously changing the economics of running persistent agents, reducing... Weiterlesen

Resonance: A Plague Tale Legacy Review (PC)

Tue, 01 Sep 2026 23:24:31 +0200

The main protagonists of the A Plague Tale series, the siblings Amicia de Rune and her younger brother Hugo de Rune, take a step back in the new entry in the franchise, Resonance: A Plague Tale Legacy. Contrary to what many might think, Resonance is a prequel, so instead of progressing the plot of the first two games, it actually brings the series... Weiterlesen

OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation

Tue, 01 Sep 2026 23:24:28 +0200

Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code

Tue, 01 Sep 2026 23:24:26 +0200

Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler

Tue, 01 Sep 2026 23:24:24 +0200

CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs

Tue, 01 Sep 2026 23:24:18 +0200

New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access

Tue, 01 Sep 2026 23:24:16 +0200

GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address

Tue, 01 Sep 2026 23:24:15 +0200

Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers

Tue, 01 Sep 2026 23:24:13 +0200

ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories

Tue, 01 Sep 2026 23:24:11 +0200

Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE

Tue, 01 Sep 2026 23:24:09 +0200

OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face

Tue, 01 Sep 2026 23:24:08 +0200

PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions

Tue, 01 Sep 2026 23:24:06 +0200

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

Tue, 01 Sep 2026 23:24:03 +0200

China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access

Tue, 01 Sep 2026 23:23:57 +0200

Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL

Tue, 01 Sep 2026 23:23:55 +0200

Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth

Tue, 01 Sep 2026 23:23:53 +0200

ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body

Tue, 01 Sep 2026 23:23:51 +0200

Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication

Tue, 01 Sep 2026 23:23:50 +0200

Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable

Tue, 01 Sep 2026 23:23:49 +0200

Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Tue, 01 Sep 2026 23:23:47 +0200

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets

Tue, 01 Sep 2026 23:23:45 +0200

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

Tue, 01 Sep 2026 23:23:44 +0200

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

Tue, 01 Sep 2026 23:23:42 +0200

Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis

Tue, 01 Sep 2026 23:23:40 +0200

Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests

Tue, 01 Sep 2026 23:23:39 +0200

13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

Tue, 01 Sep 2026 23:23:37 +0200