News

The SOCRadar Dark Web Team reported several significant leaks on underground forums, highlighting major cybersecurity concerns. Key points include: 1. **Finnish Kennel Club Leak**: Over 105,000 records associated with dog shows, containing sensitive…

Boston Scientific is recovering from a significant cyberattack that began on August 25, leading to a network outage affecting global operations, including product manufacturing and order processing. The company has confirmed that while existing implantable…

The ValleyRAT campaign, attributed to the Silver Fox group, targets users in China and India, delivering a backdoor through signed adware packages disguised as legitimate software. Kaspersky researchers reported over 100,000 detections affecting more than…

OpenClaw, an open-source AI agent, recently launched its largest update, dubbed 2.0, culminating in a staggering 16,000 Pull Requests from 933 contributors, of whom 569 were first-time participants. This extensive upgrade involved sweeping modifications…

The FulcrumSec extortion group has claimed responsibility for a data breach at Manchester Airports Group (MAG), which operates the largest airports in the UK. Disclosed on August 27, the breach involved the theft of data from a third-party database,…

Anthropic has initiated emergency security protocols due to reports of stolen session tokens from users of their Claude AI. Malicious actors are using info-stealing malware to hijack active login sessions, allowing unauthorized access to accounts and…

The report outlines a series of voice phishing campaigns known as Spring Ring, which targeted over 150 employees across 10 companies via external Microsoft Teams accounts, masquerading as IT help desk personnel. The malicious actors used 'vishing' calls to…

The article discusses the ValleyRAT backdoor, which is disguised as adware and distributed through a malicious installer. It highlights how attackers exploit adware to deliver sophisticated malware under the guise of legitimate applications. Key points…

The article discusses a security warning from Anthropic regarding infostealer malware that can hijack active login sessions of Claude users from infected devices. The malware doesn't exploit a vulnerability in Claude itself but emphasizes the risk of…

Infostealer malware is hijacking active sessions of Anthropic's Claude, allowing attackers to access accounts and drain paid subscriptions without needing passwords. Anthropic is revoking access and refunding unauthorized charges as a precaution. Users are…

A federal judge has ruled in favor of AI company Anthropic against the Pentagon, stating the government's designation of Anthropic as a supply chain risk was illegal. The dispute originated from accusations by government officials that Anthropic's technology…

The article discusses a cyber espionage incident linked to a group known as Fire Ant, reportedly connected to China. This group is exploiting vulnerabilities in Cisco routers to steal sensitive credentials and disrupt security logs. The report highlights…

A newly discovered PaperCut vulnerability, tracked as CVE-2026-82078 and CVE-2026-81578, presents a critical risk due to active exploitation. This zero-day exploit allows attackers to bypass authentication and execute malicious SQL for remote code execution.…

Berlin has reaffirmed it will not pay a ransom to the Rhysida ransomware group, which hacked its network in August, stealing over 5.7 terabytes of sensitive data, including personal information of 12,000 individuals. The breach affected multiple Senate…

An independent researcher known as Nightmare Eclipse has unveiled an experimental exploit called HardBreacher, targeting Kaspersky Endpoint Security. This exploit exposes a zero-day vulnerability, allowing unprivileged users to bypass Windows privilege…

The UAT-10147 cybercrime group, suspected to be Chinese-speaking, employs the SPECTRE cross-platform implant for malware deployment on IIS and Linux servers. The implant effectively uses advanced EDR bypass techniques, including Bring Your Own Vulnerable…

The article details a correction from the U.S. Department of Justice regarding previous claims about Chinese hacking activities. It clarifies that U.S. agencies were targets of cyberattacks rather than victims, highlighting concerns in cyber espionage and…

The California State Assembly passed Amendment AB 1856 to the Digital Age Assurance Act, which exempts open-source operating systems from mandatory age verification regulations. This change alleviates burdens on major Linux distributions and their volunteer…

Microsoft Defender Antivirus users may experience repeated notifications falsely indicating that the antivirus has been turned off, despite its active status. This issue affects various Windows versions, including Windows 10 and 11, and persists even after…

A critical vulnerability in the GiveWP plugin for WordPress, tracked as CVE-2026-82222, allows unauthenticated attackers to execute commands on affected servers. The flaw, present in versions up to 4.16.7.1, was reported by researcher Udin Chan and fixed in…

Konstantin Ryabitsev, head of IT infrastructure at the Linux Foundation, reports that AI web crawlers are straining the server resources of git.kernel.org significantly. Out of approximately 6 million daily requests for Git commits, about 66% are rejected by…

Windows 11 users have been annoyed by persistent full-screen pop-ups prompting them to back up files to OneDrive and set Microsoft Edge as the default browser. Previously, users could only temporarily dismiss these prompts, leading to widespread frustration.…

The ToxicPanda 2.0 banking Trojan is a malicious malware targeting Android users across 349 financial applications in 16 countries. It uses deceptive overlays to steal login credentials, employing techniques like Accessibility Service abuse to gain…

During the week from August 24 to August 30, 2026, Malwarebytes Labs reported various security issues and updates including new security features in WhatsApp, the implications of an AI agent swarm incident at Hugging Face, privacy concerns with popular apps,…

PaperCut Software has released a second emergency patch for vulnerabilities in its NG and MF print management solutions, which were exploited by attackers to achieve remote code execution. Initial reports mentioned one vulnerability, but two zero-days…

Kimsuky, a suspected North Korea-linked threat actor, is conducting spear phishing campaigns targeting policy, diplomatic, and academic organizations in South Korea and Japan. These campaigns involve malicious shortcut files that deploy backdoor scripts to…

A severe security breach at JetBrains affected its Cadence server, enabling attackers to exploit an unpatched vulnerability (CVE-2026-63077) in TeamCity. From August 8 to August 24, 2026, the attackers accessed sensitive cloud infrastructure, personal user…

The UK's National Cyber Security Centre (NCSC) warns of increasing cyberattacks on industrial systems, specifically targeting Operational Technology (OT), such as Programmable Logic Controllers (PLCs) and Human-Machine Interfaces (HMIs). These attacks can…

Microsoft released an optional non-security update (KB5120998) for Windows 11 versions 24H2 and 25H2, which has caused users to experience various bugs, including black screens and cursor glitches. Users reported disappearing desktop wallpapers, while their…

The content provides information about the ISC Stormcast for August 31st, 2026, led by handler Didier Stevens. The current threat level is green. It includes links to various resources such as classes taught by Dr. Johannes Ullrich for SANS, podcasts, and…

The week of August 24 to August 30, 2026, saw 2,488 new vulnerabilities logged, with 286 rated as Critical and 795 as High severity. Among them, 18 flaws scored a CVSS of 10.0, particularly impacting cloud-native and AI tools, as well as web applications,…

Composer, a widely used PHP package manager, patched two critical security vulnerabilities on August 27, 2026. The first vulnerability (CVE-2026-59944) allows malicious packages to escape their directory, while the second allows arbitrary command execution…

A new npm typosquatting malware campaign, identified in August 2026, targets Windows software developers using Windows Subsystem for Linux (WSL). This Rust-based malware is delivered through 40 typosquatted npm packages that imitate popular JavaScript…

The extortion group FulcrumSec has claimed responsibility for a major data breach involving 86GB of data from the Manchester Airports Group (MAG). This breach, which MAG disclosed on August 27, affects customers of Manchester, London Stansted, and East…