2026-08-26 05:47 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-08-26 07:10 UTC
Cybersecurity researchers have disclosed details of a phishing-as-a-service (PhaaS) platform built to strip Apple's Activation Lock from stolen devices, using rented AI voice agents that call theft victims posing as Apple Support and ask for their device passcode. SOCRadar Threat Research Unit (STRU) said the platform, which it tracks as AnonyMousKIT, is credit-metered and drives lures across
P0
2026-08-26 02:40 UTC
Community
SANS Internet Storm Center · indexed 2026-08-26 02:50 UTC
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
P0
2026-08-25 21:58 UTC
Security Journalism
BleepingComputer · Bill Toulas · indexed 2026-08-25 22:10 UTC
The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information. [...]
P0
2026-08-25 21:53 UTC
Vendor Research
AWS Security Blog · Kevin Donohue · indexed 2026-08-25 21:55 UTC
This post announces the availability of a new independent assessment report available on AWS Artifact analyzing how Landing Zone Accelerator on AWS (LZA) can automatically deploy multi-account environments in Amazon Web Services (AWS) with Australian Government Information Security Manual (ISM) security controls coverage at scale. The report includes findings from an independent third-party analysis conducted […]
P0
2026-08-25 21:39 UTC
Security Journalism
BleepingComputer · Lawrence Abrams · indexed 2026-08-25 21:40 UTC
Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites. [...]
P0
2026-08-25 21:08 UTC
Security Journalism
Dark Reading · Jai Vijayan · indexed 2026-08-25 21:20 UTC
With some simple HTML that's invisible to users, attackers can manipulate AI-powered email summarizers into producing malicious information.
P0
2026-08-25 20:33 UTC
Security Journalism
The Record · indexed 2026-08-25 20:50 UTC
Interpol officials said it uncovered a crime-as-a-service network in Argentina run by 196 people that provided website domains and money laundering support to West African organized crime groups like Black Axe.
P0
2026-08-25 20:25 UTC
Security Journalism
BleepingComputer · Bill Toulas · indexed 2026-08-25 20:35 UTC
A newly uncovered phishing-as-a-service (PhaaS) platform called AnonyMousKIT automates the retrieval of codes used to unlock stolen Apple devices and disable the Activation Lock feature. [...]
P0
2026-08-25 19:50 UTC
Security Journalism
Dark Reading · Elizabeth Montalbano · indexed 2026-08-25 20:20 UTC
Attackers can exploit a security bug in Nvidia's tool to gain unauthenticated access to the local model server through the Ollama API, paving the way for persistent AI agent corruption.
P0
2026-08-25 19:09 UTC
Vendor Research
AWS Security Bulletins · aws@amazon.com · indexed 2026-08-25 19:30 UTC
Bulletin ID: 2026-089-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/25/2026 12:00 PM PDT Description: Strands Agents is an open-source Python SDK for building and running AI agents. The strands-agents-tools package provides pre-built tools for use with the SDK, including the python_repl tool, which executes Python code on the agent's host, and the batch tool, which invokes several other tools in a single call. Before executing code, python_repl prompts the ope…
P5
2026-08-25 18:45 UTC
Security Journalism
The Record · indexed 2026-08-25 19:05 UTC
The benefits management firm Paylogix told regulators that hackers stole sensitive information on tens of thousands of people from its systems.
P0
2026-08-25 18:17 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-08-25 19:20 UTC
The U.S. Department of the Treasury has announced fresh sanctions on Iranian cyber actors as part of what it called an "unprecedented, whole-of-government, economic campaign" against the nation and its enablers. "We are launching an economic onslaught against Iran's financial connections around the globe. Our objective is to sever every economic lifeline that sustains this tyrannical regime
P0
2026-08-25 17:51 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-08-25 18:30 UTC
Norway ’s shared government infrastructure suffered a third DDoS attack, disrupting digital services but showing no signs of data compromise. Norway ‘s shared digital government infrastructure has been hit by another distributed denial-of-service (DDoS) attack that disrupted services used by citizens, businesses and public agencies. The incident began at 03:38 CEST on Monday, August 24, […]
P0
2026-08-25 17:02 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-08-25 17:30 UTC
Uber faces an €825M GDPR fine for automatically suspending drivers without human review, highlighting the risks of AI decisions affecting workers. The Dutch Data Protection Authority handed Uber its largest privacy fine yet, and this one isn’t about data transfers or cookie consent. The regulator imposed an 825 million euro penalty, roughly $964 million, over […]
P0
2026-08-25 16:43 UTC
Other
Security Affairs · Pierluigi Paganini · indexed 2026-08-25 17:30 UTC
Two CVSS 9.8 miniOrange SAML WordPress plugin auth bypasses were exploited while paid editions never appeared in any vulnerability database. Manual patch required. Two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On WordPress plugin, both rated CVSS 9.8, are under active exploitation. Both CVE-2026-61979 and CVE-2026-15981 allow an unauthenticated attacker to […]
P15
2026-08-25 16:00 UTC
Vendor Research
Microsoft Security Blog · Igor Sakhnov · indexed 2026-08-25 17:25 UTC
Organizations need protection that operates in the gap between discovery and remediation. The post The patch window is collapsing: Why security needs a new control plane appeared first on Microsoft Security Blog.
P0
2026-08-25 15:52 UTC
Security Journalism
BleepingComputer · Bill Toulas · indexed 2026-08-25 16:00 UTC
A large distributed denial-of-service (DDoS) attack has disrupted Norway's shared government digital infrastructure since Monday, affecting services used by the public sector. [...]
P0
2026-08-25 15:03 UTC
Community
SANS Internet Storm Center · indexed 2026-08-25 15:10 UTC
It is pretty obvious that hostnames can replace IP addresses. Pretty much any software accepting an IP address will also accept a hostname as an argument. Last week, I wrote about scans for the cloud metadata service listening at 169.254.169.254. These scans attempted to exploit Server Side Request Forgery (SSRF) vulnerability. One way to prevent these types of exploits is to filter requests that contain the string "169.254.169.254" or to add this IP to a blocklist of URLs that should not be ac…
P0
2026-08-25 14:53 UTC
Security Journalism
Dark Reading · Arielle Waldman · indexed 2026-08-25 15:15 UTC
As breach costs reach record highs and defense spending nears $240 billion, small businesses are dangerously exposed, threatening supply chain security.
P0
2026-08-25 14:44 UTC
Security Journalism
BleepingComputer · Bill Toulas · indexed 2026-08-25 14:45 UTC
Healthcare and services provider Nutex is investigating a data breach incident where an unauthorized third party exfiltrated information from company servers. [...]
P0
2026-08-25 14:07 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-08-25 15:10 UTC
Oasis Security has disclosed a weakness in NVIDIA NemoClaw that could let an attacker-controlled webpage take unauthenticated control of the local Ollama instance serving an AI agent and plant hidden instructions inside the model itself. The findings were shared with The Hacker News ahead of publication, and the report says Oasis Security reported them to NVIDIA's Product Security Incident
P0
2026-08-25 14:01 UTC
Security Journalism
BleepingComputer · Sponsored by Specops Software · indexed 2026-08-25 14:15 UTC
Attackers are increasingly targeting the processes used to establish or recover identity rather than attacking the login itself. Specops explains how stronger identity verification can help organizations prevent fake workers and social engineering attacks from gaining legitimate access. [...]
P0
2026-08-25 14:00 UTC
Security Journalism
The Record · indexed 2026-08-25 14:15 UTC
Ukraine will give Britain access to a vast trove of battlefield data collected during the war with Russia, allowing U.K. companies and researchers to use it to train and test artificial intelligence systems.
P0
2026-08-25 13:51 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-08-25 14:00 UTC
Microsoft updated its Windows PowerToys toolset with a new utility dubbed "Window Hopper" that lets users switch between an app's windows more quickly. [...]
P0
2026-08-25 13:19 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-08-25 13:45 UTC
Meta on Tuesday announced a set of WhatsApp account security features, including support for multiple passkeys to a single account to help users with both iOS and Android devices sign into their accounts using the phishing-resistant method. The tech giant said more than 1 billion people use a passkey to log into WhatsApp. Support for passkeys was first introduced in Android in October 2023,
P0
2026-08-25 13:00 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-08-25 13:20 UTC
WhatsApp has started rolling out several new account security features, including support for multiple passkeys and stronger two-step verification. [...]
P0
2026-08-25 12:45 UTC
Security Journalism
The Record · indexed 2026-08-25 12:50 UTC
The British government is seeking new powers to ban certain technology vendors from supplying companies working in the country’s critical sectors — and to potentially do so in secret.
P0
2026-08-25 12:43 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-08-25 13:45 UTC
Marimo has addressed a high-severity security flaw in its notebook software that allowed an attacker to execute an attacker-supplied Model Context Protocol (MCP) command in a specially crafted notebook, according to VulnCheck's CVE Numbering Authority (CNA) record. The CNA record says the command can run as a local subprocess when the notebook is opened in edit mode. The vulnerability, tracked
P0
2026-08-25 12:04 UTC
Security Journalism
BleepingComputer · Sergiu Gatlan · indexed 2026-08-25 12:10 UTC
Threat actors have already compromised over 270 Zimbra instances in remote code execution attacks targeting a high-severity Zimbra Collaboration Suite (ZCS) vulnerability. [...]
P15
2026-08-25 11:56 UTC
Security Journalism
The Hacker News · info@thehackernews.com (The Hacker News) · indexed 2026-08-25 12:45 UTC
Thousands of companies have been affected by the Mirage2FA campaign from 2024 to 2026. The commercial phishing-as-a-service toolkit targets Microsoft 365 accounts by abusing legitimate login flows and bypassing two-factor authentication. According to ANY.RUN research, 48% of targeted email addresses were potentially compromised. Most of the affected companies are US-based. Mirage2FA Campaign
P0
