Tag: exploit
-
OpenAI’s upcoming AI model built 948 working Linux root exploits in a single run
An automated system running on an upcoming AI model turned hundreds of Linux kernel bugs into working exploits that give an ordinary user root access, and wrote a patch for … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/05/openai-linux-kernel-root-exploits/
-
Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution
Zyxel GS1900 network switches that received the vendor’s earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers at Binarly found.The exploit lets anyone who can reach a switch’s web management interface run commands on it without logging in. Zyxel has released new firmware for 10 GS1900 models that…
-
Schadcode-Attacken möglich: In Microsoft Paint klafft eine Zero-Click-Lücke
Angreifer können über Microsoft Paint Schadcode auf Windows-11-Systeme schleusen. Es gibt zwar einen Patch, aber der kommt bei vielen noch nicht an. First seen on golem.de Jump to article: www.golem.de/news/schadcode-attacken-moeglich-in-microsoft-paint-klafft-eine-zero-click-luecke-2611-214873.html
-
Canada Extradites 1 of 2 Suspects in Supercomputer Hacks
Prosecutors Say Suspects Exploited Network Flaws to Mine Cryptocurrency. Two Canadian nationals face charges in the United States for hacking university supercomputers, stealing login credentials and mining cryptocurrency for financial gain. Canada extradited one of the suspects to the United States; federal prosecutors still seek custody of the other alleged hacker. First seen on govinfosecurity.com…
-
OpenAI’s New Cyber AI Model Finds 948 Linux Privilege Escalation Vulnerabilities in Just 10 Days
OpenAI has developed an autonomous pipeline that discovers, validates, exploits, and patches flaws in the Linux kernel. In a single run in mid-October 2026, an upcoming cybersecurity model generated 948 working local privilege escalation (LPE) exploits for a widely used Linux distribution. The total cost for this process was $1,213,430, which breaks down to approximately…
-
OpenAI’s New Cyber AI Model Finds 948 Linux Privilege Escalation Vulnerabilities in Just 10 Days
OpenAI has developed an autonomous pipeline that discovers, validates, exploits, and patches flaws in the Linux kernel. In a single run in mid-October 2026, an upcoming cybersecurity model generated 948 working local privilege escalation (LPE) exploits for a widely used Linux distribution. The total cost for this process was $1,213,430, which breaks down to approximately…
-
OpenAI’s New Cyber AI Model Finds 948 Linux Privilege Escalation Vulnerabilities in Just 10 Days
OpenAI has developed an autonomous pipeline that discovers, validates, exploits, and patches flaws in the Linux kernel. In a single run in mid-October 2026, an upcoming cybersecurity model generated 948 working local privilege escalation (LPE) exploits for a widely used Linux distribution. The total cost for this process was $1,213,430, which breaks down to approximately…
-
Canada Extradites 1 of 2 Suspects in Supercomputer Hacks
Prosecutors Say Suspects Exploited Network Flaws to Mine Cryptocurrency. Two Canadian nationals face charges in the United States for hacking university supercomputers, stealing login credentials and mining cryptocurrency for financial gain. Canada extradited one of the suspects to the United States; federal prosecutors still seek custody of the other alleged hacker. First seen on govinfosecurity.com…
-
Canada Extradites 1 of 2 Suspects in Supercomputer Hacks
Prosecutors Say Suspects Exploited Network Flaws to Mine Cryptocurrency. Two Canadian nationals face charges in the United States for hacking university supercomputers, stealing login credentials and mining cryptocurrency for financial gain. Canada extradited one of the suspects to the United States; federal prosecutors still seek custody of the other alleged hacker. First seen on govinfosecurity.com…
-
Hackers Exploit Zyxel GS1900 Zero-Day Vulnerability to Compromise Nearly 1,000 Network Switches
Tags: authentication, cyber, exploit, hacker, network, remote-code-execution, vulnerability, zero-day, zyxelAttackers used a pre-authentication remote code execution exploit against Zyxel GS1900 switches. They compromised nearly 1,000 devices before Zyxel patched the flaw. Binarly researchers found that the exploit abused a previously unknown bug, not the one Zyxel fixed in June. GreyNoise reported that around August 17, an actor exploited 996 GS1900 switches across 48 countries.…
-
Hackers Exploit Zyxel GS1900 Zero-Day Vulnerability to Compromise Nearly 1,000 Network Switches
Tags: authentication, cyber, exploit, hacker, network, remote-code-execution, vulnerability, zero-day, zyxelAttackers used a pre-authentication remote code execution exploit against Zyxel GS1900 switches. They compromised nearly 1,000 devices before Zyxel patched the flaw. Binarly researchers found that the exploit abused a previously unknown bug, not the one Zyxel fixed in June. GreyNoise reported that around August 17, an actor exploited 996 GS1900 switches across 48 countries.…
-
MuddyWater Hackers Suspected of Targeting Israeli Organizations With Fake Tax Authority Emails
Israeli organizations have been targeted since September 2026 in a phishing campaign impersonating the Israel Tax Authority and distributing SimpleHelp remote monitoring and management software disguised as tax documents. Investigators suspect MuddyWater involvement, citing the targeting and its documented abuse of legitimate remote-access tools, but the attribution remains unconfirmed. Rather than exploiting software vulnerabilities, the…
-
MuddyWater Hackers Suspected of Targeting Israeli Organizations With Fake Tax Authority Emails
Israeli organizations have been targeted since September 2026 in a phishing campaign impersonating the Israel Tax Authority and distributing SimpleHelp remote monitoring and management software disguised as tax documents. Investigators suspect MuddyWater involvement, citing the targeting and its documented abuse of legitimate remote-access tools, but the attribution remains unconfirmed. Rather than exploiting software vulnerabilities, the…
-
Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
Tags: apple, authentication, cisa, cve, cybersecurity, exploit, flaw, hacker, infrastructure, kev, malware, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating systems to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation.The vulnerability in question is CVE-2024-27834 (CVSS score: 5.5), a case of improper authentication that could allow an attacker with First seen on thehackernews.com…
-
OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run
OpenAI on Wednesday detailed a pipeline that employed an upcoming cyber-focused artificial intelligence (AI) model to validate and patch 948 local privilege escalation vulnerabilities in Linux for $1.2 million in API costs.”Our prototype identified and analyzed 2,308 candidate Linux kernel findings, dynamically reproduced 1,724 vulnerabilities, and produced 948 local privilege escalation (LPE) First seen on…
-
Hackers exploited iOS and Android flaws to infect phones
Researchers say group may have been Kremlin-sponsored in search of diplomatic targets. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/11/hackers-exploited-ios-and-android-flaws-to-infect-phones/
-
Canada Extradites 2 for Supercomputer Cryptojacking Hacks
Prosecutors Say Suspects Exploited Network Flaws to Mine Cryptocurrency. Two Canada nationals face charges in the United States for hacking university supercomputers, stealing login credentials and mining cryptocurrency for financial gain. Canada extradited one of the suspects to the United States; federal prosecutors still seek custody of the other alleged hacker. First seen on govinfosecurity.com…
-
Hackers stole DreamHost customer files and inboxes during months-long attack
The web host said hackers exploited a vulnerability to access customer emails and files during a “deliberate attack.” First seen on techcrunch.com Jump to article: techcrunch.com/2026/11/04/hackers-stole-dreamhost-customer-files-and-inboxes-during-months-long-attack/
-
Zyxel fixes zero-day exploited to hack nearly 1,000 network switches
Zyxel has patched a zero-day vulnerability in its GS1900 series network switches that hackers exploited to compromise nearly 1,000 devices worldwide and steal configuration files and credentials. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/zyxel-fixes-zero-day-exploited-to-hack-nearly-1-000-network-switches/
-
Russian hackers target iOS and Android users with n-day exploits
Russia’s APT29 has been using compromised websites, lookalike domains and a hijacked web analytics service to target iOS and Android users with exploits for patched flaws and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/04/apt29-watering-hole-mobile-devices-n-day-exploits/
-
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker.”The injected JavaScript code collects browser and device attributes,” Sekoia researchers Amaury-Jacques Garçon and…
-
APT29 Watering Holes Target Unpatched iPhones and Android Devices
APT29 compromised Ukrainian analytics tracker Plerdy to serve n-day exploits to mobile users First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/apt29-watering-holes-iphones/
-
Russian Hackers Create Fake US and UK Websites to Target Visitors With Mobile Exploits
A large-scale watering hole campaign that it assesses, with moderate to high confidence, is the work of APT29. APT29 is also tracked as Midnight Blizzard, Cozy Bear and The Dukes, and is widely linked to Russia’s SVR foreign intelligence service. The operation hit iOS and Android users through compromised sites, cloned domains, and a poisoned…
-
CISA flags WordPress RCE flaw as actively exploited in attacks
Tags: attack, cisa, cybersecurity, exploit, flaw, infrastructure, rce, remote-code-execution, vulnerability, wordpressThe US Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that attackers have started exploiting a recently patched high-severity WordPress vulnerability in the wild. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-flags-wordpress-rce-flaw-as-actively-exploited-in-attacks/
-
CISA flags WordPress RCE flaw as actively exploited in attacks
Tags: attack, cisa, cybersecurity, exploit, flaw, infrastructure, rce, remote-code-execution, vulnerability, wordpressThe US Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that attackers have started exploiting a recently patched high-severity WordPress vulnerability in the wild. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-flags-wordpress-rce-flaw-as-actively-exploited-in-attacks/
-
Russia-Aligned Gorbag APT Exploits WinRAR CVE-2025-8088 to Deploy BeautyStealer Infostealer
Tags: apt, control, cve, cyber, cyberespionage, defense, exploit, group, intelligence, law, malware, russia, threat, ukraine, vulnerabilityA targeted cyberespionage campaign by Gorbag, a Russia-aligned threat actor exploiting WinRAR vulnerability CVE-2025-8088 to deploy BeautyStealer against Ukrainian organizations. Active since at least February 2025, the group prioritizes law enforcement, justice institutions, frontline local administrations, and defense organizations, using compact malware designed for rapid intelligence collection rather than prolonged remote control The findings, detailed…
-
Russia-Aligned Gorbag APT Exploits WinRAR CVE-2025-8088 to Deploy BeautyStealer Infostealer
Tags: apt, control, cve, cyber, cyberespionage, defense, exploit, group, intelligence, law, malware, russia, threat, ukraine, vulnerabilityA targeted cyberespionage campaign by Gorbag, a Russia-aligned threat actor exploiting WinRAR vulnerability CVE-2025-8088 to deploy BeautyStealer against Ukrainian organizations. Active since at least February 2025, the group prioritizes law enforcement, justice institutions, frontline local administrations, and defense organizations, using compact malware designed for rapid intelligence collection rather than prolonged remote control The findings, detailed…
-
CISA Warns of Active Attacks Exploiting WordPress Core Code Execution Vulnerability
Tags: attack, cisa, cve, cyber, cybersecurity, exploit, infrastructure, kev, software, vulnerability, wordpressThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included a WordPress Core vulnerability in its Known Exploited Vulnerabilities catalog due to evidence of active exploitation. This vulnerability, identified as CVE-2026-119977, allows unauthenticated attackers to execute server-side code during a specific software upgrade window. CISA added this vulnerability to the catalog on November 3, 2026,…
-
CISA Warns of Active Attacks Exploiting WordPress Core Code Execution Vulnerability
Tags: attack, cisa, cve, cyber, cybersecurity, exploit, infrastructure, kev, software, vulnerability, wordpressThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included a WordPress Core vulnerability in its Known Exploited Vulnerabilities catalog due to evidence of active exploitation. This vulnerability, identified as CVE-2026-119977, allows unauthenticated attackers to execute server-side code during a specific software upgrade window. CISA added this vulnerability to the catalog on November 3, 2026,…
-
Hackers Use Stolen Microsoft Entra ID App Credentials to Breach 27 Organizations and Steal Sensitive Data
Hackers are exploiting stolen Microsoft Entra ID application credentials to infiltrate Microsoft 365 and Azure environments, impacting 27 organizations via managed service providers (MSPs) and their downstream clients. Todyl’s MXDR team is monitoring this ongoing campaign, referred to as Key Eater. Since November 1, 2026, the attackers have targeted approximately 45 app registrations across about…