Tag: hacker
-
NSA, FBI warns of hackers using AI-generated tools in attacks on critical infrastructure technology
The National Security Agency (NSA), FBI and other federal agencies said the campaign is targeting Siemens S7 Series PLCs and was being fueled by “AI-assisted development” alongside exploitation of known vulnerabilities. First seen on therecord.media Jump to article: therecord.media/nsa-fbi-warns-of-hackers-using-ai-generated-tools-critical-infrastructure
-
T-Mobile ‘chopped a cable’ to expel Chinese hackers from its network
The U.S. phone provider escaped a large-scale breach of its network after identifying Chinese-backed hackers early on. First seen on techcrunch.com Jump to article: techcrunch.com/2026/08/19/t-mobile-chopped-a-cable-to-expel-chinese-hackers-from-its-network/
-
US charges Iranian hackers over $3.4 billion intellectual property theft
The U.S. has charged 17 Iranians, alleged members of a hacking-for-hire company called Mabna Institute, involved in years-long operations that stole data from American organizations. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/us-charges-iranian-hackers-over-34-billion-intellectual-property-theft/
-
OpenAI’s Models Hacked Hugging Face. Every Agentic System Needs a Hacker in the Loop
<div cla First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/openais-models-hacked-hugging-face-every-agentic-system-needs-a-hacker-in-the-loop/
-
OpenAI’s Models Hacked Hugging Face. Every Agentic System Needs a Hacker in the Loop
<div cla First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/openais-models-hacked-hugging-face-every-agentic-system-needs-a-hacker-in-the-loop/
-
Latvian officials resign after cyberattack exposes data on 1.2 million people
Latvia’s road traffic agency confirmed that hackers stole data connected to about two-thirds of the country’s population in a major cyberattack that has prompted calls for senior officials to resign. First seen on therecord.media Jump to article: therecord.media/latvia-cyberattack-vehicle-data
-
Password spraying attacks surge 155x as hackers exploit MFA gaps
Huntress observed a 155x increase in password spraying attacks in H1 2026, including a campaign that generated more than 81 million login attempts in two weeks. The attacks exploited legacy authentication and gaps in MFA policies that left some login flows unprotected. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/password-spraying-attacks-surge-155x-as-hackers-exploit-mfa-gaps/
-
Password spraying attacks surge 155x as hackers exploit MFA gaps
Huntress observed a 155x increase in password spraying attacks in H1 2026, including a campaign that generated more than 81 million login attempts in two weeks. The attacks exploited legacy authentication and gaps in MFA policies that left some login flows unprotected. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/password-spraying-attacks-surge-155x-as-hackers-exploit-mfa-gaps/
-
China-Nexus Hackers Target Myanmar Diplomats With QUICAgent Go Backdoor via Malicious VHD Files
A China-nexus threat actor is targeting Myanmar government and diplomatic personnel with a multi-stage malware campaign that delivers a custom Go-based backdoor, dubbed QUICAgent, through Virtual Hard Disk (VHD) files disguised as benign images. The campaign relies on highly targeted social engineering. One malicious file, named TrainingAnnouncement.jpg, is not an image but a VHD container.…
-
Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P
Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised more than 14,530 Dahua devices between June 17 and July 22, 2026, using credential attacks, two authentication-bypass flaws, and a peer-to-peer (P2P) relay technique.The activity, codenamed Operation CameraSwarm, was reconstructed from a 407 MB exposed working directory containing 2,616 files First…
-
US charges Iranians for sprawling hacking campaign on government agencies, universities
The Justice Department accused 17 alleged hackers with ties to the Iranian government of breaching email accounts at U.S. government agencies and stealing intellectual property from dozens of universities. First seen on therecord.media Jump to article: therecord.media/iran-cyberattacks-us-doj
-
Critical RCE flaw in Windows IKE Extension now actively exploited
Tags: cybersecurity, exploit, flaw, hacker, infrastructure, Internet, rce, remote-code-execution, service, windowsThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity remote code execution (RCE) flaw in the Windows Internet Key Exchange (IKE) Service Extensions component. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-critical-windows-ike-extension-flaw-now-exploited-in-attacks/
-
Critical GitLab Flaw Lets Hackers Alter or Delete Public Projects
GitLab has patched two security flaws, including CVE-2026-19478, a critical code injection vulnerability that could allow unauthenticated attackers to remotely modify or delete public projects and user data. The disclosure adds to the growing list of GitLab vulnerabilities requiring prompt attention from organizations running self-managed instances. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/gitlab-patches-cve-2026-19478/
-
CISA Warns Hackers Are Actively Exploiting VMware vCenter Path Traversal Flaw
Tags: cisa, cve, cyber, cybersecurity, exploit, flaw, hacker, infrastructure, kev, vcenter, vmware, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability affecting Broadcom VMware vCenter to its Known Exploited Vulnerabilities (KEV) Catalog. The vulnerability, tracked as CVE-2026-59310, is a path traversal flaw that enables arbitrary code execution in affected vCenter deployments. VMware vCenter Path Traversal Flaw CVE-2026-59310 impacts the VMware vCenter Syslog Server…
-
Cyberangriffe auf UCC-Plattformen – Wie KMU ihre Kommunikationsplattformen gegen Hacker schützen
First seen on security-insider.de Jump to article: www.security-insider.de/ucc-sicherheit-mittelstand-cyberangriffe-a-cecbd437c595eea42097eef8ad7989c4/
-
Cl0p Hackers Exploit PTC Windchill Vulnerability to Deploy Custom Web Shell and Steal Data
Tags: credentials, cve, cvss, cyber, data, exploit, extortion, hacker, ransomware, remote-code-execution, vulnerabilityThe Cl0p ransomware and extortion operation is likely exploiting a critical PTC Windchill vulnerability to deploy a purpose-built Java web shell that can harvest credentials, map engineering data vaults, and exfiltrate files without requiring additional attacker tooling. Tracked as CVE-2026-12569, the vulnerability is a CVSS 9.3 remote code execution issue affecting PTC Windchill PDMlink and…
-
Hackers Abuse Thousands of WordPress Sites to Spread StopAndProtect Malware via ClickFix
A large-scale malware operation called StopAndProtect is exploiting thousands of compromised WordPress websites to distribute ransomware, steal files, harvest credentials, and remotely monitor victims through deceptive ClickFix CAPTCHA prompts. Researchers first identified the campaign in mid-May 2026. They discovered that the operation utilizes a broad range of criminal tools rather than relying on a single…
-
Hackers Abuse Thousands of WordPress Sites to Spread StopAndProtect Malware via ClickFix
A large-scale malware operation called StopAndProtect is exploiting thousands of compromised WordPress websites to distribute ransomware, steal files, harvest credentials, and remotely monitor victims through deceptive ClickFix CAPTCHA prompts. Researchers first identified the campaign in mid-May 2026. They discovered that the operation utilizes a broad range of criminal tools rather than relying on a single…
-
Critical Microsoft Copilot CoSnitch Flaw Lets Hackers Steal Sensitive Data With One Click
A critical one-click vulnerability in Microsoft Copilot Personal, tracked as CVE-2026-24301 and dubbed CoSnitch. This flaw could enable an attacker to trigger malicious Copilot prompts, access data from connected OAuth applications, and silently transmit that information to an attacker-controlled server. Microsoft addressed this issue on August 18, 2026, following Varonis’s responsible disclosure in December 2025.…
-
China-Linked Hacker Shows AI Capabilities in APAC Attack
In the first purported near-autonomous attack on a nation-state, a Chinese-language operator used a complex AI framework to target and compromise government agencies, likely in Taiwan. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/china-linked-hacker-ai-capabilities-apac-attack
-
Eight years later, federal authorities re-up charges against alleged Iranian hackers at Mabna Institute
The superseding indictment adds defendants and allegations against the Iranian firm accused of a massive cybertheft campaign against foreign universities and others. First seen on cyberscoop.com Jump to article: cyberscoop.com/mabna-institute-iranian-hackers-indictment/
-
Hacker Claims 3.6 Million Azure Records Stolen From McDonald’s, Vodafone and Others
A hacker claims to be selling 3.6 million Azure-linked employee records from McDonald’s, Vodafone, TCS, and others, but no breach is confirmed. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/news-hacker-claims-3-6-million-azure-records-mcdonalds-vodafone/
-
Hackers Expose Data of 1.2 Million Heights Finance Customers
A Heights Finance breach exposed personal and financial data of over 1.2 million people after hackers compromised a third-party cloud platform. Heights Finance is a U.S. consumer finance company that provides personal loans and related lending services, mainly to customers who may have limited access to traditional bank credit. It is part of Heights Finance…
-
Hackers target Ukrainian agency managing assets seized from sanctioned Russians
The agency said the latest attack came amid preparations to select a manager for seized corporate rights in IDS Ukraine, one of the country’s largest producers of bottled mineral water and beverages. First seen on therecord.media Jump to article: therecord.media/hackers-target-ukraine-agency-sanctioned-russians
-
Hacker Claims Millions of Records Stolen From Azure Tenants
A threat actor is claiming to have stolen millions of employee records from the Microsoft Azure environments of several major companies, raising concerns that the information could be used to launch targeted phishing, impersonation, and privilege escalation attacks. The threat actor, known as >>TheHatman,<< has reportedly posted internal employee directories belonging to companies including McDonald's,…
-
Microsoft Copilot reveals secret input that allowed it to be hacked
Secret parameter allowed hackers to steal passwords when a target clicked on a link. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/08/microsoft-copilot-reveals-secret-input-that-allowed-it-to-be-hacked/
-
Cisco Firewall Alert: Hackers Exploit ASA, FTD Flaw to Force Remote Restarts
Cisco patches an actively exploited ASA and FTD flaw that can remotely crash vulnerable firewalls, prompting security teams to prioritize updates now. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/news-cisco-asa-ftd-dos-flaw/
-
TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks
Tags: control, credentials, cybersecurity, framework, hacker, infrastructure, microsoft, network, serviceCybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT.”TWINLOOT is a modular, PyArmor-hardened Python implant designed to operate its entire command-and-control infrastructure inside trusted Microsoft services,” Ontinue said in a technical report shared with The Hacker News. “Tasking flows through SharePoint Online file First seen on thehackernews.com Jump to article:…
-
Hacker claims millions of records stolen from corporate Azure tenants
A threat actor known as >>TheHatman<< claims to have obtained millions of employee records from the Azure environments of several Fortune 500 companies, including … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/18/azure-data-leak-fortune-500-companies/
-
Von Azure-Tenants: Hacker will Millionen von Mitarbeiterdaten erbeutet haben
Ein Hacker behauptet im Darknet, mit kompromittierten Azure-Zugangsdaten an Mitarbeiterdaten etwa von McDonald’s, Tata und Vodafone gelangt zu sein. First seen on golem.de Jump to article: www.golem.de/news/von-azure-tenants-hacker-will-millionen-von-datensaetzen-erbeutet-haben-2608-212029.html