White House declares grid emergency over foreign equipment
Executive Order 14420 targets foreign bulk-power equipment over cyber, sabotage and supply-chain risks.
The Latest
TerminalFix turns fake CAPTCHA pages into network backdoors
Microsoft tracks a ClickFix variant that drops a Python reverse tunnel through fake CAPTCHA overlays.
ZBT router firmware hides twin root access implants
VulnCheck found two factory implants in ZBT router firmware that give unauthenticated attackers root access.
Browser extension ring hides wallet stealers in plain sight
Socket found 19 Chrome and Edge extensions quietly stealing crypto wallet secrets in the Superior campaign.
Android 17 blocks carrier snooping on visited websites
OS-wide Encrypted Client Hello in Android 17 hides visited domains from carriers and Wi-Fi snoops.
Attacker’s sloppy server exposes Philippine nuclear site breach
Hunt.io found an exposed server packed with evidence of ownCloud and WordPress intrusions against Philippine targets.
Funds drained from six chains before Cosmos fix landed
A critical Cosmos EVM balance flaw let attackers drain six blockchains before the patch shipped.
Berlin defies data thieves and vows no ransom payment
Berlin refuses to pay after Rhysida-linked attackers exfiltrate data from the city's state network.
Urgent Next.js updates close AVIF and Windows RCE paths
Vercel patches two critical unauthenticated RCE bugs in the Next.js framework.
Unitree G1 EDU robots fall to two root RCE chains
Two independent flaws give attackers root on the G1 EDU, one over Bluetooth.
ATF confirms major breach after Qilin posts agency on leak site
The US firearms bureau says intruders hit a standalone system tied to its investigations.
cPanel parking flaw lets tenants plant files as root user
A critical cPanel and WHM bug turns authenticated tenants into server root users.
Researchers bypass NVIDIA ECC shields with non-uniform hammering
GPUThor flips bits in GDDR6 memory on four Ampere-class NVIDIA cards despite ECC.
BlueDelta spies lean on webhook service to run HOOKEDGE backdoor
Recorded Future ties a new batch-script backdoor to Russia's BlueDelta espionage group.
Spotlight
UK airport operator MAG confirms 8.7 million customer records stolen
Manchester Airports Group says an extortion crew stole data tied to three UK airports.
ServiceNow ships fixes for three perfect-10 AI platform flaws
Three maximum-severity bugs in the ServiceNow AI Platform can be exploited without authentication.
Print management vendor PaperCut confirms active exploit spree
PaperCut Software confirmed active attacks on an unspecified vulnerability in its NG and MF print management products.
Carhartt breach tally halved after synthetic data flood found
Troy Hunt's analysis found millions of synthetic records in the ShinyHunters Carhartt dump, cutting the real count to 12.9M.
Features
OpenAI details how rogue agents escaped and hit Hugging Face
OpenAI's report on the Hugging Face breach details how AI agents coordinated through internal systems to escape.
Six exploited flaws land on CISA list as NetScaler attacks spread
CISA added six actively exploited flaws to KEV, including a Citrix NetScaler bug now under attack in the wild.
CISA red team drill breaches two, only one defender notices
CISA red team assessments fully breached two critical infrastructure organizations, and only the water utility noticed.
Two Perth men face court over TeamPCP open-source poisoning
Australian police charged two Western Australian men over the TeamPCP syndicate's open-source supply chain attacks.
Botnet takedown exposes Chinese contractor behind US agency hacks
The FBI seized QScan and QTRouter, Chinese hacking platforms behind intrusions into NASA, the Federal Reserve, and the Senate.
Medical device maker Boston Scientific hit by global cyberattack
A cyberattack that began August 25 disrupted Boston Scientific's IT systems and halted order processing worldwide.