Password reset bypass in Keycloak opens every account to takeover
Red Hat patches a critical Keycloak flaw that lets unauthenticated attackers seize any account, including admins.
The Latest
Bogus rescue outfit double-dips on ransomware victims
GuidePoint finds a sham firm called Ransom Busters billing victims for recoveries it likely cannot deliver.
Linux rig joins Apple Find My to pull live location feeds
Researcher Zerotistic enrolls a Linux machine in Apple's Find My network and decrypts shared location data.
764 offshoot leader gets record 77-year term for abuse spree
Kyle Spitze, an original 764 member, draws the longest federal sentence yet imposed on a nihilistic violent extremist.
Slovak watchdog pulls speed cameras over hacking and data risks
Slovakia's NBU warns that NERO R-ONE road cameras carry serious cyber risks, from data exposure to remote access.
Graduation invites hide Go backdoor aimed at Myanmar officials
Seqrite Labs tracks Operation QUICSILVER, a China-nexus espionage push that delivers a QUIC-based Go implant to Myanmar targets.
SPECTRE backdoor shows how AI sharpens mass web server raids
Cisco Talos details UAT-10147, a Chinese-speaking crew that leans on AI tooling and a new SPECTRE implant to hit web…
iAuthFlow V2 kit keeps access alive with attacker passkeys
A new phishing kit enrolls attacker passkeys to keep access after password resets.
LockBit threatens US Bank leak as lender points to vendor breach
LockBit lists US Bank on its leak site, but the lender says the claim traces to a vendor event.
Cheap $25 template powers hundreds of phantom banking sites
A $25 template underpins hundreds of fake banking sites built for fraud, Allure Security finds.
Spectre attack on Cloudflare Workers leaks JWT across tenants
Researchers leaked a JWT from a co-located Cloudflare Worker via Spectre at 12 bits per second.
CDN Tsunami turns HTTP/3 edge into 350x flood amplifier
New research shows CDN protocol conversion can amplify a low-bandwidth attack stream up to 350x at the origin.
Iran-aligned attackers forced a four-day UK power station outage
Iran-linked hackers knocked a small UK power plant offline for four days, The Telegraph reports.
TikTok pays $400M to settle US child privacy lawsuit
TikTok will pay $400M to end a US lawsuit over child privacy violations, the Justice Department announced.
Spotlight
Apollo confirms cloud intrusion as BlackFile spree widens
The private equity giant says attackers hit its cloud platforms in July, exposing names and Social Security numbers.
CISA orders TrueConf patches after Ukraine-linked server attacks
Two exploited TrueConf Server flaws land on CISA's KEV list as Head Mare is caught delivering a poisoned installer.
Calendar add-ons on npm hide Linux backdoor in plain sight
Trend Micro finds 14 trojanized packages that drop the RedC2 4.0 implant the moment they are imported.
First malware rides legitimate car head unit updates
Kaspersky finds a downloader pushed through built-in firmware updaters of Android dashboards, tied to the MoYu Group.
Features
China-linked crew leans on AI while spying on Central Asian states
Bitdefender ties the SilkParasite cluster to China and finds AI-assisted code in a five-RAT espionage arsenal.
Defender boot driver opens kernel file writes on all Windows versions
Check Point weaponizes Microsoft's signed BTR.sys driver to run kernel-level operations with no flaw exploited.
Researchers ring up real purchases with dead Visa cards
A USENIX study shows expired Visa cards can be revived at checkout by rewriting the expiry read over NFC.
Encrypted webpages trick Grok into leaking chat data to attackers
Adversa AI shows how ciphertext hidden in a page can make xAI's Grok hand over chat details with no warning.
Offline Android phones leak data through Manic’s Wi-Fi mesh
Manic Android malware exfiltrates data through nearby infected devices when the victim phone is offline.
Sandbox escape in isolated-vm gives guests host memory control
Endor Labs shows a type confusion in isolated-vm lets sandboxed code take over the host process.