Your Expired Visa Card Could Be ‘Zombified’ to Make Contactless Payments
Roundup: expired Visa cards can be revived for contactless payments via NFC relay; plus Apple spyware warnings and Ukraine cyberattacks on Russian e-commerce.
WIRED's weekly security roundup leads with research showing expired Visa contactless cards can be revived to make new payments through an NFC man-in-the-middle attack that alters the card's expiration date. The roundup also covers Apple sending an unprecedented volume of spyware warnings to users and Ukrainian cyber and drone attacks against a major Russian e-commerce company.
16-31 August 2026 Cyber Attacks Timeline Infographicnew
Hackmageddon mapped 110 confirmed cyber incidents from August 16-31, 2026, with cybercrime driving 78.2% and malware the top technique.
The biweekly timeline aggregates 110 confirmed incidents across 64 countries, with 86 attributed to cybercrime, 16 to espionage and 4 to hacktivism. Exploitation of public-facing applications (T1190) was the leading initial access vector with 33 incidents, followed by spearphishing attachments with 13. The United States was the most targeted country with 38 incidents, and information and communication was the top sector with 29.
Risky Bulletin: Academics find source code overlaps between Geedge and China's Great Firewall
Academics linked Chinese vendor Geedge Networks' Tiangou Secure Gateway source code to one of the Great Firewall's three traffic filtering capabilities.
US researchers presenting at USENIX Security reconstructed Geedge Networks' Tiangou Secure Gateway firmware from over 100,000 leaked files, including Git repositories with commit history, and matched its filtering behavior to sections of China's Great Firewall. They found only 1 of 3 characterized DNS injectors matched Geedge code, noted the system relies on memory-unsafe C components and copied third-party code, and said its bugs could aid future circumvention tools. Geedge also exports censorship tools to Kazakhstan, Ethiopia, Pakistan, and Myanmar. The newsletter additionally rounds up multiple breaches.