ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “reasoning”

39 stories in the last 3d

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllResearch 11Industry 8Data breach 5Malware 4Vulnerability 3Phishing & fraud 3Advisory 2Ransomware 2Policy & legal 1Threat actor 1Tools 1Exploit / PoC 1
SeverityAllcritical 1high 9medium 10low 3info 19

1Password's AI patching benchmark is misleading

Trail of Bits reanalysis says 1Password's 26% AI clean-fix rate is misleading; 86% of eligible patches blocked exploits.

Trail of Bits critiques 1Password's FLAWED AI patching benchmark, arguing its 26% clean-fix headline mixes trials where agents were instructed to apply wrong fixes (22% of data) with trials that prohibited compiling or testing (36%). Restricting to reasonable conditions, 2,634 of 3,067 patches (86%) blocked the supplied exploit. Trail of Bits also reports 12.5% of 2,265 developer first fixes failed in its own 2024-2026 assessments, and released post-patch-validation and review-walkthrough agent skills.

Lobsters · security · 2d agoResearch1

LausivLoader analysis, or how to pass data between malware stages, (Thu, Sep 17th)

SANS dissects a LausivLoader JavaScript malspam sample that passes staged payload file paths to PowerShell via process environment variables.

SANS analyzed a LausivLoader JavaScript sample caught in a customer's mail gateway from an August malspam campaign impersonating a fiber-optic procurement inquiry. The roughly 613 KB attachment (28/55 VirusTotal detections) hides code among 450 junk comment lines, drops two files into a randomized %TEMP% directory, and passes their paths to a PowerShell payload via process environment variables Kv7408 and Kv562. The final command launches PowerShell through conhost.exe with a Base64-encoded command; the script also copies itself and attempts to register a scheduled task.

SANS Internet Storm Center · 23h agoMalware in the wild

Forgery of C2PA on a Pixel 10

Researcher forged a Google Pixel 10 C2PA content credential with genuine signatures, showing root-level attackers can fake photo provenance.

A Hacker Factor blog post demonstrates an AI-generated 'unicorn glitter milk' news photo carrying a valid, cryptographically signed C2PA manifest traceable to Google's Pixel camera certificate chain, passing validation in Adobe Inspect and the CAI Verify tool with a verified timestamp. The author, working with UMBC's PASAWG working group, reported to Google and C2PA in November 2025 that root access on a Pixel device could sign arbitrary images as camera captures; after 90 days without resolution, details were published. The finding undermines C2PA Assurance Level 2 claims made for Pixel 10 Content Credentials.

Lobsters · security · 2d agoResearch

AI Malware Keeps Changing Its Code to Break Traditional Signature-Based Detection

Google's GTIG documents AI-enabled malware PROMPTFLUX and PROMPTSTEAL that query LLMs at runtime to rewrite code and evade signature-based detection.

Google Threat Intelligence Group documented 'just-in-time' AI-enabled malware that queries language models during execution. PROMPTFLUX, an experimental VBScript dropper, calls the Gemini API to regenerate and obfuscate its own source code and writes variants to the Windows Startup folder for persistence. PROMPTSTEAL fetches one-line Windows commands via the Hugging Face API from Qwen2.5-Coder-32B-Instruct to collect files and system information, which Google linked to APT28 activity targeting Ukraine. The article argues signature-based defenses retain value but defenders should prioritize behavioral detection and deterministic prevention controls.

GBHackersupdated · 5h agofirst · 8h agoMalware in the wild 2 sources

A heap overflow and SSO misconfiguration to compromise OpenAI internal repos

Hacktron researchers chained a libheif heap overflow in Discourse with an OpenAI SSO flaw to take over employee ChatGPT/Codex accounts and access internal repositories.

On July 25, 2026, Hacktron researchers chained a heap buffer overflow in libheif 1.19.7/1.19.8 (missing Debian security backports, upstream fix never assigned a CVE), reached through Discourse image uploads processed by ImageMagick, to gain remote code execution on community.openai.com. Combined with an SSO identity misconfiguration in the 'Sign in with OpenAI' flow, they took over employees' ChatGPT/Codex accounts with connected GitHub, Slack, and email access, and proved it by opening PR #1186742 in OpenAI's internal openai/openai monorepo. They reported the issues for coordinated patching, received a $6,500 bounty from OpenAI, and Debian shipped fixed libheif packages on August 8, 2026. The team used Claude Opus 4.8 and Claude Opus 5 to locate the missing backport and autonomously develop working x86-64/ARM64 exploits.

Hacker News · securityupdated · 35m agofirst · 11h agoResearch in the wild 9 sourcesHN 334↑ · 128 comments1

Security spending is growing — except for the typical CISO

IANS/Artico survey of 500+ CISOs finds median security budget growth of 0% despite a 5% average, with AI the top spending priority.

The IANS and Artico Search 2026 Security Budget report, based on responses from over 500 security executives between April and August 2026, found average security budget growth of 5% but median growth of 0%. 64% of CISOs requested increases, yet only 45% received one. AI was the top net-new priority for 69% of CISOs, though only 24% track AI as a separate security budget line, with 38% embedding it in the security budget and 38% funding it through IT, data, or innovation. A major breach was cited by just 3% of CISOs whose budgets grew.

CSO Online · 22h agoIndustry

Download: The IT leader’s guide to AI code sprawl

Tines publishes a vendor guide on governing AI code sprawl, covering exposure assessment and IT governance frameworks.

Tines released a guide drawing on CIO and security leader insights about AI code sprawl, as employees across departments build apps, agents and automations faster than IT teams can track. It covers the business cost of ungoverned AI-generated code, how to assess organizational exposure, and how to make IT an enabler rather than a blocker.

Help Net Security · 1d agoIndustry

Rubrik MCP gives AI agents controlled access to security intelligence

Rubrik launched MCP support exposing Rubrik Security Cloud APIs to enterprise AI agents with RBAC, configurable permissions, and OWASP MCP Top 10 guardrails.

Rubrik announced Rubrik MCP (Model Context Protocol), giving organizations' AI agents a secure, programmable path to Rubrik's data, identity, and application intelligence via the Rubrik Security Cloud API schema. Teams can save multi-step recovery or compliance workflows as reusable, deterministic tools, with role-based access control parity and OWASP MCP Top 10 aligned guardrails. Rubrik engineered its agent architecture with Anthropic's teams for multi-step reasoning in incident response, and says Rubrik AI is now trusted by one-third of its global customers.

Help Net Security · 2d agoTools1

Building a Linux GPU Driver for the M4 Mac Mini in One Month

Two developers built a fully OpenGL ES 3.0 compliant Linux GPU driver for the M4 Mac Mini in one month via clean-room reverse engineering.

Niklas and the author reverse engineered Apple's AGX GPU firmware ABI and user-space components in about a month, a process that normally takes years, producing an OpenGL ES 3.0 conformant driver fast enough to run Minecraft at 200fps on an M4 Mac Mini. The work was done transparently using hypervisor traces without examining Apple binaries, following clean-room practices, and included a custom shader compiler, command stream builder, and a full Linux kernel driver for the firmware ABI. The A18 Pro firmware ABI proved significantly more complex than the M1's, with 1.5x as many structs and twice as many pointers. All experiments and provenance evidence were published in public agx-re repositories.

Hacker News · AI · 2d agoResearchHN 40↑ · 5 comments

I don't like passkeys

A security blogger argues passkeys suit enterprises but expose individuals to lockout, ban, and recovery risks that outweigh their phishing protection.

The author contends that passkeys are a strong fit for corporate environments but a poor fit for personal security due to permanent lockout, automated account bans, and device loss risks. Hardware keys cap discoverable credentials at 25-300 accounts, and synced passkey ecosystems tied to Apple or Google accounts remain immature and fragmented. The post recommends password managers with independent TOTP apps for individuals.

Lobsters · security · 1h agoIndustry

Hackers Impersonate ChatGPT Subscription Alerts to Steal OpenAI Account Credentials

Cofense reports a phishing campaign using fake ChatGPT subscription payment notices to lure users to credential-harvesting pages and steal OpenAI account logins.

Cofense identified phishing emails impersonating ChatGPT subscription invoices, using the genuine logo, 'Subscription Payment Required' wording, and a 48-hour urgency deadline. Links route through a Google notifications API redirect wrapper to attacker-controlled nxcli[.]io infrastructure hosting a fake ChatGPT login page that forwards submitted credentials to the attackers before showing an error. Cofense published IOCs including sender support@9527db6e1a[.]nxcli[.]io and two stage-2 payload URLs; the operators behind the campaign were not named.

Cyber Security News · 1h agoPhishing & fraud in the wild

RatHat Turns Android Accessibility Into an Attack Weapon

Zimperium details RatHat, a China-linked Android trojan abusing Accessibility, wireless debugging, and generative AI to steal banking credentials and persist on phones.

Zimperium analyzed RatHat, an Android trojan from China-based operators distributed via fake app stores through malvertising, smishing, and third-party forums. It abuses Accessibility Services to silently enable wireless debugging, reads the on-screen ADB pairing code to self-pair, and drops Go binaries including an FRP reverse proxy that exposes the phone's ADB shell to remote attackers. It captures credentials via accessibility keylogging, fake overlays on banking apps, WeChat, and Alipay, SMS 2FA interception, and a /dev/input hardware-level keylogger, while sending accessibility-tree XML to a popular generative AI assistant for resilient screen automation and reinstalling itself if uninstalled.

Security Affairs · 4h agoMalware in the wild 6 sources

MikroTrick Attack Lets Hackers Gain Full Admin Control of MikroTik Routers Without Login

Bishop Fox's MikroTrick chains CVE-2026-67279 and CVE-2026-86060 to gain unauthenticated admin control of internet-exposed MikroTik RouterOS devices, with compromise evidence.

MikroTrick chains CVE-2026-67279, an SSH rekeying flaw letting unauthenticated clients reach post-authentication functions, with CVE-2026-86060, where dash-prefixed usernames make a helper load a trusted identity record granting full administrator access on RouterOS 7.x builds. Bishop Fox reproduced full passwordless takeover and found configuration artifacts on internet-facing devices, indicating exploitation began before the flaws became public. Fixes shipped in RouterOS 6.49.21, 7.23.4, and 7.24.2; observed persistence includes a 'logrotate' script and 'daily-maint' scheduler recreating a privileged account with owner="0".

Cyber Security News · 4h agoExploit / PoC in the wild 2 sourcesCVE-2026-67279CVE-2026-86060

Manufacturing Accounts for 22% of all Ransomware Victims

Black Kite finds manufacturing was the most ransomware-targeted sector for a fifth year, with incidents up roughly 40% and European victims growing 85.4%.

A Black Kite study reports manufacturing accounted for 22% of all ransomware victims from April 2025 to March 2026, the most-targeted sector for the fifth consecutive year. Disclosed manufacturing incidents rose from 847 to 1,183 between January 1 and July 29, 2026, with European victims up 85.4% (199 to 369) and Germany leading at 77. Researchers attribute European growth partly to SafePay's focus on German manufacturing, while Qilin (178 victims) and The Gentlemen (142) were the most active groups in early 2026. The 2025 Jaguar Land Rover attack, estimated to have cost the UK economy £1.9bn, illustrates the sector's financial exposure from downtime and IT-OT convergence.

Infosecurity Magazine · 6h agoRansomware in the wild 4 sources

WordPress 7.1.1 Maintenance and Security Release

WordPress 7.1.1 patches an unauthenticated stored XSS (CVE-2026-93485) in wpautop(), exploitable via published comments, with CVSS 3.1 score 7.1.

WordPress 7.1.1, released 17 September 2026, contains 11 security fixes and 17 core bug fixes. The headline flaw is CVE-2026-93485, an unauthenticated stored XSS in wpautop() affecting WordPress core up to and including 7.1, rated CVSS 3.1 7.1. A payload submitted through the ordinary comment form survives wp_kses() because a newline placeholder in quoted attribute values becomes a '>' that breaks wpautop()'s regex parsing, enabling script execution in the site origin for any visitor. Comment moderation slows but does not prevent exploitation; the fix makes the regex aware of quoting, and backports shipped to older branches.

Patchstackupdated · 6h agofirst · 7h agoVulnerability 4 sourcesCVE-2026-93485

How Pentest Companies Adapt In The Era of AI

Opinion piece urges pentest firms to adopt self-hosted AI like Qwen3-Coder via Ollama, warning client findings pasted into cloud models breach confidentiality.

The article argues penetration testers are already using AI tools, and pasting client findings, scope documents, or credentials into cloud models like ChatGPT or Claude risks NDA breaches and GDPR/HIPAA compliance violations. It recommends self-hosted models on firm-controlled infrastructure instead of banning AI. The piece promotes PentestPad, a pentest reporting platform offering managed, self-hosted, and air-gapped deployment, an MCP server exposing fourteen typed tools, and a writing assistant that can target a local LLM. PentestPad's own team reportedly runs Qwen3-Coder through Ollama with OpenCode or Claude Code as the agent harness.

GBHackers · 9h agoIndustry

University Rescinds Job Offer to Activist Who Allegedly Wiped Phone Before DHS Could Search It

Georgia State University rescinded a job offer after activist Samuel Tunick's GrapheneOS duress password wiped his phone before a CBP search.

Georgia State University rescinded a teaching assistant job offer to activist Samuel Tunick after he failed a required background check, a decision made with no stated written policy according to his department head. Tunick faces a pending misdemeanor charge stemming from a January 2025 airport encounter in which his GrapheneOS duress password irreversibly wiped the device before DHS/CBP agents could search it. Tunick, who has pleaded not guilty and links the prosecution to the Stop Cop City movement, delivered a demand letter with supporters asking the university to reinstate the offer and disclose its hiring review process. The case has drawn national attention to border device searches and civil liberties implications.

404 Media · 22h agoPolicy & legal

CISA Urges Critical Infrastructure to Plant Decoys Inside Networks

CISA's first decoy guidance tells critical infrastructure to deploy honeytokens and tripwires inside networks, mapped via MITRE ATT&CK and Engage, to speed detection.

CISA published its first detailed cyber decoy guidance on September 16, urging critical infrastructure organizations to plant honeytokens such as fake credentials, records, and files with no legitimate business use inside their networks. The guide recommends deploying high-fidelity tripwires in high-value areas, mapping decoy coverage with MITRE ATT&CK and MITRE Engage, and continuous refinement through threat emulation. It is positioned as a complement to Zero Trust, contains no mandatory measures, and targets small and medium-sized organizations and defenders new to deception operations.

Infosecurity Magazine · 1d agoAdvisory 3 sources

America’s cyber strategy overlooks the infrastructure that actually keeps the military moving

Op-ed argues US cyber strategy underweights Iranian threats to ports, rail, utilities and other commercial infrastructure sustaining military operations.

The author, a former Navy intelligence officer, argues that a prolonged Iran conflict means sustained Iranian cyber operations targeting many smaller systems like water utilities, manufacturers and transportation providers. He cites mapping of 130 documented techniques across five Iranian threat groups and warns destructive attacks such as wipers and ransomware could hit the defense industrial base. The piece urges defensive wargames now and flags the pause in CMMC implementation as particularly concerning.

CyberScoop · 1d agoIndustry1

Mind the Gap: How SBOM Specification Ambiguities Lead to Divergent Software Bills of Materials. An Empirical Tool Study

Empirical study of three SBOM generators across 3,000+ JavaScript and Rust projects finds systematic divergences caused by specification ambiguities, risking CRA non-compliance.

Researchers evaluated three widely used SBOM generators on more than 3,000 JavaScript and Rust projects, comparing outputs against a ground-truth baseline derived from dependency lockfiles. The tools diverged in dependency coverage and SBOM completeness, with most discrepancies stemming from differing assumptions about dependency scope, naming, provenance, and representation rather than implementation errors. SBOMs become mandatory in December 2027 under the European Cyber Resilience Act, meaning tool choice can itself cause undetected non-compliance. The authors argue SBOM standards need canonical rules for scope, provenance, and representation.

arXiv cs.CR · 1d agoResearch1

Cyber Exodus: Burnout Symptoms, Exit Intention, and Peer Response in Online Cybersecurity Communities

Text analysis of 354,861 security practitioner posts shows burnout symptoms differ in causes, and mental distance predicts exit intention peers respond to least.

Researchers adapted the Burnout Assessment Tool into a text annotation scheme, reaching macro F1 of 0.75 across four symptoms and 0.98 for detecting any burnout signal. They applied it to 354,861 posts and 296,442 replies from five online cybersecurity practitioner communities. The four symptoms point to distinct workplace problems; mental distance is the only symptom unrelated to operational issues and co-occurs with stated intention to leave roughly twice as often as other symptoms. When posters mention leaving, peer replies shift toward career advice, but this shift is smallest for mental distance.

arXiv cs.CR · 1d agoResearch

When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts

Cloudflare's Page Shield ML uncovered four malicious JavaScript campaigns on storefronts, including affiliate fraud and a remote-backdoor script, that VirusTotal and URLScan missed.

Cloudflare's Page Shield ML detected four client-side JavaScript operations (eight payloads) in live traffic on online storefronts, enabling affiliate commission hijacking, clickless affiliate theft via hidden iframes, user tracking with a remote-code backdoor, and cloaking of paid mobile visitors. Seven of the eight payloads were absent from VirusTotal and URLScan returned no malicious verdict for any, including a Lnkr-family payload indexed unclassified for roughly 2.5 years. Detection relies on a graph neural network over JavaScript syntax trees, an LLM second opinion on Workers AI, and a frontier-model ensemble voting across benign, magecart, other malware, and cryptomining labels.

Cloudflare Blog · 1d agoMalware in the wild

When Agents Look Like Beacons: NIDS Evasion by Model Context Protocol Traffic

Research shows Model Context Protocol agent traffic structurally resembles C2 beaconing and evades Suricata signatures and RITA behavioral scoring in testbeds.

An arXiv study demonstrates that Model Context Protocol (MCP) JSON-RPC traffic over Streamable HTTP mimics the polling patterns of C2 frameworks like Cobalt Strike and is not flagged as anomalous by standard enterprise defenses. In a Docker testbed with eleven traffic profiles across three TLS conditions, Suricata with the Emerging Threats Open ruleset produced near-zero alerts and RITA assigned a consistent 0.0 beacon score, regardless of jitter or TLS inspection. The authors propose an agent-native network indication standard using Agent-Native ALPN and out-of-band headers.

arXiv cs.CRupdated · 8h agofirst · 1d agoResearch 2 sources1

Cisco Identity Services Engine Authenticated Remote Code Execution and API Vulnerabilities

Cisco fixed ISE vulnerabilities enabling authenticated SQL injection and OS command execution; CVE-2026-20282 and CVE-2026-20283 rated High.

Multiple Cisco Identity Services Engine vulnerabilities allow an authenticated remote attacker to conduct SQL injection, modify data, or execute arbitrary commands on the underlying OS. Cisco assigned a Security Impact Rating of High to CVE-2026-20282 and CVE-2026-20283 because attackers can easily reach root from the achieved privilege level. Software updates are available and a workaround addresses one of the vulnerabilities.

Cisco Security Advisoriesupdated · 17h agofirst · 1d agoAdvisory 26 sourcesCVE-2026-20282CVE-2026-20283

German Manufacturer Shrinks Security Alert Response While Protecting 10,000 Endpoints

Vendor case study: a German manufacturer's five-person SOC cut alert triage time using ANY.RUN's cloud sandbox across 10,000 endpoints.

ANY.RUN published a case study in which a five-person security team at an unnamed German manufacturer replaced an air-gapped forensic laptop with its cloud-managed interactive sandbox, protecting roughly 10,000 endpoints and 10,000 users. The vendor claims a median 15 minutes saved per alert, 20-40 daily tasks processed, a 2.5-minute alert-to-isolation target, and a 95% agreement rate between analyst and sandbox verdicts; all figures are vendor-supplied with the customer identity withheld. The writeup also describes detonating a multi-stage phishing chain from a PDF link to a password-protected ZIP to malware execution.

Cyber Security Newsupdated · 1d agofirst · 1d agoIndustry 3 sources

GhostCode Phishing Kit Bypasses Microsoft 365 MFA to Hijack Accounts in 78 Seconds

eSentire identified GhostCode, a phishing kit abusing Microsoft 365 OAuth device-code sign-in to steal tokens and take over accounts in seconds.

eSentire analysts identified GhostCode in late August, a phishing kit that uses business contact-form messages and an NDA pretext to deliver a password-protected HTML attachment leading victims to a Microsoft device-code sign-in. Victims authenticate on legitimate Microsoft pages, letting the kit obtain a Primary Refresh Token in 32 seconds and register three devices in 78 seconds, with residential proxies matching the victim's location. The kit hides its redirect with encrypted addresses, junk data, and scanner-filtering challenges, and uses GHOSTnet-linked infrastructure during device enrolment. eSentire recommends blocking device-code authentication via Conditional Access, invalidating tokens, and reviewing newly enrolled devices.

Cyber Security News · 1d agoPhishing & fraud in the wild 2 sources5

The sexy AI-powered dating app scams are here

Anthropic exposed a network of roughly 28 AI-driven dating apps using autonomous personas and gig workers to defraud paying users.

Anthropic threat intelligence uncovered a fraud network of around 28 dating apps after a prepaid account sent over 100,000 Claude API requests daily, with most chats run by autonomous AI personas and no human agent. Researchers Matthew Gore-Kormanik and Anthropic's Chris Cronbaugh documented apps including Dora, Romi, and Doni, which monetize conversations via coins; gig workers were hired only to pass liveness checks and select pregenerated replies. An operations manual written in Chinese was found inside the Doni app, and Anthropic published findings in its September 2026 AI misuse report.

The Verge · AI · 1d agoPhishing & fraud in the wild

Echo: Learning-based Matching Decompilation using Trusted Back Translation

Researchers introduce Echo, a matching decompiler using trusted back-translation that roughly doubles exact-match rates and outperforms GPT-5.6 and Codex on Mirai.

Echo performs matching decompilation by using compilation as trusted feedback for iterative search: a domain-specific model generates candidate code and compilation configurations, which are recompiled, compared at assembly level, and repaired via rule-based rewriting, neural refinement, and reasoning-based refinement. On function-level benchmarks, Echo produces 2.43x more exact matches than the strongest baseline and the highest structural similarity to ground truth. On the Mirai malware binary, it matches 2.75x and 7.4x as many functions as GPT-5.6 and Codex, respectively.

arXiv cs.CR · 1d agoResearch1

Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix

JFrog disclosed CVE-2026-90894, a 7.8-rated local privilege escalation in Parallels Desktop for Mac, patched only in version 27, which Intel Macs cannot install.

JFrog researcher Yuval Moravchick disclosed CVE-2026-90894 (dubbed ParaShells, CVSS 7.8), a local privilege escalation in Parallels Desktop for Mac that lets non-admin users run code as root. The root-level prl_disp_service listens on a world-writable socket, and argument injection into a tar command via QProcess::splitCommand and the --use-compress-program option yields code execution as root, demonstrated on Parallels Desktop 26.4.0 build 57513 on Apple silicon. The fix appears in version 27.0.0, but Parallels Desktop 27 requires Apple silicon, leaving Intel Macs on the 26.x line with no build JFrog describes as fixed. No exploitation in the wild has been reported and Parallels has not published a statement.

The Hacker News · 2d agoVulnerability 4 sourcesCVE-2026-908942

Ministry of Justice apologizes after court staff accessed Southport victims' files

UK Ministry of Justice apologized after court staff accessed Southport attack victims' files without authorization, exposing sensitive personal data with no evidence of third-party sharing.

The UK Ministry of Justice apologized after court staff accessed case files related to victims and survivors of the 2024 Southport murders without authorization, including sensitive personal data assessed as high risk for some individuals. There is no evidence the information was shared with third parties. HM Courts and Tribunals Service and HM Prison and Probation Service are investigating, and the Information Commissioner's Office has been informed. The incident follows similar unauthorized record access at North West Ambulance Service and Aintree University Hospital.

The Register · Security · 2d agoData breach

CenterPoint Energy confirms data breach following claims on hacking forum

CenterPoint Energy confirmed a breach after a hacker claimed stealing 7.49 million customer records via an unauthenticated API lacking WAF, rate limiting, and token checks.

CenterPoint Energy, a Houston-based utility serving about 7 million customers, confirmed in a September 14 SEC Form 8-K that an unauthorized third party accessed customer data through an external system after a hacker posted a 7.49 million-line dataset online. The exposed fields include names, phone numbers, addresses, account numbers, emails, driver's license numbers, and the last four digits of Social Security numbers. The hacker said the API had no web application firewall, rate limiting, certificate checks, or authentication token, and that a CAPTCHA stopped exfiltration at 7.49 million of a claimed 17.44 million lines. The company faces multiple class action lawsuits and is working with outside experts to determine scope.

Help Net Securityupdated · 1d agofirst · 2d agoData breach in the wild 5 sources

Securing the unpatchable in an age of AI-driven vulnerabilities

Cisco Talos argues AI-driven vulnerability discovery leaves unpatchable OT systems exposed, recommending virtual patching via NGFW/IPS and micro-segmentation.

AI-assisted code analysis is uncovering vulnerabilities faster than organizations can patch, leaving certified or end-of-life OT systems with unmitigated known flaws. Talos recommends virtual patching with next-generation firewalls and IPS, micro-segmentation using VLANs and ACLs, and building visibility-based inventories of legacy systems. The article cites WannaCry's impact on the NHS and 2023 exploitation of end-of-life software in government systems, and warns that air gaps and data diodes are routinely circumvented by operational shortcuts.

Cisco Talos · 2d agoResearch

The modern attack chain: Rethinking Google Workspace security in the age of AI

Analysis of Vercel and Composio breaches shows stolen OAuth tokens, not phishing email, now open Google Workspace attacks — a path authorized AI agents follow.

The author analyzes the Vercel and Composio breaches as the same OAuth-first attack chain run twice: a stolen OAuth token, obtained via a compromised supplier, becomes the entry point rather than email. These tokens survive password resets, are hard to observe, and let attackers read Gmail and Drive data, take over accounts, and pivot laterally using stored credentials and password-reset magic links. The piece warns that authorized AI agents with overbroad OAuth grants can unintentionally traverse the same path — accessing inboxes, reading sensitive content, and exfiltrating data downstream — without any malicious actor or compromised credential.

Help Net Security · 2d agoResearch in the wild

Low-quality casino sites conceal highly dangerous threat actors

Infoblox reveals China-aligned APT groups hiding PeckBirdy malware C2 domains inside roughly 1.7 million Chinese-language illegal casino websites.

An Infoblox report says it tracks about 1.7 million Chinese-language casino sites enabling illegal gambling, some of which double as command-and-control infrastructure. China-aligned APT groups have hidden PeckBirdy framework C2 domains inside these low-quality casino sites since 2023, injecting scripts that display fake software update pages to deliver malware. Over 3 percent of Infoblox enterprise customers resolved at least one PeckBirdy C2 domain, and some sites rely on US cloud providers via 'infrastructure laundering.' Infoblox urges defenders not to dismiss casino-domain alerts as mere employee browsing violations.

The Register · Security · 2d agoThreat actor in the wild1

“We Think the Security Control Is Working” Is No Longer Good Enough

Opinion piece argues CISOs must replace point-in-time, sampling-based audits with continuous control monitoring to prove controls work in real time.

The article contends that annual, sampling-based compliance assessments no longer satisfy boards, customers, and regulators who demand live proof that security controls are working. It cites a 2025 Dell study where 69 percent of IT professionals said leadership overestimates cyber readiness, and notes NIST's 2024 CSF update added a Govern function emphasizing continuous, measurable outcomes. The author advocates continuous control monitoring of identity, cloud configuration drift, vulnerability remediation clocks, and vendor posture, feeding automated evidence into existing GRC systems.

SecurityWeek · 2d agoIndustry

We got admin access to Baseten's production GitHub in 25 minutes

Strix autonomous hacking agent extracted a working GitHub token with repo admin rights from Baseten's public Harbor image; Baseten rotated it next day.

Strix, an autonomous hacking agent, scanned *.baseten.co without credentials and found a public Harbor container registry project anonymously exposing the baseten/baseten-app image. A GitHub personal access token for basetenbot, embedded in Docker build history since March 2023, still worked in July 2026 and granted admin/push rights to basetenlabs/baseten, flux-cd, and homebrew-tap plus read/write on private customer repos. Baseten, valued at $13 billion, confirmed the issue as critical and rotated the token within a day.

Hacker News · AI · 2d agoVulnerabilityHN 51↑ · 12 comments1

SCHERI: Provably Secure Speculation Under the Constant-Time Policy for CHERI (Extended Version)

Researchers formally prove existing CHERI speculation proposals leak secrets and present SCHERI, a processor design with end-to-end Spectre-resistant constant-time guarantees.

The paper builds a formal framework reasoning jointly about capability safety, speculative execution, and information-flow security on CHERI architectures. It demonstrates that existing secure-speculation proposals fail to preserve constant-time confidentiality guarantees and can transiently leak isolated secrets. The authors present SCHERI, a new processor design formally proven to provide end-to-end secure speculation for the constant-time policy, resilient to Spectre attacks.

arXiv cs.CR · 2d agoResearch

Leaks, data breaches, and ransom notes: The worst hacks of 2026 so far

TechCrunch's 2026 roundup covers SSA data exposure, Iranian water-utility attacks, Klue breach hitting ~200 firms, and Meta AI chatbot account hijacks.

TechCrunch's mid-year roundup highlights a whistleblower claim that DOGE uploaded a live Social Security database copy to an unsecured third-party server, which House Democrats called potentially the largest US breach in history. CISA reported Iranian hackers targeted over 100 US water providers over the summer, while Russian-linked attacks hit Polish, Swedish, and Norwegian energy and water infrastructure. Market research firm Klue was breached via a stale 2022 pilot credential, exposing cloud keys of ~200 customers including Jamf, HackerOne, and LastPass to extortion gang Icarus. Separately, tens of thousands of Instagram accounts were hijacked by abusing Meta's AI chatbot to trigger password resets to attacker-controlled emails.

TechCrunch · Security · 2d agoData breach in the wild

America's Driver's License Breach Is a National Security Disaster

Dark web service Nexus sells 153 million US/Canadian driver's licenses linked to a breach of identity verifier IDScan.

Krebs on Security revealed a dark web service, Nexus, selling access to 153 million driver's licenses and 3 million travel documents from US and Canadian citizens, roughly 63 percent of all US licenses. Circumstantial evidence links the data to identity verification firm IDScan, which confirmed it is investigating a breach, and the FBI is probing the incident. Licenses belonging to senior US officials, including Pete Hegseth, an FBI assistant director, and Krebs's own contacts were verified as genuine. The exfiltration appears ongoing, with the database growing by nearly 400,000 licenses in a single day, and the data carries significant national security value for foreign intelligence services.

Hacker News · security · 2d agoData breachHN 26↑ · 4 comments3· 1 read