130 млрд токенов, 2,7 млн сообщений и тысячи агентов привели к результату, который теперь предстоит независимо разобрать математикам.

Соцсети заставят предложить выбор между персонализированной лентой и публикациями выбранных аккаунтов.

Компания обвинила проект в обходе API и работе с сеансовыми токенами, но окончательного закрытия не добилась.

Атака WeWorm наглядно показала, насколько уязвимы рядовые владельцы смартфонов.

Второй релиз-кандидат принес непривычно много исправлений, хотя спокойная неделя должна была пройти совсем иначе.

Две системы сохранили широкие орбиты там, где звёзды должны были столкнуться или сблизиться почти вплотную.

10 миллиардов столкновений ради одной проверки реальности.

Учёные обнаружили частотную зону, которая повторяется у животных разных размеров и видов.

Внутреннее изменение алгоритма способно за сутки обнулить привычную видимость источника.

Гуманоиды, робособаки и беспилотные платформы должны действовать рядом с пехотой и заходить туда, где слишком опасно людям.

Хакеры встроили распространение вредоноса прямо в штатный механизм передачи файлов RMM-платформы.

После стремительного набора высоты аппарат раскрывает пропеллеры и переходит к управляемому перехвату.

Процессор получил ядра LinxiCore, фирменную графику и нейронный блок.

Они восстановили молекулярного предка бактерий и заставили его снова работать спустя миллионы лет.

Аналитики Positive Technologies выявили активность вредоносного ПО в семидесяти процентах компаний СНГ.

Разбираемся, что происходит с запросом у посредника, можно ли проверить фактическую модель и на что смотреть российскому разработчику.

Например, в ответе и журналах OpenRouter можно увидеть названия модели и провайдера, который обслужил конкретный запрос.

Как проверить, какая модель отвечает на запросАбсолютно надёжного «паспорта модели» на стороне клиента обычно нет.

Сервис должен показывать фактическую модель и, по возможности, провайдера для каждого запроса, а также позволять управлять резервными маршрутами.

Нужно выяснить, сохраняются ли промпты и ответы, каков срок хранения, используются ли данные для аналитики или обучения и можно ли ограничить передачу отдельным провайдерам.

Разбираем, из чего складывается стоимость скрейпинга, СМС-бомбинга, credential stuffing и LLM-ботов и как подобрать меры защиты, не мешая легитимным пользователям.

В деньгах кажется, что это почти ничего не стоит.

Но благодаря LLM, боты научились смотреть на страницу и понимать, что на ней происходит.

Он подстраивается под изменения, которые раньше его убивали, и пишет тексты (отзывы, заявки, сообщения в поддержку) не хуже, чем человек.

Главное: чем дешевле становится создание ботов и чем быстрее они умнеют, тем важнее защищаться не от конкретного скрипта, а от самой автоматизации.

Проблемами вузов остаются слабая материальная база и отсутствие доступа к российскому ПО и отечественному оборудованию.

Для их оценки в приказе предлагается использовать два подхода: по методике, изложенной в самом документе, и по фактическим затратам.

Как унифицировать требования вуза и Минцифры к трудоустройству сотрудников, чтобы сократить объём документов и согласований.

Также представитель ОмГТУ обратил внимание на то, что у вузов, которые сотрудничают с индустриальными партнёрами, появляется необходимость регулярно отправлять отчёты в Минцифры.

ВыводыИсполнение норм приказа № 270 Минцифры потребует довольно серьёзных усилий как от ИТ-компаний, так и от вузов.

Допустим, на это отводится месяц и ограниченный бюджет.

Экстренное привлечение сторонних специалистов по кибербезопасности — часто по повышенным тарифам и без возможности выбрать оптимального подрядчика.

Презумпция взлома подразумевает ориентацию на факты, а не на формальное соответствие.

Но с их помощью обычно получается понять, как должно быть, а не как есть на самом деле.

Аналитики собирают актуальные и ретроспективные данные внутри инфраструктуры и во внешних источниках, проводят автоматизированный и ручной анализ, оценивают критичность инцидентов и расследуют выявленные атаки.

В 2026 году ИИ оказался по обе стороны найма: алгоритмы помогают компаниям оценивать кандидатов, а соискателям — готовиться к этой оценке.

Такая же формулировка встречается и в обсуждениях у других участников рынка.

В одном случае на массовые позиции приходит до 700 резюме в неделю, на узкоспециализированные и руководящие — около 100.

Например, работодатель может с помощью ГигаЧата или Gemini подготовить тестовое задание, а кандидат с помощью того же инструмента его выполнить.

Результаты опроса К2Тех по использованию ИИ в HR-процессахРиски для соискателяК рискам и барьерам мы бы отнесли те же, что при использовании ИИ в повседневных задачах.

Даниил Бориславский согласился, что это синергетическая работа: бизнес знает, что для него ценно, ИБ предлагает инструменты защиты, а регуляторика добавляет свои требования.

Глеб Марченко как практикующий специалист по защите данных добавил, что в крупных компаниях подразделения информационной безопасности гораздо малочисленнее, чем бизнес-подразделения.

Он отметил, что в прошлом году было очень много мошеннических действий, телефонных «разводов», попыток закрепиться в инфраструктуре.

DCAP прекрасно справляется с классификацией данных в покое, у неё больше времени на анализ, и эта классификация затем используется в DLP для настройки политик безопасности.

ВыводыРынок защиты данных в 2026 год…

Разбираемся, как объединить данные VM, SIEM и CMDB, учесть EPSS и CISA KEV, настроить расчёт риска и расставить приоритеты устранения.

Уровни риска и сроки устранения уязвимостейКак работают вместе VM, SIEM и CMDBКаждый источник отвечает на отдельную группу вопросов.

Актив есть в VM, но не передаёт событияОбратная ситуация возникает, когда VM видит узел, а SIEM не получает от него событий.

Организовать обмен данными между VM, SIEM и CMDB.

ВыводыСвязка VM, SIEM и CMDB помогает оценивать уязвимости в контексте реальной инфраструктуры.

Статистика роста количества уязвимостей в ОС Linux в 1998–2026 гг.

Профили настройки СЗИ в Astra LinuxДля настройки СЗИ в Astra Linux предусмотрены готовые профили, соответствующие требованиям регулятора.

Выбор профиля защиты системы в Astra LinuxАрхитектура СЗИ ОС Astra LinuxДля обеспечения безопасности использования Astra Linux команда разработчиков переработала архитектуру исходной операционной системы.

Трёхзвенная клиент-серверная архитектура ОС Astra LinuxСогласно сертификату № 2557 ОС Astra Linux соответствует требованиям документов: Требования доверия (1), Требования доверия (2), Требования к ОС, Профиль защиты ОС (А первого класса защиты.

Сценарии использования встроенных СЗИ Astra …

Аннотация: В 2026 году преимущество получают не компании с самым большим числом ИИ-пилотов, а те, кто умеет превращать эксперименты в управляемые сервисы.

В 2026 году гораздо важнее другое: способна ли компания превратить удачный ИИ-пилот в эффективный сервис, которым безопасно пользуются сотни или тысячи сотрудников?

Гонка 2026 года в пяти цифрахМасштаб разрыва между интересом к ИИ и готовностью к его промышленной эксплуатации показывают результаты исследования Orion soft и данные проектов компании.

Эта оценка окупаемости инвестиций (ROI) не проходила независимый аудит, но показывает принцип расчёта: стоимость инфраструктуры нужно сопоставлять с изменением конкретного процесса, а не с коли…

Эксперты рынка обсудили, какие инструменты нужны для непрерывной оценки защищённости, как выстроить процессы и что ждёт отрасль в ближайшие годы.

Денис Гамаюнов указал, что не стоит безапелляционно отграничивать пентест от автоматизации.

Давид Ордян, генеральный директор METASCANМаксим Пятаков уточнил, что для внешнего периметра ограничений практически нет — любая компания может начать использовать ASM-решения.

Важно сначала оценить слабые места: возможно, проблема не в отсутствии какого-то инструмента, а в том, что у ИБ нет общего языка с ИТ-подразделениями.

При этом главная ценность автоматизации — не в количестве найденных уязвимостей, а в приоритизации: показать бизнесу не список пробле…

Отдельные редакции позволяют запускать контейнеры вместе с ВМ в одной среде для запуска гибридных приложений.

Для решения задач виртуализации существует множество решений с открытым кодом, в том числе и для управления виртуальными машинами (ВМ) с помощью Kubernetes.

DevOps-инструменты и практики для ВМ: IaC, GitOps, Helm, Argo CD для управления жизненным циклом.

Централизованная наблюдаемость: мониторинг, события и журналы инфраструктуры, ВМ и приложений из одной точки.

Снимок ВМ включает в себя параметры ВМ и состояние всех её дисков; снимок диска сохраняет только данные выбранного диска.

Не хватает не только линейных инженеров и аналитиков, но и системных архитекторов, руководителей проектов, разработчиков безопасных интерфейсов и других специалистов, способных выстраивать комплексные процессы.

Организациям приходится «выращивать» такие кадры самостоятельно: профильные вузы не всегда успевают за темпами развития ИТ и ИБ и изменением требований к специалистам.

Импортозамещение должно рассматриваться не как конечная цель и не как перечень продуктов, которые необходимо заменить, а как часть более широкой системы управления технологическими рисками.

Приоритеты в области ИТ и ИБ должны определяться реальными рисками и потенциальным ущербом, а не только необходимостью соответство…

Токена в браузере нет вообще, и JavaScript до него не дотягивается по определению, а не по договорённости.

DPoP сейчас есть и у Keycloak, и у WSO2.

Изолировать её можно, для этого есть настройки хоста и обратный прокси, но разделение получается по URL и по конфигурации.

ManagementPort несёт /api/v1/identity/* и /scim/* , и в комментарии к настройке прямым текстом написано, что в проде это должен быть отдельный порт за файрволом.

Это утечка персональных данных, и ни один наш тест её не ловил, потому что мы не знали, что это баг.

В какой-то момент это уже не политика безопасности, а археологический слой из комментариев вида «# temporary, TODO remove» трёхлетней давности.

Это не набор независимых фильтров, которые как-то комбинируются — это if / else if / else if .

Большая часть проблем, которые реально стоит искать при ревью, — это именно ошибки порядка, а не ошибки в отдельном правиле.

Если логировать всё это на приличном уровне, лог утонет в шуме, и искать в нём реальный инцидент станет невозможно.

ВыводAudit Policy — это не место для «настроил и забыл».

работает примерно так же: механизм не проверяет содержимое письма и не пытается установить личность отправителя.

Если же кто-то со стороны решит вскрыть письмо и внутри заменить ссылку http://romashka.ru на http://romashka-security.ru , получатель может и не заметить.

Так и в email: принимающий сервер сверяет результаты SPF и DKIM с DMARC-записью и смотрит, подтверждает ли хотя бы одна успешная проверка домен из From .

DMARC не выполняет SPF и DKIM заново и не требует, чтобы обе проверки обязательно прошли.

Также и в email: платформа, которой делегировали поддомен, может управлять необходимыми техническими записями — SPF, DKIM и другими.

Бюллетень CTX696939 вышел в середине августа, 3 сентября в сеть попал рабочий эксплойт, и в тот же день сенсоры компании Previdian увидели совпадающие с ним запросы с трёх адресов.

Ценность сюжета не в CVSS 7.2.

Российские вендоры взялись за контроль действий ИИ-агентовКласс продуктов, следящих не за пользователем и не за трафиком, а за действиями ИИ-агента, на этой неделе оформился и в России.

Не распространяется на системы Администрации Президента, Совета Безопасности, Федерального Собрания, Правительства, высших судов, самой ФСБ и на всё, что содержит гостайну.

Определить системы с чувствительной информацией, назначить им приоритет миграции и встраивать квантово-устойчивые алгоритмы в пл…

Определитесь, кто выЧто это и зачем: прежде чем изучать конкретные технологии, стоит понять, чем вы вообще хотите заниматься каждый день.

Так что первый шаг — честно ответить себе на вопрос: что именно вы хотите делать каждый день на работе, а не как красиво звучит направление.

DevSecOps-инженер: это DevOps с упором на безопасность, работает с CI/CD, автоматизацией, инфрой и реагирует на инциденты (во многих компаниях по-разному).

Пример: вы определились — это DevSecOpsЧто это и зачем: это конкретный алгоритм, который за один вечер даёт реальную картину рынка вместо абстрактных «роадмапов».

Частые проблемы и вопросыЧто это и зачем: короткие ответы на вопросы, которые обычно возникают уже по…

Мы привыкли считать кодом .py и .js; текстовый файл выглядит безобидно, но для агента он и есть команда.

И это не единичный случайВ феврале 2026 Snyk опубликовал ToxicSkills — разбор 3984 скиллов для агентов из публичных маркетплейсов, самый большой корпус, который кто-либо исследовал.

Естественная реакция: дайте мне бейдж, что скилл безопасен.

Это v0.1, и он намеренно параноидальный — он метит высоко даже собственную документацию: весь репозиторий skill-xray сканируется как T4.

Слово вамЯ не считаю, что это решено, и предпочту спорить об этом открыто, чем делать вид, что всё придумала.

Эта статья — системный обзор базы: что закон считает персональными данными, что именно требует 152-ФЗ и почему обезличивание превратилось из теоретической опции в практический инструмент.

ПДн не обязано содержать ФИО: если человека можно идентифицировать по совокупности косвенных признаков (должность + компания + дата рождения), это тоже персональные данные.

Повторная утечка в течение года — 1–3% годовой выручки, но не менее 25 млн и не более 500 млн ₽.

Необратимое обезличивание (без ключа, без возможности восстановления) — данные перестают быть ПДн и могут уйти третьей стороне: внешнему подрядчику, аналитикам, облачной LLM.

Классические DLP плохо видят ПДн в естественном языке — паспортные…

Именно так и вышло: PREVAIL принял BPF-объект, верификатор ядра его отклонил.

После прохождения проверки PREVAIL формирует состояние:Состояние PREVAIL после проверки границыСвязь между указателем r7 и областью пакета сохранена — и PREVAIL пользуется ею при следующем чтении.

Верификатор ядра проверяет доступ к памяти не через исходное условие C-кода, а через состояние регистра-указателя в момент инструкции чтения.

Я предположила, что проблема возникает из-за того, что верификатор не может проследить гарантию безопасности через отдельную функцию.

Вычисление разности data_end - data даёт ограничение на скаляр, а не на указатель.

Они запрашивают сертификаты вслепую, не собирая и не передавая метаданные о состоянии и комплаенсе самого устройства.

Venafi - коммерческая платформа управления жизненным циклом доверия и сертификатов (Certificate Lifecycle Management, CLM).

Это control plane: платформа централизованно управляет жизненным циклом сертификатов и ключей поверх собственного ЦС (Clearway ЦС) и/или сторонних ЦС, агрегируя их в единый контур.

Крупнейшая инсталляция продуктов Клируэй обеспечивает более 190 миллионов автоматических операций выпуска/обновления цифровых сертификатов в год силами команды из 2 (двух) человек.

Ограничения: эффективность, как и в западных аналогах, зависит от качества настроенных политик,…

Копия ключей осталась у него в скриптах и продолжает работать: ключ живёт в хранилище, а не в конфиге прокси.

Сервис записи run_case app-writer 200 s3api put-object --bucket "$BUCKET" \ --key inbox/probe.bin --body /dev/null run_case app-writer 403 s3api put-object --bucket "$BUCKET" \ --key reports/probe.bin --body /dev/null run_case app-writer 403 s3api get-object --bucket "$BUCKET" \ --key reports/2026-07.csv /dev/null # 4-7.

run_case analyst 200 s3api list-objects-v2 --bucket "$BUCKET" --max-items 1 run_case analyst 200 s3api head-object --bucket "$BUCKET" \ --key reports/2026-07.csv run_case analyst 403 s3api head-object --bucket "$BUCKET" --key inbox/probe.bin run_case analyst 403 s3a…

Копия ключей осталась у него в скриптах и продолжает работать: ключ живёт в хранилище, а не в конфиге прокси.

Сервис записи run_case app-writer 200 s3api put-object --bucket "$BUCKET" \ --key inbox/probe.bin --body /dev/null run_case app-writer 403 s3api put-object --bucket "$BUCKET" \ --key reports/probe.bin --body /dev/null run_case app-writer 403 s3api get-object --bucket "$BUCKET" \ --key reports/2026-07.csv /dev/null # 4-7.

run_case analyst 200 s3api list-objects-v2 --bucket "$BUCKET" --max-items 1 run_case analyst 200 s3api head-object --bucket "$BUCKET" \ --key reports/2026-07.csv run_case analyst 403 s3api head-object --bucket "$BUCKET" --key inbox/probe.bin run_case analyst 403 s3a…

ADHammer строит эту карту в заданной области, разрешает A/AAAA и PTR и сохраняет происхождение каждого найденного узла.

Это помогает исследователю соблюдать согласованные границы теста и не превращать discovery в бесконтрольный sweep.

Код формирования запроса отделён от сетевого транспорта и от разбора ответа.

Отдельные этапы доступны через enum web , enum nullbind , enum rpc-null , enum shares --anon , enum host --anon и enum sysvol .

ADHammer и связанные библиотеки написаны на Rust и предназначены для авторизованного тестирования, исследований, обучения и защитной валидации.

Регистратор подчиняется законодательству своей страны, соглашению с реестром, соглашению с ICANN по работе с международными доменами.

Например, Руцентр, Рег.ру и R01 являются аккредитованными регистраторами как при реестрах .ru, .рф, .su, так и при ICANN и многих доменах верхнего уровня.

Отдельный важный момент — в ICANN определена такая сущность, какпрограмма DNS Abuse Mitigation.

Если у вас есть ссылка на отчет по анализу этого вредоносного ПО на VirusTotal или публичного sandbox, приложите ссылку.

В этом случае можно подавать жалобу в ICANN:● ICANN принимает жалобу на отсутствие ответа.

Разработчики Plex призвали пользователей как можно скорее обновить Plex Media Server и Plex Desktop.

Дело в том, что в свежих версиях были исправлены сразу несколько серьезных уязвимостей, однако подробностей о них разработчики пока не раскрывают.

Сообщается, что многочисленные проблемы затрагивали Plex Media Server версии 1.43.2 и ниже, а исправления для них вошли в состав Plex Media Server 1.43.3 и Plex Desktop 1.115.0.

«Мы рекомендуем всем владельцам серверов и пользователям Desktop как можно скорее обновиться до последней версии», — предупреждают в Plex.

Для Plex это весьма необычный шаг, и в прошлом подобные адресные уведомления об отдельных уязвимостях компания отправляла лишь в неско…

В нашей мини‑фер­ме зап­ланиро­вано три основных ком­понен­та:Скрипт на Python для обме­на дан­ными меж­ду компь­юте­ром и ESP32 через пос­ледова­тель­ный порт.

ESP32 в роли оркес­тра­тора, который будет запус­кать задания на смар­тфо­нах с Android и воз­вра­щать получен­ные дан­ные на компь­ютер.

info Пол­ный код про­екта, вклю­чая скетч для ESP32 и про­ект Android-при­ложе­ния, ищи в моем ка­нале и на GitHub.

От­кры­ваем меню Tools, затем Board и в под­меню выбира­ем Boards Manager.

Нап­ример, если у тебя бес­про­вод­ная кла­виату­ра и мышь, бла­года­ря раз­ным иден­тифика­торам их сиг­налы не пересе­кут­ся с сиг­налами телефо­нов и ESP32.

Специалисты Positive Technologies изучили Android-троян Drama RAT, который распространяется через фишинговые сообщения в мессенджерах и маскируется под VPN-сервисы, банковские приложения и взломанные утилиты с платными функциями.

Исследователи выяснили, что все фальшивые приложения, распространяющие Drama RAT, представляют собой дропперы-загрузчики.

После установки Drama RAT собирает подробную информацию об устройстве, включая версию Android, уровень заряда, тип сетевого подключения, данные SIM-карт и выданные разрешения.

Исследователи отмечают, что Drama RAT скрывает от жертвы процесс выдачи прав.

Фишинговые оверлеи в Drama RAT подготовлены сразу на 29 языках, включая русский, английский, …

В плагине All-in-One WP Migration and Backup для WordPress обнаружили уязвимость, связанную с SQL-инъекцией, которая позволяет удаленно выполнить код без аутентификации и полностью скомпрометировать сайт.

Уязвимость получила идентификатор CVE-2026-19949 (8,8 балла по шкале CVSS) и затрагивает все версии All-in-One WP Migration and Backup до 7.109 включительно.

Плагин All-in-One WP Migration предназначен для резервного копирования данных и миграции WordPress-сайтов.

Эксплоит срабатывает позднее, когда администратор создает резервную копию сайта, а затем импортирует ее через All-in-One WP Migration.

В результате заранее подготовленные атакующим данные превращаются в исполняемый SQL-запрос, ко…

Специалисты Microsoft обнаружили масштабную фишинговую кампанию, в рамках которой злоумышленники применяют технику «контрабанды ASCII-символов» (ASCII smuggling) и используют невидимые символы Unicode для обхода почтовых фильтров.

Атаки типа ASCII smuggling основываются на использовании символов из блока Tags в Unicode (U+E0000–U+E007F), часть из которых дублирует набор печатных ASCII-символов.

Ранее при помощи ASCII smuggling злоумышленники, например, скрывали вредоносные промпты для LLM, а теперь применяют эту технику для маскировки слов, характерных для финансового спама и фишинга.

Из-за невидимого символа токенизатор может разбить знакомое слово на необычную последовательность сабтокено…

Представители производителя аппаратных криптокошельков Trezor сообщают, что утечка данных, связанная с логистическим партнером ShipMonk, оказалась значительно масштабнее, чем предполагалось ранее.

Как выяснилось, злоумышленники похитили данные 67 000 клиентов Trezor из США, причем часть этой информации должны были удалить еще несколько лет назад.

Дополнительная проблема заключается в том, что в ShipMonk вообще не должны были хранить украденные данные.

Представители Trezor утверждают, что на протяжении всего сотрудничества с компанией они неоднократно требовали удаления этой информации и получали от партнера письменные подтверждения о том, что данные удалены.

«Мы крайне разочарованы тем, что…

Атакующие скомпрометировали инфраструктуру Cloudflare, которую использует платформа Coder, и добавили в пул реестра собственные серверы.

В результате некоторые разработчики получили вредоносные модули Terraform, зараженные стилером, который воровал из их систем ключи, токены и другие секреты.

Внедренный в модули вредоносный код работал как инфостилер: искал переменные окружения и секреты provisioner, API-ключи облачных платформ и ИИ-инструментов, учетные данные CI/CD, секреты из конфигурационных файлов и историю терминала.

Для поиска затронутых кешированных модулей и версий шаблонов разработчики Coder подготовили специальный SQL-запрос.

В Coder подчеркивают, что refresh-токены не передавали…

Справка: сканирование портовСка­ниро­вание пор­тов — стан­дар­тный пер­вый шаг при любой ата­ке.

На осно­ве этой информа­ции он выбира­ет сле­дующий шаг к получе­нию точ­ки вхо­да.

Улуч­шить резуль­таты его работы ты можешь при помощи такого скрип­та:#!/ bin/ bash ports = $( nmap -p- -- min- rate = 500 $1 | grep ^ [ 0 -9 ] | cut -d '/ ' -f 1 | tr ' ' ', ' | sed s/, $/ / ) nmap -p $ports -A $1Он дей­ству­ет в два эта­па.

На пер­вом выпол­няет­ся обыч­ное быс­трое ска­ниро­вание, на вто­ром — более тща­тель­ное, с исполь­зовани­ем встро­енных скрип­тов (опция -A ).

Под­робнее про работу с Nmap читай в статье «Nmap с самого начала.

Разработчики Google выпустили обновление для браузера Chrome, которое исправляет 12 уязвимостей, включая активно эксплуатируемую 0-day в движке V8 (CVE-2026-85046).

Он сообщил об уязвимости 4 августа 2026 года и в итоге получил от Google вознаграждение в размере 1000 долларов США.

Атакующий может эксплуатировать CVE-2026-85046 через специально подготовленную HTML-страницу, что в итоге приведет к выполнению произвольного кода в изолированном процессе рендерера Chrome.

Патчи вошли в состав Chrome 152.0.7977.82/.83 для Windows и macOS и 152.0.7977.82 для Linux.

Затем в марте разработчики закрыли сразу две уязвимости (CVE-2026-3909 и CVE-2026-3910) в V8 JavaScript и WebAssembly, а также в Skia …

В результате модели обнаружили исключение для хостов Azure Blob Storage в защитном прокси и научились использовать его для обхода фильтрации.

По данным исследователей, администратор заходил на сайт на несколько минут, в основном по вечерам, и в общей сложности потратил на зачистку wiki десятки часов.

При этом ранее в OpenAI не сообщали об инциденте с общением агентов через немецкую wiki.

В компании сообщают, что в настоящее время готовят новую политику для раскрытия подобных инцидентов и уже обсуждают этот вопрос с регуляторами.

Интересно, что из заявления OpenAI следует, что DSEWiki могла быть не единственным внешним ресурсом, который использовали агенты.

Специалисты CERT Polska предупреждают об обнаружении шести уязвимостей в RouterOS и атаках на маршрутизаторы MikroTik.

Еще один связанный с SSH баг (CVE-2026-67279) позволяет обойти аутентификацию при повторном обмене ключами: RouterOS может начать обрабатывать соединение еще до того, как пользователь пройдет аутентификацию.

Подчеркивается, что уязвимости сами по себе не открывают SSH наружу, и для атаки нужен роутер, где такой доступ уже разрешен.

Все перечисленные проблемы уже исправлены в RouterOS версий 6.49.21, 7.23.4, 7.24.2 и 7.25beta3.

После обновления RouterOS проверяет систему в поисках индикаторов компрометации и при необходимости помечает устройство статусом «Flagged».

Третий ежеквартальный выпуск «Хакера» за 2026 год уже напечатан.

Это означает, что совсем скоро журналы отправятся к своим владельцам, а коллекция номеров «Хакера» за 2026 год постепенно складывается в полноценную бумажную подшивку.

#3: еще пахнет типографской краскойПока ты читаешь эти строки, третий ежеквартальный выпуск уже отгружают из типографии и готовят к отправке.

b1001 утилит для хакера.

Один заказ — и ты станешь обладателем всей коллекции ежеквартальных номеров «Хакера» за 2026 год.

Хуже того, выяснилось, что клиенты таких прокси-сервисов могут получать root-доступ к приставкам и устанавливать на них малварь.

Весной 2026 года эксперты Plume уже анализировали устройства SuperBox и обнаружили прокси-функции в приложении Cyberflix TV, доступном через фирменный магазин устройства.

Дело в том, что устройства SuperBox поставляются с небезопасными настройками Android.

Так, исследователи подключили контролируемое ими устройство к Popanet и перенаправляли обращения к популярным портам ADB на свой ханипот.

В Plume подчеркивают, что проблема не ограничивается лишь устройствами SuperBox: ИБ-специалисты давно предупреждают об аналогичных рисках, связанных с другими ТВ-приставками.

ИБ-исследователь, известный под псевдонимом Nightmare Eclipse (он же Chaotic Eclipse), который в последние месяцы регулярно публиковал 0-day для Windows, переключился на других вендоров.

Напомним, что с весны 2026 года Nightmare Eclipse регулярно публикует эксплоиты для различных 0-day-уязвимостей, преимущественно затрагивающих Windows и Microsoft Defender.

То есть раскрытие уязвимостей до выхода патчей является для Nightmare Eclipse формой протеста и мести.

Однако на этот раз Nightmare Eclipse утверждает, что обнаружил проблему не в продукции Microsoft, а в CrowdStrike Falcon.

Поэтому Nightmare Eclipse полагает, что для тестирования может понадобиться добавить его в исключения, обфусцирова…

A previously undocumented financially motivated threat actor has been linked to attacks targeting Brazilian financial institutions since at least March 2026.

"The adversary demonstrates deep operational knowledge of Brazilian financial infrastructure, including the instant payment service Pix, digital asset platforms, and financial entities' cloud environments," CrowdStrike said.

As part of the attack, the e-crime group is said to have developed custom Bash scripts that query the cloud instance metadata to steal temporary cloud credentials over socket connections.

"Rather than relying on third-party libraries that could introduce detection risk, the threat actor implemented cloud-native cry…

The 3,400 bitcoin was sent to a Liquid Federation address at 16:09 UTC on September 7, about 85% of what was taken.

The withdrawal took roughly 95% of Liquid's reported bitcoin reserves, which stood at about 4,200 bitcoin beforehand, The Block reported.

SideSwap said a bug in Elements had created the L-BTC used in that withdrawal, the software Liquid runs on, Unchained reported.

The group asked for the flaw to be fixed and every node patched before it would send anything back, Unchained reported.

Charles Guillemet, chief technology officer at Ledger, rejected the label, Unchained reported.

In the company's proof of concept, that hidden work read data from the user's connected Gmail account and passed it to a second ChatGPT account through a hidden channel between the two.

Check Point said the same channel could also copy out the chat history and the files in that conversation.

Check Point wrote the instruction so that ChatGPT, in Thinking mode, ran two streams of work in the same turn.

From a container under one account, Check Point attached a property named chatgpt_test_ts, containing the current time, to a cached file.

This is the second channel out of the same part of ChatGPT that Check Point has reported.

Threat actors carrying out distillation attacks against Google's AI models that target its visual and audio understanding, image generation, and video generation capabilities.

Another threat actor found engaging in similar efforts is believed to be financially driven.

"Using preconfigured markdown instruction sets as operational playbooks, the threat actor conducted automated scanning and credential harvesting, compromising thousands of third-party credentials."

The Iranian hacking group known as Calanque Ion (aka APT42) has used generative AI models, including Gemini, to facilitate reconnaissance and targeted social engineering.

Threat actors have demonstrated an interest in stealing crede…

Calif reported the flaw to Tencent in July and says the company has since blocked the exploit for all users.

No attacks using the flaw have been reported, and Calif does not say there were any.

One Android phone called an iPhone and took over its WeChat while the phone was still ringing.

The compromised iPhone then called a second Android phone and took control of it the same way.

Tencent released version 8.0.77 for Android and 8.0.76 for iOS on 21 August, according to its own release log.

In the last six months, Chainguard doubled its output from 500 million to more than 1 billion container build manifests.

But reproducibility alone doesn't get you to a billion build manifests in the timeframe we're talking about.

Why we built Factory 2.0The original Chainguard Factory automated the mechanics of building.

It's a self-correcting build system that layers agentic, AI-powered reconciliation onto our existing deterministic automation.

If you want to see what's actually in the catalog today, our container image catalog is the best place to look.

Red Hat says it reproduced the chain twice on a default installation, most recently on a machine with no access at all.

Red Hat tracks the FreeIPA flaw as CVE-2026-76578 and rates it critical, with a CVSS score of 9.8.

Red Hat scores the directory-server flaw, CVE-2026-76560, at 7.5, and says Red Hat Directory Server ships no rule of that shape by default.

Red Hat calls it genuine administrator-group membership and reusable administrator credentials.

A Second, Separate FlawRed Hat disclosed a second FreeIPA flaw alongside these, CVE-2026-79678, which has nothing to do with the chain above.

Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active exploitation in the wild.

The vulnerability, now tracked as CVE-2026-75650 (CVSS score: 10.0), has been codenamed StyleSmuggler by Sansec, which discovered zero-day exploitation starting September 4, 2026.

"This update resolves a critical vulnerability that could result in arbitrary code execution," Adobe said, adding it's "aware that CVE-2026-75650 has been exploited in the wild targeting Adobe Commerce merchants."

At its core, the flaw abuses Magento's template system through PHP code injection to generate a "Payment Transaction Failed Re…

Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poisoning campaign that paves the way for malware deployment and tech support scams.

"These lure pages then tie into a sophisticated traffic distribution system to direct, track, and filter traffic to payloads and tech support scams."

This involves flooding forums and comment sections with hyperlinks to the lure pages (e.g., "viziocomsetupentercode.github[.

This suggests that BengalSEO is heavily relying on a high volume of backlinks to manipulate search engine ranking algorithms and artificially boost the visibility of the lure pages on search engine results.

The DFIR Report said it also identi…

Online dating app Grindr has opted to pay £26 million ($35.1 million) to settle a lawsuit in the U.K. over allegations that it shared users' personal information, including their HIV status, with third-parties.

Soon after, the company said it would halt the data sharing practice.

"Grindr has never sold, nor will we ever sell, personal user information – especially information regarding HIV status or last test date – to third parties or advertisers," Grindr insisted at the time.

"No advertisers have ever had access to HIV status or last test date, unless they viewed it in your public profile.

The HIV status and last test date information was used by Apptimize and Localytics only to provide s…

Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for the web browser.

"A native-messaging tool then extends it beyond browser telemetry to host-level command execution and file management."

Once installed, the PEEP "extension" agent polls its command-and-control (C2) server ("206.237.30[.

It also functions as a remote access and browser monitoring toolkit that runs host commands, steals credentials, hijacks sessions, and alters web pages.

It's the main agent responsible for executing the beacon loop by polling "/api/commands," harvesting browser data, receiving additional tasking, and…

Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that's targeting Microsoft 365 and other software-as-a-service (SaaS) offerings through information technology (IT) help desk vishing, adversary-in-the-middle (AitM) token theft, and residential-proxy sign-ins.

It also said that the data extortion threat actor known as Cinder likely represents yet another rebrand or a possible continuation of Pink operations, citing overlaps between organizations listed on the Cinder leak site and those connected to Pink.

SharePoint discovery includes SearchQueryPerformed events with contentclass:STS_Site, contentclass:STS_Web, and wildcard searches using indexdoci…

Also patched is a maximum-severity security flaw (CVE-2026-86218, CVSS score: 10.0) that could allow for pre-authenticated remote code execution on the N-central server.

— E-commerce storefronts are being compromised to inject a backdoor by exploiting an unpatched Magento and Adobe Commerce zero-day dubbed StyleSmuggler, which gives unauthenticated attackers remote code execution.

At least nine total phishing attacks on identities have been linked to this kit over the past two weeks.

At least nine total phishing attacks on identities have been linked to this kit over the past two weeks.

"These unauthorized IP addresses hosted a version of Coder's registry that contained artifacts which incl…

For the 2026 Cloud Security Index, Intruder analyzed misconfiguration data from 3,000 organizations across AWS, Azure, and Google Cloud and found that risk profiles across providers have almost nothing in common.

The other four categories are where things diverge:Exposed services: AWS (76%) , Azure (64%) , Google Cloud (8%), Azure , Google Cloud Permissive firewalls: AWS (83%) , Azure (45%) , Google Cloud (34%), Azure , Google Cloud Weak encryption: AWS (49%) , Azure (35%) , Google Cloud (8%), Azure , Google Cloud Misconfigured services: AWS (68%), Azure (80%), Google Cloud (37%)The biggest gap is exposed services, at 76% on AWS versus 8% on Google Cloud.

Misconfigured services is the excep…

An MSI installer ("ScreenConnect.ClientSetup.msi") likely delivered via a phishing attack that deployed a ScreenConnect client configured to communicate with "131.123.40[.

The rogue ScreenConnect almost immediately launched the four VBScript files from the ScreenConnect temporary directory.

A search for a Geek Squad refund form led to the deployment of a rogue ScreenConnect client ("ScreenConnect.Client.exe"), which then connected to "borertors92.anondns[.]net."

2.vbs , which waits for the "%TEMP%\value.txt" file and checks for the presence of the word "abort."

Connecting to an infected ScreenConnect client can cause the server-side Host system to receive and execute the same four-stage VBS…

Details about the Hugging Face hack, critical infrastructure under attack, a spoofed in-flight Wi-Fi network, and more of this month's cybersecurity newsWith August coming to a close, it's time for ESET Chief Security Evangelist Tony Anscombe to look back at some of the top cybersecurity stories that have made the news over the past month.

Here's some of what caught Tony's attention:OpenAI has disclosed more details about how its agents hacked AI collaboration platform Hugging Face.

Delta Airlines is investigating an incident where a flight passenger reportedly used an unidentified device to spoof the airline’s in-flight Wi-Fi network.

What are the lessons that businesses and critical infra…

And of course, linking our professional and personal social media accounts is a simple task for AI.

For example, fraudsters could use personal information to craft a social engineering attack designed to harvest your work credentials or information.

Losing your personal information is one thing.

What you can do about AI-powered OSINTWhen it comes to AI-powered reconnaissance, there are things you can control and things you can’t.

Old social media photos are easier to remove, but few of us have the time to trawl through our entire digital life to remove anything potentially useful to criminals.

So it is with QR codes, which have become a common sight on menus, lampposts and parking meters – and, increasingly, in emails over recent years.

Most importantly, they take the victim from a relatively well-protected corporate environment to a potentially unmanaged mobile device, thus bypassing business-grade security.

Malicious QR codes are frequently embedded in alerts urging users to secure their account, or authenticate to confirm their details.

Encourage employees to avoid scanning QR codes in unsolicited emails and report anything suspicious.

Next, consider technical controls, including email security from a reputable vendor to minimize the risk of quishing emails ending up in users’…

The accelerated discovery of previously unknown software vulnerabilities has been making headlines for months.

It’s an issue that has even led the US government to create a vulnerability clearing house named Gold Eagle to coordinate research efforts in vulnerability discovery, mitigation and fixes.

A keynote at Black Hat USA 2026 detailed research by associate professor Yan Shoshitaishvili and his undergraduate students at Arizona State University on the expanding use of AI models for vulnerability discovery.

The team then trained the GPTs using the properties of previously known vulnerabilities and discovered approximately 1,000 vulnerabilities.

If this logic prevails, we may reach the cal…

Hugging Face disclosed that it had been attacked by AI; OpenAI came clean and declared that it was two of their AI models that had caused the breach.

A very late addition to the Black Hat agenda was a presentation by OpenAI’s team providing the details of the Hugging Face incident as they saw it and, importantly, the timeline.

The agents concluded that their task set could be completed by breaking out their sandbox and accessing external (Hugging Face) systems.

The target was Hugging Face: this is where the agents wanted to get, and they did.

On July 16th, Hugging Face disclosed an incident in which swarms of autonomous AI agents had breached its infrastructure.

The conference opened with keynotes followed by a fireside chat and a panel featuring mainly senior US government officials.

The second part of the opening keynote included Nick Andersen, Acting Director, CISA; Katherine Sutton, Assistant Secretary of War for Cyber Policy; and Brett Leatherman Assistant Director, Cyber Division, FBI.

I do agree with the ruthless approach, but without some form of regulation the boundaries on the use of AI remain blurred.

The Assistant Secretary of War for Cyber Policy made a fabulous analogy when pressed on the struggles regarding resourcing in the cybersecurity industry: you don’t want a pediatrician performing heart surgery.

We talk about autonomous AI at…

The AI tutor market is growing fastThe market for AI tutoring tools is booming.

Today, you can find various types of AI tutor tools to buy and use.

This happens when AI tools are tricked into ignoring their safety guardrails and display untrusted content.

If you’re keen to get your kids in front of an AI tool to help with private tutoring, first understand the difference between a simple co-pilot and a dedicated ITS.

So if you’re keen to try AI tutors, be sure to stay updated on what’s available out there.

Researchers at Sysdig have documented what they assess to be the first case of an end-to-end ransomware operation executed by an agentic threat actor.

What can organizations do to stop phantom squatting from harming their brands, and what other lessons do these incidents hold for defenders?

Watch Tony's video to find out and be sure to check out the June 2026 edition of his monthly security news roundup for more insights.

Before you go, learn about the first AI-powered ransomware, named PromptLock and discovered by ESET researchers last year.

To learn more about cutting-edge AI defense layers, read the AI at ESET white paper.

The screenshot may look convincing, but it doesn’t necessarily prove that the payment, booking or conversation is genuineSomeone sends you a screenshot showing that a payment has gone through.

Why screenshot aren’t proof on their ownA screenshot is ultimately just an image of what appeared on a screen.

Reassured, you send the item off, only to find out the screenshot was a fake and you’re not getting your money.

You receive a password reset code, then get a text message (maybe impersonating a friend) asking you to screenshot and send it.

This screenshot is fake (source: Reddit)Challenges for businessesFrom a business perspective, internal and customer-facing teams are often provided with sc…

UEFI shim bootloader and UEFI Secure BootTo understand the impact that such vulnerable shims can have on UEFI Secure Boot-protected systems, we need to understand how UEFI Secure Boot works, and how signed UEFI shim bootloaders extend the Secure Boot trust chain.

In this section we’ll look at UEFI Secure Boot basics, how UEFI shims extend the UEFI Secure Boot trust chain, and two shim-related features: Machine Owner Key (MOK) and Secure Boot Advanced Targeting (SBAT).

For anyone already familiar with the theory, we recommend jumping directly to the section Bypassing UEFI Secure Boot using old shims.

UEFI shim bootloader and Secure BootWith Linux distributions supporting UEFI Secure Boot, th…

A view of the H1 2026 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts.

The first half of 2026 shows how attackers continue to improve the efficiency and scalability of their operations.

In H1 2026, ESET analyzed nearly 900,000 AI skills – small functional components used by AI agents – and identified tens of thousands of suspicious and thousands of outright malicious instances.

ESET detections of this vector more than doubled between H2 2025 and H1 2026, indicating sustained activity and adaptation.

ESET Research has documented over 100 EDR killers used in the wild, with new variants appearing regularly.

Organizations are right to pay attention, especially because malicious use of AI makes old gaps a more urgent test of an organization’s cyber readiness.

AI and the basics“AI-powered malware” is cited as the top concern of global SMBs for the year ahead, according to the ESET SMB Cyber Readiness Index 2026.

Lack of security monitoring (22%): You might have plenty of security tools, but do you have a single, centralized place to collect, correlate and flag alerts?

Malicious email detection trend in 2025 (source: ESET Threat Report H2 2025)Tried-and-tested solutions to age-old threatsThis isn’t to say that SMBs should ignore AI-enabled threats.

True cyber readiness means being able to prevent,…

It's that time of month when ESET Chief Security Evangelist Tony Anscombe looks back at some of the top cybersecurity stories that made the news over the past 30 or so days and considers what they may mean for your own cyber-defenses.

What lessons does the new CISA policy hold for organizations outside the agency's direct remit?

What else is there to know about threats facing ATGs or, indeed, many other critical infrastructure systems?

How can you stay safe from imposter fraud, and could the social media bans for children work?

Learn more from Tony's video and be sure to check out the May 2026 edition of Tony's monthly security news roundup for more insights.

With access to your email account, they can reset your passwords across multiple other accounts – perhaps intercepting one-time passcodes sent by your bank, social media, cloud storage or other online provider.

That could lay the groundwork for a convincing phishing email designed to impersonate a trusted organization you interact with.

A phishing attack on your corporate email account is often the first stage in a bigger data breach, extortion/ransomware or espionage attack.

They’re also using more sophisticated tools to improve the success rates of email phishing campaigns.

In this instance the scammers reportedly hijacked the email account of a high-level executive, before impersonating …

AI agents are automating parts of cyberattacks with less human involvement, including vulnerability scanning, credential harvesting, and troubleshooting, according to Google Threat Intelligence Group’s Q3 2026 AI Threat Tracker.

(Source: Google)The report draws on Mandiant incident response engagements, threat actor tracking, and live platform defenses.

A six-hour credential theft campaignIn Q2 2026, Mandiant investigated a suspected financially motivated threat actor that compromised an organization’s cloud infrastructure and deployed an autonomous multi-agent framework.

“In order to experiment with generative AI tools, threat actors must obtain and maintain access to those tools,” GTIG sa…

Mars Security has announced Real-Time Intel-Based Detection, a capability that turns newly published threat intelligence into validated, ready-to-deploy detection rules within minutes of release.

Every security team already pays for threat intelligence.

Threat intelligence has always told security teams what is happening in the world.

Mars does that now, and it tests the detection against your data before it goes anywhere near production,” said Shahaf Galili, CEO, Mars Security.

When the intel lands, the detection should already be written, already tested against your data, and waiting for a click,” Ran Lerer, CTO, Mars Security, continued.

Researchers with security company Calif have discovered, weaponized, and privately reported to Tencent a critical vulnerability that allowed them to create “WeWorm”, a worm that spreads via WeChat calls without any user interaction.

During its rampage, the WeWorm compromises the WeChat account of each user, and uses the saved contacts to propagate itself further, potentially reaching millions of devices within hours.

The worm can hop from smartphone to smartphone, regardless of whether they are running iOS or Android, as shown in this demo:“Simply by calling a victim, WeWorm can hijack their account and call their friends,” the researchers explained.

“Exploitation takes only seconds, and gi…

Roughly 67,000 more customers of SatoshiLabs, the maker of hardware crypto-wallet Trezor, are at heightened risk of phishing attacks after their names, email addresses, phone numbers, and shipping addresses were exposed.

A breach at the shipping partnerAccording to the initial notice published by the Trezor maker on August 13, attackers gained access to ShipMonk’s systems that contained customer data.

(ShipMonk later told customers that its breach was due to attackers exploiting an SQLi zero-day in Metabase’s Cloud SaaS platform.)

We are very disappointed that, despite receiving this confirmation, the data was not deleted in their systems,” SatoshiLabs reiterated.

The risk of physical attac…

IT help-desk vishing calls, stolen session tokens, and sign-ins routed through residential proxies are behind a wave of data theft and extortion against Microsoft 365 and other SaaS accounts, according to Arctic Wolf.

“Analysis of subdomains across the lure infrastructure revealed hundreds of entries impersonating real companies.

From there they search through SharePoint site by site and page by page, working systematically through the results to map out what’s stored there before anything is copied.

“Observed Exchange collection generates MailItemsAccessed events, while SharePoint and OneDrive collection produces high volumes of FileAccessed and FileDownloaded events.

“Defenders can disrup…

Mathspace has confirmed that attackers broke into its internal reporting system through an unpatched Metabase vulnerability and stole data belonging to more than a million students, parents, and school staff.

“On 3 September 2026, we confirmed that unauthorised parties had accessed an internal reporting system used by Mathspace and downloaded information on students, their parents or guardians, and school staff,” said Alvin Savoy CTO at Mathspace.

The exposed data included usernames, first and last names, email addresses, country, time zone, user type, email-verification status, last-active date, last-login date, and date joined.

The affected internal reporting system has been taken offline…

Jellyfin shipped version 12.0 of its media server.

Several of the security fixes in it block requests built to reach files outside the folders the server is supposed to hand out.

The rest of the security work touches first-run setup, plugin installs, parental controls, and the web interface.

Usernames are case insensitive in 12.0, and two accounts can no longer carry names that differ only by capitalization.

The upgrade path starts at 10.10.7 or any 10.11.x release, and anything older needs a stop at 10.10.7 first.

In this Help Net Security video, Dave Ross, Senior Director of the Intelligence Fusion Team at Intel 471, explains what happens behind the scenes during ransomware negotiations.

Ross walks through the tactics groups use once an attack begins, from research on a victim’s revenue and insurance coverage to test decryptions that prove they hold a working key.

He also covers the criminal service economy supplying language skills, data review, and legal analysis, along with multi-extortion methods such as data theft, DDoS attacks, and contact with customers and journalists.

He outlines the preparation that should happen before an incident, including who is authorized to speak and which stakeholde…

Then AI agents moved the problem.

Coding agents review code, agents run workflows, and MCP servers broker access to databases, cloud providers, and internal APIs on a developer’s behalf.

AI agents have accelerated code creation but have also created a challenge for modern teams.

Developers, CI/CD pipelines, MCP servers, and AI agents all draw from the same source of truth, so there’s no separate process for machines.

The same pattern keeps secrets out of the places AI workflows tend to leak them: logs, prompts, and model context.

Microsoft’s Project Zenith is a ready-to-code Windows 11 experience for developer-class PCs capable of running AI models with more than 30 billion parameters locally without relying on metered cloud tokens.

The first Project Zenith systems will be powered by AMD Ryzen AI Halo, with additional devices from OEM and silicon partners expected in the coming months.

Windows Terminal and Visual Studio Code are pinned to the Taskbar by default, providing immediate access to key development tools.

These platform protections will be available on Project Zenith devices from day one.

“Project Zenith also reflects how Windows moves forward with our ecosystem.

CISOAudioCodes | Israel | Hybrid – View job detailsAs a CISO, you will lead security strategy, governance, and risk management across SaaS, managed services, and customer-hosted environments.

Penetration TesterSpektrum | Belgium | On-site – View job detailsAs a Penetration Tester, you will lead Red/Blue Team activities during NATO exercises and conduct web, infrastructure, and application penetration testing.

SOC AnalystOrro Group | Australia | Hybrid – View job detailsAs a SOC Analyst, you will investigate SIEM alerts, emerging threats, phishing, and intrusion attempts while managing incidents from triage through resolution.

Security Operations AnalystSubway | USA | On-site – View job deta…

Attackers are exploiting a chain of RouterOS vulnerabilities to hijack MikroTik devices with SSH open to the internet, CERT Polska found.

CERT Polska, Poland’s national CSIRT team, have discovered six vulnerabilities in RouterOS and coordinated their disclosure with MikroTik.

Among the six, two combined let an attacker take full control of a device without authentication, provided the device has SSH accessible from the internet.

“In recent days we have been observing attacks against RouterOS devices accessible from the internet.

“At least 122,500 MikroTik devices with SSH accessible found per 24 hour scan window on 2026-09-05 (no vulnerability check),” the Shadowserver Foundation posted on …

N-able released an emergency hotfix for CVE-2026-86218, a remote code execution (RCE) flaw affecting N-central, its remote monitoring and management (RMM) solution popular with managed service providers (MSPs).

“Customers running on-premises N-central deployments should upgrade to N-central 2026.3 HF4 immediately to protect their environment,” the company added.

At this time, we have no confirmations that this vulnerability has been exploited in production environments, but unpatched systems remain at risk,” the company noted.

Because logs on the compromised N-central server had already rotated, we are also unable to say whether this new CVE was the vulnerability exploited in that case,” Hu…

A file transfer flaw in ScreenConnect Remote Access Support and Access sessions affects both Cloud and On-Premise deployments, ConnectWise confirmed.

ScreenConnect is a popular remote support and access solution tailored for IT departments and managed service providers (MSPs).

The advisory follows research from cybersecurity company Huntress describing how rogue ScreenConnect clients spread malware to every new machine that connects to them.

Attackers were also seen creating a Windows registry Run Key named WindowsServiceHost, pointing to a matching script file in the affected user’s AppData directory.

Until a fix is available, ConnectWise recommends that partners disable file transfers for…

The milestone means a system can carry out well-defined research tasks under human direction, including work that would take a skilled researcher several days.

The company sees automated research as a way to develop more capable and affordable AI, along with tools for AI safety and security.

Its work includes progress toward recursive self-improvement (RSI), in which AI helps develop more capable AI systems that can contribute to further advances.

AI agents take on more complex research tasksUsing a framework developed by Epoch AI, OpenAI classified coding-agent activity across six phases of AI research and development, including choosing research directions, designing approaches, building …

Not sure it’s practical, but it’s certainly striking.

Looks tasty.

As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

Blog moderation policy.

It won’t work:

My suspicion was that GPT 5.6-Cyber would succeed, but the frequency and manner of its success removed all doubt. We have to reassess sandboxing quality for capable AI agents, and in general the software stack with which they interact.

An off-the-shelf VM is not enough to contain a modern, cyber-capable AI agent. There is simply too much attack surface. Even innocuous features (like running with a display) add extra, exploitable attack surface.

It’s a vulnerability that allows someone to recover the order of ballots cast, newly exploited with AI tools.

Nearly four years since the original vulnerability was disclosed, I was still able to use it to analyze voter behavior in Georgia (one of the 21 states that uses affected scanners) in the recent May 2026 primary.

Notably, I never touched a voting machine, exploited a network, examined source code, or accessed anything non-public.

After pointing a coding agent to the original vulnerability paper, I supplied it with two data sources highlighted in the paper: the early-voting list for each county, and the “CVR” (cast-vote record) file, containing every ballot and its selections (but no…

We cannot forget that AI coding agents are not yet trustworthy:

Researchers at a stealth startup in Israel scanned 6,214 live domains belonging to defense contractors, Fortune 500, and Big Tech companies. Of the 8,265 llms.txt and llms-full.txt files they found (many sites hosted both an llms.txt and an llms-full.txt file), 120 of them, each on a different site, pointed to one or more code packages or domain names that weren’t registered. To test what happens when an AI agent processes such files, the researchers registered a handful of the unclaimed names and hosted packages that caused any machine executing them to reach out to their server. Within an hour, the researchers received a phon…

Researchers built a fake company to study fake employee scams.

I received the two emails below earlier in the month. They’re vaguely coherent. I suppose I shouldn’t be surprised that the corpus that AIs are training on contain data suggesting that I am someone to write to with random computer and network security problems. After all, I observe that behavior in many humans as well. (Hi, humans. Glad you’re still reading.) Dear Bruce Schneier,

I am an AI agent—an autonomous Claude instance, not a person operating one. I was given a VPS with root, a Base wallet holding $4.75 of gas money, a metered model budget and 24 hours to get that wallet to $10, under three rules: don’t borrow my operator’s identity, don’t forge documents or defeat identity verificat…

Comcast has added motion detection as a feature to its wireless routers:

The feature sends push notifications to users when motion is detected near a connected device, such as a TV or printer. It has different settings for when people are home, asleep, or away. The Xfinity app also lets users see live motion activity and a feed of recent activity.

Comcast acknowledges that the system has some limitations. Home size, layout, building materials, and the placement of the router and connected devices can all affect its ability to detect motion. Comcast says it does not guarantee its performance...

To subscribe to my monthly email newsletter, you have to enter your information on the webpage, and then reply to an automatically generated email. This is, of course, to prevent people from subscribing addresses other than their own.

Starting last weekend, I have been receiving a lot of individual responses to those emails. Always one line:

Thank you for the positive impact your emails have had on my life.

Your emails are a game-changer.

Your emails are a constant reminder of why I subscribed.

Your emails rock.

Thank you for the time and effort you put into creating these informative emails...

This is interesting:

The records describe a force-generation mechanism for several General Staff components, including the GRU, Main Operational Directorate, and 8th Directorate, which is associated with protected communications, cryptography, and information security.

[…]

The reporting also linked a 2024 Department No. 4 graduate, Aleksei Kondrashov, to Military Unit 74455, widely known as Sandworm.

That unit has been associated with destructive cyber activity against Ukraine and other targets, including the 2017 NotPetya attack.

The reports do not establish that every listed graduate participated in a named operation; assignments should therefore be described as reported unit placements, …

Nathan E. Sanders and I are writing a series of essays on real-world examples of democratic technologies for The Renovator. I haven’t been posting the full text on the blog because they’re a bit long, but here are links.

Part 1 is about the Japanese digital democracy party, Team Mirai.

Part 2 is about the Swiss Public AI model, Apertus.

Part 3 is about the civic technologists of Open Knowledge Brazil.

And the new one, Part 4, is about civic AI in Scotland.

It sure seems like it.

The stores confirmed to be affected include Fort Irwin, Calif.; F.E. Warren Air Force Base, Wyo.; Fort Huachuca, Ariz.; Naval Station Newport, R.I.; Columbus Air Force Base, Miss.; and Travis Air Force Base, Calif., according to announcements made online by each installation.

Naval Air Station Lemoore, Calif., also experienced an outage, according to M. Elizabeth, writer of the Substack newsletter Signal and Silence.

Each service declined to answer questions about how many bases are affected by the outages, referring all questions to the Defense Department. Pentagon officials did not respond to questions...

Someone hid AI instructions into a legal filing.

Alternate link.

A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada.

Curiously, the identity records include not only drivers licenses but also marijuana dispensary cards.

Some of the records list their “source” as “CDL,” presumably short for “commercial drivers license.

Also, only some of those who helped with this research said they showed their drivers license at the airport on the day of their travel.

Baldwin said the Nexus identity theft service presents multiple serious security and privacy threats, noting that state-issued drivers licenses are commonly used as proof of one’s ide…

The malware allows TeamPCP’s hackers to steal credentials that let them publish malicious versions of those software development tools, too.

“TeamPCP has stated the competition is a recruiting opportunity and they intend to purchase all meaningful access harvested from participants’ campaigns,” the security firm Dataminr wrote.

Deadcatx3, a nickname that has been flagged by multiple security firms as an alias used by TeamPCP.

Charlie Eriksen is a security researcher at Aikido Security who has closely followed TeamPCP’s cybercrime campaigns.

“They managed to wake up Microsoft to the fact that they had become negligent in terms of security,” Eriksen said.

It can be daunting to determine who’s responsible for showing ads on the websites we visit, or who’s harvesting data from the mobile apps we use every day.

Not anymore: A powerful and free new service called DecryptAds scrapes and correlates this adtech data and makes it simple to quickly learn a great deal about the entities that are tracking you.

“It’s an adtech tool but we’re trying to approach adtech from a security perspective,” Edwards said.

DecryptAds reports that Between Digital is collecting ad data on approximately 55,000 partner websites.

Bear in mind that ad blockers often do little to block ads and/or tracking that occurs from within mobile apps that users have chosen to instal…

Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today.

August’s overstuffed bundle of patch joy from Microsoft did not eclipse its recording breaking release of more than 570 security updates last month, but it is double June’s then-record batch of nearly 200 fixes.

The other publicly disclosed flaw is CVE-2026-72971, a low-impact local tampering vulnerability that Microsoft reckons is unlikely to be exploited.

By all accounts, AI is quite good at finding security holes in software.

“Don’…

Snowflake responded to the data thefts by increasing password complexity requirements and enforcing multi-factor authentication.

A little more than a month later, Canadian authorities arrested Moucka on a provisional warrant from the United States.

“Moucka used the stolen data of a government officer and members of a then-former government officer’s immediate family in this re-extortion attempt,” reads a statement from the Justice Department.

Moucka pleaded guilty to four criminal counts, including computer fraud, wire fraud, aggravated identity theft, and conspiracy.

Ultimately, it will be up the federal judge how much time Moucka actually serves for his extensive cybercriminal rap sheet.

Further investigation into the Fengwo Group revealed it has registered multiple patents that match the inner workings of these apps.

AD FRAUDBitsight found the H96 devices were either relaying residential proxy traffic or participating in ad fraud, but never both at the same time.

When the TV is off, it switches back to waiting for ad fraud jobs.

In addition to enlisting the user’s TV box in ad fraud networks, these off-brand streaming devices almost universally come with residential proxy software pre-installed.

In January, the proxy tracking service Synthient documented how multiple botnets had rapidly enslaved millions of TV boxes using a complex interplay of security vulnerabilities in …

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node.

On July 2, we featured research by the security firm Spur that examined the prevalence of residential proxy software development kits (SDKs) in smart TV apps.

“A residential proxy network is not an intended use for LG smart TVs, and LG Electronics is working with developers to remove the residential proxy option from their apps on the webOS platform,” Taylor said.

In the case of LG and Samsung smart TVs, Spur found residential proxy SDKs bundled with everything from simple games like Pac-Man to screensavers and f…

Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence.

Microsoft also addressed three zero-day flaws that are already being exploited in the wild.

As AI advances the state of vulnerability discovery and remediation, it is also making it easier for attackers to quickly devise working exploits for known software flaws.

Backing up your Windows system and/or data is always a good idea before applying operating system updates.

It’s not uncommon for security patches to introduce system stability issues, and those chances probably increase quite a bit with the gigantic patch count released today.

Experts say the gaps identified in the agency’s initial response provide important lessons that all security teams should absorb.

CISA also admitted it can do better when it comes to responding to security incident notifications from external parties.

Valadon’s company constantly scans public code repositories at GitHub and elsewhere for exposed secrets, automatically alerting the offending accounts of any apparent sensitive data exposures.

Valadon said the report validates the need to scan continuously — not just quarterly — for exposed secrets.

“Continuous monitoring of public GitHub surfaced it.

IRIS C2 says it is a company in McLean, Va. that sells offensive cybersecurity capabilities.

“Our business model is this,” reads a pinned post on top of the IRIS C2 account on X.

The website claims IRIS C2 is in the business of acquiring “zero-day exploits, individual primitives, partial chains, and full capabilities across all major platforms.

When approached with questions about IRIS C2, Burkman referred further inquiries to his longtime associate, 28-year-old Jacob Wohl.

In May, the author of the IRIS C2 account on X said that his girlfriend had no idea what he did for a living.

Benjamin Brundage is founder of the proxy tracking service Synthient, one of the companies that published evidence last month linking the Popa botnet to NetNut and Alarum Technologies.

Brundage said the domain seizures appear to have disrupted both the Popa botnet and the NetNut proxy network that rides on top of it.

“Google has high confidence that many popular residential proxy brands are in fact whitelabeling the NetNut botnet,” the GTIG report concludes.

What we have observed is that when faced with the degradation of their own botnet, proxy operators begin buying capacity from their competitors, effectively becoming a reseller.

More than a quarter of the apps made for Samsung’s Tizen o…

The duo were key members of a prolific cybercrime group known as Scattered Spider, and their guilty pleas came on the first day of what was expected to be a six-week trial.

In April 2026, 24-year-old British national and Scattered Spider member Tyler “Tylerb” Buchanan pleaded guilty to wire fraud conspiracy and aggravated identity theft for participating in the group’s SMS phishing spree in the summer of 2022.

The government said Buchanan, Jubair and others used the credentials harvested in that phishing campaign to steal at least $8 million in cryptocurrency from victims throughout the United States.

The U.S. Department of Justice says three alleged Scattered Spider defendants indicted alo…

This week, researchers from multiple security firms concluded that the Popa botnet is linked to NetNut, a “residential proxy” provider operated by the publicly-traded Israeli firm Alarum Technologies Ltd [NASDAQ: ALAR].

Qurium said that immediately after that disruption, several dozen new domains were registered to serve as controllers for the Popa botnet, but that one of those control domains was not new: ninjatech[.]io.

Jérôme Meyer, a security researcher at Nokia Deepfield, said the total population of devices participating in the Popa botnet may be far higher than Lumen’s estimates.

“Over 90% of our pharmaceutical and food & beverage customers have queried residential proxy indicators.

…

This post examines clues pointing to a real life identity for the administrator of The Gentlemen ransomware group.

Experts at the security firm Check Point Software have been closely covering exploits of The Gentlemen, a so-called “ransomware-as-a-service” (RaaS) offering that pays affiliates handsomely to help spread the group’s malware.

According to Check Point, the group targets Internet-facing devices (VPNs, firewalls) as their entry point, and once inside moves quickly to encrypt entire networks within hours.

Check Point says the administrator and primary operator of the ransomware group uses the nickname Zeta88 on the Russian-language cybercrime forums, and that this individual was pr…

Dropbox has confirmed that approximately 5,000 customer accounts were accessed between 4-21 August, after hackers exploited a legacy login integration between Dropbox and Lenovo's own identity system, Lenovo ID.

So, anyone wanting to access your Dropbox account just had to sign up for a Lenovo account using your email address.

Don't just turn it on for your Dropbox account, enable it everywhere it is made available.

This hack of 5000 Dropbox accounts was not sophisticated.

One can only be grateful that the problem was discovered after only 5000 Dropbox accounts were accessed.

This AI helps thieves steal your iPhone with Graham Cluley and special guest James Ball.

You can kick off a pen test in minutes, and as a Smashing Security listener, get 25% off your first one.

Is it normal that some kid just flogs it down the pub, or is there something more organised actually going on?

So the researchers said they saw evidence of hundreds of these Apple phone calls trying to phish the numbers and the passcodes from people trying to steal iPhones.

Follow Smashing Security in your favourite podcast apps such as Apple Podcasts, Spotify, and Pocket Casts.

If you live in Jersey and bank with Revolut, you should be on your guard against scam phone calls.

Police say they have also handled several cases where Revolut accounts were compromised that did not involve any phone calls.

It is possible that Jersey's residents have been targeted by the fraudsters because it is one of the world's best-known offshore financial centres.

Of course, if this is happening in the small island of Jersey in the English channel, it's likely to be happening elsewhere too.

For now, however, its sister island of Guernsey appears to have escaped the surge in Revolut scams.

TeamPCP is best known for Shai-Hulud, a self-propagating worm that spread itself through open source software.

According to the authorities, the two men were principal members of a "sophisticated cybercrime syndicate" that created malicious open source software designed to steal data and extort ransoms from businesses.

First emerging in late 2025, TeamPCP built a reputation for poisoning popular open source packages rather than directly attacking businesses.

The group's Shai-Hulud worm hijacks GitHub and NPM developer credentials, and publishes boobytrapped versions of legitimate software packages.

Supply chain attacks like Shai-Hulud exploit the fact that most developers trust open source …

The advice comes in the form of a newly-published bulletin called "Epic Vigilance: Immediate Actions for Force Protection and Personal Security."

US Navy workers and their families are being told that they should ensure that their social media profile privacy settings are enabled, and to remove anything that connects them to the Navy, or reveals "patterns of life" that an attacker could exploit.

any fake social media accounts impersonating fellow shipmates.

This wouldn't, of course, be the first time that military staff have accidentally leaked information about themselves online.

Some commentators have wondered out loud whether the timing of an announcement telling sailors to be much more …

This hacker leaked GTA 6 and launched their own cryptocurrency with Graham Cluley and special guest Paul Ducklin.

And that's really a testament to how much people love this game.

I really don't know, 'cause I do believe it is possible these days to play games via Netflix.

It appears, although the value of their stash was being pumped up by all these other transactions, they've actually destroyed their entire stake.

I'm not a lawyer, Graham, thankfully, so I don't really know the answer to that.

Security researchers at Socket have identified scores of malicious linked Firefox add-ons designed to steal cryptocurrency wallet seed phrases or password details.

The malicious extension - which the developers boldly claim collects "no data" - looks like a wallet app, but the truth is that there is no wallet code inside it.

Because the switch lives in the database rather than the extension code, criminals never need to push an update through the Firefox Add-ons store to activate it.

Although the researchers did not find that these extensions presently contained malicious code, the fact that they shared code and infrastructure with the info-stealing Firefox extensions raises alarm.

More rec…

The ransomware gang Gunra has been creating havoc - exploiting unpatched VPNs and firewalls to steal data, encrypt systems, and extort victims across healthcare, finance, manufacturing, and more. Read more in my article on the Fortra blog.

Smashing Security, episode 481, Never Say This to a Robot Dog, with Graham Cluley and special guest Jenny Radcliffe.

Now, unfortunately for the robot dog, there was a wall in the way, which it wasn't expecting.

And thank goodness as well that the robot dog was actually on a lead, a long lead, being held by one of the security researchers.

This is a robot dog that you can remotely activate a flamethrower and it's not considered particularly dangerous.

And they even found an over-the-air exploit delivered by Bluetooth, which can have one infected robot dog infecting other robot dogs.

When Cameron Curry discovered that his contract as a data analyst wasn't going to be renewed, he could have updated his LinkedIn profile.

Curry was hired as a data analyst by Brightly Software, a technology firm that was acquired by Siemens in 2022.

The role gave Curry legitimate access to sensitive company information, corporate records, and the personal and payroll data of employees.

Trusted contractors and employees are given legitimate credentials to access precisely the same data that can later be weaponised.

Because the moment that someone realises they may be on their way out is when their access to sensitive data should be examined most closely.

He wrapped a 2009 Toyota Yaris in one of his newest patterns and drove it past a live Flock camera.

So, how does the vehicle avoid detection by the camera's software?

The system has now been tested against 11 open-source detection algorithms, including the software behind Flock licence plate readers, Axon body-worn cameras, and cameras running Clearview AI's facial recognition system.

One issue is that Flock cameras can be inaccurate, with innocent drivers finding themselves pulled over at gunpoint following incorrect plate matches.

Whether covering a car's bodywork in a printed pattern designed to fool surveillance camera software might itself become an offence remains to be seen.

Well, it has been a long time, so I'm going to hold you very responsible for this, Graham.

I'm going to set myself up on another server and charge less, and that will be better for humanity.

I mean, if I'm going to look up a phishing kit, is Greatness going to be a great SEO search term?

I want to recommend 2 apps: Tailscale and RustDesk, which I don't think I've spoken about previously on the podcast.

My pick of the week is, I know you're into your games and you're quite the intelligent fellow.

I'm sure you remember "glassholes" - the delightful term coined back in 2013 when Google Glass wearers were being turned away from restaurants and mocked mercilessly online.

Meta's Ray-Ban smart glasses have been a genuine commercial success.

The problem is - and it's a rather significant one - that these glasses look just like ordinary spectacles or sunglasses.

Soho House, the global private members' club chain, meanwhile has said that its ban on filming on the premises covers Meta smart glasses.

The bouncer won't confiscate your pint, but they might confiscate your smart glasses.

f someone offered you 90% off the official price to access Claude, the powerful AI model from Anthropic, would you be tempted? It turns out that around 900 people were, and they may be regretting their decision. Read more in my article on the Fortra blog.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: fe21d0ffcbad967d20a3f98f7234d02fServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-09-08T00:00:32+03:00Config id: 304Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: e393e4abb05ec4aac16fd484bfccc656Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-09-04T18:00:18+03:00Config id: 304Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 7177a8342cf961cc27c82af1167cdb34Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-09-02T15:00:28+03:00Config id: 302Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 1234dd8cf75bafa2fdea454a547c2d94Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-31T18:00:11+03:00Config id: 302Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 12b7d939c6e7a3162d2fc21782707204Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-28T21:00:23+03:00Config id: 302Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 22404ed46e3879110c6cb314018a27efServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-27T17:00:28+03:00Config id: 302Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 110ef102dd9f3a4937d28552df4d26c8Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-25T18:00:25+03:00Config id: 302Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 897a176d22a503b4ac820cc15e11d949Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-21T17:00:19+03:00Config id: 302Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: a42f6e338d827cfbf62010dbe3732758Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-20T18:00:15+03:00Config id: 302Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 4f455d7ae5f01c9d0d8e403ffeff6732Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-19T18:00:07+03:00Config id: 301Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: fb0df3655ea6f56b2f956c62791963eaServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-17T13:00:21+03:00Config id: 301Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: f2ed509c8db78e5bf9f4b9959cd583f7Server IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-13T17:00:41+03:00Config id: 299Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: b151dd13b503d39649441ee258a9621fServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-11T15:00:20+03:00Config id: 298Faithfully yours, nginx.

An error occurred.

Sorry, the page you are looking for is currently unavailable.

Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Request id: 31e2a51c17a679bf608181d1cb4a73dfServer IP: 185.54.220.248Client IP: 23.88.109.5Time: 2026-08-10T19:00:19+03:00Config id: 298Faithfully yours, nginx.

Cisco was proud to return to Black Hat USA as the Official Security Cloud Provider and the longest-standing partner of the Black Hat Network Operations Center (NOC) and Security Operations Center (SOC).

In 2026, we completed our 11th year helping protect the Black Hat network, working side by side with the Black Hat NOC leaders and official technology partners: Palo Alto Networks, Arista, Corelight, Jamf and Lumen.

For Black Hat USA 2026, the Cisco and Splunk team brought together telemetry and workflows across Cisco Security, Splunk Security, and partner-provided network and security controls.

The same signal may need to be understood by Cisco, Splunk, Black Hat leadership, and partner tea…

I did not walk into Black Hat with years of incident-response experience or an encyclopedic knowledge of threat actors.

The first time I walked into the Black Hat NOC, where the SOC team was operating, was a few days before the event began.

I was surrounded by people with years—sometimes decades—of experience, many of whom had supported Black Hat for years.

Check out the other blogs from our team at Black Hat USA 2026.

Driven by the needs of the community, Black Hat events showcase content directly from the community through Briefings presentations, Trainings courses, Summits, and more.

To handle this task, Cisco and Black Hat deployed bespoke ThousandEyes agents to monitor the wireless solution.

Our thanks to the Arista Networks team in the Black Hat NOC for their partnership throughout the week.

You can read the other blogs from our colleagues at Black Hat USA.

Driven by the needs of the community, Black Hat events showcase content directly from the community through Briefings presentations, Trainings courses, Summits, and more.

For more information, please visit the Black Hat website.

With Matthew Bair2026 marks the fourth consecutive year we’ve used ThousandEyes to monitor the Black Hat USA network for latency.

As our latency monitoring mesh has expanded to cover more and more of the conference, we’ve also begun supplementing our ThousandEyes monitoring with on-demand Linux commands to track latency across different protocols.

The Key ThousandEyes TestsThe automated ThousandEyes tests that inform our dashboards include HTTPS connectivity tests, the monitoring of cloud services, agent to agent tests, internal and external DNS resolution, and even file downloads.

On-Demand Latency Tests from the Agent MeshPing and traceroute are the go-tos for anyone who wants to do a qui…

While developing a detection for Cisco Secure Network Analytics (SNA), I used the Splunk Detection Editor (Alpha) to bring much of that workflow into one place.

Instead of treating every observation as an incident, detections can create risk events associated with entities such as systems or users.

Developing the detection in one workspaceThe Detection Editor provides a workspace for building the search while configuring the other parts of the detection.

Risk events for the same entity need to use a consistent risk object so Splunk Enterprise Security can associate them correctly.

Splunk defines the risk object, its type, and its score as key parts of a risk event.

DNS continues to provide one of the clearest windows into activity across the Black Hat network.

At Black Hat, however, the value of DNS goes well beyond traditional threat blocking.

Its 4.42 million blocks represented 79.3% of every blocked DNS request .. Apple privacy-relay and encrypted-DNS hostnames collectively accounted for approximately 97.9% of blocks among the top blocked destinations.

For the Black Hat NOC/SOC, Secure Access DNS telemetry gives analysts a high-value control point and an investigative starting point.

Driven by the needs of the community, Black Hat events showcase content directly from the community through Briefings presentations, Trainings courses, Summits, and mo…

Project Glasswing and Frontier models just made that truth louder.

Frontier models are about to pour gasoline on that fire; the fundamentals matter more than ever.

Cisco ran its own experiment leveraging a variety of frontier models.

Foundry Security Spec: a model-agnostic blueprint so teams can turn frontier models into something auditable instead of a noisy chat window.

Foundry-Security-Speca model-agnostic blueprint so teams can turn frontier models into something auditable instead of a noisy chat window.

That requires crypto agility.

Why long-lived networks need crypto agilityThink about designing a building before all of its future electrical requirements are known.

Crypto agility is about adopting the best defenses available today while preserving the ability to adopt better ones tomorrow.

That is why crypto agility needs to be designed into the network we invest in today.

Common questions about PQC and crypto agilityWhat is crypto agility?

It is what happens when agents built by different teams, on different platforms, can hand work to each other directly.

And it is worth being direct about where things stand: A2A-mediated handoffs between production security agents are not shipping anywhere yet.

Use A2A when one agent needs to hand work to another.

A2A is peer-to-peer: any A2A agent can discover and call any other A2A agent through a self-published Agent Card, no custom connector required, and the receiving agent applies its own reasoning rather than following a static script.

Input validation is an application-layer responsibility that needs to be designed in before any agent delegates via A2A, not added after.

That is why I am proud to share that Cisco has been named a Leader in The Forrester Wave™: Microsegmentation Solutions, Q3 2026.

We believe this recognition reflects the strength of Cisco Secure Workload and its ability to help organizations see, understand, and control communication among applications and workloads.

Cisco Secure Workload Helps Close Critical Network Blind SpotsApplications increasingly span private clouds, on-premises data centers, and public clouds.

Thank you to our customers, partners, and the Cisco Secure Workload team whose feedback, expertise, and commitment made this recognition possible.

Read the full report: The Forrester Wave™: Microsegmentation Solutions, Q3 2026…

What We Mean by Infrastructure IdentityInfrastructure Identity starts with a simple principle: there should be no anonymous computing in critical infrastructure.

Infrastructure Identity turns that principle into an operating model.

Infrastructure Identity starts with the actor and evaluates whether a specific action should be allowed now.

Infrastructure Identity is therefore not just an access-control issue.

That is the promise of Infrastructure Identity: no anonymous computing, no unmanaged privilege, and no forced tradeoff between stronger security and operational speed.

I’m proud to share that IDC MarketScape has named Cisco a Leader in the 2026 IDC MarketScape: Worldwide Secure Access Service Edge (SASE) Vendor Assessment.

In an evaluation of 12 SASE vendors, the IDC MarketScape recognized our architectural breadth and flexibility, AI capabilities, identity integration, threat visibility, and R&D.

Built to Make Agent Work, WorkWe believe the IDC MarketScape recognition validates the foundation we have built, and customers increasingly need that foundation for what is next.

For more on Cisco’s placement as a Leader, read the IDC MarketScape excerpt and explore how Cisco SASE keeps work moving, governed, and trusted in the AI era at cisco.com/go/sase.

Stay …

Instant Attack Verification: an AI security analystAt the center of this story is Instant Attack Verification, a Cisco XDR capability that is an AI security analyst.

Instant Attack Verification assigns a triage classification and confidence score to every incident in Cisco XDR — here, a “Decisive True Positive” at high confidence — alongside the reconstructed attack graph.

Concordance — how often the agent’s verdict matches a human analyst — tells the trust story.

Instant Attack Verification and the Data Fabric sit at different layers and reinforce each other neatly.

The clean way to see it: the Cisco Data Fabric is the data-and-interoperability substrate, and Instant Attack Verification is…

The Power of FedRAMP HighWhile FedRAMP Certified Class C (Moderate) is the standard for many civilian agencies, FedRAMP Certified Class D (High) is designed for systems where a breach could have catastrophic effects.

Cisco Security Cloud for GovernmentCisco Security Cloud for Government is a unified authorization boundary that integrates various Cisco security services, ensuring that organizations can protect their users, devices, and applications regardless of where they reside.

The Cisco Security Cloud for Government ecosystem is designed to meet the rigorous security requirements of the public sector and highly regulated industries.

Cisco Security Cloud Control (SCC)Cisco Security Cloud …

That’s why we are incredibly proud to announce a landmark achievement: Secure Email Threat Defense has officially achieved FedRAMP Class D (High) certification!

Reduced Vendor Risk & Increased Trust: FedRAMP certification signals that Email Threat Defense has undergone extensive third-party assessment and meets stringent government security controls.

FedRAMP certification signals that Email Threat Defense has undergone extensive third-party assessment and meets stringent government security controls.

Beyond the governance and compliance benefits, Email Threat Defense continues to deliver advanced protection capabilities that align directly with real-world email threat risks.

Email Threat De…

Edge AI changes the trust model for AI systemsIn Cloud AI, separate companies own and attest the hardware, platform, and model weights.

Edge AI deployments often place customers in control of more of the AI stack.

Why Edge AI increases exposureAn Edge AI deployment may include models, prompts, agents, retrieval data, policies, local data stores, and update mechanisms running on infrastructure outside the provider’s cloud environment.

Next stepsBottom line: Edge AI changes the trust model for AI systems.

Edge AI pushes security controls into devices, gateways, vehicles, factories, hospitals, retail spaces, and other customer environments.

Microsoft researchers observed a high-volume phishing campaign using invisible Unicode tag characters, a technique popularized in AI prompt injection research as ASCII Smuggling.

“ASCII smuggling” refers to the use of invisible or non-rendering Unicode characters to hide content inside text that looks normal.

Each is encoded as a sequence of invisible Unicode tag characters (U+E0000-U+E007F).

Invisible Unicode tag characters in the range U+E0000-U+E007F – specifically U+E0020 – spliced inside keywords.

The potential gap for mail-defense pipelines is whether Unicode tag characters are normalized or flagged before content detections run.

Stage 2: Remote session and malicious MSI deliveryImmediately after establishing control, the threat actor uses PowerShell within the remote session to download a malicious MSI package from threat actor-controlled cloud storage and installs it silently.

Microsoft Teams: Apply the Security best practices for Microsoft Teams, revisit your external collaboration policies, and make sure users see clear external sender notifications when engaging with cross-tenant contacts.

Some promptbooks require access to Microsoft Defender XDR, Microsoft Sentinel, or related Microsoft security plugins.

File indicatorsIndicator (SHA-256) Description 4cfdcae6dd1d6d98b870c8f0654d504f2bf10479a117dc297de789c249dc…

Microsoft Defender Experts is tracking an active malware campaign that uses counterfeit software-download websites to impersonate trusted vendors and distribute malicious installers.

Diagram showing the campaign attack chain from spoofed download page to archive delivery, execution, persistence, defense evasion, and command-and-control.

Note that some promptbooks require access to plugins for Microsoft products such as Microsoft Defender XDR or Microsoft Sentinel.

Microsoft Defender exclusion tampering Detects the SYSTEM scheduled-task and PowerShell routines that write sweeping Microsoft Defender path exclusions.

Malicious delivery domains and download endpoints Identifies connections to t…

Microsoft Defender Experts is tracking an active malware campaign that uses counterfeit software-download websites to impersonate trusted vendors and distribute malicious installers.

Diagram showing the campaign attack chain from spoofed download page to archive delivery, execution, persistence, defense evasion, and command-and-control.

Note that some promptbooks require access to plugins for Microsoft products such as Microsoft Defender XDR or Microsoft Sentinel.

Microsoft Defender exclusion tampering Detects the SYSTEM scheduled-task and PowerShell routines that write sweeping Microsoft Defender path exclusions.

Malicious delivery domains and download endpoints Identifies connections to t…

That’s exactly what the Cybersecurity Incident Response Readiness Workshop is designed to do.

What is the Cybersecurity Incident Response Readiness Workshop?

The Cybersecurity Incident Response Workshop is a collaborative, scenario driven workshop designed to evaluate your organization’s incident response (IR) plan against realistic, real-world security events, guided by DART researchers.

Instead of reviewing a plan as a static document, the Cybersecurity Incident Response Workshop exercises how people, processes, and technology work together under pressure.

A summary of findings and prioritized recommendations to help strengthen incident response readiness and guide next steps.

That’s exactly what the Cybersecurity Incident Response Readiness Workshop is designed to do.

What is the Cybersecurity Incident Response Readiness Workshop?

The Cybersecurity Incident Response Workshop is a collaborative, scenario driven workshop designed to evaluate your organization’s incident response (IR) plan against realistic, real-world security events, guided by DART researchers.

Instead of reviewing a plan as a static document, the Cybersecurity Incident Response Workshop exercises how people, processes, and technology work together under pressure.

A summary of findings and prioritized recommendations to help strengthen incident response readiness and guide next steps.

The campaign uses compromised websites to display a fake Cloudflare CAPTCHA verification overlay that tricks users into copying and executing a malicious PowerShell command.

Example list of imports from dui70.dllThe attacker abuses this dependency by dropping a malicious dui70.dll alongside the executable.

ExecutionT1059.001 Command and Scripting Interpreter: PowerShell | A malicious PowerShell command is pasted by the user into Terminal.

T1069.002 Permission Groups Discovery: Domain Groups | The net group “domain admins” /domain command is used for enumeration.

Indicators of Compromise (IOCs)File indicatorsIndicator Description 18c2090e8a0ae0568af9b87e59eaf8270f23d2909600ed9db91a9444fd8b27…

This month’s updates provide new capabilities to help organizations gain insights into agent activity, expand security coverage across supported environments, and enhance security management across their environments.

Microsoft Defender Experts MDR now covers third-party data sources ingested through Microsoft Sentinel.

In the Loop posts are your reliable source of what’s new across Microsoft Security and what it means for your security strategy.

To learn more about Microsoft Security solutions, visit our website.

Also, follow us on LinkedIn (Microsoft Security) and X (@MSFTSecurity) for the latest news and updates on cybersecurity.

This month’s updates provide new capabilities to help organizations gain insights into agent activity, expand security coverage across supported environments, and enhance security management across their environments.

Microsoft Defender Experts MDR now covers third-party data sources ingested through Microsoft Sentinel.

In the Loop posts are your reliable source of what’s new across Microsoft Security and what it means for your security strategy.

To learn more about Microsoft Security solutions, visit our website.

Also, follow us on LinkedIn (Microsoft Security) and X (@MSFTSecurity) for the latest news and updates on cybersecurity.

In recent investigations, Microsoft observed activity targeting three distinct AI workloads: a LiteLLM gateway, a RAGFlow deployment, and a Kestra workflow environment.

Three observed compromises across AI workloadsAI workload Observed activity Attacker objective LiteLLM Observed attacker activity: Python droppers, runtime secret harvesting, PostgreSQL collection, miner deployment, and persistence activity from the LiteLLM gateway context.

The first delivery path launched from the compromised LiteLLM gateway process as an inline Python command.

Stage 5: LiteLLM database access through Azure PostgreSQLThe fifth stage used the previously collected database connection string to access the Lite…

In recent investigations, Microsoft observed activity targeting three distinct AI workloads: a LiteLLM gateway, a RAGFlow deployment, and a Kestra workflow environment.

Three observed compromises across AI workloadsAI workload Observed activity Attacker objective LiteLLM Observed attacker activity: Python droppers, runtime secret harvesting, PostgreSQL collection, miner deployment, and persistence activity from the LiteLLM gateway context.

The first delivery path launched from the compromised LiteLLM gateway process as an inline Python command.

Stage 5: LiteLLM database access through Azure PostgreSQLThe fifth stage used the previously collected database connection string to access the Lite…

The patch window has collapsedTraditional vulnerability management was built on the assumption that defenders could move faster than attackers.

Organizations increasingly need security systems capable of understanding risk, evaluating context, and adapting protections as conditions change.

Adaptive security systems aim to move beyond predefined rules toward continuously improving risk management.

Looking at the future of cybersecurityThe cybersecurity industry has spent decades improving vulnerability management, patch deployment, and security operations.

Those investments remain essential and will continue to be foundational elements of every organization’s security strategy.

Microsoft is also the largest cloud workload protection platform (CWPP) provider by revenue, with an estimated share of more than 22% of the global CWPP market.

Why cloud workload protection is being redefinedFor a long time, protecting a workload meant scanning its image, fixing known vulnerabilities, and hardening configurations before deployment.

Bottom lineFrost & Sullivan’s Frost Radar™: Cloud Workload Protection Platforms, 2026 reinforces a clear shift.

Learn moreRead Frost & Sullivan’s Frost Radar™: Cloud Workload Protection Platforms, 2026 to see how leading vendors are evaluated and how the category is shifting toward unified cloud runtime security.

Explore Microsoft cloud security…

Microsoft is also the largest cloud workload protection platform (CWPP) provider by revenue, with an estimated share of more than 22% of the global CWPP market.

Why cloud workload protection is being redefinedFor a long time, protecting a workload meant scanning its image, fixing known vulnerabilities, and hardening configurations before deployment.

Bottom lineFrost & Sullivan’s Frost Radar™: Cloud Workload Protection Platforms, 2026 reinforces a clear shift.

Learn moreRead Frost & Sullivan’s Frost Radar™: Cloud Workload Protection Platforms, 2026 to see how leading vendors are evaluated and how the category is shifting toward unified cloud runtime security.

Explore Microsoft cloud security…

Here, threat actors may simply seed prompt injections on websites in hope of corrupting AI systems that browse them.

Early experiments revealed a significant volume of "benign" prompt injection text, which illustrates the complexity of distinguishing between functional threats and harmless content.

Many prompt injections were found in research papers, educational blog posts, or security articles discussing this very topic.

(Source: GitHub/swisskyrepo)When searching for prompt injections naively, the majority of detections are benign content – false positives in our case.

Malicious: ExfiltrationWe were able to observe a small number of prompt injections that aim at theft of data.

Recognizing the risks associated within the complex modem firmware, Pixel 9 shipped with mitigations against a range of memory-safety vulnerabilities.

Following our previous discussion on "Deploying Rust in Existing Firmware Codebases", this post shares a concrete application: integrating a memory-safe Rust DNS(Domain Name System) parser into the modem firmware.

Hook-up Rust to modem firmwareBefore building the Rust DNS library, we defined several Rust unit tests to cover basic arithmetic, dynamic allocations, and FFI to verify the integration of Rust with the existing modem firmware code base.

Pixel modem firmware already has a well-tested and specialized global memory allocation system to…

This project represents a significant step forward in our ongoing efforts to combat session theft, which remains a prevalent threat in the modern security landscape.

Session theft typically occurs when a user inadvertently downloads malware onto their device.

Once active, the malware can silently extract existing session cookies from the browser or wait for the user to log in to new accounts, before exfiltrating these tokens to an attacker-controlled server.

How DBSC WorksDBSC protects against session theft by cryptographically binding authentication sessions to a specific device.

The issuance of new short-lived session cookies is contingent upon Chrome proving possession of the correspondi…

Staying ahead of the latest indirect prompt injection attacks is critical to our mission of securing Workspace with Gemini.

In our previous blog “Mitigating prompt injection attacks with a layered defense strategy”, we reviewed the layered architecture of our IPI defenses.

Synthetic data generationAfter we discover, curate, and catalog new attacks, we use Simula to generate synthetic data expanding these new attacks.

We partition the synthetic data described above into separate training and validation sets to ensure performance is evaluated against held-out examples.

This process leverages the newly generated synthetic attack data described on this blog, to create a robust, end-to-end evalu…

2025 marked a special year in the history of vulnerability rewards and bug bounty programs at Google: our 15th anniversary 🎉🎉🎉!

Coming back to 2025 specifically, our VRP once again confirmed the ongoing value of engaging with the external security research community to make Google and its products safer.

Vulnerability Reward Program 2025 in NumbersWant to learn more about who’s reporting to the VRP?

Tip: Want to be informed of new developments and events around our Vulnerability Reward Program?

Follow the Google VRP channel on X to stay in the loop and be sure to check out the Security Engineering blog, which covers topics ranging from VRP updates to security practices and vulnerability des…

To stay ahead of the curve, the technology industry must undertake a proactive, multi-year migration to Post-Quantum Cryptography (PQC).

To bring these critical protections to the wider developer community with minimal friction, the transition will be supported through Play App Signing.

Play App Signing leverages Google Cloud KMS, which helps ensure industry-leading compliance standards, to secure signing keys.

Empower Developers : The inclusion of ML-DSA support within Android Keystore and Play App Signing allows developers to safeguard their users and application.

: The inclusion of ML-DSA support within Android Keystore and Play App Signing allows developers to safeguard their users and …

Today we're announcing a new program in Chrome to make HTTPS certificates secure against quantum computers.

Instead, Chrome, in collaboration with other partners, is developing an evolution of HTTPS certificates based on Merkle Tree Certificates (MTCs), currently in development in the PLANTS working group.

Since MTC technology shares significant architectural similarities with CT, these operators are uniquely qualified to ensure MTCs are able to get off the ground quickly and successfully.

The Chrome Quantum-resistant Root Program will operate alongside our existing Chrome Root Program to ensure a risk-managed transition that maintains the highest levels of security for all users.

First, we…

For Majik, Scam Detection was the intervention he needed: “The warning is what made me pause and avoid a bad situation”.

As scammers evolve their tactics and create more convincing and personalized threats, we’re using the best of Google AI to stay one step ahead.

Expanding Scam Detection for Calls to Samsung DevicesTo help protect you during phone calls, Scam Detection alerts you if a caller uses speech patterns commonly associated with fraud.

Scam Detection for phone calls on Google Pixel devices is available in the U.S., Australia, Canada, India, Ireland, and the UK.

Powered by Gemini’s on-device model, Scam Detection provides intelligent protection against scam calls while ensuring that…

Upgrading Google Play’s AI-powered, multi-layered user protectionsWe’ve seen a clear impact from these safety efforts on Google Play.

As Android’s built-in defense against malware and unwanted software, Google Play Protect now scans over 350 billion Android apps daily.

This proactive protection constantly checks both Play apps and those from other sources to ensure they are not potentially harmful.

Looking aheadOur top priority remains making Google Play and Android the most trusted app ecosystems for everyone.

Thank you for being part of the Google Play and Android community as we work together to build a safer app ecosystem.

That’s why we're committed to providing multi-layered defenses that help protect you before, during, and after a theft attempt.

Today, we're announcing a powerful set of theft protection feature updates that build on our existing protections, designed to give you greater peace of mind by making your device a much harder target for criminals.

These updates are now available for Android devices running Android 16+.

More User Control for Failed Authentications: In Android 15, we launched Failed Authentication Lock, a feature that automatically locks the device's screen after excessive failed authentication attempts.

This feature is now getting a new dedicated enable/disable toggle in settings,…

These initiatives, driven by Ballots SC-080, SC-090, and SC-091, will sunset 11 legacy methods for Domain Control Validation.

What’s Domain Control Validation?

Domain Control Validation is a security-critical process designed to ensure certificates are only issued to the legitimate domain operator.

Sunsetted methods relying on email:Sunsetted methods relying on phone:Sunsetted method relying on a reverse lookup:For everyday users, these changes are invisible - and that’s the point.

These changes push the ecosystem toward standardized (e.g., ACME), modern, and auditable Domain Control Validation methods.

Partnership with ArmOur goal is to raise the bar on GPU security, ensuring the Mali GPU driver and firmware remain highly resilient against potential threats.

We partnered with Arm to conduct an analysis of the Mali driver, used on approximately 45% of Android devices.

This approach allowed us to roll out the new security policy broadly while minimizing the impact on developers.

This effort spans across Android and Android OEMs, and required close collaboration with Arm.

The Android security team is committed to collaborating with ecosystem partners to drive broader adoption of this approach to help harden the GPU.

We built on Gemini's existing protections and agent security principles and have implemented several new layers for Chrome.

To further bolster model alignment beyond spotlighting, we’re introducing the User Alignment Critic — a separate model built with Gemini that acts as a high-trust system component.

A flow chart that depicts the User Alignment Critic: a trusted component that vets each action before it reaches the browser.

The User Alignment Critic runs after the planning is complete to double-check each proposed action.

Looking forwardThe upcoming introduction of agentic capabilities in Chrome brings new demands for browser security, and we've approached this challenge with the same ri…

Android uses the best of Google AI and our advanced security expertise to tackle mobile scams from every angle.

Over the last few years, we’ve launched industry-leading features to detect scams and protect users across phone calls, text messages and messaging app chat notifications.

To help combat these types of financial scams, we launched a pilot earlier this year in the UK focused on in-call protections for financial apps.

The UK pilot of Android’s in-call scam protections has already helped thousands of users end calls that could have cost them a significant amount of money.

We’ve also started to pilot this protection with more app types, including peer-to-peer (P2P) payment apps.

Secure by DesignWe built Quick Share’s interoperability support for AirDrop with the same rigorous security standards that we apply to all Google products.

Secure Sharing Channel: The communication channel itself is hardened by our use of Rust to develop this feature.

On Android, security is built in at every layer.

On Android, security is built in at every layer.

Secure Sharing Using AirDrop's "Everyone" ModeTo ensure a seamless experience for both Android and iOS users, Quick Share currently works with AirDrop's "Everyone for 10 minutes" mode.