Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3616 articles
Microsoft says August 2026 .NET Framework updates can cause some WPF apps to fail when printing or creating PDF/XPS content with certain fonts. A temporary workaround disables protections added by the update; a permanent fix is pending.
The Dutch Data Protection Authority fined Uber €825 million for automatically suspending driver accounts without human review and for failing to inform drivers. Uber disputes the decision and plans to appeal.
Spring updates patch 91 vulnerabilities. Sonatype says the patches affect over 200,000 software components and highlights issues including a Spring for GraphQL RCE and a Spring AI prompt-injection privilege escalation.
Juan Manuel Gouveia-Aguilera received an eight-year federal sentence after pleading guilty to charges tied to ATM jackpotting; the court attributed more than $3.5 million in losses to him.
Aikido says its code audit found 68 of 89 known vulnerabilities in a private benchmark app, versus 60 for Claude Security with Mythos and 58 for Codex Security. Aikido reported a $75 cost, compared with $157 for Claude.
A roundup of privacy developments covers EU-wide consent-manager proposals, an €825 million Uber fine, Ontario police-drone guidance, FTC personalized-pricing proposals and Washington’s call for broader privacy protections.
Take-Two has sought court-authorized subpoenas for Microsoft and Discord records tied to accounts allegedly sharing GTA VI footage, aiming to identify the leaker before the game’s planned November release.
A researcher found that AliExpress scripts create muted WebAudio contexts and collect browser, device, and behavior signals for fingerprinting. Blocking the scripts with uBlock Origin stopped the audio contexts but may cause extra CAPTCHAs.
CERT-AGID identified emails impersonating Italy’s Ministry of Health with a fake €278.26 refund offer. Linked pages request identity, contact and payment-card details; CERT-AGID requested a takedown and shared indicators.
Kaspersky says a supply-chain attack used DoFun’s TWCore app to deliver JarService malware to Android car head units. The MoYu-linked operation can enlist devices as proxy nodes and support ad fraud; DoFun says it fixed the issue.
TikTok agreed to pay $400 million to settle a U.S. lawsuit alleging child-privacy violations. The DOJ says the company has implemented stronger safeguards, age controls and parental oversight; TikTok disputed some allegations.
Lawmakers asked the GAO to assess how CISA staffing cuts affect critical infrastructure protection and cyber response. Nearly 1,000 employees have left, and a proposed budget would cut nearly 900 more positions and over $700 million.
Researchers report Manic’s Android banking and spyware features, Grandoreiro’s ongoing campaigns and DLL sideloading, and ToxicPanda 2.0’s expanded app targeting and ADB abuse across multiple regions.
Researchers found 14 npm packages that masquerade as utilities but can launch RedShell, the Linux beacon for RedC2 4.0, when imported. The framework includes Red Agent, an LLM-backed command execution component.
NetSPI introduced EchoBench, a benchmark comparing autonomous web application pentesting systems with associate human testers across finding fidelity, difficulty reach, OWASP breadth, and repeatability.
Truffle Security researchers say they found 64,024 live AWS access-key pairs and root credentials across public repositories, datasets, container images and CI logs, spanning 9,945 accounts. Many had administrative privileges; AWS and identifiable owners were notified.
Former NSA and U.S. Cyber Command chief Paul Nakasone launched the Nakasone Group, which will advise private clients on cyber defense, digital security, fraud and impersonation protection, travel security, and threat intelligence.
Sen. Ron Wyden and Rep. Greg Casar asked the GAO to review federal agencies’ use of hacking tools and spyware, including safeguards, alleged misuse, tool procurement, Paragon, stolen L3Harris capabilities and Rule 41 requests.
A weekly roundup covers active Ray vulnerability exploitation, the Salt Typhoon intrusion at T-Mobile, breaches and ransomware activity, a contactless-payment attack demonstration, and a post-quantum HSM certification.
Wiz links malicious Rust crate releases on August 20 to North Korean actor Sapphire Sleet, citing infrastructure overlaps. The packages were removed within about 86 minutes, and Rust’s security team found no evidence they were used.
The episode discusses a compromised Rust maintainer account, related RubyGems and npm typosquatting campaigns, increased use of binary payloads, and PolinRider reinfections involving NullReceiver.
Kyle William Spitze, an early 764 member and Harm Nation leader, received a 77-year sentence after pleading guilty to CSAM and animal-crush-video crimes. The FBI investigation began after Discord reported the group.
The weekly roundup covers driver abuse, Mabna Institute charges, malware campaigns, refrigeration-controller flaws, RCE vulnerabilities in Gogs, n8n and CircleCI, Salt Typhoon reporting, and AI security developments.
Attackers hijacked the arrayref maintainer account and poisoned two other Rust crates. A malicious dependency ran during compilation to deploy credential-stealing malware; developers are advised to check for compromise and rotate exposed secrets.
