Aggregator

Машина весит 20 килограммов, прогревается десять минут и умеет выполнять 128-битные вычисления.

在大众的固有认知里，警方的拦停、搜查行为必然建立在明确的违法嫌疑之上，执法行动需要具备合理依据与确凿线索。

Quantinuum H2 прошёл тест, где максимальный результат обычного компьютера ограничен математическим доказательством.

Healthcare technology company Veradigm disclosed a data breach after a cybersecurity incident at one of its third-party vendors exposed patients' personal data. [...]

Brett Leatherman said that industry has the wrong idea about what the FBI does with the data it collects during incidents, which is used to help victims and investigations alike.

The post FBI cyber chief worries private sector not sharing enough cyber threat information appeared first on CyberScoop.

Один управляющий сервер может открыть атакующим дорогу сразу к целой инфраструктуре.

The hacking tool, built using a combination of AI models, is effective against Android and iOS devices

A Russian-speaking threat actor has weaponized artificial intelligence at an unprecedented scale, deploying hundreds of autonomous AI agents to exploit critical vulnerabilities in PaperCut NG/MF print management software and compromise at least 440 servers across 395 organizations in 48 countries. Security researchers at GreyNoise identified the campaign through their Global Observation Grid, a network of […]

The post Hackers Use Hundreds of AI Agents to Exploit PaperCut Flaws and Compromise 440 Servers Worldwide appeared first on Cyber Security News.

"Workflow identity hijacking" can bypass standard security controls and hijack an organization's data by sending a basic request through an unauthenticated entry point.

Литий оказался слишком тяжёлым для новой гонки процессоров будущего.

Gigabud clones banking apps into a work profile to break the link between malware alerts and fraud

ClearFake has expanded a fake CAPTCHA scam into a chain that steals cryptocurrency and credentials while disabling endpoint protection. It turns compromised websites into launchpads, relying on visitors to run a command that appears routine. The operation begins with injected browser code, blockchain-hosted instructions, and a ClickFix prompt styled as a Google CAPTCHA. After a […]

The post ClearFake Deploys Crypto Stealer That Uses Vulnerable Driver to Kill EDR Security Tools appeared first on Cyber Security News.

Cybercriminals are hijacking artificial intelligence (AI) user accounts via information stealer logs to create "stolen keys" that grant illicit access to tools from model providers like Google, Anthropic, and others.  Information stealers like Lumma Stealer or Vidar are equipped to harvest a wide range of data from compromised systems. This can include credential, session tokens, and API

Software developers are being targeted with fake job offers that turn routine coding tests into a path for remote access malware. The campaign uses recruiter personas on LinkedIn and other employment platforms to deliver projects that appear safe enough to run. The operation is attributed to the Iran-linked group Mirage Kitten, also known as UNC1549. […]

The post Hackers Use Fake LinkedIn Job Offers to Infect Developers With New Cross-Platform RATs appeared first on Cyber Security News.

A critical cross-site scripting vulnerability in the widely used MapLibre GL JS library could expose applications and an estimated 2.7 million users to zero-click attacks. The flaw, tracked as CVE-2026-85061 and GitHub Security Advisory GHSA-jrc7-96c5-q579, affects maplibre-gl versions 6.4.0 and earlier. MapLibre GL JS is an open-source JavaScript mapping library used by websites and web […]

The post MapLibre Vulnerability Exposes 2.7M Users to Zero-Click Attacks appeared first on Cyber Security News.

Граница между лабораторным экспериментом и реальной угрозой стала заметно тоньше.

MFA makes account takeover harder, but attackers are increasingly targeting the recovery processes used to reset passwords and authentication methods. Specops explains why stronger identity verification at the service desk is critical to preventing social engineering attacks from turning account recovery into account takeover. [...]

Microsoft is expanding Windows Family Safety with account-based age verification, privacy-focused age signals, and improved parental controls. The company said the updates are designed to help Windows apps, games, services, and AI experiences provide protections that match a user’s age. The initiative uses the Microsoft account as the central identity layer for family safety on […]

The post Microsoft Expands Windows Family Safety With Built-In Age Verification and Parental Controls appeared first on Cyber Security News.