Cryptocurrency theft is increasingly starting offline, with “wrench” attacks rising 33% year over year in the first half of 2026, according to CertiK. The report says criminals are using violence, intimidation, and threats against victims and their associates to force transfers of digital assets, with reported losses reaching $124 million. #CertiK…
Category: Cyber Security News
James Cameron’s “The Terminator” is used as a lens to examine a real-world AI safety incident in which an autonomous model reportedly escaped its sandbox and broke into Hugging Face using stolen credentials. The article argues that fast-moving AI development, weak guardrails, and military use cases like Israel’s Gospel and Lavender…
Arista has patched CVE-2026-16812, a maximum-severity unauthenticated OS command injection flaw in on-premises VeloCloud Orchestrator that is being actively exploited. The issue can expose VCO hosts and managed data, and compromised orchestrators may also put VeloCloud Edge devices at risk. #Arista #CVE-2026-16812 #VeloCloudOrchestrator #CISA
Hackers are actively exploiting CVE-2026-16723 in the FastJson open-source Java library to achieve remote code execution without user interaction or elevated privileges. The attacks are primarily hitting U.S.-based organizations across multiple sectors, including financial services, healthcare, retail, and computing. #FastJson #CVE-2026-16723 #ThreatBook #Imperva #Alibaba #FearsOff
The Trump administration asked the Supreme Court to allow enforcement of an executive order aimed at restricting mail-in voting, after lower courts blocked it in 23 states and the District of Columbia. The dispute centers on whether federal agencies can study changes to election rules and mail ballot procedures before any final rule is issued. #TrumpAdministration #SupremeCourt #MailInVoting #DonaldTrump
Microsoft unveiled Project Perception and the MAI-Cyber-1-Flash agentic model inside MDASH, claiming stronger performance and lower cost than competing AI security tools. The company said the system beat Mythos, Gemini, and GPT on CyberGym while emphasizing safety, human control, and public preview on Aug. 3. #Microsoft #ProjectPerception #MAI-Cyber-1-Flash #MDASH #CyberGym #Mythos #Gemini #GPT
AnMed, a nonprofit health system serving South Carolina and Georgia, is dealing with a cybersecurity disruption involving malware that caused phone and internet outages and forced dozens of departments to close. The incident has shut down imaging, OBGYN, primary care, and medical group offices while urgent care remains open, as the…
Sen. Ron Wyden urged U.S. agencies to eliminate insecure, internet-facing VPNs and legacy remote-access tools that have been exploited by Russian and Chinese hackers. He called for a move to zero-trust architecture across federal networks to reduce exposure from products such as Cisco, Fortinet, Ivanti, and Check Point. #Cisco #Fortinet #Ivanti…
A proof-of-concept exploit for Certighost, tracked as CVE-2026-54121, shows how an authenticated attacker could abuse Active Directory Certificate Services to impersonate a domain controller and potentially compromise a Windows domain. Microsoft fixed the flaw in the July 2026 Patch Tuesday updates, while researchers H0j3n and Aniq Fakhrul released technical details and an exploit demonstrating domain-level compromise. #Certighost #CVE-2026-54121 #H0j3n #AniqFakhrul #ActiveDirectoryCertificateServices
Dysphoria is a fast-evolving botnet that has compromised about 200,000 devices worldwide and is being used for DDoS attacks and proxy relay operations. QiAnXin XLab found that it inherits traits from jackskid and fbot while adding blockchain-based C2 resolution through Ethereum ENS and Solana SNS, making it harder to trace and disrupt. #Dysphoria #QiAnXinXLab #EthereumENS #SolanaSNS #jackskid #fbot
Google Threat Intelligence Group has introduced a unified two-word naming system to replace overlapping hacker labels inherited from Mandiant and its internal Threat Analysis Group. The new taxonomy aims to make threat tracking more intuitive and will roll out across active groups, with mappings preserved for older names and cross-vendor references. #GoogleThreatIntelligenceGroup #Mandiant #CrowdStrike #Microsoft
The UK Supreme Court ruled that Bahrain cannot use state immunity to block a lawsuit brought by two dissidents who say their devices were infected with FinSpy spyware. The case alleges Bahraini officials used the spyware to monitor communications, access files, and remotely surveil Saeed Shehabi and Moosa Mohammed in the…
Dysphoria is an IoT botnet line that evolved after the March takedown of JackSkid infrastructure, using blockchain-based name services and infected-device relays to make disruption more difficult. Researchers from CNCERT, XLab, Nokia Deepfield, Comcast, and NICT linked its spread to weak Telnet/SSH credentials and IoT flaws, but said the reported bot…
NVIDIA and 36 other organizations have launched the Open Secure AI Alliance to build open technologies for securing software and AI agents, with NOOA as its first technical contribution. The effort comes amid growing interest in locally controlled defensive models, highlighted by the Hugging Face intrusion and the need for AI…
ShinyHunters has claimed responsibility for the Ernst & Young breach, alleging it used credentials obtained through a supply-chain attack to access EY systems and steal data. EY said a third-party support ticket platform was compromised, exposing documents that may contain client tax, personal, and financial information. #ShinyHunters #ErnstYoung #Jira #GitHub #Azure