Category: Cyber Security News

North Korean IT workers are using fake identities, AI-generated profiles, proxy addresses, and overseas facilitators to bypass hiring controls and gain legitimate access to corporate systems. Organizations can reduce this risk by combining government-issued document checks, biometric liveness detection, and stronger service-desk identity verification. #NorthKoreanITworkers #SpecopsSecureOnboarding #USDepartmentofState #FBI

The FBI warns that criminals are stealing sexually explicit images and videos from adults’ and children’s social media and online accounts to extort victims or sell the material on criminal marketplaces. The bureau also says student-athletes are being targeted in similar sexual exploitation schemes, and it urges stronger account security, multi-factor authentication, and caution with unsolicited reset or verification messages. #FBI #NCAA #sextortion

North Korean hackers linked to Lazarus are exploiting the Windows zero-day CVE-2026-68820 in the Operation Dream Job campaign to gain SYSTEM privileges on targeted systems. The attacks have focused on defense, aerospace, and aviation organizations, while also using the FudModule rootkit, the Troy backdoor, and the RelayShell web shell to expand access and evade defenses. #CVE-2026-68820 #Lazarus #OperationDreamJob #FudModule #Troy #RelayShell #Roundcube

Intel and AMD released patches for more than 80 vulnerabilities across a wide range of products, including processors, wireless software, and AI-related tools. The fixes address issues that could lead to privilege escalation, denial of service, information disclosure, private key disclosure, and arbitrary code execution. #Intel #AMD #PROSetWirelessWiFi #Xeon #Vitis #RyzenMasterUtility…

Ceva Logistics suffered a cyberattack that disrupted its European operations, affecting eight warehouses and delaying shipments for customers across the region. Several companies, including Bol, De Bijenkorf, ING, Ace & Tate, Ajax, and Valve, reported possible exposure of customer or delivery-related information. #CevaLogistics #Bol #DeBijenkorf #ING #AceandTate #Ajax #Valve #CoinbaseCartel…

WhatsApp is rolling out Scam Alert in limited beta, using on-device machine learning to flag suspicious messages from non-contacts while keeping all classification and reporting local to the device. Signal has also added automatic key verification to strengthen end-to-end encrypted chats by using key transparency and independent audits to detect unauthorized…

Nightmare Eclipse has released ShieldBreak, a new Microsoft Defender zero-day exploit that bypasses the patched RoguePlanet flaw and can elevate attackers to SYSTEM privileges on fully patched Windows systems. The exploit has been independently confirmed and is part of an ongoing dispute with Microsoft over disclosure and bug bounty practices. #ShieldBreak #RoguePlanet #NightmareEclipse #MicrosoftDefender #Windows11 #WindowsServer

Signal introduced Automatic Key Verification to help users confirm their encrypted chats have not been intercepted, using a key transparency system with Cloudflare and Trail of Bits as independent auditors. The feature complements manual safety number checks and arrives after phishing and social engineering campaigns against Signal users, including attacks linked to Russian state-sponsored hackers, UNC5792, and UNC4221. #Signal #Cloudflare #TrailofBits #UNC5792 #UNC4221

Rapid7 published a proof-of-concept exploit for CVE-2026-55040, a critical Microsoft SharePoint authentication bypass, and it is already being used in attacks against SharePoint honeypots. Microsoft and CISA have urged defenders to harden and restrict exposed SharePoint servers while noting that CVE-2026-45659 is also being abused by ransomware gangs. #Rapid7 #CVE-2026-55040 #MicrosoftSharePoint #CISA #CVE-2026-45659

Siemens, Schneider Electric, Phoenix Contact, Honeywell, and CISA released August 2026 advisories for multiple ICS and building management product vulnerabilities, including code execution, privilege escalation, and denial-of-service flaws. The most severe issues affect Siemens Simatic IoT2050 Advanced and Siveillance Video Management Servers, while Phoenix Contact and Schneider Electric also patched critical…

Ivanti has released patches for four vulnerabilities affecting Endpoint Manager (EPM) and Neurons for MDM, including issues that could let remote attackers leak credentials, crash services, or control filenames. The company says it has seen no evidence of exploitation in the wild and that no other Ivanti products are impacted. #Ivanti…

North Korean hackers linked to the Lazarus Group are abusing the newly patched Windows zero-day CVE-2026-68820 in fake job application lures to compromise defense, aerospace, and aviation targets. The campaign uses Mistpen, ForestTiger, Troy, SecurityPDF, and RelayShell to gain SYSTEM privileges, persist, and steal data through compromised web infrastructure. #LazarusGroup #CVE-2026-68820…

A federal judge issued a second injunction blocking the U.S. Postal Service from implementing President Donald Trump’s executive order on mail-in voting, citing constitutional concerns. The ruling preserves the current election status quo while the administration seeks Supreme Court review. #USPS #DonaldTrump #IndiraTalwani

Palo Alto Networks’ Unit 42 says the Kimwolf, or Aisuru, botnet has added an HTTP/2-based flood method that uses Chrome-like browser fingerprints to make DDoS traffic look like normal web browsing. The latest version also shifts command-and-control lookups to Ethereum Name Service and Tor to resist takedowns after prior infrastructure seizures and arrests. #Kimwolf #Aisuru #Unit42 #EthereumNameService #Tor

A cyberattack on Ceva Logistics disrupted shipments for major European retailers and may have exposed customer data tied to Steam hardware orders in Europe. The incident affected eight warehouses, while the full scope, attacker identity, and whether ransomware or extortion were involved remain unclear. #CevaLogistics #Steam #Valve #Bol #DeBijenkorf #Ace&Tate #Ajax…