Hackers push malicious Virtualizor update in BGP hijacking attack
A BGP hijack delivered a malicious Virtualizor update; one provider found root compromise on five of 34 checked hypervisors.
Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands
SAN FRANCISCO – A federal grand jury has indicted Searzhudin Tamirlanovich Aktulaev on charges of Conspiracy, Transmission of a Program, Information, Code, and Command to Cause Damage to a Protected Computer, and Aggravated Identity Theft, among other offenses. Defendant was arrested in Cyprus in...
Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads
U.S. and European authorities disrupted the long-running botnet Sality, turning the malware’s peer-to-peer architecture against itself to cut thousands of infected computers off from operators.
SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks
Multiple Vulnerabilities have been discovered in SonicWall SMA1000 Series Appliances, which when chained together could allow for remote code execution, potentially leading to full system compromise. SonicWall Secure Mobile Access (SMA) 1000 Series appliances are enterprise-grade secure access and SSL VPN gateways. Successful exploitation of the vulnerabilities could allow for remote code execution.
Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild
A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access.
9.5 Million Impacted by Aesto Health Data Breach
The healthcare data company Aesto informed federal regulators this week that more than 9.5 million people had sensitive information leaked during a cyberattack last December.
Ransomware Gang Claims Nutex Health Data Breach
Ransomware.live discovered on 2026-09-01 that Nutex Health has been claimed by Thegentlemen ransomware group
Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity
Hackers are exploiting a critical Langflow flaw that lets unauthenticated attackers remotely execute Python code on vulnerable systems.
Nightmare Eclipse Drops ‘HardBreacher’ Kaspersky Product Exploit
Chaotic Eclipse released HardBreacher, a PoC exploit for a Kaspersky Endpoint Security privilege escalation flaw.
Russian hackers plant nuclear weapon prompt in malware to trip AI safety guardrails
Russia-aligned UAC-0099 used GuardBreaker prompt injection in a malicious VBS script to interfere with AI-assisted code analysis.
More Details Emerge on Exploited PaperCut Vulnerabilities
Two security vulnerabilities in the PaperCut NG and MF print management software, patched last week after being exploited as zero-days, are now being abused in data theft attacks.
Pharmaceutical giant McKesson warns of 'service degradation' following cyberattack
The company, which distributes medicines and medical devices to hospitals and healthcare practices across the U.S., said it was hacked and expects intermittent service degradation.
Steam victime d’une fuite géante de 12 To : des milliers de fichiers de jeux dévoilés - French Br...
Pendant des années, un point d'accès de l'ancienne infrastructure de Steam est resté ouvert au public sans que personne ne s'en aperçoive. Des individus ont fini par le trouver, et ils en ont extrait entre 12 et 13 téraoctets de fichiers couvrant tout ce qui a transité par la boutique entre 2003 ...
Hackers Are Probing PaperCut Servers, and 47% Still Have No Patch
Multiple vulnerabilities have been discovered in PaperCut products, the most severe of which could allow for remote code execution. PaperCut products are software tools used to track, control, secure, and manage printing, copying, and scanning across office and school printer networks. Successful exploitation of the most severe of these vulnerabilities could allow for remote code execution in the context of the affected service account. Depending on the privileges associated with the service account, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Services whose accounts are configured to have less rights on the system could be less impacted than those who operate with administrative user rights.
Piratage de Claude : Anthropic alerte ses clients d’une cyberattaque, 6 virus à l’assaut de votre PC
Sony et Warner Music, deux géants de l’industrie musicale, accusent Anthropic d’avoir utilisé massivement du contenu protégé par le droit d’auteur pour développer et opérer ses modèles Claude. Pour rappel, celui-ci a aussi été attaqué en justice par un groupe d’auteurs et d’éditeurs, mais a accepté un accord de 1,5 milliard de dollars pour mettre fin aux poursuites.
China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs
Le groupe Fire Ant, lié à la Chine, installe un dispositif d’écoute permanent sur des routeurs Cisco iOS XR placés au cœur de réseaux d’entreprise. Ces appareils compromis recueillent le trafic et les identifiants des équipes techniques, sans déclencher la moindre alerte. L’opération est dans la lignée d’une campagne engagée en 2025 contre les hyperviseurs VMware.
GiveWP WordPress donation plugin flaw lets hackers execute server commands
A critical GiveWP flaw lets unauthenticated attackers execute server commands. Version 4.16.7.2 fixes the PHP object injection chain.
US officials backpedal on claims that government agencies were hacked by Chinese
DoJ corrected its QTFY statement, saying several U.S. agencies were targets rather than confirmed victims of the China-linked campaign.
Zéro Logement Vacant piraté : ZeroBytes revendique une fuite massive de données d’un service de l...
Trois semaines après le fisc, le groupe ZeroBytes revendique le pillage d'une plateforme publique méconnue. À la clé, potentiellement, le patrimoine immobilier de la quasi-totalité des propriétaires français.
Cyberattaque dans l'Éducation nationale : des académies encore paralysées à quelques jours de la ...
📡 Ransomwares & piratages : 15 cyberattaques d’ampleur du 1 septembre 2026 (dont DDoS) Infiltrations, demandes de rançon et paralysies de réseaux : retour sur les 15 attaques majeures de la semaine du 1 septembre 2026.
📡 Royaume-Uni : une cyberattaque stoppe une centrale 4 jours Une cyberattaque attribuée à l'Ira...
Trois actualités à retenir cette semaine dans le cyberespace : un chercheur qui a laissé une IA rétro-ingénierer ses propres appareils avec un bilan glaçant, une cyberattaque iranienne qui a mis à l'arrêt une centrale électrique britannique, et un malware inédit qui transforme les autoradios connectés en relais pour
Berlin Refuses to Pay Hackers Who Stole Data From the City's State Network
Governing Mayor Kai Wegner said on Friday that Berlin had received an extortion demand following the cyberattack, which was discovered in mid-August.
🏴☠️ Rhysida has just published a new victim : Berlin, Germany
Berlin confirms an extortion attempt after a major data breach as Rhysida claims it stole 1.44 million files and demands 30 Bitcoin in ransom.
Toy-making giant Hasbro disclose data breach affecting employees
Toy and game giant Hasbro is notifying employees that their personal information may have been compromised in a data breach.