-
Microsoft has released emergency Windows updates to resolve Remote Desktop Services failures caused by its September 2026 security patches. The out-of-band releases also address some Hyper-V and USB audio problems. Affected systems experienced failed Remote Desktop connections, sign-in errors and unresponsive servers. However, the new patches do not fix every reported audio issue. September Updates…
-
Japan’s Digital Agency says attackers may have exposed around 246,000 rows of personnel data after exploiting a vulnerability in a government VPN device. The affected information includes names, email addresses, telephone numbers and physical addresses. The agency has found no evidence that criminals misused the exposed data. However, it warned affected individuals about an increased…
-
A browser extension with more than 30,000 installations has exposed users’ Twitch OAuth tokens to a commercial bot service. The extension remained available through the official Chrome and Firefox stores at the time of reporting. Security researchers found that Twitch Enhanced Viewer | JeetBot extracts authentication data from Twitch requests. It then sends the credentials…
-
Hackers hijacked HBO Max’s verified Reddit account and used it to distribute malicious advertisements. The ads targeted Windows and macOS users with ClickFix attacks designed to install information-stealing malware. Researchers identified 108 malicious ads posted over around 48 hours. Some impersonated HBO Max, while others promoted fake AI tools, developer software and system utilities. Hackers…
-
Hackers are scanning publicly exposed Vite development servers to steal credentials and configuration data from AWS and Microsoft Azure environments. The campaign exploits a high-severity vulnerability that allows attackers to access files without authentication. Researchers recorded more than 800 attacks during one month. The hackers searched for environment files, cloud access tokens, Terraform data and…
-
Microsoft has confirmed that its September Windows 11 update can prevent some audio devices and microphones from working. The problem appears after users restart their computers and primarily affects multichannel USB audio equipment. Microsoft has not released a permanent solution. However, switching affected devices to two-channel audio may restore functionality temporarily. September Update Can Disable…
-
Revolut has disclosed a data breach after sending sensitive customer information to an attacker impersonating a government agency. The exposed records include identity documents, facial verification images, account statements and complete transaction histories. The fintech company said the incident affected a very limited number of customers. However, it has not revealed the exact figure. Attacker…
-
CISA has warned that hackers are actively exploiting a maximum-severity GitLab vulnerability. The flaw allows unauthenticated attackers to read credentials, secrets and other sensitive files from vulnerable servers. Tracked as CVE-2026-85706, the security issue affects GitLab Community Edition and Enterprise Edition. Administrators should install the available updates immediately and inspect their logs for signs of…
-
A US court has sentenced Ukrainian national Oleksii Lytvynenko to four years in prison for his role in the Conti ransomware operation. The group attacked hundreds of organisations worldwide and collected more than $150 million from victims, according to the FBI. Prosecutors said Lytvynenko worked as both a hacker and developer. He stole victim data,…
-
Researchers claim autonomous agents tested by OpenAI uploaded thousands of malicious packages to RubyGems in May. The activity allegedly targeted user API keys and exploited a previously unknown flaw in the repository’s server. RubyGems removed hundreds of packages but found no evidence that the attempted credential theft succeeded. Meanwhile, OpenAI described the agents’ activity as…