-
Researchers have uncovered an exposed server that allegedly supported an AI ransomware operation targeting more than 30 companies. The infrastructure contained 3.1TB of stolen data, malware-related tools, AI-generated scripts and records covering attacks from initial access through ransom demands. Cybernews linked the server to an affiliate of The Gentlemen ransomware group. Researchers say the operation…
-
Hackers have published data they claim to have stolen from Manchester Airports Group, exposing information linked to nearly 8.7 million customers across Manchester, London Stansted and East Midlands airports. The Manchester Airports data breach did not involve bank or payment details, according to the airport operator. However, the exposed information includes email addresses, phone numbers,…
-
A Hugging Face Transformers bug can write attacker-controlled Python files to a user’s computer before the library asks for permission to trust remote code. The vulnerability affects a widely used AI development library and may leave malicious scripts in the local cache after a user rejects the prompt. Tracked as CVE-2026-80047, the issue affects Transformers…
-
OpenAI says its upcoming Astra model is capable enough to require stronger safeguards before release. The company says OpenAI Astra can identify previously unknown security vulnerabilities and develop ways to exploit them with limited human guidance. Astra will be the first OpenAI model to trigger the tougher protections set out in the company’s safety protocol.…
-
Attackers are actively exploiting a critical Sangoma Switchvox flaw to run commands and deploy reverse shells on exposed business phone systems. The vulnerability, tracked as CVE-2026-9586, affects the enterprise VoIP platform and requires no authentication. Security researchers at Horizon3 observed attacks against multiple honeypots on August 30. They warn that attackers may have already targeted,…
-
A high-severity WordPress backup plugin flaw could let unauthenticated attackers take control of vulnerable websites. The issue affects All-in-One WP Migration and Backup, a widely used tool with more than five million active installations. Tracked as CVE-2026-19949, the vulnerability can lead to remote code execution when an administrator restores a site backup. ServMask fixed the…
-
A critical JFrog Artifactory flaw is being actively exploited to create administrator access tokens on vulnerable self-managed servers. The authentication bypass, tracked as CVE-2026-82329, can give unauthenticated attackers extensive control over software repositories and the packages stored inside them. JFrog released fixes on August 28. However, organisations that have not yet updated their servers could…
-
The Qilin ransomware group has published data it claims to have stolen from the US Bureau of Alcohol, Tobacco, Firearms and Explosives, potentially exposing sensitive investigation files, phone records and forensic evidence. The ATF confirmed that attackers breached a standalone system used in connection with federally authorised electronic surveillance. However, it has not confirmed the…
-
A Dropbox account breach affected about 5,000 users after attackers exploited a Lenovo ID authentication flaw to access accounts using only victims’ email addresses. Dropbox said the activity ran from August 4 to August 21. The attackers created Lenovo IDs using victims’ email addresses, then linked those identities to existing Dropbox accounts. Lenovo ID flaw…
-
SonicWall has warned customers that attackers are actively exploiting two SonicWall SMA1000 zero-days in a chain that can enable remote code execution on vulnerable appliances. The company urges organisations to install the latest hotfix immediately and investigate any signs of compromise. Two flaws allow command execution The attack chain includes CVE-2026-83548, a maximum-severity command injection…