-
Apple has sent a new round of Apple Threat Notifications to users it believes may have been individually targeted by mercenary spyware. The alerts are high-confidence warnings aimed at a small number of people, including journalists, activists, politicians and diplomats. Apple issues new spyware alerts Users reported receiving Apple Threat Notifications on 13 August. Apple…
-
Ukrainian authorities have shut down 94 fraudulent call centers accused of running investment scams, bank impersonation schemes and remote-access fraud. The nationwide operation resulted in 411 searches and the seizure of millions in cash, equipment and cryptocurrency wallet access tools. Major operation targets fraud networks Ukraine’s National Police carried out the operation with the Security…
-
An Akira ransomware affiliate used Windows Safe Mode with Networking to disable security tools after accessing a network through an exposed SonicWall VPN device. The attackers stole files and credentials, but their encryption payload failed to run. Akira attackers access network through exposed VPN The Akira ransomware Safe Mode attack began on 4 August when…
-
The Jewelbug hacker group has breached government webmail systems in the Middle East while operating a parallel cryptocurrency fraud network. Researchers found that the same infrastructure supported cyber espionage, credential theft and AI-generated scam sites. Jewelbug compromises shared government webmail Jewelbug, also tracked as Earth Alux and REF7707, targeted government, military and critical-sector organisations across…
-
Security researchers have obtained a 153GB archive containing credentials allegedly stolen during the March LiteLLM supply-chain attack. The data reportedly links to almost 2,500 organisations, including AWS, Cisco, Samsung, Salesforce and other major companies. The LiteLLM breach archive contains cloud credentials, access tokens, AI provider keys and other sensitive data. However, exposure in the dataset…
-
Twitch has introduced a setting that lets Amazon use channel content to train generative AI models. The platform turns it on by default, so creators must opt out if they do not want to take part. The Twitch AI training setting has angered streamers who say creators should decide before a platform uses their videos,…
-
Microsoft has released security updates for the LegacyHive vulnerability, a Windows zero-day flaw that could allow a local attacker to gain administrator privileges. Tracked as CVE-2026-62832, the issue affects the Windows User Profile Service. Microsoft fixed it in the August 2026 Patch Tuesday updates after a public proof-of-concept exploit appeared shortly after July’s patches. LegacyHive…
-
A growing number of tools now claim to remove AI watermarks from text and files. However, almost none can show that they defeat Anthropic’s new invisible Claude watermark. The market emerged soon after Anthropic introduced content marking across its latest Claude models. It includes open-source projects, newly registered websites and commercial AI-detection evasion services. Yet…
-
Attackers are actively exploiting a critical VMware vCenter vulnerability to install a reverse SSH tool that provides persistent remote access to compromised systems. The VMware vCenter RCE flaw, tracked as CVE-2026-59310, affects the vCenter Syslog Server. Researchers have identified 361 affected IP addresses across 47 countries, with many victims located in Germany, the United States,…
-
Hardware wallet maker Trezor has disclosed a data breach affecting almost 14,000 customers after attackers accessed systems belonging to its shipping and logistics provider, ShipMonk. The Trezor data breach exposed customer order information, including names, email addresses, phone numbers and shipping addresses. Trezor said its own systems were not compromised and that customers’ hardware wallets…