اخبار امنیتی

Krebs on Security ۱ روز پیش

Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies

Google said today it worked with industry partners to dismantle a botnet made up of more than 1.3 million Android TV set-top boxes that ship with malicious software which secretly rents the user's Internet connection out to strangers and conducts advertising fraud. Experts involved in the takedown say the action is likely to sever the botnet's access to more than 10 million additional compromised…

The Register ۱ روز پیش

Max-severity bug in widely used OT programming tool exploited to deliver Linux malware

Your industrial IoT gateway isn't exposed to the internet, right? RIGHT?!

CVE-2026-58115CVE-2019-17558

BleepingComputer ۱ روز پیش

Chinese hackers use ARTEX AI in automated attacks against 200 orgs

Chinese hackers used ARTEX, an open-source, multi-agent AI penetration-testing framework, in attacks against more than 200 organizations across 14 countries. [...]

The Register ۱ روز پیش

Cops bust botnet of 1.3M infected Android TV boxes

Videostrong accused of shipping devices with a backdoor baked in

BleepingComputer ۱ روز پیش

Fintech platform Sageworks taken offline after suspected cyberattack

Financial technology company Abrigo has restored its Sageworks risk management application, except for borrower-facing capabilities, following an outage triggered by "irregular activity" in its environment. [...]

Security Affairs ۱ روز پیش

VOLTA, the infostealer that asks an AI which victims are worth the effort

VOLTA is an AI-powered infostealer that steals personal data, then uses LLMs to assess victims’ value and rank targets for attackers. Cisco Talos has analyzed a new Windows infostealer called VOLTA, which calls itself VOLTA-AUTODOXER. It steals the usual data, then hands the loot to a large language model that ranks what the victim is […]

BleepingComputer ۱ روز پیش

Google disrupts million-device XCPE Android malware botnet, bans TV box maker

Google and industry partners have dismantled the XCPE malware botnet consisting of more than 1.3 million Android TV streaming TV boxes that Google says its manufacturer intentionally infected with malware to generate revenue through cybercrime activities. [...]

The Register ۱ روز پیش

Thieves pilfer environment variables from Trigger AI workflow tool

So, who's ready to clear the dust out of that server closet and move things back on-prem?

The Register ۱ روز پیش

Token thieves costing companies $100K+ per day in illicit LLM charges

Don't let the LLMjackers hit you

BleepingComputer ۱ روز پیش

BTCPay Server warns of hot wallet crypto thefts on outdated instances

The maintainer of BTCPay Server, an open-source cryptocurrency payment processor, has urged users to install the latest version as hackers have been draining "hot wallets" on instances running older versions. [...]

BleepingComputer ۱ روز پیش

Your Mobile Carrier Stores Your Call Logs for Years

Mobile carriers can retain years of call and text metadata, exposing sensitive details about customers' relationships, locations, and daily routines if breached. Cape examines the privacy risks of long-term telecom data retention and how its mobile service reduces exposure by automatically deleting call records. [...]

Infosecurity Magazine ۱ روز پیش

Armadin Tests Find 88% of Severe Flaws Outside Vendor Advisories

Armadin found 88% of critical and high findings in its client tests fell outside vendor advisories

The Register ۱ روز پیش

Nuclear threats and street brawls: Russia, Ukraine report attacks on their emergency alert apps

Within minutes of a ceasefire lifting in Kherson, Ukraine’s citizens were pummelled with threatening notifications

Malwarebytes Labs ۱ روز پیش

5 stars for sale: Inside the underground fake review trade

Underground sellers offer five-star reviews and charge up to $1,100 to make negative feedback disappear.

Malwarebytes Labs ۱ روز پیش

Applebee’s customer data exposed by password left in app

A researcher found an embedded password in Applebee’s app that exposed customer data.

Infosecurity Magazine ۱ روز پیش

Bitter Deploys PapRAT in Asian Cyber-Espionage Campaign

Bitter used three infection chains against South and Southeast Asian targets, one with no malware executable

The Register ۱ روز پیش

Frozen part II: Hackers remotely defrost produce in Euro supermarkets ... again

Let it go (bad): Dozens of stores report mass food wastage as managers start their week in puddles

Security Affairs ۱ روز پیش

New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia

A new wave of fridge cyberattacks hit supermarket refrigeration systems across five European countries, raising temperatures and causing food losses. A new wave of fridge cyberattacks has affected supermarket refrigeration systems in several European countries. Fridges and freezers suddenly rose in temperature overnight, with some incidents suspected to be caused by hackers. On Monday, November…

Schneier on Security ۱ روز پیش

AI Vulnerability Finding

A comment : 3% of ‘critical’ software security bugs, in all of recorded history, have been found in the last month. This is on pace to find another ~100,000 bugs this year alone, adding ~26% more vulnerabilities to the all time total Do you realize how fucking insane that is? Yes. It is a new world out there.

The Register ۱ روز پیش

FBI pins $6.3B Binance crypto heist on North Korean hackers

Exchange scrambles to replace stolen funds as customers withdraw billions and hackers get busy laundering their haul