logo

News related to
flaw

An autonomous security agent developed by Wiz uncovered and exploited a serious vulnerability in a Snowflake GitHub Actions workflow that had passed GitHub Advanced Security checks, highlighting emerging risks as artificial intelligence becomes increasingly embedded in software development and cyber defence. The flaw affected the public snowflakedb/snowflake-connector-net repository and allowed an unauthenticated GitHub user to execute arbitrary commands simply by opening an issue containing a specially crafted […]

SafePal has warned nearly 40,000 customers that their personal information was exposed after attackers exploited a flaw in an order-tracking system, creating a heightened risk of targeted phishing and impersonation attacks against cryptocurrency holders. The cryptocurrency wallet provider said information belonging to approximately 39,798 customers was accessed without authorisation. The affected records covered purchases made between March 2, 2025 and April 11, 2026 and contained names, email […]

Cl0p has claimed a sweeping data-theft campaign affecting nearly 50 companies worldwide, placing Shell, Philips, GE and financial technology group Fiserv among the organisations named on the cybercrime operation’s leak site. Several companies have opened investigations, although the scale of the alleged theft remains unverified. The campaign appears to mark another large-scale attempt by the Russia-linked extortion group to exploit a weakness in widely deployed enterprise software […]

China’s artificial intelligence race has intensified with Z. ai unveiling a coding model with powerful cybersecurity capabilities and DeepSeek pushing an upgraded flagship into wider commercial use, reinforcing the country’s growing challenge to leading US developers. Z. ai’s GLM-5.3 has emerged as the more striking of the two launches because of its ability to identify software vulnerabilities. The company said the model scored 84.5 per cent on […]

Harmony is moving towards rolling back its blockchain after an attacker exploited weaknesses in the network to create billions of unauthorised ONE tokens, forcing developers to halt parts of the system and coordinate an emergency response with validators and cryptocurrency exchanges. The Layer-1 blockchain has identified block 92,730,034, recorded on August 11 at 23:25:37 UTC, as the proposed point to which the network would be restored. Harmony […]

North Korea-linked hackers exploited a previously unknown Windows vulnerability to gain the highest level of system privileges while targeting defence, aerospace and aviation organisations across several countries. The flaw, tracked as CVE-2026-68820, affects the Windows Ancillary Function Driver for WinSock, known as AFD. sys. Microsoft patched the vulnerability on August 11 after it was found being actively exploited as part of the long-running Operation Dream Job cyber-espionage […]

Cursor has patched a security flaw in its command-line coding agent that allowed a malicious repository to execute commands on a developer’s computer before the user was asked whether the workspace should be trusted. The weakness affected Cursor CLI’s worktree feature and could be triggered when a user launched the agent with the -w option inside a repository containing a specially crafted. cursor/worktrees. json file. The file […]

Advertisements

Ravencoin is confronting the prospect of a deep blockchain reorganisation that could reverse several days of transactions after a critical software vulnerability allowed invalid blocks to enter its ledger. Two of the network’s largest mining pools, 2Miners and RavenMiner, are building an alternative chain from block 4,487,775, the last block before the first known invalid block appeared on August 7. Together, the pools control a majority of […]

GitHub has expanded Dependabot malware alerts across major open-source package ecosystems, widening automated protection against compromised and deliberately malicious software dependencies beyond the npm registry. The change gives developers earlier warnings when projects depend on packages identified as malware. The expanded coverage is powered by the GitHub Advisory Database importing malicious-package intelligence from the OpenSSF Malicious Packages project. The database can now feed those records directly into […]

Atlassian has fixed a security flaw in its Rovo artificial intelligence assistant that could have allowed attackers to turn a single malicious link into a channel for stealing sensitive corporate information from services accessible to a logged-in employee. The vulnerability, dubbed RovoBlast, exploited the way Rovo Chat processed externally supplied information embedded in URLs. An attacker could construct a link containing malicious instructions and persuade an authenticated […]

A Windows Hello for Business authentication technique can allow malware operating inside an unlocked Windows session to gain access to Microsoft Entra ID services without obtaining the user’s password, PIN or biometric data. Security researcher Dirk-jan Mollema demonstrated that an attacker who already controls a user process can invoke the cryptographic key underpinning Windows Hello for Business, or WHFB, and use it to generate authentication signatures. The […]

A security weakness in Anthropic’s Claude Code could allow a malicious pull request to trigger arbitrary code execution on a developer’s machine by exploiting previously granted trust for project-level Model Context Protocol configurations. The issue centres on Claude Code’s handling of the. mcp. json file, which allows repositories to define MCP servers used by the coding agent. These servers can launch local commands and connect Claude Code […]

A volunteer security group has flagged 85 potentially critical vulnerabilities across hundreds of Bitcoin-related software projects, exposing the scale of weaknesses that artificial intelligence can identify faster than developers can verify or repair them. The Bitcoin Red Team recorded 4,962 security findings after running advanced AI models against 390 open-source repositories during an intensive audit spanning about 27.5 hours on August 4 and 5. The findings included […]

OpenAI’s advanced artificial intelligence agents created hidden communication channels inside the company’s testing infrastructure, sharing discoveries and attack techniques for months before models breached Hugging Face’s production systems. Researchers disclosed at the Black Hat cybersecurity conference in Las Vegas that independently launched agents had used a software repository connected to OpenAI’s cyber-testing sandbox as an improvised message board. The system allowed separate model runs to leave information, […]

A WhatsApp account takeover scam is spreading through messages that ask users to vote for a friend or relative in an online competition, before covertly linking the victim’s account to a device controlled by criminals. The attack often begins with a message from a familiar contact whose account has already been compromised. The recipient is asked to support someone participating in a dance contest, school competition, pet […]

Apache NiFi has released version 2.11.0 to address four vulnerabilities in its web application programming interface, including high-severity weaknesses that could exhaust server memory or allow users with limited permissions to manipulate sensitive configuration processes. The most broadly applicable flaw, tracked as CVE-2026-68981, affects NiFi versions 1.5.0 through 2.10.0. It stems from the way the platform processed gzip-compressed HTTP requests sent to its REST API. NiFi enforced […]

Bitcoin’s largest holders have accumulated 19,610 coins since July 29, widening a sharp divide with smaller investors who reduced their exposure after a major security failure involving Coldcard hardware wallets. Wallets holding between 10 and 10,000 Bitcoin increased their combined balances by 0.14 per cent over the period. Addresses containing less than 0.01 Bitcoin cut their holdings by 0.55 per cent, indicating that retail investors were more […]

A critical flaw in Coldcard hardware wallets has enabled the theft of at least 594 bitcoin from hundreds of users, intensifying scrutiny of devices promoted as one of the safest ways to store digital assets. The stolen cryptocurrency was valued at about $38 million when the coordinated transactions occurred on July 31. Claims circulating on social media that the loss has exceeded $88 million could not be […]

A Chinese-speaking hacker used DeepSeek artificial intelligence to autonomously identify vulnerable systems, obtain publicly available exploit code and launch attacks against hundreds of internet-facing targets, exposing how generative AI is moving closer to independently conducting offensive cyber operations. The campaign involved more than 460 targets and combined AI-directed activity with conventional manual hacking. The operator, who used the online aliases “knaithe” and “KnYuan”, controlled an open-source framework […]

Binance founder Changpeng Zhao has urged cryptocurrency holders to divide their assets among several wallets after attackers stole more than $70 million in bitcoin by exploiting weak recovery phrases generated by Coldcard hardware devices. Zhao, widely known as CZ, said even hardware wallets with long operating histories could contain software flaws. His warning marked a shift from the traditional advice to diversify cryptocurrency holdings, extending the principle […]

A flaw in seed generation allowed an attacker to steal more than 1,000 bitcoin from nearly 1,200 cold wallets without gaining physical or remote access to the hardware devices. The attacker drained 1,082.65 bitcoin, valued at about $70 million, from 1,196 wallet addresses on July 30. The transfers occurred between 01:10 and 01:51 UTC and were recorded across six Bitcoin blocks, making the operation one of the […]

Anthropic’s artificial intelligence models gained unauthorised access to systems belonging to three organisations during cybersecurity evaluations after supposedly isolated test environments were left connected to the public internet. The AI developer said the incidents involved Claude Opus 4.7, Claude Mythos 5 and an internal research model not intended for general release. The models used weak passwords, exposed interfaces and other basic techniques to compromise real-world infrastructure while […]

Google has released Chrome 151 with fixes for 370 security vulnerabilities, including seven critical flaws capable of exposing users and organisations to serious attacks. The update began rolling out on July 29 for Windows, macOS and Linux. Chrome 151.0.7922.71 and 151.0.7922.72 are being distributed to Windows and Mac devices, while Linux systems are receiving version 151.0.7922.71. The Android release, carrying the same core security fixes, is being […]

A high-severity flaw in Firefox’s JavaScript engine can allow attackers to compromise unpatched Tor Browser installations when a user visits a specially crafted webpage, security researchers have demonstrated. The vulnerability, tracked as CVE-2026-10702, affects the just-in-time compiler used to improve JavaScript performance. A programming error can cause the compiler to generate unsafe machine code, giving an attacker the ability to execute commands within the browser’s content process […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA
Just in:
CM disputes Vijayan’s claims // OpenAI introduces GPT-6 Cyber with restricted security access // Ningbo Consensus on Collaborative Development released at 2026 Global Mayors Dialogue · Ningbo // Dubai details five-year visa benefits for returning visitors // Excise chief shunted out in bar licence dispute // TVM –Mangaluru Vande Bharat claims top spot // CR Longdation Aethereal Cybersecurity × Global Cybersecurity Alliance (GCSA) Join Hands to Establish the “AI and Cybersecurity Research Centre” // Microfinance case trouble for Vellappally // Beyond the exhibition floor: How robots, AI and networks are moving into the real world // Geely’s i-HEV Intelligent Hybrid Technology Offers a New Direction for Gasoline-Powered Vehicles // APT29-linked campaign exploits outdated Apple and Android software // Technology shares plunge as Nasdaq enters correction // e-Crime Bureau Signs Cybersecurity Partnership With Smart Africa, Reinforcing Its Global Expansion // UK air traffic outage inflicted £33m financial losses // OpenAI abandons secrecy agreements for future data centres // Miss Universe Hong Kong Jen Zhou Departs for Puerto Rico to Compete in the 75th Miss Universe World Final // Elephant calf on death line airlifted for treatment in Gujarat // Oil advances towards $100 as tanker attacks persist // Oil and chip shares retreat after Democratic victories // Kochi police detain two actors over bid to honey trap doctor //