Hackers

Hackers can exploit prompt injection vulnerabilities in 9 popular AI tools to create massive botnets. Large language models (LLMs) cannot distinguish between legitimate and malicious commands, allowing attackers to inject harmful instructions into emails or source code. Current 'push' attacks target individuals but are limited in scale due to the need to send injections directly to victims.

Kubota North America Corporation disclosed that hackers had access to some of its network systems for more than a month earlier this year.

The US has lifted an export ban on Anthropic's advanced AI tools. The company had previously suspended Fable and Mythos in June due to concerns about potential misuse by hackers.

Hackers infiltrated Polymarket’s website via a compromised third-party vendor, stealing millions in cryptocurrency from users. The company announced refunds for affected users.

Australia's security environment is degrading due to threats from autocratic regimes, hackers, and antisemitic extremists, according to the country's spy chief. ASIO Director-General Mike Burgess warned that the current terrorism threat level of 'probable' does not fully reflect the systemic and compounding nature of these threats.

Tata Electronics confirmed a cyberattack that impacted parts of its IT infrastructure, with hackers leaking data. The company made the confirmation in a statement to BleepingComputer.

Hackers have claimed to leak stolen data from Madison Square Garden. Additional updates include San Francisco gay bars implementing face scanners, France ending its relationship with Palantir, and Apple planning changes to its private email system.

Hackers are exploiting an unauthenticated information disclosure vulnerability in the Gravity SMTP WordPress plugin, which is active on 100,000 sites. The vulnerability allows threat actors to access sensitive data without authentication.

A cyber security expert warns that hackers exploit airport Wi-Fi through 'evil twin' hotspots and fake login pages to target passengers. The article highlights the risks of using unsecured airport networks for unsuspecting travelers.

An Ebola outbreak in Congo has led to a 40% increase in cases within a week, with confirmed deaths exceeding 200. The U.S. CDC has activated $107 million in funds, and hackers are demanding $75 million from Novo. An ACIP investigation has been launched regarding the outbreak.

Hackers are targeting dozens of colleges through Canvas, an educational platform. The article highlights the ongoing security threat affecting multiple institutions.

Digital healthcare company iRhythm Holdings disclosed a data breach in which hackers stole patients' personal and health information stored on third-party-hosted business applications.

Phishing attack volume has decreased by 20%, but hackers are prioritizing quality over quantity by using AI to enhance their attacks. Despite fewer attempts, the risk remains elevated due to more sophisticated methods.

A bug in a Meta customer service tool allowed hackers to use an AI-powered chatbot to reset passwords for over 34,000 Instagram accounts, making them vulnerable.

A critical bug in Ubiquiti UniFi OS allows hackers to gain root access without authentication by chaining three fixed vulnerabilities. Attackers can execute remote code with elevated privileges through this exploit.

A report warns that personal data is being legally sold online and subsequently exploited by hackers to steal millions. The issue highlights risks of data exposure through legitimate online channels.

CISA warned that hackers are actively exploiting a high-severity SolarWinds Serv-U flaw to crash servers. The vulnerability, recently patched, is being used by attackers to disrupt server operations.

Hackers are targeting gaps in vulnerability programs by teaching newcomers to exploit vulnerable systems. Flare analyzes a popular underground tutorial revealing modern attacker workflows.

Instagram is notifying users targeted by hackers in AI chatbot attacks. Hackers accessed victims' accounts despite Meta claiming to have fixed its AI-powered support chatbot.

Hackers are exploiting a critical privilege escalation vulnerability (CVE-2026-8206) in the Kirki plugin for WordPress to take over any user account, including administrators. The flaw allows unauthorized access to WordPress admin accounts through the Kirki plugin.

Hackers tricked an Instagram AI chatbot into granting access to other users' accounts. The incident is linked to recent cases of high-profile Instagram accounts being hijacked.

Hackers exploited an Instagram AI chatbot to gain access to user accounts. The incident is linked to recent hijackings of high-profile Instagram accounts.

Instagram's AI chatbot was exploited by hackers to grant unauthorized access to other users' accounts. The incident is linked to recent cases of high-profile Instagram accounts being hijacked.

Hackers exploited AI support tools to reset Instagram account emails and lock users out of their accounts. A chatbot was used in the process to facilitate unauthorized access.

Hackers hijacked Instagram accounts by tricking Meta's AI support chatbot into granting access, as reported by social media users. The incident was attributed to the chatbot allowing unauthorized access.

Claims on social media suggest hackers can extract fingerprints from photos showing peace signs. Experts assert that the risk for average individuals is minimal.

Hackers and foreign influence operators are increasingly using misinformation campaigns to confuse voters rather than tampering with voting systems in the 2026 midterm elections, according to a Check Point Software report. The report highlights phishing, impersonation, and misinformation as primary tactics.

Hackers are exploiting a vulnerability in the WP Maps Pro plugin to create unauthorized administrator accounts on WordPress websites. The exploit allows attackers to bypass authentication and gain administrative access.

Hackers are launching a new phishing campaign targeting Signal users to steal their secret recovery keys, which grant access to online backups containing past messages. The attack aims to trick users into revealing these keys through deceptive tactics.

Hackers are exploiting an authentication bypass vulnerability (CVE-2026-35616) in FortiClient Enterprise Management Server (EMS) to deliver an undocumented credential stealer called EKZ.

An Israeli cyber leader reports that Iran’s hackers are coordinating more closely, indicating heightened cyber activity. The statement highlights concerns about increased collaboration among Iranian cyber actors.

A report reveals that 70% of all crypto wrench attacks occur in France, with Bitcoiners warning that centralized data collection systems attract hackers and organized criminals targeting cryptocurrency holders and their families.

Drupal has issued a critical warning about a severe SQL injection vulnerability that is now being actively exploited by hackers. The flaw was announced earlier this week and poses significant security risks to systems running the platform.

GitHub is investigating a breach where hackers stole data from thousands of internal repositories, but there's no evidence of customer data theft. The incident is currently being investigated. GitHub is a code hosting giant.

Crypto users are prioritizing high yields over security measures, putting billions of dollars at risk of being hacked. This trend is concerning as it leaves sensitive information and large sums of money vulnerable to cyber attacks. The situation underscores the need for robust protection in the crypto space.

Crypto users are prioritizing high yields over security measures, putting billions of dollars at risk of being hacked. This trend is leading to increased vulnerability in the cryptocurrency market. Users are seeking higher returns despite the potential risks.

Hackers have compromised the node-ipc npm package by injecting credential-stealing malware into its newly published versions, targeting npm in a supply chain attack. This attack aims to steal credentials from users of the popular inter-process communication package. The incident highlights a significant security risk for users relying on the package.

Hackers are exploiting a critical authentication bypass vulnerability in the Burst Statistics WordPress plugin to gain admin-level access to websites. The flaw allows attackers to bypass authentication and take control of vulnerable sites. This vulnerability poses a significant risk to website security.

Hackers stole some data from OpenAI after a code security issue, but the damage was limited to employees' devices and did not affect user data or production systems. OpenAI's intellectual property was not stolen. The incident had limited impact.

The war between businesses and hackers has entered a new era with AI agents presenting novel dangers, increasing the complexity of cyber attacks. This development poses significant threats to business security. The use of AI in hacking is becoming more prevalent.