# cyberattack (blogs) — RSS Amplifier Recent posts from the 3 feeds in the RSS Amplifier directory that cover cyberattack. Page: Feed: --- ## [Why software delivery cannot depend on trust alone](https://jpmellojr.blogspot.com/2026/08/why-software-delivery-cannot-depend-on.html) _2026-08-20 · Unknown · Dateline Woonsocket_ Attackers turned the trusted AsyncAPI CI/CD publishing pipeline against its users, and the provenance checks all came back clean. more ## [Reverse-Lookup Service Exposed Millions of Photos of People's Faces](https://yro.slashdot.org/story/26/08/20/173219/reverse-lookup-service-exposed-millions-of-photos-of-peoples-faces?utm_source=rss1.0mainlinkanon&utm_medium=feed) _2026-08-20 · BeauHD · Slashdot: IT_ Security researcher Jeremiah Fowler found that people-search service ClarityCheck left more than 9 million image files accessible in an unsecured Amazon S3 bucket, despite advertising its reverse-image search as "private and secure." A separate misconfiguration also exposed email addresses, phone numbers, and other personal information. Wired reports: Overall, according to findings from… ## [CISA: Medusa Ransomware Hit Over 500 Critical Infrastructure Orgs](https://it.slashdot.org/story/26/08/19/1729241/cisa-medusa-ransomware-hit-over-500-critical-infrastructure-orgs?utm_source=rss1.0mainlinkanon&utm_medium=feed) _2026-08-19 · BeauHD · Slashdot: IT_ CISA says the Medusa ransomware operation has breached more than 500 U.S. critical infrastructure organizations since 2021, up from more than 300 reported last year. The group has targeted healthcare, government, defense, manufacturing, IT and financial organizations, evolving into a ransomware-as-a-service operation that recruits initial-access brokers and uses stolen data to pressure victims… ## [Super Cool: IBM Links Quantum Fridges in Push to Scale Qubits](https://jpmellojr.blogspot.com/2026/08/super-cool-ibm-links-quantum-fridges-in.html) _2026-08-19 · Unknown · Dateline Woonsocket_ IBM on Wednesday announced that it has successfully joined and cooled two cryogenic quantum "fridges," demonstrating a modular architecture designed to eventually link hundreds of quantum chips into more powerful quantum computers. more ## [Why connectivity and cybersecurity can’t be treated separately](https://www.siliconrepublic.com/enterprise/why-connectivity-and-cybersecurity-cant-be-treated-separately) _2026-08-19 · silicon · Enterprise – Silicon Republic_ Magnet Plus’s Patrick Masterson discusses why now is the time to engage in a combined network and security strategy to ensure business continuity and maintain customer trust. Read more: Why connectivity and cybersecurity can’t be treated separately ## [Retail Apps Face a Customer Retention Problem](https://jpmellojr.blogspot.com/2026/08/retail-apps-face-customer-retention.html) _2026-08-18 · Unknown · Dateline Woonsocket_ Retail apps often have a short lifespan after customers download them, according to recent Adobe research. more ## [French authorities investigating hack of national tax department](https://www.siliconrepublic.com/enterprise/french-authorities-investigating-hack-of-national-tax-authority) _2026-08-17 · Tim Barnwell · Enterprise – Silicon Republic_ The incident followed other recent cyberattacks involving French public institutions. Read more: French authorities investigating hack of national tax department ## [AI Fails to Deliver a 4-Day Work Week - Especially at AI Companies](https://it.slashdot.org/story/26/08/15/079216/ai-fails-to-deliver-a-4-day-work-week---especially-at-ai-companies?utm_source=rss1.0mainlinkanon&utm_medium=feed) _2026-08-15 · EditorDavid · Slashdot: IT_ "An engineering director at Google said four years ago that AI would deliver a four-day work week by 2025," remembers the BBC. And earlier this year OpenAI "formally urged companies to start testing out a four-day work week (with no change in pay), claiming that AI will soon be able to speed up so much human labour that the corporate world should prepare itself." However, a former OpenAI technical… ## [Vulnerability Giving Attackers Full Control of Macs Is Under Active Exploitation](https://apple.slashdot.org/story/26/08/14/2213230/vulnerability-giving-attackers-full-control-of-macs-is-under-active-exploitation?utm_source=rss1.0mainlinkanon&utm_medium=feed) _2026-08-15 · BeauHD · Slashdot: IT_ joshuark shares a report from Ars Technica: Dutch officials have warned that a high-severity macOS vulnerability that allows attackers to execute malicious code is under active exploitation. "The NCSC has received a notification indicating that active abuse of this vulnerability has been observed on multiple systems on which port 5900 was accessible from the Internet," the Netherlands National… ## [AI domain takeover takeaway: Focus on the harness not the model](https://jpmellojr.blogspot.com/2026/08/ai-domain-takeover-takeaway-focus-on.html) _2026-08-13 · Unknown · Dateline Woonsocket_ Mention offensive AI and expect the discussion to focus on vulnerability discovery, malware creation, and exploit generation, but recent research by Cato Networks identified another — and very potent — application for offensive AI. more ## [From any door to your door (Sponsored)](https://crawlproof.com/a/jiuSNoVbdvve) _2026-08-13 · **Sponsored**_ Book rides, errands, deliveries, groceries and home help in one app ## [OWASP Top 10 for LLM Apps 2026: Excessive agency risk on the rise](https://jpmellojr.blogspot.com/2026/08/owasp-top-10-for-llm-apps-2026.html) _2026-08-12 · Unknown · Dateline Woonsocket_ Prompt injection is still king, but “excessive agency” just jumped to #3 in OWASP’s Top 10 for LLM apps. Stop chasing unbreakable models—start containing fooled agents. more ## [China-Linked Hackers Used AI To Run First-Ever 'Autonomous' Cyberattack On Taiwan](https://it.slashdot.org/story/26/08/12/1544250/china-linked-hackers-used-ai-to-run-first-ever-autonomous-cyberattack-on-taiwan?utm_source=rss1.0mainlinkanon&utm_medium=feed) _2026-08-12 · BeauHD · Slashdot: IT_ Researchers at Israeli cybersecurity firm Dream say suspected China-linked hackers used an open-source AI-agent system to conduct what may be the first observed end-to-end autonomous cyberattack against a government. According to the Financial Times (paywalled), the attack compromised at least 85 accounts and resulted in the theft of more than 2,500 personnel records from Taiwanese systems. Tom's… ## [AI Rules to Protect Kids Risk Repeating Social Media Mistakes](https://jpmellojr.blogspot.com/2026/08/ai-rules-to-protect-kids-risk-repeating.html) _2026-08-12 · Unknown · Dateline Woonsocket_ Policymakers risk repeating mistakes they made trying to govern social media in their rush to protect kids from potential harms posed by AI chatbots, according to a new report by a Washington, D.C. think tank. more ## [Why employee retention is at the heart of the cyber skills gap](https://www.siliconrepublic.com/enterprise/why-employee-retention-is-at-the-heart-of-the-cyber-skills-gap) _2026-08-12 · silicon · Enterprise – Silicon Republic_ ‘The bucket is leaking, and the industry keeps blaming the tap,’ writes Nahla Davies discussing the cybersecurity talent shortage. Read more: Why employee retention is at the heart of the cyber skills gap ## [A Zoom Screen-Sharing Bug Let Anyone Take Over Other Devices On a Call](https://it.slashdot.org/story/26/08/11/1951224/a-zoom-screen-sharing-bug-let-anyone-take-over-other-devices-on-a-call?utm_source=rss1.0mainlinkanon&utm_medium=feed) _2026-08-11 · BeauHD · Slashdot: IT_ An anonymous reader quotes a report from Wired: As AI models gain advanced capabilities to find vulnerabilities in software, develop ways to exploit them, and even carry out autonomous hacking sprees, researchers offered a sobering new example on Tuesday, disclosing vulnerabilities in the video conferencing platform Zoom that could have been exploited to take over targets' devices. Anyone on a… ## [Zuckerberg Makes His Case for Superintelligence for All](https://jpmellojr.blogspot.com/2026/08/zuckerberg-makes-his-case-for.html) _2026-08-11 · Unknown · Dateline Woonsocket_ In a sweeping 6,500-word online manifesto published Monday, Meta founder and CEO Mark Zuckerberg called for superintelligence to be widely available, arguing that putting advanced AI in the hands of individuals offers a better path than concentrating it among governments, companies, or a small group of experts. more ## [The Roboguard Revolution Is Short-Circuiting](https://hardware.slashdot.org/story/26/08/11/0538200/the-roboguard-revolution-is-short-circuiting?utm_source=rss1.0mainlinkanon&utm_medium=feed) _2026-08-11 · BeauHD · Slashdot: IT_ alternative\_right shares a report from 404 Media: Robotics companies promise that video-camera-toting security robots can deter and detect crime. But many companies are rethinking the approach after a trail of canceled contracts and questions about whether the artificial intelligence-powered bots are meeting the needs of businesses and local governments. Proof News found evidence of at least 21… ## [A Data Breach At Shipping Giant Ceva Logistics Is Rippling Across Banks, Retailers, Steam Gamers, and Beyond](https://yro.slashdot.org/story/26/08/10/2035248/a-data-breach-at-shipping-giant-ceva-logistics-is-rippling-across-banks-retailers-steam-gamers-and-beyond?utm_source=rss1.0mainlinkanon&utm_medium=feed) _2026-08-10 · BeauHD · Slashdot: IT_ An anonymous reader quotes a report from TechCrunch: Ceva Logistics, one of the world's largest shipping and logistics giants, has been hacked. Several companies that rely on Ceva for shipping their products to their customers say that their personal information was also stolen in the breach. The cyberattack on Ceva is affecting at least eight warehouses across Europe used for shipping goods… ## [AI Assistant Hacks Gym Website In First Known Australian Autonomous Cyber Attack](https://it.slashdot.org/story/26/08/10/0518257/ai-assistant-hacks-gym-website-in-first-known-australian-autonomous-cyber-attack?utm_source=rss1.0mainlinkanon&utm_medium=feed) _2026-08-10 · BeauHD · Slashdot: IT_ An anonymous reader quotes a report from ABC News & Headlines: Andrew asked his personal assistant to book him a spot in one of his gym's coveted morning classes. It was a task he thought was well suited to this particular assistant because the booking form was online and because his assistant was not a person -- it was artificial intelligence (AI). But Andrew was shocked by what happened next.… ## [Microsoft Responds to Outcry After Quietly Installing Beta 'Photos' App on Enterprise Machines](https://tech.slashdot.org/story/26/08/10/0229237/microsoft-responds-to-outcry-after-quietly-installing-beta-photos-app-on-enterprise-machines?utm_source=rss1.0mainlinkanon&utm_medium=feed) _2026-08-10 · EditorDavid · Slashdot: IT_ Microsoft's cloud storage app OneDrive got a new Photos app in the worst possible way, reports the blog Neowin . "The app is reportedly showing up even on Windows 11 Enterprise machines, despite apparently being a beta application aimed at consumer functionality." One admin questioned why a beta app was appearing on an Enterprise SKU in the first place, while another described the situation as yet… ## [Non-Custodial Crypto Gateway (Sponsored)](https://crawlproof.com/a/oAexCnypB19U) _2026-08-10 · **Sponsored**_ Accept multi-chain crypto, automated fee handling, and trustless escrow with real-time settlement. ## [California City Declares State of Emergency After Cyberattack](https://yro.slashdot.org/story/26/08/09/2144257/california-city-declares-state-of-emergency-after-cyberattack?utm_source=rss1.0mainlinkanon&utm_medium=feed) _2026-08-09 · EditorDavid · Slashdot: IT_ NBC Bay Area brings news from the small idyllic California town of Suisun City (population: 29,518). The city council "declared a state of emergency Saturday after a cyberattack that shut down computer systems including 911 public safety operations." "Malicious software infected and compromised" the East Bay community's information technology systems beginning about 5:45 a.m. Friday, the city said… ## [Levi Strauss corporate data stolen in cyberattack](https://www.siliconrepublic.com/enterprise/levi-strauss-corporate-data-stolen-in-cyberattack) _2026-08-07 · Suhasini Srinivasaragavan · Enterprise – Silicon Republic_ No consumer data was impacted in the hack, the company clarified in a regulatory filing. Read more: Levi Strauss corporate data stolen in cyberattack ## [Why AI coding makes zero trust an AppSec requirement](https://jpmellojr.blogspot.com/2026/08/why-ai-coding-makes-zero-trust-appsec.html) _2026-08-06 · Unknown · Dateline Woonsocket_ Feeling comfortable about the safety of your software supply chain because your organization has invested in SBOMs, signing, and provenance? You shouldn’t. more ## [Billions of Stolen Browser Cookies Fuel Account Hijacking Risks](https://jpmellojr.blogspot.com/2026/08/billions-of-stolen-browser-cookies-fuel.html) _2026-08-05 · Unknown · Dateline Woonsocket_ Online information thieves are stealing browser cookies on a massive scale, exposing users to risks ranging from identity theft to account hijacking, according to a report released Monday by a VPN service provider. more ## [FBI, EPA Warn of Cyberattacks Targeting Water Infrastructure](https://jpmellojr.blogspot.com/2026/08/fbi-epa-warn-of-cyberattacks-targeting.html) _2026-08-04 · Unknown · Dateline Woonsocket_ Following cyberattacks targeting more than 30 municipal water systems across Minnesota, the FBI and EPA have issued a warning to critical infrastructure asset owners and operators that malicious actors are targeting operational technology devices used in water and wastewater facilities. more ## [What is a side-channel attack in cybersecurity?](https://www.siliconrepublic.com/enterprise/system-leak-secrets-hacked-skills-cybersecurity-compliance-risk-breach) _2026-08-04 · silicon · Enterprise – Silicon Republic_ Chetan Jaiswal of Quinnipiac University explains what a side-channel attack is and how it impacts modern cybersecurity. Read more: What is a side-channel attack in cybersecurity? ## [OpenAI agents breach Modal client system after Hugging Face hack](https://www.siliconrepublic.com/enterprise/openai-agents-breach-modal-client-system-after-hugging-face-hack) _2026-07-29 · Suhasini Srinivasaragavan · Enterprise – Silicon Republic_ OpenAI’s ‘rogue' agents took advantage of a code vulnerability, experts explained. Read more: OpenAI agents breach Modal client system after Hugging Face hack ## [Report: EMEA businesses not reaping benefits from their AI spend](https://www.siliconrepublic.com/enterprise/emea-businesses-servicenow-ai-enterprise-spending) _2026-07-20 · Suhasini Srinivasaragavan · Enterprise – Silicon Republic_ Research from ServiceNow indicates an 18-point gap between AI strategy and execution in EMEA. Read more: Report: EMEA businesses not reaping benefits from their AI spend ## [Transport for London hackers jailed for five and a half years](https://www.siliconrepublic.com/enterprise/transport-for-london-hackers-jailed-for-five-and-a-half-years) _2026-07-16 · Colin Ryan · Enterprise – Silicon Republic_ The duo behind the major 2024 cyberattack are reported to have been leading members of the Scattered Spider cybercrime collective. Read more: Transport for London hackers jailed for five and a half years ## [Commission refers Ireland to CJEU for failing to enact cyber rules](https://www.siliconrepublic.com/enterprise/eu-commission-refers-ireland-to-cjeu-court-for-not-implementing-cybersecurity-nis2) _2026-07-09 · Suhasini Srinivasaragavan · Enterprise – Silicon Republic_ Ireland, Spain, France and the Netherlands are the only member states yet to incorporate the NIS2 directive into national law. Read more: Commission refers Ireland to CJEU for failing to enact cyber rules ## [Stay updated on your professional world (Sponsored)](https://crawlproof.com/a/3HulngKelQaz) _2026-07-09 · **Sponsored**_ Keep in touch with people you know, build your career. ## [Cloudflare to block AI crawlers from ad-supported webpages by default](https://www.siliconrepublic.com/enterprise/cloudflare-to-block-ai-crawlers-from-ad-supported-webpages-by-default) _2026-07-02 · Colin Ryan · Enterprise – Silicon Republic_ Come 15 September, multipurpose crawlers used by the likes of Google, Microsoft and Apple will be blocked by default according to Cloudflare's new rules. Read more: Cloudflare to block AI crawlers from ad-supported webpages by default