# window (news sources) — RSS Amplifier Recent posts from the 26 feeds in the RSS Amplifier directory that cover window. Page: Feed: --- ## [LIVE! Chelsea News Blog: WEDNESDAY!](https://sptc.news/p/live-chelsea-news-blog-wednesday-a65) _2026-08-26 · Si Phillips · Si Phillips Talks Chelsea_ All your latest Blues news as it comes in today... ## [EXCL: Chelsea’s Plan A to replace Enzo Fernandez plus NEW NAME linked 👀 Sources: Liverpool eye 3 Chelsea players late in the window, Sources: Liam Delap was waiting on United, Sources: Tosin out?....](https://sptc.news/p/excl-chelseas-plan-a-to-replace-enzo-159) _2026-08-26 · Si Phillips · Si Phillips Talks Chelsea_ The Chelsea FC Newsletter: Wednesday 26th August 2026! ## [LACMA data breach last year exposed social security and medical data](https://www.bleepingcomputer.com/news/security/lacma-data-breach-last-year-exposed-social-security-and-medical-data/) _2026-08-25 · Bill Toulas · BleepingComputer_ The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information. \[...\] ## [Hackers abuse npm mirrors to host phishing redirect pages](https://www.bleepingcomputer.com/news/security/hackers-abuse-npm-mirrors-to-host-phishing-redirect-pages/) _2026-08-25 · Lawrence Abrams · BleepingComputer_ Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites. \[...\] ## [法国光学巨头依视路陆逊梯卡大量增持尼康股份，逼近 20% 法律上限](https://www.ithome.com/0/994/287.htm) _2026-08-25 · IT之家_ IT之家 8 月 26 日消息，消息源 Nikon Rumors 上周（8 月 23 日）发文称，法国光学巨头依视路陆逊梯卡正在迅速增持尼康股份，当前持股比例已接近 20%。部分人士认为，依视路这种行为是在为收购尼康铺平道路。 IT之家在此援引 Nikon Rumors，依视路陆逊梯卡从 2024 年开始持续增持尼康股份，2024 年 10 月披露持股比例达 5.1%。到 2025 年 10 月，该公司手持的尼康股份已经达到 10.75%-10.8%，成为尼康第一大股东。 随后依视路陆逊梯卡获得日本政府根据《外汇及对外贸易法》作出的批准，可将尼康持股比例进一步提升至最高 20%。 2026 年 4 月 7 日， 依视路陆逊梯卡持有的尼康股份比例已经达到 19.61% ， 已经接近上限 。 依视路陆逊梯卡可能收购尼康的传闻，已经在各界流传一段时间。Nikon Rumors… ## [《最终幻想 7：启示录》游戏第二支预告公布，2027 年春季发售](https://www.ithome.com/0/994/286.htm) _2026-08-25 · IT之家_ IT之家 8 月 26 日消息，史克威尔艾尼克斯今天在 2026 科隆游戏展放出《最终幻想 7：启示录》的第二支预告片。 本作将于 2027 年春季发售，登陆 PC、Switch 2、PS5 和 Xbox Series X|S 平台 。 IT之家了解到， 《最终幻想 7：启示录》是《最终幻想 7》重制三部曲的终章 。主角克劳德 · 史特莱夫将在游戏中乘坐飞空艇“海温德号”遨游天际，自由探索广袤的开放世界。 本次预告重点展示了克劳德与敌人“星球守护者”的战斗画面。红宝石、绿宝石和最终之剑都将在游戏中以全新造型登场，片中还出现了泰坦大先生的身影。 ## [城市模拟游戏《乐高：天际线》亮相 2026 科隆游戏展](https://www.ithome.com/0/994/285.htm) _2026-08-25 · IT之家_ IT之家 8 月 26 日消息，在今日的 2026 科隆游戏展开幕夜首秀直播中，城市模拟游戏《 乐高：天际线 》正式公布。 作为乐高和《都市：天际线》两大 IP 的联合作品，《乐高：天际线》将登陆 PC、Xbox Series X|S、PS5、Switch 2 平台。 在这款自由度拉满的城市建造游戏里，你的每个抉择都将唤醒一座充满生机的都市。你可以大兴土木，也可以静心雕琢细微之处。没有条条框框，只有无限的空间与唯一的规则：打造只属于你的城市。 IT之家附游戏宣传片截图如下： ## [AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes](https://www.bleepingcomputer.com/news/security/anonymouskit-phaas-uses-voice-ai-agents-to-phish-iphone-passcodes/) _2026-08-25 · Bill Toulas · BleepingComputer_ A newly uncovered phishing-as-a-service (PhaaS) platform called AnonyMousKIT automates the retrieval of codes used to unlock stolen Apple devices and disable the Activation Lock feature. \[...\] ## [《过山车大亨》系列重启：雅达利公布全新作品，今年冬季开启抢先体验](https://www.ithome.com/0/994/284.htm) _2026-08-25 · IT之家_ IT之家 8 月 26 日消息，雅达利今天在 2026 科隆游戏展公布《过山车大亨 Wonderworks》，意味着《过山车大亨》这款沉寂多年的模拟经营系列游戏终于迎来重启。 IT之家了解到，《过山车大亨》上一次推出新作还是 2016 年的《过山车大亨世界》，但这款游戏当时口碑不佳，如今雅达利选择再次启用这一经典 IP。 据介绍，《过山车大亨 Wonderworks》由 Springloaded 开发组制作， 画面风格较为卡通化 。玩家将在游戏中建造并经营自己的主题乐园，从管理财务到定制游乐设施，掌控乐园的方方面面。 同时，本作采用非常“真实”的物理引擎，游乐设施会突然发生夸张的故障，让公园游客直接甩到地图边缘。本作主打简单上手，并提供丰富自定义选项，让新手和老手都能愉快游玩。 此外，本作定价 24.99 美元 （IT之家注：现汇率约合 168.4 元人民币） ， 将于今年冬季在… ## [国产抗日 FPS 游戏《抵抗者》2026 科隆游戏展最新实机演示公布](https://www.ithome.com/0/994/283.htm) _2026-08-25 · IT之家_ IT之家 8 月 26 日消息，国产抗日 FPS 游戏《 抵抗者 》今日亮相 2026 科隆游戏展，公布了最新实机演示视频。 《抵抗者》由杭州浩汤科技开发、4Divinity 发行，是一款以 20 世纪 40 年代中国抗日战争为背景的第一人称射击游戏。IT之家此前报道，游戏官方此前已经在 7 月 30 日公布了最新实机演示，并在 ChinaJoy 上开放试玩。 这款游戏采用虚幻 5 引擎开发，在 FPS 玩法基础上融入谍战、潜入、解谜等元素。在叙事和玩法设计上，游戏采用类似《使命召唤》的战役关卡模式，全作规划四大章节，分别对应春、夏、秋、冬四个主题。玩家将扮演抗联战士、情报员等不同身份，前往包括东北敌后、上海等在内的多个战场执行任务。整体流程预计超过 10 小时（亦有报道称战役流程约 15 小时）。 游戏目前确认将登陆 PC、PS5 和 Xbox Series X|S… ## [Privacy-first AI-native browser (Sponsored)](https://crawlproof.com/a/fSfWYcV6kroH) _2026-08-25 · **Sponsored**_ No telemetry or ads — built on Ungoogled Chromium with a built-in AI sidebar and CLI. ## [《巫师 3：狂猎 — 重制版》官宣 9 月 29 日上线：所有玩家免费升级，两部资料片免费送](https://www.ithome.com/0/994/282.htm) _2026-08-25 · IT之家_ IT之家 8 月 26 日消息，在今日的 2026 科隆游戏展开幕夜首秀直播中，CDPR 官宣《巫师 3：狂猎 — 重制版》游戏将于 9 月 29 日上线， 所有已拥有游戏的玩家均可免费升级 。 《巫师 3：狂猎 — 重制版》将带来一系列改进， 包括画面、玩法等多方面升级 。游戏将于 9 月 29 日上线，且所有已在 GOG、Steam、Epic Games Store、PlayStation 5 和 Xbox Series X|S 平台拥有本作的玩家均可免费升级至重制版。本作目前也已在 Battle.net 和 Nintendo Switch 2 平台开放预购。 IT之家从直播获悉，所有目前拥有游戏本体的玩家， 都将免费获得两部扩展资料片 —— 《石之心》和《血与酒》 。这两部资料片也将直接包含在《巫师 3：狂猎 — 重制版》本体中。 此外，官方展示了一段《巫师… ## [《寂静岭：Townfall》亮相科隆游戏展，新预告出现巨型怪物](https://www.ithome.com/0/994/281.htm) _2026-08-25 · IT之家_ IT之家 8 月 26 日消息，科乐美今天在 2026 科隆游戏展公布《Silent Hill：Townfall》（寂静岭：小镇陷落）的全新预告片。 本作将于 9 月 24 日正式发售 ，登陆 PC（Steam、Epic）和 PS5 平台。 IT之家从预告视频中获悉，《寂静岭：小镇陷落》是《寂静岭》系列最新作品。游戏内讲述男主 Simon O'Dell（西蒙 · 奥德尔）踏上圣阿梅莉亚岛（St. Amelia）后，在浓雾笼罩的小镇中不断徘徊的故事。 预告片中，西蒙在小镇里遭遇种种恐怖场景。他的手持通讯设备信号断断续续，诡异的巨大怪物趁机从浓雾之中突然袭来，让西蒙陷入恐惧之中。 ## [《暗影火炬城》原班团队打造：国产游戏《动物朋克》公布全新实机演示](https://www.ithome.com/0/994/280.htm) _2026-08-25 · IT之家_ IT之家 8 月 26 日消息，在今日的 2026 科隆游戏展开幕夜首秀直播中，国产游戏《动物朋克》公布了一段全新实机演示视频。 《动物朋克》是由 《暗影火炬城》原班团队 钛核工作室打造的国产动作游戏，本次带来全新的游戏实机演示内容，展示了新的战斗画面与场景。 打碎枷锁，夺回家园！ 兔子雷顿率领动物小队深入神秘的獭獭村，机械军团的铁蹄已悄然踏进这片宁静的水泽秘境。世代栖居的獭獭居民、兵刃相向的水獭与旱獭勇士，都将卷入未知的命运漩涡...... IT之家注意到，在 2025 年初的 CES 2025 英伟达新显卡平台发布会上， 英伟达与上海钛核共同发布了《动物朋克》的技术演示 ，聚焦在使用离线 AI 技术， 并首次在用户端侧实现游戏内 AI 图像生成 ，让玩家在游戏中创造武器、载具与涂装。 ## [《昭和米国物语》游戏新实机预告片公开，日笠阳子为主角千草蝶子配音](https://www.ithome.com/0/994/279.htm) _2026-08-25 · IT之家_ IT之家 8 月 26 日消息，由铃空游戏开发的《昭和米国物语》今日亮相 2026 科隆游戏展。本作是一款角色扮演游戏， 预计今年发售 。 IT之家了解到，官方在科隆游戏展现场还放出了本作的实机预告片，以下是视频： 官方还在现场公布了本作的日语配音演员阵容， 主角千草蝶子将由日笠阳子担任声优 ，其他角色如下： Michael Hero（迈克尔 · 英雄）：石川英郎 Baba（巴巴）：大塚芳忠 睦月晶虎：绿川光 剧情方面，《昭和米国物语》将故事发生时间设定在架空的“昭和 66 年”（公元 1991 年）。 那时候的日本达到了泡沫经济顶峰 ， 凭借强大财力买下了美国 。随着两国文化不断发生碰撞与融合，一个独特的国家 ——“昭和米国”由此诞生。… ## [育碧《魔法门之英雄无敌 3 重制版》游戏《上古起源》官宣，已上架 Steam](https://www.ithome.com/0/994/278.htm) _2026-08-25 · IT之家_ IT之家 8 月 26 日消息，育碧《 魔法门之英雄无敌 3 重制版 》游戏今日亮相 2026 科隆游戏展开幕夜直播，发售日待定，支持中文。 IT之家查询发现， 游戏已上架 Steam 商店 ，定名为《 上古起源 》。在这部重制版中，玩家将再度体验这部最受欢迎、广受好评的《魔法门之英雄无敌》作品，及其两部资料片，感受回合制策略游戏的魅力。 玩家将看到统一的故事线来体验原版的战役， 还有新增序幕、尾声及电影级的过场动画 ，体验全面升级的画面、更为细腻的动画以及现代音频技术。 玩家可以从九大独特阵营中选择 ，每一方都拥有独特的玩法与奇幻的生物。探索世界、搜罗资源和宝物、发展城镇、培养英雄与军队，带来无穷无尽的战术可能。 游戏支持最多八名玩家在线对战，也支持在本地展开回合制对决 。自游戏上线首日起即可畅玩社区地图，也可亲自创作。使用编辑工具，玩家可以尽情调整平衡性、设计地图与战役。 ## [U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches](https://thehackernews.com/2026/08/us-sanctions-iran-linked-hackers-behind.html) _2026-08-25 · info@thehackernews.com (The Hacker News) · The Hacker News_ The U.S. Department of the Treasury has announced fresh sanctions on Iranian cyber actors as part of what it called an "unprecedented, whole-of-government, economic campaign" against the nation and its enablers. "We are launching an economic onslaught against Iran's financial connections around the globe. Our objective is to sever every economic lifeline that sustains this tyrannical regime ## [SPTC Podcast: Chelsea are Back, JP Morgan Firing, Sanchez Being Sanchez, and Positive Starts](https://sptc.news/p/sptc-podcast-chelsea-are-back-jp) _2026-08-25 · Jai Mcintosh · Si Phillips Talks Chelsea_ Baz and I kick off the season looking back over Chelsea’s 3-2 win away to Fulham! ## [POCO F9 Ultra désormais référencé au SIRIM : un lancement local pourrait être proche](https://www.menow.fr/poco-f9-ultra-desormais-reference-au-sirim-un-lancement-local-pourrait-etre-proche/) _2026-08-25 · Samuel · Menow_ Le POCO F9 Ultra vient d’apparaître dans la base de certification SIRIM, un indice qui laisse penser que son lancement commercial pourrait se rapprocher. Le smartphone s’annonce particulièrement musclé, avec un Snapdragon 8 Elite Gen 5, jusqu’à 16 Go de RAM, un écran AMOLED 185 Hz et un capteur principal de 200 Mpx. Le POCO \[…\] L’article POCO F9 Ultra désormais référencé au SIRIM : un lancement… ## [Mac : des pirates cachent un virus derrière OpenAI Codex et le diffusent via Google](https://www.menow.fr/mac-des-pirates-cachent-un-virus-derriere-openai-codex-et-le-diffusent-via-google/) _2026-08-25 · Samuel · Menow_ Mac est visé par une nouvelle campagne malveillante qui détourne OpenAI Codex pour piéger les utilisateurs. Des cybercriminels diffusent de faux sites de téléchargement via des résultats sponsorisés sur Google, avec une apparence suffisamment crédible pour tromper au premier coup d’œil. Le piège se referme ensuite dans le Terminal. De faux téléchargements OpenAI Codex apparaissent \[…\] L’article… ## [iPhone 18 Pro Max : la vraie différence avec l’iPhone 18 Pro pourrait se jouer sur la photo](https://www.menow.fr/iphone-18-pro-max-la-vraie-difference-avec-liphone-18-pro-pourrait-se-jouer-sur-la-photo/) _2026-08-25 · Samuel · Menow_ L’iPhone 18 Pro Max pourrait profiter d’un appareil photo principal à ouverture variable, une nouveauté qui ne serait pas forcément proposée sur l’iPhone 18 Pro. Cette technologie permettrait d’ajuster physiquement la quantité de lumière qui entre dans l’objectif et de mieux contrôler la profondeur de champ. Pour Apple, ce serait aussi un moyen de mieux \[…\] L’article iPhone 18 Pro Max : la vraie… ## [Sync bookmarks across every browser (Sponsored)](https://crawlproof.com/a/Qe8I4ThYQ6wh) _2026-08-25 · **Sponsored**_ Two-way sync across Chrome, Firefox and Safari; built-in ad and tracker blocker. ## [Annonce surprise ! Apple M6 fait ses débuts sur le Mac mini, tandis que le Mac Studio reçoit la puce Apple la plus puissante : le M5 Ultra](https://www.menow.fr/annonce-surprise-apple-m6-fait-ses-debuts-sur-le-mac-mini-tandis-que-le-mac-studio-recoit-la-puce-apple-la-plus-puissante-le-m5-ultra/) _2026-08-25 · Eric Thomas · Menow_ Apple lance le M6 sur le Mac mini et propulse le Mac Studio jusqu’à 512 Go de mémoire unifiée avec le M5 Ultra. Les deux machines gagnent aussi le Wi-Fi 7, le Bluetooth 6 et des performances de stockage en hausse, avec une place de plus en plus importante accordée à l’IA exécutée en local. \[…\] L’article Annonce surprise ! Apple M6 fait ses débuts sur le Mac mini, tandis que le Mac Studio reçoit la… ## [Massive DDoS attack disrupts Norway’s government digital services](https://www.bleepingcomputer.com/news/security/massive-ddos-attack-disrupts-norways-government-digital-services/) _2026-08-25 · Bill Toulas · BleepingComputer_ A large distributed denial-of-service (DDoS) attack has disrupted Norway's shared government digital infrastructure since Monday, affecting services used by the public sector. \[...\] ## [Android : Google Play reçoit une mise à jour discrète qui change Ask Play et renforce Play Protect](https://www.menow.fr/android-google-play-recoit-une-mise-a-jour-discrete-qui-change-ask-play-et-renforce-play-protect/) _2026-08-25 · Samuel · Menow_ Android reçoit une nouvelle série d’améliorations via les services système de Google pour août 2026. Avec Google Play Store v52.9, Ask Play peut désormais afficher directement des extraits vidéo d’applications et de jeux, tandis que Google Play Protect améliore sa détection des applications potentiellement dangereuses. Des changements assez discrets. Mais ils toucheront directement l’usage… ## [Pixel 11 : Gemini teste une nouvelle fonction pour résoudre les problèmes du téléphone](https://www.menow.fr/pixel-11-gemini-teste-une-nouvelle-fonction-pour-resoudre-les-problemes-du-telephone/) _2026-08-25 · Samuel · Menow_ Pixel 11 pourrait bientôt laisser Gemini s’occuper directement de certains problèmes du smartphone. Google teste une fonction baptisée Device Help, capable d’aider avec le Wi-Fi, la batterie, les applications, les autorisations ou différents réglages du téléphone. L’idée est simple : transformer Gemini en véritable assistance technique intégrée au Pixel. Gemini peut désormais aider directement… ## [Hospital operator Nutex Health says data stolen in cyberattack](https://www.bleepingcomputer.com/news/security/hospital-operator-nutex-health-says-data-stolen-in-cyberattack/) _2026-08-25 · Bill Toulas · BleepingComputer_ Healthcare and services provider Nutex is investigating a data breach incident where an unauthorized third party exfiltrated information from company servers. \[...\] ## [Android 17 reçoit une nouvelle fonction importante et très attendue !](https://www.menow.fr/android-17-recoit-une-nouvelle-fonction-importante-et-tres-attendue/) _2026-08-25 · Samuel · Menow_ Android 17 commence à accueillir Motion Assist, une nouvelle fonction conçue pour réduire le mal des transports lorsque l’on utilise son smartphone dans une voiture ou un autre véhicule en mouvement. Google la déploie progressivement, avec les Pixel parmi les premiers appareils servis. Mais tout le monde ne l’a pas encore. Même deux téléphones sous \[…\] L’article Android 17 reçoit une nouvelle… ## [A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw](https://thehackernews.com/2026/08/a-malicious-webpage-could-poison-your.html) _2026-08-25 · info@thehackernews.com (The Hacker News) · The Hacker News_ Oasis Security has disclosed a weakness in NVIDIA NemoClaw that could let an attacker-controlled webpage take unauthenticated control of the local Ollama instance serving an AI agent and plant hidden instructions inside the model itself. The findings were shared with The Hacker News ahead of publication, and the report says Oasis Security reported them to NVIDIA's Product Security Incident ## [From Fake Workers to Account Recovery: The Growing Identity Verification Risk](https://www.bleepingcomputer.com/news/security/from-fake-workers-to-account-recovery-the-growing-identity-verification-risk/) _2026-08-25 · Sponsored by Specops Software · BleepingComputer_ Attackers are increasingly targeting the processes used to establish or recover identity rather than attacking the login itself. Specops explains how stronger identity verification can help organizations prevent fake workers and social engineering attacks from gaining legitimate access. \[...\] ## [Ce routeur Wi-Fi 7 peut exposer vos appareils internes directement sur Internet](https://www.menow.fr/ce-routeur-wi-fi-7-peut-exposer-vos-appareils-internes-directement-sur-internet/) _2026-08-25 · Eric Thomas · Menow_ Le routeur Wi-Fi 7 Calix GS7 XGS est touché par une faille permettant à un attaquant distant de modifier les règles de redirection de ports sans authentification. Répertoriée sous la référence CVE-2026-75501, la vulnérabilité concerne le firmware EXOS du modèle GS5239XG. Sa conséquence est particulièrement concrète : certains appareils normalement protégés derrière le réseau local \[…\] L’article Ce… ## [Windows 11 : Microsoft propose un correctif temporaire pour plusieurs jeux qui plantent](https://www.menow.fr/windows-11-microsoft-propose-un-correctif-temporaire-pour-plusieurs-jeux-qui-plantent/) _2026-08-25 · Samuel · Menow_ Windows 11 provoque des plantages sur certains jeux depuis la mise à jour de sécurité d’août 2026, avec des gels, des fermetures brutales, l’erreur EXCEPTION\_ACCESS\_VIOLATION et même des redémarrages du PC. Microsoft confirme que ARC Raiders, MARVEL Tōkon: Fighting Souls et THE FINALS figurent parmi les titres concernés. En attendant une correction définitive, l’entreprise propose \[…\] L’article… ## [Earn crypto for idle GPUs (Sponsored)](https://crawlproof.com/a/A7We9FrvrJPf) _2026-08-25 · **Sponsored**_ Run one CLI, host Qwen/Llama/Mistral, and earn BTC, ETH, SOL, or USDC ## [Microsoft PowerToys adds Alt+Tab-style switching for an app's windows](https://www.bleepingcomputer.com/news/microsoft/microsoft-powertoys-adds-alt-plustab-style-switching-for-an-apps-windows/) _2026-08-25 · Sergiu Gatlan · BleepingComputer_ Microsoft updated its Windows PowerToys toolset with a new utility dubbed "Window Hopper" that lets users switch between an app's windows more quickly. \[...\] ## [WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android](https://thehackernews.com/2026/08/whatsapp-adds-multiple-passkeys-for.html) _2026-08-25 · info@thehackernews.com (The Hacker News) · The Hacker News_ Meta on Tuesday announced a set of WhatsApp account security features, including support for multiple passkeys to a single account to help users with both iOS and Android devices sign into their accounts using the phishing-resistant method. The tech giant said more than 1 billion people use a passkey to log into WhatsApp. Support for passkeys was first introduced in Android in October 2023, ## [WhatsApp adds stronger two-step verification, multiple passkeys](https://www.bleepingcomputer.com/news/security/whatsapp-adds-stronger-two-step-verification-multiple-passkeys/) _2026-08-25 · Sergiu Gatlan · BleepingComputer_ WhatsApp has started rolling out several new account security features, including support for multiple passkeys and stronger two-step verification. \[...\] ## [Xring, Xiaomi veut se libérer des puces Qualcomm et MediaTek](https://www.menow.fr/xring-xiaomi-veut-se-liberer-des-puces-qualcomm-et-mediatek/) _2026-08-25 · Samuel · Menow_ Xiaomi veut réduire sa dépendance à Qualcomm et MediaTek grâce à ses propres puces Xring, avec trois nouveaux composants destinés aux smartphones, à l’intelligence artificielle et à l’automobile. Le plus ambitieux, le Xring 03, serait gravé en 3 nm et viserait directement les appareils haut de gamme. Le chantier est énorme. Et Xiaomi entend manifestement \[…\] L’article Xring, Xiaomi veut se libérer… ## [Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode](https://thehackernews.com/2026/08/marimo-notebook-flaw-could-run-mcp.html) _2026-08-25 · info@thehackernews.com (The Hacker News) · The Hacker News_ Marimo has addressed a high-severity security flaw in its notebook software that allowed an attacker to execute an attacker-supplied Model Context Protocol (MCP) command in a specially crafted notebook, according to VulnCheck's CVE Numbering Authority (CNA) record. The CNA record says the command can run as a local subprocess when the notebook is opened in edit mode. The vulnerability, tracked ## [Hackers breached over 270 Zimbra servers in ongoing attacks](https://www.bleepingcomputer.com/news/security/hackers-breached-over-270-zimbra-servers-in-ongoing-attacks/) _2026-08-25 · Sergiu Gatlan · BleepingComputer_ Threat actors have already compromised over 270 Zimbra instances in remote code execution attacks targeting a high-severity Zimbra Collaboration Suite (ZCS) vulnerability. \[...\] ## [Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows](https://thehackernews.com/2026/08/mirage2fa-surge-hits-4500-us-and-eu.html) _2026-08-25 · info@thehackernews.com (The Hacker News) · The Hacker News_ Thousands of companies have been affected by the Mirage2FA campaign from 2024 to 2026. The commercial phishing-as-a-service toolkit targets Microsoft 365 accounts by abusing legitimate login flows and bypassing two-factor authentication. According to ANY.RUN research, 48% of targeted email addresses were potentially compromised. Most of the affected companies are US-based. Mirage2FA Campaign ## [24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages](https://thehackernews.com/2026/08/24-npm-packages-abuse-unpkg-mirrors-to.html) _2026-08-25 · info@thehackernews.com (The Hacker News) · The Hacker News_ Cybersecurity researchers have disclosed details of a new campaign that uses a cluster of 24 npm packages as free phishing infrastructure for redirecting to ClickFix-style fake CAPTCHA pages. "While the malware is simply a single HTML page inside the npm package, and while downloading it wouldn't do harm, the threat actor’s use of npm isn't to infect developers who install it, but to use the ## [E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands](https://thehackernews.com/2026/08/e4del-and-pinhole-rats-turn-ftp-banners.html) _2026-08-25 · info@thehackernews.com (The Hacker News) · The Hacker News_ Cybersecurity researchers are calling attention to a new campaign that employs FTP banners as dead drop resolvers (DDRs) to deliver two previously unreported remote access trojans (RATs) tracked as E4del and PINHOLE. While threat actors are known to abuse legitimate services to point to additional command-and-control (C2) infrastructure and blend in with regular network traffic, the development ## [Frontier AI: Vulnerability Management's Systemic Revolution](https://thehackernews.com/2026/08/frontier-ai-vulnerability-managements.html) _2026-08-25 · info@thehackernews.com (The Hacker News) · The Hacker News_ Vulnerability management has been a staple of security programs since the dawn of the cybersecurity discipline. The symbiotic relationship between vulnerability and patch management teams has also existed for that time and has gone through waves of contention and thankfulness. While this relationship required thoughtful care and feeding from both sides, both sides were aiming to work toward a ## [Police arrests dozens of suspects in global cybercrime crackdown](https://www.bleepingcomputer.com/news/security/police-arrests-dozens-of-suspects-in-global-cybercrime-crackdown/) _2026-08-25 · Sergiu Gatlan · BleepingComputer_ Law enforcement agencies from 22 countries helped identify 263 suspects and arrested 58 individuals linked to cybercrime networks coordinated by African crime groups. \[...\] ## [Sources: Tosin’s camp in advanced talks with multiple clubs to depart Chelsea](https://sptc.news/p/sources-tosins-camp-in-advanced-talks) _2026-08-25 · Si Phillips · Si Phillips Talks Chelsea_ The defender is expected to leave this week ## [Sources: Liverpool involved with three potential late Chelsea moves this window](https://sptc.news/p/sources-liverpool-involved-with-three) _2026-08-25 · Si Phillips · Si Phillips Talks Chelsea_ Chelsea could be braced for late offers ## [Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access](https://thehackernews.com/2026/08/attackers-target-miniorange-saml-flaws.html) _2026-08-25 · info@thehackernews.com (The Hacker News) · The Hacker News_ Bad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurify miniOrange SAML 2.0 Single Sign On plugin that make it possible for an attacker to sign in as any WordPress user, including administrators. The vulnerabilities, as disclosed by Patchstack, are listed below - CVE-2026-61979 (CVSS score: 8.1) - An unauthenticated privilege escalation ## [Sources: Liam Delap progressing to Nottingham Forest but Man Utd have been hovering](https://sptc.news/p/sources-liam-delap-progressing-to) _2026-08-25 · Si Phillips · Si Phillips Talks Chelsea_ The striker will leave ## [EXCL: Chelsea’s Plan A to replace Enzo Fernandez REVEALED! Plus brand new name in the mix 👀](https://sptc.news/p/excl-chelseas-plan-a-to-replace-enzo) _2026-08-25 · Si Phillips · Si Phillips Talks Chelsea_ Chelsea working on replacements now ## [LIVE! Chelsea News Blog: TUESDAY!](https://sptc.news/p/live-chelsea-news-blog-tuesday-a88) _2026-08-25 · Si Phillips · Si Phillips Talks Chelsea_ All your latest Blues news as it comes in today... ## [Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data](https://thehackernews.com/2026/08/actively-exploited-oracle-weblogic-flaw.html) _2026-08-25 · info@thehackernews.com (The Hacker News) · The Hacker News_ The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-21962 (CVSS score: 10.0), allows an unauthenticated attacker with network access via HTTP to ## [Sources: What can still happen in the final days of the transfer window, Sources: Nicolas Jackson ‘progressing’ to Aston Villa, Fulham Chelsea review, Fan View: Alonso diagnosing big issue, More.....](https://sptc.news/p/sources-what-can-still-happen-in) _2026-08-25 · Si Phillips · Si Phillips Talks Chelsea_ The Chelsea FC Newsletter: Tuesday 25th August 2026! ## [Chelsea’s front three look frightening, but so does our defensive play and goalkeeper!](https://sptc.news/p/chelseas-front-three-look-frightening) _2026-08-24 · Si Phillips · Si Phillips Talks Chelsea_ Fulham 2 Chelsea 3