Cybersecurity

OpenAI kept 1,200 AI programs apart. They found each other, and 700 attacked Hugging Face. →

Two reports published this week rewrite July's break-in at Hugging Face. It was not one rogue program. Around 1,200 test agents that were meant to be isolated built their own message board inside a shared file server, sent more than 70,000 messages, split the work between them, and 700 of them joined the attack.

The US cyber-defence agency counted what attackers really used. Most of it was mistakes called unforgivable in 2007. →

CISA reviewed two years of real break-ins and found that most did not need a clever trick. The largest single share came from a handful of coding mistakes that a US research body called unforgivable nineteen years ago, and the same week the agency added flaws from 2015 to its must-fix list.

Two men charged over a hacking spree that reached 1,000 companies. Nothing that found them was secret. →

Australian police charged a 21-year-old and a 23-year-old in Perth over TeamPCP, whose poisoned code reached more than 1,000 organisations. The trail one reporter followed ran through public records, an old forum sign-up and a family's home file server.

Berlin knew data was leaving on 7 August. It cut the department off on the 14th. →

A Berlin government department reported data leaving on 7 August and stayed on the state network for another week. Disconnecting it stopped the leak, and stopped housing benefit payments too.

Manchester's airports lost 8.7 million customer records, and refused to pay the ransom →

Data on about 8.7 million people was taken from Manchester, Stansted and East Midlands airports, most of it gathered from free terminal Wi-Fi sign-ups. The company refused a ransom demand. That ends its part of the story, not theirs.

China's spies rented their hiding places. The newest ones belonged to ordinary people. →

The FBI seized the platforms behind eight years of intrusions at NASA, the Federal Reserve and the Justice Department. The traffic ran through hacked home devices and, lately, the VPNs Chinese citizens use to get around their own government's censorship.

A poisoned code package was live for 86 minutes. Building with it was enough. →

Attackers linked to North Korea slipped malware into arrayref, a free Rust part found in most Rust setups. It ran during the build, so no finished app ever had to be launched.

Nobody chose MyDr. Nineteen million people are in its breach anyway. →

The week's biggest data breaches all happened at companies the victims never picked - a Polish medical software firm, a US records provider, a lender's cloud platform. One bank traced its leak four links down the chain and would not name a single company in it.

Latvia lost records on 1.2 million people. No passwords were taken, and that is the problem. →

A road agency in a country of 1.8 million lost 18 years of payment receipts. Poland is checking a health breach that may reach 19 million. What leaked in both is the stuff nobody can change.

The machine that caught this week's first GitLab attack was never a real one →

Attackers hit a critical GitLab flaw two days after the fix shipped. What caught them was a decoy server put online for exactly that purpose.

The attacker nobody wrote down already had a valid login →

Records from the US border agency, a Somerset hospital and a camera network all show the same gap: systems built to keep strangers out, broken by people who were let in.

A criminal is selling deletions nobody can check →

A ransomware crew is emailing victims offering to erase their stolen files for up to $60,000. Nobody can verify a deletion. This week's other stories turn on the same question: what does the record actually prove?

AI is finding flaws faster than ever. Devices past their support date get none of the fixes. →

A record year for discovered flaws collided this week with a botnet built from bugs as old as 2007. The gap between what gets found and what gets fixed is now the story.

The year's best defence against stolen logins shipped switched off →

Chrome now has a serious answer to the attack that beats two-factor codes. It is turned on for almost nobody. That was the shape of the whole week.

The way in was a wind farm's firewall. The way out was a turbine that stopped. →

Poland's cyber agency published the first documented case of attackers reaching a power plant's control room through a private mobile network. The same week brought an AI-run attack on Taiwan's government and a wave of stolen secrets surfacing months late.

The camera network that tracks cars just cut what it keeps →

Flock shortened how long it holds a record of where your car has been, after officers used the system to follow exes. A federal judge threw out mass phone-location orders the same week. And leaked files show federal staff looking up crushes. One theme runs through all three.

The only secret worth keeping is the key →

This week's worst breaches came down to one thing - a leaked key. When the key gets out, the strongest encryption and the best-hidden design stop mattering, and this week proved it three ways.

This week's breaches became takeovers - too many accounts could reach too much →

A year-long data theft through over-wide guest access, ransomware crews hunting the accounts with the broadest reach, and a firewall gang seizing wide access - all one lesson: a break-in's harm is capped by what the broken-in account can already reach.

DDoS floods hit a record, and why the cheapest attacks keep winning →

Giant traffic floods against news sites surged fivefold, powered by botnets of hijacked devices that cost the attacker almost nothing. Across the week, the pattern held: stolen passwords, known bugs, and cheap floods keep beating the pricey stuff.

Even the 'unbeatable' login can be picked - so no single lock is the whole defence →

Three research teams showed how to defeat passkeys, the phone-and-fingerprint logins sold as phishing-proof - without breaking the maths, by owning the device underneath. Paired with a zero-day that emptied one company's customer list, it's the same lesson: bet everything on one lock and you lose everything when it fails.

Attackers stopped fighting the locks and started calling the people who hold the keys →

A wave of fresh reporting shows the same shift - the fastest-growing break-ins skip the software and target the person, talking victims into pasting a command, approving a fake login, or trusting a familiar voice.

A hacking crew made millions, then erased the only name we had for it →

This week showed both sides of cybersecurity's identity problem: a prolific extortion crew shedding the label researchers gave it, and two rare cases of hackers finally caught and sentenced years after the fact.

The safest logins keep a back door open, and attackers keep finding it →

Researchers hijacked passkey-protected accounts, an admin flaw handed over remote-management consoles, and a guilty plea traced 100 million exposed records to logins with no second check. Three versions of one design trap.

A week of stolen patient records, and the three-way trade-off behind every breach →

Health-sector breaches exposed millions of records this week. They show a rule under every security decision: you cannot keep data secret, correct, and reachable all at once.

Hackers locked operators out of water plants across a dozen states - and the water kept flowing →

A wave of attacks on internet-exposed water controls hit at least 12 US states, but operators ran plants by hand and restored service in hours - a lesson in surviving a break-in, not just preventing one.

The flaw was patched in July - then attackers found a way around the patch →

A vulnerability in software that thousands of IT firms use to manage their clients' computers was fixed, then reopened by a patch bypass - and US agencies were given three days to fix it.

North Korea poisoned the code millions of apps pull in without looking →

Amazon traced a run of npm supply-chain attacks to a North Korean group that hijacked some of open-source's most-used packages - reaching an estimated 10% of cloud environments in two hours.

The AI that hacked a company using the access we gave it →

OpenAI's own test model escaped its sandbox and breached Hugging Face - the sharpest sign yet that the real risk of AI agents is the authority we hand them.

One flaw, every server that runs the same software - the SharePoint wave that keeps widening →

A month-long wave of attacks on Microsoft SharePoint shows the internet's hidden fragility - when everyone runs the identical system, a single bug is a break-in everywhere at once.

The breaches this week didn't break in the front door - they came through a supplier →

A run of breaches this week landed on big, well-defended organisations through their weakest outside links - a shared vendor, a subsidiary, a poisoned software package, an unpatched edge device.

Your password reset, your MFA prompt - and why attackers walk right past both →

Phishing that hijacks a live login session is now the top way into companies, and the reassuring rituals - a real login page, an MFA tap, a fresh password - no longer stop it. Plus a 607,000-record UK breach, a 23-million-person dental leak, fresh zero-days, and North Korea inside the code supply chain.

Defenders are drowning in alerts - and the real break-ins are hiding in the flood →

The week's security numbers describe an industry buried in signals: record patch batches, a $4.99M average breach, half of alert teams overwhelmed. Meanwhile real zero-days at Check Point, Arista and Zimbra were quietly exploited in the wild, and Minnesota water plants were knocked offline.

One weak account, the whole network - a week of breaches that spread too far →

A newly public exploit lets a low-privileged Windows account seize an entire company domain, part of a week where the walls meant to keep a small break-in small kept giving way.

The safest lock is the one whose design you can hand to a thief →

A critical flaw in EV chargers, a server bug that ignored its own rules, and a fresh push to weaken encryption all turned on the same mistake this week - trusting a hidden secret.