Yandex confirmed that drone attacks damaged three of its data centers in Sasovo, Kaluga, and Vladimir between October 8-11, knocking two facilities offline entirely and degrading the third. Customers have reported being unable to access files stored on Yandex's cloud infrastructure, and the company says it cannot give a reliable timeline for restoring service. Yandex has urged customers to switch to alternative disaster-recovery infrastructure while its teams work to stabilize the remaining systems.
bleepingcomputer.com
· 2026-10-12
A peer-reviewed study in the Journal of Financial Crime examined 72 flash loan attacks between February 2020 and July 2024 that drained $1.211 billion from DeFi platforms, part of 254 total attacks costing $6.568 billion across 20.63 billion transactions on seven blockchains. The researchers found that attacks exploiting flaws in protocol logic rose from 28% of flash loan losses in the first two years of the study to 55% in the most recent period, overtaking price oracle manipulation as the dominant technique.
techreport.com
· 2026-10-07
Black Lotus Labs reports that a malware strain called PoeLLM has compromised more than 3,400 exposed AI servers, with up to 800 infected systems active on a single day. The malware, an ELF file named libgcrypt, derives its command-and-control IP address by extracting keywords from a poem hosted in a GitHub repository, updating the poem 11 times since April to rotate C2 addresses.
bleepingcomputer.com
· 2026-10-07
A Dark Reading readership poll on Black Hat USA 2026 themes found that 50% of respondents ranked AI-driven attacks versus AI-powered SOC defenses as the most pressing issue, far ahead of automation and AI-trust topics at 22%. Conference sessions covered OpenAI's probe into the Hugging Face breach, AI-fueled fraud operations, and prompt-injection risks in AI browsers, while experts noted exploitation of disclosed vulnerabilities now often begins within hours rather than weeks.
darkreading.com
· 2026-10-05
A commentary marking 25 years since the 2001 Amerithrax attacks argues that current attention to AI-designed bioweapons is crowding out urgent, existing biosecurity gaps. The author contends that oversight of biomaterials and lab equipment, including cheaper benchtop DNA synthesizers, has not kept pace with technology, and that government coordination remains as weak as it was during the 2001 anthrax mailings that killed five people.
nature.com
· 2026-10-05
Fortinet has disclosed a critical path traversal vulnerability in FortiMail's management interface, scoring 9.8 on CVSS, that attackers are already exploiting to write arbitrary files without authentication. The flaw affects FortiMail versions 7.2 through 8.0.1, and was discovered internally by Fortinet's Product Security team. Patches are not yet available for most affected branches, though fixed versions are planned.
bleepingcomputer.com
· 2026-10-01
Apple has disclosed that a memory-corruption vulnerability tracked as CVE-2026-86950, an out-of-bounds write flaw, is being actively exploited. The company described the attacks as extremely sophisticated, indicating a narrowly targeted campaign rather than mass exploitation.
darkreading.com
· 2026-09-29
Huntress researchers found a custom ChatGPT variant named 'Plus 5.6', promoted via sponsored Google search results, that redirects users to a fake Google Sites page mimicking a Cloudflare check. That page instructs visitors to run a PowerShell command which installs a signed application alongside a malicious DLL, deploying a remote access trojan. Huntress says it has investigated at least 40 related incidents, and OpenAI plans to retire the custom GPTs feature on December 11.
bleepingcomputer.com
· 2026-09-29
Recorded Future's Insikt Group reports that Russia is combining influence operations, cyberattacks, and physical incursions across Europe as part of its broader war effort against Ukraine. Examples cited include the CopyCop network impersonating European news outlets with AI-generated content, drone incursions near Estonia's border, and a Russian drone intercepted near Romania's Neptun Deep gas project in the Black Sea.
darkreading.com
· 2026-09-25
Aikido Security published research showing that GitLab's per-user incoming email address, meant to let users create project issues via email, contains a non-expiring token that functions as an authentication and authorization credential. Because GitLab treats any message sent to that address as coming from its owner, exposure of the address alone can let an attacker create issues, submit merge requests, or send patch files across an organization's public and private projects without needing account credentials.
darkreading.com
· 2026-09-23
Security researchers at Manifold Security found that third-party.com, a domain frequently used as a generic placeholder in developer documentation and code samples, now hosts a fake Cloudflare verification page. BleepingComputer confirmed the page mimics a 'Performing security verification' CAPTCHA that copies a malicious PowerShell command to a user's clipboard, then instructs them to paste and run it via Windows key + R, which downloads and executes malware from an external URL.
bleepingcomputer.com
· 2026-09-23
A research team has released Einstein, an exploitation pipeline that automatically builds data-only attacks by tracking attacker-controllable data flowing into security-sensitive syscall arguments, such as execve or write. Rather than modeling application-specific logic, Einstein works generically against any program's syscall interface, and the team reports it can generate a surprisingly large number of working exploits against real-world software.
usenix.org
· 2026-09-23
GoKawiil