GoKawiil
Tech News
Reports indicate attackers are exploiting vulnerabilities in Plex Media Server software to install malware on affected systems. Plex is advising all server administrators to update to the latest version to patch the security flaws. No specific details on the vulnerability or scope of attacks were included in the available information.
Hackers reportedly breached systems controlling fridges and freezers at hundreds of supermarket stores across France, causing temperatures to spike as high as 122 degrees Fahrenheit (50 Celsius). The malfunction led to spoiled food and reportedly sparked fires at some locations.
Hackers allegedly breached refrigeration control systems at French supermarkets, causing units to overheat, triggering fires and spoiling stored food. The incident points to a targeted intrusion into industrial control or IoT systems managing store refrigeration rather than a simple equipment malfunction.
A vulnerability discovered in the XRP Ledger reportedly could have let an attacker mint unlimited amounts of XRP-based tokens, effectively creating crypto out of thin air. The flaw has since been patched, and no evidence indicates it was exploited before the fix.
Asos has confirmed that hackers breached a third-party platform hosting customer communication data, stealing names, home addresses, phone numbers, emails, and profile notes such as search queries. The attackers, identifying themselves as the Xuanye Group, used Asos's own app notification system to alert customers directly, demanding the company engage with them or risk having the stolen data leaked online.
Asos has acknowledged that hackers gained access sufficient to push an unauthorized push notification to users of its mobile app. The retailer confirmed the incident but has not detailed the scope of the breach or what systems were compromised.
Cybercriminals employed a publicly accessible Chinese AI technology to launch attacks against financial institutions in South Korea. These incidents underscore the growing threat posed by AI-enabled hacking methods.
Proofpoint researchers reported that China-linked group TA419 ran a July phishing campaign impersonating US officials, including a former White House science and technology policy staffer, to steal credentials from AI experts at US think tanks, universities, defense contractors and law firms. The campaign followed similar activity in February, when the group posed as an Anthropic employee to target a think tank AI policy expert, and is part of a pattern Proofpoint says dates back to at least April 2025.
Cybersecurity firm Proofpoint reported that a suspected China-aligned hacking group, tracked as TA419, impersonated Anthropic employees and a former White House official to approach AI policy experts at think tanks, universities and law firms. The attackers used fake invitations to join an AI policy advisory group or contribute to a fictitious Senate report, then sent malware-laced documents aimed at compromising victims' cloud accounts. One email impersonating a senior Anthropic staffer referenced 'military integration of Claude' to lure a think-tank target.
Muse has released open-source code enabling hobbyists to build their own Muse-branded hardware gadgets. The release includes an SDK token system, sample project ideas, and support for adding new boards, aimed at hackers who want to tinker and customize the devices.
The Pentagon has begun alerting current and former service members that a personnel database containing records on more than 3 million individuals was breached by hackers. The database reportedly held sensitive information such as Social Security numbers, though the exact number of people whose data was exposed has not been disclosed.
Bitget has reopened Bitcoin withdrawals after suspending them following a breach it says North Korean hackers carried out last week, stealing $387.5 million across multiple chains and tokens. The exchange plans to phase back withdrawals for ETH, USDT and other assets by early October, saying it has fixed the exploited vulnerability and that user balances remain unaffected thanks to its Protection Fund.