Latest cybersecurity threats, data breaches, hacking incidents, security vulnerabilities, ransomware attacks, and expert guidance on digital security.
Iranian-affiliated hackers forced a small-scale UK energy generator offline for four days last month, marking the first known successful shutdown of such a facility by these actors. This incident is part of a broader reported Iranian campaign targeting over 30 municipal water systems in Minnesota and other US states.
President Donald Trump signed a National Security Presidential Memorandum allowing vetted U.S. private companies to conduct cyber operations against foreign criminal groups under federal oversight. Approved firms can collect intelligence and disrupt digital infrastructure used by these organizations, addressing $21 billion in cyber losses reported in 2025.
Researchers from Germany's Karlsruhe Institute of Technology discovered that unencrypted beamforming feedback signals allow WiFi networks to create radio-based images of people. Testing on 197 participants achieved almost 100% identification accuracy, prompting calls for new privacy safeguards in future systems.
Cybersecurity experts warn that Windows named pipes are vulnerable to attacks due to unsafe trust assumptions. The risk is highest when privileged services communicate with less privileged desktop applications, as local processes may run under various security contexts including compromised accounts.
OpenAI chief global affairs officer Chris Lehane warned of ongoing, persistent cyber-attacks originating from AI models. He identified open-source models developed in China as the primary source of these risks. This warning comes as OpenAI paused training for its most advanced internal models amid rising safety concerns.
Designers Isaque Seneda and Gabriel Abrucio created ShieldFont, a typeface that poisons AI scraper data by substituting words with nonsensical alternatives in HTML source code. The tool uses ligatures to replace approximately 24.4 percent of all words on a webpage while maintaining visual legibility for human readers.
The Guardian warns UK homebuyers about conveyancing fraud, where criminals intercept emails to redirect deposits. Citing Report Fraud data showing significant financial losses, the article details how spoofed messages trick victims and advises verifying bank details through independent channels to prevent these scams.
Apollo Global Management confirmed a July data breach caused by social engineering, with unauthorized cloud access occurring between July 6 and 10. HR chief Matthew Breitfelder disclosed the incident in an August 21 letter posted on the California attorney general's website, revealing stolen sensitive personal information including Social Security numbers. Apollo stated there is no evidence the stolen data has been publicly posted or used for identity theft or fraud.
The article argues that AI agents create significant cybersecurity risks by expanding attack surfaces and complicating identity management. It contends that organizations must adopt zero-trust principles and proactive AI-driven red teaming to counter automated, non-human threats from adversaries.
Kurt Knutsson argues that data exposure differs from actual identity theft, advising readers to verify alerts rather than panic. He recommends using identity monitoring services for early warnings and outlines steps like freezing credit and setting bank alerts to restore security if misuse occurs.