Aggregator

Submit #751987 / VDB-346273

A hobby coding experiment reportedly exposed live camera feeds, microphones, and floor plans from thousands of robot vacuums worldwide.

The post Hobby coder accidentally creates vacuum robot army appeared first on Security Boulevard.

Researchers found an infostealer stole a victim’s OpenClaw configuration, marking a shift toward targeting personal AI agents. Cybersecurity researchers have uncovered a new information stealer that exfiltrated a victim’s OpenClaw configuration environment, previously known as Clawdbot and Moltbot. According to cybersecurity firm Hudson Rock, the case highlights a new shift in infostealer activity, moving beyond […]

Officers from Poland’s Central Bureau for Combating Cybercrime (CBZC) detained a 47-year-old man suspected of creating, acquiring, and sharing computer programs used to unlawfully obtain information stored in computer systems. He faces a potential prison sentence of up to five years. The arrest took place in the Małopolska Voivodeship as part of a joint operation conducted by CBZC officers from the Katowice and Kielce branches. During a search of the suspect’s apartment, officers recovered a … More →

The post Phobos ransomware affiliate arrested in Poland appeared first on Help Net Security.

Ireland's Data Protection Commission (DPC), the country's data protection authority, has opened a formal investigation into X over the use of the platform's Grok artificial intelligence tool to generate non-consensual sexual images of real people, including children. [...]

Первая в 2026 году уязвимость уже вовсю эксплуатируется злоумышленниками.

When it comes to our children’s digital lives, prohibition rarely works. It’s our responsibility to help them build a healthy relationship with tech.

看雪致谢全体安全厂商及合作伙伴

红队最新CS免杀木马样本分析

Discover how European biometric passports work. Explore RFID chips, Data Groups (DG1-DG3), MRZ encryption, and the tech behind the Schengen Entry/Exit System.

The post Information Stored in European Passports appeared first on Security Boulevard.

Hudson Rock has warned OpenClaw users that infostealers are targeting their configuration files

New research from Microsoft has revealed that legitimate businesses are gaming artificial intelligence (AI) chatbots via the "Summarize with AI" button that's being increasingly placed on websites in ways that mirror classic search engine poisoning (SEO). The new AI hijacking technique has been codenamed AI Recommendation Poisoning by the Microsoft Defender Security Research Team. The tech giant

A vulnerability identified as critical has been detected in Sciyon Koyuan Thermoelectricity Heat Network Management System 3.0. This affects an unknown part of the file /SISReport/WebReport20/Proxy/AsyncTreeProxy.aspx. The manipulation of the argument PGUID leads to sql injection. This vulnerability is documented as CVE-2026-2621. The attack can be initiated remotely. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #751809 / VDB-346272

A vulnerability categorized as critical has been discovered in Huace Monitoring and Early Warning System 2.2. Affected by this issue is some unknown functionality of the file /Web/SysManage/ProjectRole.aspx. Executing a manipulation of the argument ID can lead to sql injection. This vulnerability is registered as CVE-2026-2620. It is possible to launch the attack remotely. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

Операторы ботнета Kimwolf признали, что случайно нарушили работу инфраструктуры I2P.

Submit #751808 / VDB-346271

Eurail B.V. revealed that traveler data were stolen in a recent security breach, and are now being sold on the dark web. Eurail B.V. confirmed that the traveler data stolen in a breach earlier this year is now being offered for sale on the dark web. The company disclosed the development as part of its […]

Теперь, чтобы найти человека по фото, не нужно быть гением – достаточно подписки.

A vulnerability was found in Netgate pfSense CE up to 2.8.0. It has been rated as critical. Affected by this vulnerability is the function exec_php of the file pfsense.exec_php of the component XMLRPC API. Performing a manipulation results in improper access controls. This vulnerability is cataloged as CVE-2025-69691. It is possible to initiate the attack remotely. There is no exploit available.