Breaking News – Cyber Threats (last 6h)
Generated: 2026-08-03 13:00 PDT
- Fake Roblox Xeno script launcher pushes infostealer, RAT malware
BleepingComputer • 2026-08-03 12:25 • www.bleepingcomputer.com
Fake Xeno Executor installers are infecting unsuspecting Roblox players with malware that provides remote access and steals sensitive information. […]
https://www.bleepingcomputer.com/news/security/fake-roblox-xeno-script-launcher-pushes-infostealer-rat-malware/ - 18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users
The Hacker News • 2026-08-03 11:43 • thehackernews.com
Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) as part of a sophisticated, targeted software supply chain attack targeting Chinese-speaking environments.One of the packages in question is “lib-mtop,” an unscoped package with the same name as a private Alibaba package
https://thehackernews.com/2026/08/18-malicious-npm-packages-deliver-cross.html - More on the OpenAI Agent’s Attack on Hugging Face
Schneier on Security • 2026-08-03 10:02 • www.schneier.comHugging Face has published a detailed timeline of the attack. From the summary:
The agent was running an internal OpenAI cyber-capability evaluation based on the ExploitGym benchmark, which tasks an AI agent with finding and exploiting software vulnerabilities. OpenAI ran this on its own infrastructure, and the ExploitGym maintainers and their infrastructure had no involvement in the deployment or operation of that evaluation environment. As far as we were able to infer, across the course of b…
https://www.schneier.com/blog/archives/2026/08/more-on-the-openai-agents-attack-on-hugging-face.html - N-able warns of N-central auth bypass flaw exploited in attacks
BleepingComputer • 2026-08-03 10:00 • www.bleepingcomputer.com
N-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. […]
https://www.bleepingcomputer.com/news/security/n-able-warns-of-n-central-auth-bypass-flaw-exploited-in-attacks/ - Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts
The Hacker News • 2026-08-03 09:24 • thehackernews.com
Malware running as an ordinary user on a Windows machine can sign into a victim’s passkey-protected accounts without a fingerprint, a PIN, or anything at all appearing on the victim’s screen.Unit 42 detailed three attack paths against Chrome’s Google Password Manager cloud authenticator, which it calls Pass-ta-key, Silver Pass-ta-key and Golden Pass-ta-key; the strongest targets the master key
https://thehackernews.com/2026/08/google-password-manager-attacks-could.html - INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws
The Hacker News • 2026-08-03 09:15 • thehackernews.com
The INC Ransomware operation has emerged as the “dominant threat actor” exploiting the recently disclosed security flaws in SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances.In a report published over the weekend, Resecurity said it observed the INC Ransomware accelerating its activity since the beginning of August 2026, listing multiple victims on its data leak site. Per
https://thehackernews.com/2026/08/inc-ransomware-emerges-as-dominant.html - ExfilSquad hackers leak info of over 100,000 UK police officers, staff
BleepingComputer • 2026-08-03 08:04 • www.bleepingcomputer.com
A cyberattack on the U.K.’s Police National Legal Database (PNLD) has compromised contact data of more than 100,000 police officers and other criminal justice professionals. […]
https://www.bleepingcomputer.com/news/security/exfilsquad-hackers-leak-info-of-over-100-000-uk-police-officers-staff/ - Inside the Underground Business of the Android BTMOB RAT malware
BleepingComputer • 2026-08-03 07:45 • www.bleepingcomputer.com
Flare researchers analyzed thousands of underground posts to examine how the BTMOB Android malware operation evolved into a fragmented ecosystem of resellers, source-code vendors, custom versions, and competing sales channels. […]
https://www.bleepingcomputer.com/news/security/inside-the-underground-business-of-btmob-rat/ - ⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks
The Hacker News • 2026-08-03 07:03 • thehackernews.com
This week kept coming back to permission. A model crossed a boundary. A wallet trusted bad randomness. Webmail kept an intruder around. Public systems, package feeds, hotel networks, and login flows all gave away more than intended.Some of it was clever. Most of it was just access left lying around: old bugs, exposed gear, poisoned dependencies, weak defaults, and tooling that moved from
https://thehackernews.com/2026/08/weekly-recap-rogue-ai-models-88m.html
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
