The Edge of the Cyber World See the latest
A data extortion group calling itself ShinyHunters says it broke into a Florida driver database and pulled more than 200,000 records, then posted a screenshot of Jeffrey Epstein’s DMV file as proof. The claim surfaced on the group’s dark web leak site on September 7, 2026, and was independently reported by BleepingComputer the following day.…
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CVE-2026-81963 Microsoft Windows Link Following Vulnerability CVE-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CVE-2026-86218 N-able N-central Static Code…
Executive summary China-based artificial intelligence (AI) companies are conducting systematic extraction of proprietary functionalities and capabilities of U.S. AI companies’ models through industrial-scale knowledge distillation campaigns that form the core—not merely a supplement—of their AI development strategy. While “distillation” is recognized as a legitimate and useful technique in AI research, China-based AI companies are engaging…
Threat actors are continuing to leverage artificial intelligence (AI) to streamline their operations, with one financially motivated hacking group employing an autonomous, multi-agent attack framework to carry out a large-scale credential harvesting campaign within six hours. Google Threat Intelligence Group (GTIG) said it has observed attackers with diverse motivations targeting proprietary AI
A previously undocumented financially motivated threat actor has been linked to attacks targeting Brazilian financial institutions since at least March 2026. Cybersecurity company CrowdStrike is tracking the Brazil-based activity cluster under the name Slim Spider. “The adversary demonstrates deep operational knowledge of Brazilian financial infrastructure, including the instant payment
Three days after OpenAI shipped its most powerful model yet, the company’s own chief scientist told the public he isn’t sure anyone is ready for what comes next. GPT-6 Astra launched on September 3, 2026, and by September 6, Jakub Pachocki had published warnings that go well beyond the usual safety-page boilerplate. He wrote that…
Cybersecurity researchers have disclosed details of worm-like activity that abuses ConnectWise ScreenConnect to distribute a malicious Visual Basic Script (VBScript) payload to newly connected systems. According to Huntress, three unrelated incidents have been found to use diverse initial access methods, namely a Quick Assist tech-support scam, a phishing-delivered MSI installer, and a fake
SonicWall’s SMA1000 secure access gateways are under attack again. On September 1, 2026, the vendor disclosed two new vulnerabilities in its SMA 1000 Series, CVE-2026-83548 and CVE-2026-83549, and confirmed both were already being exploited in the wild before the patch shipped. It’s the second time in roughly seven weeks that attackers have found and weaponized…
PUBG: DED.NET is a 1996-set PvP FPS that introduces a multi-match career journey and roguelite progression to the PUBG universe.
France’s data protection authority has handed down a €500,000 ($580,000) fine against a private hospital in Saint-Étienne after a 2025 cyberattack exposed medical and personal data tied to more than 727,000 people. The CNIL announced the penalty against Hôpital Privé de la Loire on September 3, 2026, closing out a year-long investigation into how an…
