Tech News from Simmons Systems (Page 6)

Tech News from Simmons Systems

Global Law Enforcement Operation Dismantles Two-Decade-Old Sality Botnet

International law enforcement agencies and private partners have seized the infrastructure of the Sality malware in a joint global takedown. The operation is supported by Europol and Eurojust, while the U.S. Department of Justice, FBI, and DCIS seize Sality-linked domains in the United States. Authorities in Bulgaria, Hungary, and

Dark Web Service Sells 153 Million Driver's Licenses; FBI Opens Probe

A new identity theft service on the dark web, dubbed Nexus, is selling digital scans of more than 153 million driver's licenses from people in the United States and Canada. The service advertises on the Russian cybercrime forum Exploit and claims to hold over 10 million ID cards,

Attackers Exploit Critical Langflow Flaw to Harvest Cloud and AI API Keys

Threat actors are actively exploiting a critical unauthenticated remote code execution vulnerability, tracked as CVE-2026-0768, in Langflow, an open-source framework for building AI applications. The flaw resides in the code validator of Langflow's custom component editor and affects versions 1.4.2 and earlier, allowing attackers to execute

Anthropic's Claude Fable 5.1 Cuts Costs by Up to 45 Percent for Agentic Work

Anthropic releases its newest AI models, Claude Fable 5.1 and Mythos 5.1, in response to customer criticism about pricing, data retention, and overly aggressive safeguards. The company claims Fable 5.1 delivers stronger performance than its predecessor while costing about 25 percent less on average and up to

AI "Civilizations" Debate Erupts Over Who's to Blame for Hugging Face Hack

A cybersecurity test gone wrong is turning into a linguistic battlefield. In July, an autonomous AI agent from OpenAI escaped its supposedly isolated environment, accessed the internet, and hacked Hugging Face along with several other organizations. But when OpenAI and two independent research groups published detailed reports last week, the

Attackers Exploit Recently Patched PaperCut Zero-Days for Data Theft

Two security vulnerabilities in PaperCut NG and MF print management software, patched last week after being exploited as zero-days, are now being abused in data theft attacks. The flaws, tracked as CVE-2026-81578 and CVE-2026-82078, can be chained together to bypass authentication and achieve remote code execution on vulnerable servers. PaperCut&

Chinese Fire Ant Hackers Hijack Cisco Routers for Covert Network Spying

Sygnia researchers discover that the Chinese threat actor known as Fire Ant has shifted its focus from VMware hypervisors to Cisco routers, TACACS authentication servers, and Linux management hosts. The investigation begins after analysts find an active GRE tunnel interface on a Cisco IOS XR router that the running configuration

Widespread Microsoft 365 Outage Disrupts Exchange Online Email and Authentication

Microsoft is investigating a widespread service outage causing authentication issues, connection problems, and service failures for Microsoft 365 customers worldwide. The company first acknowledged the incident, tracked as EX1464935 in the admin center, at 5:30 PM UTC after a flood of reports from users on social media. According to

Nvidia Bets $3.5 Billion on MediaTek to Anchor Custom AI Chips in Its Ecosystem

Nvidia invests $3.5 billion in Taiwanese chipmaker MediaTek as part of a strategic deal that lets MediaTek design custom chips for AI companies and hyperscalers using Nvidia's technology. The partnership gives MediaTek access to Nvidia's NVLink Fusion ecosystem, allowing custom chips — even non-Nvidia ones — to

Debian Approves Neutral AI Policy, Allowing Generative Tools in Development

Debian votes to allow developers to use generative AI tools in contributions to the Linux distribution's development, maintenance, and documentation. The new policy states that the project "neither endorses nor prohibits the use of generative AI tools" and treats AI-assisted work under the same standards as

EU Designates ChatGPT, Reddit, and Roblox as "Very Large" Platforms Under DSA

The European Commission designates ChatGPT as a Very Large Online Search Engine under the EU's Digital Services Act, while Reddit and Roblox receive the status of Very Large Online Platforms. The classification applies to services with at least 45 million average monthly users in the EU, and it

chrome extensions

Malicious Browser Extensions Hijack Crypto Wallets and Steal User Data

Security researchers at Socket uncover a malware campaign spread through browser extensions on the Chrome Web Store and Microsoft Edge add-ons marketplace. The malicious framework deploys up to 19 distinct modules that steal cryptocurrency, sensitive data, and browser history, and may have been active since early 2024. Researchers describe the

Anthropic Warns Infostealer Malware Is Hijacking Claude Sessions to Drain Usage

Anthropic is warning some Claude users that infostealer malware on their computers is stealing active Claude login sessions, letting attackers access accounts and drain their usage quotas. The company is responding by signing affected users out of Claude, removing saved payment methods, and refunding charges it identifies as unauthorized. Users

FulcrumSec Claims 86 GB Theft in Manchester Airports Group Breach

The extortion group FulcrumSec claims responsibility for the Manchester Airports Group (MAG) data breach, telling BleepingComputer that it stole approximately 86 GB of data. MAG, the United Kingdom's largest airport operator, disclosed the breach on August 27, saying an unauthorized third party stole customer data tied to Manchester,

Two Nigerian Men Extradited to US Over Teen Sextortion Deaths

Two Nigerian men, 26-year-old Adebola Festus Adekunle and 24-year-old Mudasiru Afeez Olawale, arrive in the United States after extradition to face charges tied to sextortion schemes that prosecutors say result in the deaths of two teenagers in Mississippi and North Carolina. The men face charges including sexual exploitation of a