cybersecurity - Tech News from Simmons Systems

Tech News from Simmons Systems

cybersecurity

A collection of 554 posts

Hugging Face Breached by Autonomous AI Agent in Unprecedented Attack

Hugging Face, a major open-source AI platform used by over 50,000 organizations, discloses a significant breach in which attackers leverage an autonomous AI agent to infiltrate its production infrastructure. The intruders exploit two code-execution vulnerabilities within the platform's data-processing pipeline by using a malicious dataset, allowing them

Suspected Chinese APT Exploits ViPNet Software in Attacks on Russian Government

A sophisticated hacking campaign known as HelloNet targets Russian government agencies and critical infrastructure by abusing ViPNet, a widely used private networking software suite. According to researchers at Kaspersky, the campaign actively compromises organizations across the government, energy, transport, education, and logistics sectors. The attackers exploit ViPNet's trusted

Critical ServiceNow Remote Code Execution Flaw Under Active Attack

Threat researchers at Defused confirm that attackers are now actively exploiting a critical vulnerability in the ServiceNow AI Platform, known as CVE-2026-6875. The flaw allows unauthenticated threat actors to escape the platform's sandbox and execute malicious code remotely. Searchlight Cyber originally discovered and reported the vulnerability in April,

Microsoft Sounds Alarm on Rising ACR Stealer Malware Campaigns

Microsoft reports a significant increase in attacks leveraging ACR Stealer, a malware-as-a-service operation that targets enterprise customers to harvest browser-stored passwords, authentication tokens, and sensitive documents. Between late April and mid-June, threat actors deploy the info-stealing payload using the ClickFix social-engineering technique, WebDAV servers, and the Microsoft HTML Application Host

CISA Orders Federal Agencies to Patch Exploited Fortinet FortiSandbox Flaws by Sunday

CISA has ordered federal agencies to patch two critical vulnerabilities in Fortinet's FortiSandbox threat detection platform by Sunday, July 19. The flaws, tracked as CVE-2026-39808 and CVE-2026-25089, allow unauthenticated attackers to execute remote code through command injection attacks that require no user interaction. Both vulnerabilities have been added

Windows Zero-Day "LegacyHive" Enables Hackers to Gain Admin Access

A security researcher operating under the handle "Nightmare Eclipse" releases a Windows zero-day exploit called LegacyHive that targets a vulnerability in the Windows User Profile Service. The exploit allows attackers to escalate privileges on fully patched Windows systems, though it currently lacks an official CVE identifier. Nightmare Eclipse

Tiny 11-Byte Payload Triggers Major Memory Bloat in OpenSSL Servers

A newly disclosed vulnerability called HollowByte allows unauthenticated attackers to cripple OpenSSL servers using a payload of just 11 bytes. The flaw exists because vulnerable versions of OpenSSL allocate memory based on a declared message size in the TLS handshake header before actually receiving or validating the payload data. An

Ransomware Attack on Coca-Cola's Fairlife Halts US Dairy Production

Coca-Cola discloses that a ransomware attack on its Fairlife dairy subsidiary disrupts operations and temporarily suspends production of Fairlife products across the United States. In an SEC Form 8-K filing, the company says it detects unauthorized access to several systems, including those tied to production. Coca-Cola activates its incident response

Researcher Drops Ninth Windows Zero-Day Exploit Amid Record Patch Tuesday

A pseudonymous researcher going by the name NightmareEclypse releases yet another Windows zero-day exploit, marking the ninth such disclosure from this individual. The latest exploit, dubbed HiveLegacy, targets a vulnerability in the Windows User Profile Service and enables users with limited system privileges to compromise administrator accounts. The drop coincides

Microsoft's July 2026 Patch Tuesday Addresses Record 570 Security Flaws

Microsoft's July 2026 Patch Tuesday delivers security updates for a record-breaking 570 vulnerabilities across its product ecosystem. The update addresses 59 flaws rated as Critical, including 48 remote code execution vulnerabilities. The breakdown spans 254 elevation of privilege bugs, 145 remote code execution flaws, 102 information disclosure issues,

CISA Urges Immediate Patching of Actively Exploited SharePoint Vulnerabilities

CISA warns that attackers are actively exploiting three serious vulnerabilities in Internet-exposed, on-premises Microsoft SharePoint Server instances. These flaws, tracked as CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164, affect all supported self-hosted versions of SharePoint Server. Attackers use them to bypass authentication, execute remote code, and establish persistence on compromised systems. According to

US Government Warns Russian State Hackers Target Home and Office Routers

Russian state-sponsored hacking groups backed by the FSB continue to mass-compromise home and small office routers worldwide, according to a new advisory from the Cybersecurity and Infrastructure Security Agency. The hackers exploit poorly configured devices, particularly those with exposed SNMP agents that still accept default or common credentials. Once compromised,

Hackers Compromise Jscrambler npm Package with Infostealer Malware

Hackers compromise the Jscrambler npm package, injecting information-stealing malware into versions 8.14, 8.16, 8.17, and 8.20. The malicious package executes during the preinstall hook and receives approximately 1,479 downloads within a two-hour window before Jscrambler deprecates it and releases a safe version. The company confirms