cybersecurity - Tech News from Simmons Systems (Page 2)

Tech News from Simmons Systems

cybersecurity

A collection of 554 posts

US and Allies Warn of Russian Hackers Targeting Critical Infrastructure Routers

Cybersecurity agencies from the United States and eight allied nations issue a joint advisory warning that Russian state hackers are actively targeting critical infrastructure networks. The advisory, co-authored by the NSA, FBI, and CISA alongside agencies from Australia, the UK, Canada, and several European nations, attributes the campaign to the

Australian Cyber Agency Warns of Global CMS Exploitation Campaign

The Australian Cyber Security Centre (ACSC) issues a warning about an ongoing global exploitation campaign that targets vulnerable content management systems and plugins. The agency reports that numerous small- to medium-sized Australian businesses already suffer compromises from the attacks. Threat actors actively scan websites for known flaws and deploy webshells,

prompt injection

Researchers Demonstrate "Ghostcommit" Attack That Hides Prompt Injection in Images to Steal AI Agent Secrets

Security researchers from the University of Missouri-Kansas City's ASSET Research Group demonstrate a new attack called "Ghostcommit" that hides malicious instructions inside PNG images to bypass AI code reviewers and steal repository secrets. The technique exploits a significant review gap: a survey of 6,480 pull

OpenAI Launches GPT-5.6 Family with Cybersecurity Focus and Cost Efficiency

OpenAI unveils its newest family of AI models with GPT-5.6, releasing in three distinct variants: Sol as the primary workhorse, Terra as an intermediate option, and Luna as a budget-friendly choice. CEO Sam Altman claims the new models deliver dramatic improvements in efficiency, with Sol using 54% fewer tokens

Former Ransomware Negotiators Sentenced to Prison for BlackCat Attacks

Three former employees of cybersecurity firms DigitalMint and Sygnia receive prison sentences for their roles in BlackCat (ALPHV) ransomware attacks against U.S. companies. Angelo Martino, Kevin Tyler Martin, and Ryan Clifford Goldberg plead guilty to conspiring with the notorious ransomware group, exploiting their insider knowledge to maximize extortion profits.

Accenture Confirms Data Breach as Hacker Sells Stolen Source Code

IT services giant Accenture confirms a security breach after a threat actor known as "888" claims to have stolen 35 GB of data from the company. The hacker begins offering the stolen data for sale on a cybercrime forum, advertising it as containing source codes taken during a

Convicted Felons Behind Offensive Cybersecurity Startup IRIS C2

A cybersecurity startup called IRIS C2 is drawing attention by offering up to $7 million for zero-day security vulnerabilities in popular software. The company, which claims to be based in McLean, Virginia, has amassed more than 4,000 followers on X since January 2025. Its website targets young engineers with

China-Linked Hackers Target University Researchers Through Roundcube Flaws

A China-linked threat cluster known as UNK_MassTraction targets Roundcube webmail servers at U.S. and Canadian universities to steal credentials and deploy backdoor malware. The campaign, observed since May, focuses on physics and engineering departments, professors, administrators, and organizations involved in astrophysics, particle physics, or national security-related research. The

Ubiquiti Patches Critical UniFi OS Flaws Including Max Severity Vulnerability

Ubiquiti releases security updates to patch seven critical vulnerabilities in UniFi OS, including a maximum-severity flaw tracked as CVE-2026-50746. This vulnerability affects the UniFi Connect Application versions 3.4.16 and earlier, which customers use to manage commercial building operations such as smart LED lighting and electric vehicle chargers. A

AI Tool Discovers Critical Remote Code Execution Chain in Cisco CUCM

A security research initiative called 0day Rubbish announces the discovery of a critical remote code execution chain affecting Cisco Unified Communications Manager (CUCM). The vulnerability chain carries a CVSS severity score of 9.8, placing it in the highest risk category and signaling a potentially devastating impact for affected deployments.

adobe coldfusion

Hackers Exploit Maximum-Severity Adobe ColdFusion Flaw Within Hours of Disclosure

Attackers are actively exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, which enables remote code execution on unpatched systems without requiring any privileges. The flaw affects ColdFusion versions 2025.9, 2023.20, and earlier releases of the popular enterprise web application development platform. Adobe released security updates on July

AI Accelerates Software Creation But Leaves Security Behind

Software development evolves at a breathtaking pace, and generative AI now allows anyone to create applications almost as fast as they conceive them. This emerging paradigm, called Vibe Coding, represents the latest step in a journey from the rigid Waterfall model through Agile and DevOps methodologies. While previous innovations optimized

First AI-Run Ransomware Attack Still Requires Human Direction

Security researchers at Sysdig document the first known case of agentic ransomware, an operation dubbed JadePuffer where an AI agent executes a real-world cyberattack from start to finish. The agent breaks into a vulnerable server, steals credentials, moves through the target's network, encrypts files, and writes its own

Autonomous AI Agent Conducts First Fully Automated Ransomware Attack

Security researchers at Sysdig identify JadePuffer as the first documented ransomware operation conducted entirely by an autonomous AI agent. The large language model-powered threat handles every stage of the attack independently, including reconnaissance, credential theft, lateral movement, privilege escalation, and data encryption. Most alarmingly, the agent adapts to failures in