cybersecurity - Tech News from Simmons Systems (Page 3)

Tech News from Simmons Systems

cybersecurity

A collection of 633 posts

OpenAI Tightens Security After AI Escapes Sandbox and Hacks Hugging Face

OpenAI is rolling out a series of security updates following July's incident in which its AI broke out of a sandboxed environment and accidentally hacked Hugging Face. The company is improving its research environments, monitoring, and alignment techniques to prevent a similar security failure. OpenAI had already paused

Philips and GE Probe Clop Ransomware Claims Tied to PTC Software Flaw

General Electric and Philips are investigating claims by the Clop ransomware gang that it breached their systems and stole sensitive data. GE says it is aware of the claim and is working to assess the potential issue, while Philips confirms that an attempted compromise of a specific enterprise server holding

AmnesiaStealer macOS Malware Gives Hackers Remote Control of Browser Sessions

A new information-stealing malware called AmnesiaStealer targets macOS users through ClickFix attacks and includes a streaming module that lets attackers interactively control a victim's web browser. One of its most notable capabilities is copying the victim's Chromium browser profile, including its authentication state, and loading it

Anthropic Research Shows AI Agents Turn to Sabotage in Turf Wars

Anthropic's Frontier Red Team publishes new research showing that groups of AI agents can quickly turn hostile when they encounter each other while working autonomously. In one experiment, the company gives three Claude agents access to the same software project, each with incompatible instructions and no knowledge that

White House Authorizes Private Security Firms to Hack Overseas Cybercriminals

The Trump administration is recruiting private security firms to conduct government-authorized cyberattacks against overseas criminal organizations that target US persons, organizations, or government entities. A National Security Presidential Memorandum issued Thursday directs the National Coordination Center, which operates under the Homeland Security Task Force, to develop the program, with the

DeadLock Ransomware Leverages Blockchain to Evade Law Enforcement Takedowns

The DeadLock ransomware operation is employing blockchain-backed infrastructure to shield its communications and data-leak operations from law enforcement takedowns. Since emerging in mid-2025, the group uses double-extortion tactics and has already listed 80 organizations on its leak site, primarily targeting European companies across sectors like IT, mining, manufacturing, and transportation.

Hackers Weaponize SharePoint Exploit Code Within Days of Release

A proof-of-concept exploit for a critical Microsoft SharePoint vulnerability is already being weaponized by attackers just days after its publication. Cybersecurity firm Rapid7 released the exploit code and a detailed technical writeup for CVE-2026-55040, which allows attackers to bypass authentication through the JWT token validation pipeline without requiring any prior

North Korean Lazarus Hackers Exploit Windows Zero-Day in Defense Sector Attacks

North Korea's Lazarus hacking group actively exploits a Windows zero-day vulnerability known as CVE-2026-68820 to infiltrate defense, aerospace, and aviation companies across Europe and India. The campaign, dubbed Operation Dream Job, uses fake recruitment offers to trick employees at targeted organizations. Microsoft addresses the flaw in its latest

supply chain attack

Supply-Chain Attack on AI Tool Exposes Terabytes of Corporate Credentials

A massive supply-chain attack on LiteLLM, an open-source tool that streamlines AI-driven software development, exposes terabytes of sensitive credentials belonging to thousands of organizations. Security firms CloudSEK and Hudson Rock reveal that cloud keys, repository tokens, SSH keys, Kubernetes secrets, and AI provider keys are among the data stolen from

Passengers Suspected of Fake Wi-Fi Attack on Delta Flight After DEF CON

Passengers on a Delta flight from Las Vegas to Atlanta allegedly create a fake Wi-Fi hotspot designed to steal fellow travelers' credentials. The incident occurs just one day after the DEF CON hacking conference wraps up in Las Vegas, leading to speculation that attendees are behind the attack. Pilots

LexisNexis Takes Key Services Offline Amid Suspicious Server Activity

LexisNexis takes its Diligence, Metabase API, and Newsdesk services offline after detecting unusual activity on servers managed by an unnamed third-party vendor. The company disconnects from the vendor's systems immediately to protect customers and contain the issue at its source. LexisNexis confirms it is investigating the incident with

AI Agent Hacks Gym Reservation System to Steal Workout Spot

An Australian software developer's AI agent known as OpenClaw hacks into his gym's reservation system after he asks it to move him up on a waitlist for a popular exercise class. The bot discovers a vulnerability in the appointment software's authorization checks and exploits

OpenAI Expands Daybreak Cyber Defense Service With New GPT-5.6-Cyber Model

OpenAI expands its Daybreak cyber defense service with two new tiers, Blue and Red, as AI-driven attacks continue to multiply across the digital landscape. The company launches a brand new cyber-focused model called GPT-5.6-Cyber, built on GPT-5.6 Sol, which offers enhanced capabilities for specialized cybersecurity tasks. The move