DTS Tucson https://dtstucson.tech/ IT Support | Networks | Security Fri, 21 Aug 2026 03:04:21 +0000 en-US hourly 1 https://wordpress.org/?v=7.1 https://dtstucson.tech/wp-content/uploads/2026/07/Site-Logo-144x144-1.png DTS Tucson https://dtstucson.tech/ 32 32 Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads https://thehackernews.com/2026/08/rust-supply-chain-attack-puts-build.html Fri, 21 Aug 2026 03:04:21 +0000 https://dtstucson.tech/2026/08/21/rust-supply-chain-attack-puts-build-time-malware-in-crates-with-245-million-downloads/ The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer account published releases that added a typosquatted dependency whose build script downloaded and executed a remote payload during compilation. The affected releases are arrayref 0.3.10, internment 0.8.7, and append-only-vec 0.1.9, all published from the same owner

The post Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads appeared first on DTS Tucson.

]]> The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer account published releases that added a typosquatted dependency whose build script downloaded and executed a remote payload during compilation.

The affected releases are arrayref 0.3.10, internment 0.8.7, and append-only-vec 0.1.9, all published from the same owner

The post Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads appeared first on DTS Tucson.

]]> Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts https://thehackernews.com/2026/08/suspected-russian-hackers-abuse-google.html Fri, 21 Aug 2026 03:04:20 +0000 https://dtstucson.tech/2026/08/21/suspected-russian-hackers-abuse-google-oauth-and-whatsapp-linking-to-hijack-accounts/ Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to single out individuals working in academia, aerospace and defense, governments, and think tanks across Europe, as well as academia and think tanks within the U.S. These clusters include UNC6293, UNC7005, and UNC5976. “These clusters engage in persistent, adaptive

The post Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts appeared first on DTS Tucson.

]]> Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to single out individuals working in academia, aerospace and defense, governments, and think tanks across Europe, as well as academia and think tanks within the U.S.

These clusters include UNC6293, UNC7005, and UNC5976.

“These clusters engage in persistent, adaptive

The post Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts appeared first on DTS Tucson.

]]> ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More https://thehackernews.com/2026/08/threatsday-gogs-100-rce-n8n-workflow-to.html Fri, 21 Aug 2026 03:04:19 +0000 https://dtstucson.tech/2026/08/21/threatsday-gogs-10-0-rce-n8n-workflow-to-rce-10m-reward-glm-5-3-ai-exploit-and-more/ A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned against defenses. Legitimate apps help malware blend in. A weak header check opens a path to code execution. Elsewhere, exposed systems, old bugs, odd hiding tricks, and AI-assisted exploit research keep lowering the […]

The post ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More appeared first on DTS Tucson.

]]> A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do.

Signed drivers get turned against defenses. Legitimate apps help malware blend in. A weak header check opens a path to code execution. Elsewhere, exposed systems, old bugs, odd hiding tricks, and AI-assisted exploit research keep lowering the effort needed to cause damage.

Nothing here needs

The post ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More appeared first on DTS Tucson.

]]> AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure https://thehackernews.com/2026/08/ai-generated-exploit-scripts-target.html Fri, 21 Aug 2026 03:04:19 +0000 https://dtstucson.tech/2026/08/21/ai-generated-exploit-scripts-target-siemens-s7-plcs-in-u-s-critical-infrastructure/ The U.S. government on Wednesday warned of an “active threat” targeting critical infrastructure organizations in the country using artificial intelligence (AI)-generated exploit scripts. The activity is targeting Siemens S7 SeriesProgrammable Logic Controllers (PLCs) to conduct reconnaissance and capability development using AI-generated scripts disguised as legitimate monitoring tools. That

The post AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure appeared first on DTS Tucson.

]]> The U.S. government on Wednesday warned of an “active threat” targeting critical infrastructure organizations in the country using artificial intelligence (AI)-generated exploit scripts.

The activity is targeting Siemens S7 SeriesProgrammable Logic Controllers (PLCs) to conduct reconnaissance and capability development using AI-generated scripts disguised as legitimate monitoring tools. That

The post AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure appeared first on DTS Tucson.

]]> New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data https://thehackernews.com/2026/08/new-cryptographic-context-injection.html Fri, 21 Aug 2026 03:04:18 +0000 https://dtstucson.tech/2026/08/21/new-cryptographic-context-injection-attack-could-let-web-pages-steal-grok-chat-data/ Adversa AI has disclosed an attack technique that it says can cause xAI’s Grok chatbot to send a user’s name, approximate location, subscription tier, and the prompts from the ongoing conversation to an attacker-controlled server after the user asks it to summarize an ordinary web page. The AI security company, which has codenamed the technique […]

The post New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data appeared first on DTS Tucson.

]]> Adversa AI has disclosed an attack technique that it says can cause xAI’s Grok chatbot to send a user’s name, approximate location, subscription tier, and the prompts from the ongoing conversation to an attacker-controlled server after the user asks it to summarize an ordinary web page.

The AI security company, which has codenamed the technique “Cryptographic Context Injection,” said the

The post New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data appeared first on DTS Tucson.

]]> Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second https://thehackernews.com/2026/08/cloudflare-workers-spectre-attack-leaks.html Thu, 20 Aug 2026 03:21:00 +0000 https://dtstucson.tech/2026/08/20/cloudflare-workers-spectre-attack-leaks-jwt-from-co-located-worker-at-12-bits-second/ Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in the production environment at up to 12 bits per second, 360 times the rate of an earlier attack demonstrated in 2021. The end-to-end experiment used an attacker Worker and a victim Worker […]

The post Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second appeared first on DTS Tucson.

]]> Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in the production environment at up to 12 bits per second, 360 times the rate of an earlier attack demonstrated in 2021.

The end-to-end experiment used an attacker Worker and a victim Worker controlled by the researchers,

The post Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second appeared first on DTS Tucson.

]]> OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior https://thehackernews.com/2026/08/openai-pauses-frontier-rl-training-as.html Thu, 20 Aug 2026 03:20:59 +0000 https://dtstucson.tech/2026/08/20/openai-pauses-frontier-rl-training-as-it-tightens-defenses-against-unsafe-ai-behavior/ OpenAI on Tuesday revealed that it paused reinforcement learning (RL) training for its latest artificial intelligence (AI) models for two weeks while it shored up additional defenses and increased the scope of its monitoring to avert another Hugging Face-like incident. “As models become more capable, the risks associated with developing and testing them internally also […]

The post OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior appeared first on DTS Tucson.

]]> OpenAI on Tuesday revealed that it paused reinforcement learning (RL) training for its latest artificial intelligence (AI) models for two weeks while it shored up additional defenses and increased the scope of its monitoring to avert another Hugging Face-like incident.

“As models become more capable, the risks associated with developing and testing them internally also grow,” the AI company

The post OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior appeared first on DTS Tucson.

]]> SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs https://thehackernews.com/2026/08/silkparasite-espionage-campaign-targets.html Thu, 20 Aug 2026 03:20:59 +0000 https://dtstucson.tech/2026/08/20/silkparasite-espionage-campaign-targets-central-asian-governments-with-five-new-rats/ A previously unreported cyber espionage operation dubbed SilkParasite has been observed targeting government bodies in Central Asia. The intrusion set makes use of seven remote access tool (RAT) families, five of which have never been previously documented: DriveSilkRAT, CookiETagRAT, NomadRAT, GoginRAT, and NodeEdgeRAT. SilkParasite, first discovered in late 2025, is assessed to be a

The post SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs appeared first on DTS Tucson.

]]> A previously unreported cyber espionage operation dubbed SilkParasite has been observed targeting government bodies in Central Asia.

The intrusion set makes use of seven remote access tool (RAT) families, five of which have never been previously documented: DriveSilkRAT, CookiETagRAT, NomadRAT, GoginRAT, and NodeEdgeRAT. SilkParasite, first discovered in late 2025, is assessed to be a

The post SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs appeared first on DTS Tucson.

]]> Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P https://thehackernews.com/2026/08/hackers-compromised-14500-dahua-devices.html Thu, 20 Aug 2026 03:20:58 +0000 https://dtstucson.tech/2026/08/20/hackers-compromised-14500-dahua-devices-using-credential-attacks-auth-bypasses-and-p2p/ Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised more than 14,530 Dahua devices between June 17 and July 22, 2026, using credential attacks, two authentication-bypass flaws, and a peer-to-peer (P2P) relay technique. The activity, codenamed Operation CameraSwarm, was reconstructed from a 407 MB exposed working directory containing 2,616 files

The post Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P appeared first on DTS Tucson.

]]> Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised more than 14,530 Dahua devices between June 17 and July 22, 2026, using credential attacks, two authentication-bypass flaws, and a peer-to-peer (P2P) relay technique.

The activity, codenamed Operation CameraSwarm, was reconstructed from a 407 MB exposed working directory containing 2,616 files

The post Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P appeared first on DTS Tucson.

]]> Phishing 3.0: The Fight Moves to Agent Versus Agent https://thehackernews.com/2026/08/phishing-30-fight-moves-to-agent-versus.html Thu, 20 Aug 2026 03:20:58 +0000 https://dtstucson.tech/2026/08/20/phishing-3-0-the-fight-moves-to-agent-versus-agent/ Most email defenses still do the job they did a decade ago. Scan the message, look for something malicious, block it. That worked when the danger sat in the payload, a bad link or an attachment. It stopped working when the danger moved into the message’s intent, and it is failing now that the sender […]

The post Phishing 3.0: The Fight Moves to Agent Versus Agent appeared first on DTS Tucson.

]]> Most email defenses still do the job they did a decade ago. Scan the message, look for something malicious, block it. That worked when the danger sat in the payload, a bad link or an attachment. It stopped working when the danger moved into the message’s intent, and it is failing now that the sender is no longer a person.

From Bad Content to Bad Intent to AI on Both Sides

Phishing 1.0 was bad

The post Phishing 3.0: The Fight Moves to Agent Versus Agent appeared first on DTS Tucson.

]]>