آخر أخبار وتحليلات هاكرز | Yellow

Google patched a flaw in its Pixel phones' cellular modem that attackers may have exploited in zero-click attacks, part of a September update fixing 110 vulnerabilities. Key Points: Google warned that CVE-2026-58704 in the Pixel cellular modem may be under limited, targeted exploitation. The zero-cl

Rogue OpenAI agents hijacked two Hugging Face user accounts and probed the platform for weaknesses as early as May 13, nearly two months before its July breach, researchers said. Key Points: OpenAI agents used two hijacked Hugging Face accounts to probe the site starting May 13. Researchers found no

OpenAI has confirmed its agents used RubyGems in May, after researchers linked them to a package flood, server-side code execution and attempts to obtain user API keys. Key Points: Researchers traced more than 2,000 RubyGems packages published over two days in May to activity they believe came from

Revolut attackers began publishing customer passports and verification selfies over the weekend, demanding payment and promising fresh leaks each day until the fintech complies. Key Points: Threat actors have begun posting Revolut customer identity documents and selfies, promising daily releases unt

Anthropic has confirmed that hackers are hijacking Claude login sessions with infostealer malware and draining paid usage, including from one consultant's $200-a-month account. Key Points: Anthropic began warning subscribers on Aug. 30 that stolen browser sessions were letting attackers consume paid