"FCC restricts new foreign robots and inverters over security risks."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 30 July 2026, 1324 UTC.

Content and Source provided by email subscription from https://feedly.com.

https://feedly.com/i/subscription/content/feed%2Fhttp%3A%2F%2Fsecurityaffairs.co%2Fwordpress%2Ffeed

Please check subscription link or scroll down to read your selections.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Security Affairs

80K followers29 articles per week

#security#tech

10

Today

FCC Restricts New Foreign Robots and Inverters Over Security Risks

US blocks foreign robots inverters

•

by Pierluigi Paganini / 2h

The FCC added foreign robots and power inverters to its Covered List, while allowing security updates for existing authorized devices until 2029. The FCC just widened its Covered List again, this time adding foreign-produced advanced robotic devices and power inverters. In plain terms, that means new models in those categories generally can’t get the equipment authorization they need for import,

Yesterday

U.S. CISA adds a Cisco Secure Firewall Management Center (FMC) flaw to its Known Exploited Vulnerabilities catalog

IoC > 1 file path

•

by Pierluigi Paganini / 3h

•

2 TTPs

•

CVE-2026-20316

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Cisco Secure Firewall Management Center (FMC) flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Cisco Secure Firewall Management Center (FMC) flaw, tracked as CVE-2026-20316 (CVSS score of 5.3), to its Known Exploited Vulnerabilities (KEV) catalog . CVE-2

eSIM Plus and Nicegram Share Belarus-Linked Codebase, Analysis Finds

by Pierluigi Paganini / 4h

Analysis found eSIM Plus and Nicegram share a Belarus-linked codebase, while eSIM Plus routes data and calls through Russian services. Two popular apps available in EU app stores, Nicegram, with over 50 million downloads, and eSIM Plus, with over 1 million, are presented to users as Lithuanian products. The Mysterium VPN Research Team pulled apart both Android packages to see what the binaries th

Claude Mythos Shows AI Can Outpace Human Cryptography Research

Anthropic AI halves HAWK security

•

by Pierluigi Paganini / 15h

Claude Mythos found new flaws in HAWK and reduced AES, proving AI can autonomously advance cryptography research. Anthropic published two cryptographic research results achieved by Claude Mythos Preview working mostly autonomously: an improved attack on HAWK , a post-quantum digital signature scheme currently under NIST review, and a 200 to 800 times faster attack on a reduced-round version of AE

Hackers Strike Minnesota Water Utilities, One Plant Briefly Offline

Minnesota water systems attacked

•

by Pierluigi Paganini / 17h

Coordinated OT cyberattacks hit 30+ Minnesota water utilities, briefly disrupting one plant. Backup procedures prevented major water service impacts. Minnesota just had its own live-fire lesson in what happens when someone targets water utilities at scale. Between Sunday and Monday, July 26 and 27, a coordinated cyberattack hit operational technology (OT) systems at more than 30 community water u

ShinyHunters Claims Ernst & Young Data Breach, Threatens to Leak Stolen Data

2 TTPs

•

by Pierluigi Paganini / 22h

•

ShinyHunters targets EY RingCentral Brinks

ShinyHunters claimed the Ernst & Young data breach, threatening to leak stolen tax records unless the firm contacts the group by July 31. The ShinyHunters cybercrime group has taken responsibility for the recently disclosed data breach involving professional services firm Ernst & Young (EY), adding the company to its Tor-based leak site and threatening to publish the stolen data unless negotiatio

Broadcom Patches Critical VMware ESXi Vulnerability Enabling Host Code Execution

5 TTPs

•

by Pierluigi Paganini / 23h

Broadcom patched a critical VMware ESXi VM escape flaw ( CVE-2026-47876 ) that could let attackers run code on the host from a compromised virtual machine. Broadcom has released patches to address five vulnerabilities affecting VMware ESXi, vCenter, Workstation, and Fusion, including three rated critical. The most severe, tracked as CVE-2026-47876 (CVSSv3 base score of 9.3), is a VM escape flaw i

OpenAI AI Model Used JFrog Artifactory Zero-Day Before Hugging Face Breach

10 TTPs

•

by Pierluigi Paganini / 1d

OpenAI confirmed its AI exploited an Artifactory zero-day to escape its test environment before breaching Hugging Face. Two weeks after Hugging Face disclosed an autonomous AI system had breached it, the picture just got a lot more specific. OpenAI has published an update confirming the models responsible didn’t just wander into Hugging Face’s systems. They found a genuine zero-day vulnerability

Jul 28, 2026

OpenAI’s Rogue AI Agent Breached Second Company, Report Says

OpenAI model escape sparks alarm

•

by Pierluigi Paganini / 1d

Reuters says OpenAI’s rogue AI agent also breached a Modal customer, exposing a wider attack and raising fresh concerns over autonomous AI safety. Reuters reported that the OpenAI agent that hacked Hugging Face earlier this month also compromised a customer at a second company, Modal Labs, a New York-based cloud platform for developers. Modal CTO Akshat Bubna confirmed it to Reuters directly. The

VPN Breach Exposes 58 Million Connection Logs Despite “No-Logs” Claims

by Pierluigi Paganini / 1d

A breached “no-logs” VPN exposed 58 million connection logs and millions of user, device, and payment records, contradicting its privacy claims. A threat actor on the Altenen cybercrime forum is distributing a 17 GB SQL database claimed to have been stolen from SplitVPN, formerly known as NotVPN, a Russian VPN marketed for bypassing internet censorship. Mysterium’s research team obtained a copy,

End of feed