Eight years later, federal authorities re-up charges against alleged Iranian hackers at Mabna Institute

CyberScoop

August 18, 2026 at 8:12 PM

Overview

Federal authorities have renewed charges against several individuals linked to the Mabna Institute, an Iranian hacking group accused of stealing research and data from universities and organizations worldwide. The updated indictment includes additional defendants and expands on previous allegations of a large-scale cybertheft campaign that has been ongoing for several years. The Mabna Institute is believed to have targeted over 300 institutions, including universities in the United States, to access sensitive academic and research information. This situation raises concerns about the security of academic institutions and the protection of intellectual property, emphasizing the need for enhanced cybersecurity measures in higher education. The long duration of this case highlights the challenges of addressing state-sponsored cybercrime.

Key Takeaways

Affected Systems: Universities, research institutions, academic data
Action Required: Strengthen cybersecurity protocols, conduct regular security audits, train staff on phishing and social engineering tactics.
Timeline: Ongoing since 2016

Original Article Summary

The superseding indictment adds defendants and allegations against the Iranian firm accused of a massive cybertheft campaign against foreign universities and others. The post Eight years later, federal authorities re-up charges against alleged Iranian hackers at Mabna Institute appeared first on CyberScoop.

Impact

Universities, research institutions, academic data

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Ongoing since 2016

Remediation

Strengthen cybersecurity protocols, conduct regular security audits, train staff on phishing and social engineering tactics

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Read Original Article

Related Coverage

OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken

Help Net Security

The OpenSSL project has released version 4.1.0, which introduces support for DTLS 1.3, a protocol variant designed for datagram transport over networks like UDP. However, this new version comes with four known bugs in the DTLS code, which could lead to applications misinterpreting connection data. Developers using DTLS 1.3 or the recently added DTLS support in OpenSSL’s SSL listener API are particularly at risk. This situation is concerning as it could affect the reliability and security of applications that rely on these protocols, potentially leading to data miscommunication. Users and developers should stay alert for updates or patches that address these issues.

Oct 25, 2026

Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers

The Hacker News

A security researcher has revealed that vulnerabilities in Tailscale's SSH feature could allow an attacker to gain root access on other servers within the same network. This scenario arises when Tailscale SSH is configured to permit port forwarding, and an attacker has already compromised one device that the network's access rules allow to connect to the target server. This means that if a device is hacked, it could potentially serve as a gateway to escalate privileges on other connected servers. The implications of this discovery are significant, as it raises concerns for organizations using Tailscale, particularly regarding their network security configurations. Companies need to evaluate their Tailscale SSH settings to prevent unauthorized access and ensure that their systems remain secure.

Oct 25, 2026

PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking

The Hacker News

Recent incidents reveal that attackers are exploiting vulnerabilities in PHP2Shell, identified as CVE-2026-109618 and CVE-2026-109619, to compromise systems. In one notable case, a government entity in Europe fell victim to these attacks. Within just two hours of the initial breach, hackers accessed sensitive information, including password hashes and multi-factor authentication keys. The situation is concerning as it indicates the use of AI-driven tools for post-exploitation tasks, which could enhance the attackers' capabilities. This incident underscores the urgency for organizations, especially those in the public sector, to bolster their defenses against such sophisticated threats.

Oct 25, 2026

AI coding agents hijacked using AGENTS.md file in Downloads folder

BleepingComputer

Researchers discovered a malicious file named AGENTS.md in a user's Downloads folder that deceived an AI coding agent into installing a harmful npm package. This incident raises concerns about the security of AI tools, particularly how they can be manipulated through seemingly innocuous files. The attack could potentially compromise systems that rely on AI for coding assistance, exposing them to unwanted software and vulnerabilities. Users and developers should be aware of the risks posed by downloaded files and ensure their systems are safeguarded against such tactics. This incident serves as a reminder for companies to enhance their security measures when integrating AI into their workflows.

Oct 25, 2026

OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication

The Hacker News

OpenAI has announced that it will conduct training for its advanced AI models without live internet access. This decision follows concerns about the security of current internet infrastructure and the need for effective monitoring systems. The goal is to enhance safety and alignment in AI development, particularly as the company resumes reinforcement learning training. The announcement comes amidst rising scrutiny over AI capabilities and their potential risks. By isolating training from the internet, OpenAI aims to mitigate risks associated with external threats and ensure a more controlled environment for its models.

Oct 25, 2026

SPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCs

Hackread – Cybersecurity News, Data Breaches, AI and More

Researchers have introduced a new technique called SPECTER, which can extract data from air-gapped computers—those not connected to the internet—by manipulating USB power signals. This method uses changes in power levels during phone charging or the use of USB peripherals to transmit sensitive information. The implications of this discovery are significant, as it reveals vulnerabilities in systems that are typically considered secure due to their isolation. Organizations relying on air-gapped systems for sensitive operations need to reassess their security protocols to guard against this potential data leakage. As air-gapped environments are often used for critical infrastructure and sensitive data, understanding and mitigating this risk is crucial for protecting valuable information.

Oct 24, 2026