the_hacker_newssecurityNew
Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks
Thu, 03 Sep 2026 16:13:01 +0530
Sorted: Newest first
Thursday 2026-09-03 (5)
the_hacker_newssecurityNew
Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means
Thu, 03 Sep 2026 16:06:39 +0530
the_hacker_newssecurityNew
Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone
Thu, 03 Sep 2026 14:13:17 +0530
the_hacker_newssecurityNew
Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon
Thu, 03 Sep 2026 11:56:59 +0530
the_hacker_newssecurityNew
CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
Thu, 03 Sep 2026 10:49:04 +0530
Wednesday 2026-09-02 (15)
the_hacker_newssecurityNew
Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs
Wed, 02 Sep 2026 23:57:49 +0530
the_hacker_newssecurityNew
Fake Software Installers Disable Windows Update and Weaken Microsoft Defender
Wed, 02 Sep 2026 22:11:06 +0530
the_hacker_newssecurityNew
Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
Wed, 02 Sep 2026 19:36:59 +0530
the_hacker_newssecurityNew
Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages
Wed, 02 Sep 2026 19:14:16 +0530
the_hacker_newssecurityNew
BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access
Wed, 02 Sep 2026 18:42:45 +0530
the_hacker_newssecurityNew
Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control
Wed, 02 Sep 2026 17:52:02 +0530
cisasecurityNew
Communicating Under Pressure: Best Practices for Service Providers
Wed, 02 Sep 26 12:00:00 +0000
cisasecurityNew
CISA Adds Seven Known Exploited Vulnerabilities to Catalog
Wed, 02 Sep 26 12:00:00 +0000
the_hacker_newssecurityNew
How to Secure Enterprise AI: From Adoption to Incident Readiness
Wed, 02 Sep 2026 17:00:00 +0530
the_hacker_newssecurityNew
Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain
Wed, 02 Sep 2026 16:23:49 +0530
the_hacker_newssecurityNew
GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
Wed, 02 Sep 2026 14:48:02 +0530
the_hacker_newssecurityNew
Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands
Wed, 02 Sep 2026 14:40:23 +0530
the_hacker_newssecurityNew
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another
Wed, 02 Sep 2026 13:17:13 +0530
the_hacker_newssecurityNew
Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials
Wed, 02 Sep 2026 12:38:50 +0530
the_hacker_newssecurityNew
Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads
Wed, 02 Sep 2026 12:26:30 +0530
Tuesday 2026-09-01 (13)
the_hacker_newssecurityNew
Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
Tue, 01 Sep 2026 23:23:11 +0530
the_hacker_newssecurityNew
Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems
Tue, 01 Sep 2026 22:49:24 +0530
the_hacker_newssecurityNew
13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds
Tue, 01 Sep 2026 19:37:20 +0530
the_hacker_newssecurityNew
Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests
Tue, 01 Sep 2026 18:38:58 +0530
cisasecurityNew
Rockwell Automation RSLinx Classic
Tue, 01 Sep 26 12:00:00 +0000
cisasecurityNew
Rockwell Automation Historian ME
Tue, 01 Sep 26 12:00:00 +0000
cisasecurityNew
Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix
Tue, 01 Sep 26 12:00:00 +0000
cisasecurityNew
Rockwell Automation Logix Platform
Tue, 01 Sep 26 12:00:00 +0000
cisasecurityNew
Rockwell Automation Redundancy Module Configuration Tool
Tue, 01 Sep 26 12:00:00 +0000
the_hacker_newssecurityNew
Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones
Tue, 01 Sep 2026 17:00:00 +0530
the_hacker_newssecurityNew
Attackers Steal METR API Key and Consume AI Credits Worth About $600,000
Tue, 01 Sep 2026 14:35:30 +0530
the_hacker_newssecurityNew
Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis
Tue, 01 Sep 2026 13:56:24 +0530
the_hacker_newssecurityNew
Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity
Tue, 01 Sep 2026 12:52:30 +0530
Monday 2026-08-31 (8)
the_hacker_newssecurityNew
North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales
Mon, 31 Aug 2026 22:54:28 +0530
the_hacker_newssecurityNew
⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More
Mon, 31 Aug 2026 19:20:00 +0530
the_hacker_newssecurityNew
ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions
Mon, 31 Aug 2026 17:44:00 +0530
cisasecurityNew
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Mon, 31 Aug 26 12:00:00 +0000
the_hacker_newssecurityNew
Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets
Mon, 31 Aug 2026 17:17:24 +0530
the_hacker_newssecurityNew
Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance
Mon, 31 Aug 2026 17:01:47 +0530
the_hacker_newssecurityNew
China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs
Mon, 31 Aug 2026 14:34:55 +0530
the_hacker_newssecurityNew
DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims
Mon, 31 Aug 2026 13:26:53 +0530
Sunday 2026-08-30 (1)
the_hacker_newssecurityNew
TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor
Sun, 30 Aug 2026 13:06:33 +0530
Saturday 2026-08-29 (1)
the_hacker_newssecurityNew
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
Sat, 29 Aug 2026 21:55:03 +0530
Friday 2026-08-28 (13)
the_hacker_newssecurityNew
Berlin Refuses to Pay Hackers Who Stole Data From the City's State Network
Sat, 29 Aug 2026 03:00:52 +0530
the_hacker_newssecurityNew
Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable
Sat, 29 Aug 2026 02:08:47 +0530
the_hacker_newssecurityNew
Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication
Fri, 28 Aug 2026 22:42:15 +0530
the_hacker_newssecurityNew
Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers
Fri, 28 Aug 2026 21:50:46 +0530
the_hacker_newssecurityNew
ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body
Fri, 28 Aug 2026 21:26:55 +0530
the_hacker_newssecurityNew
19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code
Fri, 28 Aug 2026 20:57:26 +0530
the_hacker_newssecurityNew
Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth
Fri, 28 Aug 2026 17:37:24 +0530
the_hacker_newssecurityNew
Key Reasons Why Identity Fabric Matters in 2026
Fri, 28 Aug 2026 17:00:00 +0530
the_hacker_newssecurityNew
Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL
Fri, 28 Aug 2026 16:50:32 +0530
the_hacker_newssecurityNew
China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access
Fri, 28 Aug 2026 16:28:29 +0530
the_hacker_newssecurityNew
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server
Fri, 28 Aug 2026 15:15:15 +0530
the_hacker_newssecurityNew
PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions
Fri, 28 Aug 2026 13:55:36 +0530
the_hacker_newssecurityNew
APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations
Fri, 28 Aug 2026 13:50:59 +0530
Thursday 2026-08-27 (4)
the_hacker_newssecurityNew
OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face
Fri, 28 Aug 2026 00:06:19 +0530
the_hacker_newssecurityNew
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
Thu, 27 Aug 2026 20:43:00 +0530
the_hacker_newssecurityNew
ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories
Thu, 27 Aug 2026 20:42:16 +0530
the_hacker_newssecurityNew
Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers
Thu, 27 Aug 2026 19:09:56 +0530
Previous week (72 items)
Previous week
Thursday 2026-08-27 (15)
cisasecurityNew
Mitsubishi Electric Multiple FA Products (Update D)
Thu, 27 Aug 26 12:00:00 +0000
cisasecurityNew
Applied Systems Engineering ASE2000 V2 Communications Test Set
Thu, 27 Aug 26 12:00:00 +0000
cisasecurityNew
All-Line Equipment Company Fuel-Boss
Thu, 27 Aug 26 12:00:00 +0000
cisasecurityNew
Ebyte NA111-M
Thu, 27 Aug 26 12:00:00 +0000
cisasecurityNew
Rockwell Automation OTTO Fleet Manager
Thu, 27 Aug 26 12:00:00 +0000
cisasecurityNew
Xiiaozet LK100W
Thu, 27 Aug 26 12:00:00 +0000
cisasecurityNew
Mitsubishi Electric CNC Series (Update A)
Thu, 27 Aug 26 12:00:00 +0000
cisasecurityNew
CISA Adds Three Known Exploited Vulnerabilities to Catalog
Thu, 27 Aug 26 12:00:00 +0000
the_hacker_newssecurityNew
Learn How to Build Security Operations Ready for AI-Powered Attacks
Thu, 27 Aug 2026 17:26:30 +0530
the_hacker_newssecurityNew
Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks
Thu, 27 Aug 2026 17:26:26 +0530
the_hacker_newssecurityNew
What the Data Says About AI in Security Operations in 2026
Thu, 27 Aug 2026 17:00:00 +0530
the_hacker_newssecurityNew
Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools
Thu, 27 Aug 2026 16:30:57 +0530
the_hacker_newssecurityNew
GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address
Thu, 27 Aug 2026 15:03:38 +0530
the_hacker_newssecurityNew
New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access
Thu, 27 Aug 2026 13:43:11 +0530
the_hacker_newssecurityNew
CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs
Thu, 27 Aug 2026 12:35:28 +0530
Wednesday 2026-08-26 (14)
the_hacker_newssecurityNew
FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations
Wed, 26 Aug 2026 22:12:03 +0530
the_hacker_newssecurityNew
Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler
Wed, 26 Aug 2026 21:05:05 +0530
the_hacker_newssecurityNew
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
Wed, 26 Aug 2026 19:14:31 +0530
the_hacker_newssecurityNew
CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing
Wed, 26 Aug 2026 18:37:02 +0530
cisasecurityNew
CISA Vulnerability Review
Wed, 26 Aug 26 12:00:00 +0000
cisasecurityNew
CISA Adds Six Known Exploited Vulnerabilities to Catalog
Wed, 26 Aug 26 12:00:00 +0000
the_hacker_newssecurityNew
Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code
Wed, 26 Aug 2026 17:25:00 +0530
the_hacker_newssecurityNew
Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine
Wed, 26 Aug 2026 17:06:49 +0530
the_hacker_newssecurityNew
Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests
Wed, 26 Aug 2026 15:57:23 +0530
the_hacker_newssecurityNew
OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation
Wed, 26 Aug 2026 15:08:45 +0530
the_hacker_newssecurityNew
INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown
Wed, 26 Aug 2026 13:24:12 +0530
the_hacker_newssecurityNew
Newly SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode
Wed, 26 Aug 2026 12:42:55 +0530
the_hacker_newssecurityNew
Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload
Wed, 26 Aug 2026 11:57:07 +0530
the_hacker_newssecurityNew
Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes
Wed, 26 Aug 2026 11:17:28 +0530
Tuesday 2026-08-25 (17)
the_hacker_newssecurityNew
U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches
Tue, 25 Aug 2026 23:47:17 +0530
the_hacker_newssecurityNew
A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw
Tue, 25 Aug 2026 19:37:37 +0530
the_hacker_newssecurityNew
WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android
Tue, 25 Aug 2026 18:49:41 +0530
the_hacker_newssecurityNew
Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode
Tue, 25 Aug 2026 18:13:51 +0530
cisasecurityNew
A Tale of Two SOCs: Insights From Two Red Team Assessments
Tue, 25 Aug 26 12:00:00 +0000
cisasecurityNew
CISA Adds One Known Exploited Vulnerability to Catalog
Tue, 25 Aug 26 12:00:00 +0000
cisasecurityNew
Ebyte NE2-D11
Tue, 25 Aug 26 12:00:00 +0000
cisasecurityNew
Rently Smart Home
Tue, 25 Aug 26 12:00:00 +0000
cisasecurityNew
PayRange API
Tue, 25 Aug 26 12:00:00 +0000
cisasecurityNew
Bendix EC80 Brake ECU
Tue, 25 Aug 26 12:00:00 +0000
cisasecurityNew
Zoneminder
Tue, 25 Aug 26 12:00:00 +0000
the_hacker_newssecurityNew
Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows
Tue, 25 Aug 2026 17:26:15 +0530
the_hacker_newssecurityNew
24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages
Tue, 25 Aug 2026 17:22:43 +0530
the_hacker_newssecurityNew
E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands
Tue, 25 Aug 2026 17:03:44 +0530
the_hacker_newssecurityNew
Frontier AI: Vulnerability Management's Systemic Revolution
Tue, 25 Aug 2026 16:44:07 +0530
the_hacker_newssecurityNew
Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access
Tue, 25 Aug 2026 14:04:07 +0530
the_hacker_newssecurityNew
Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data
Tue, 25 Aug 2026 11:42:35 +0530
Monday 2026-08-24 (9)
the_hacker_newssecurityNew
Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt
Mon, 24 Aug 2026 23:11:30 +0530
the_hacker_newssecurityNew
Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning
Mon, 24 Aug 2026 23:11:11 +0530
the_hacker_newssecurityNew
⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
Mon, 24 Aug 2026 20:02:10 +0530
the_hacker_newssecurityNew
WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords
Mon, 24 Aug 2026 18:05:36 +0530
cisasecurityNew
CISA Adds One Known Exploited Vulnerability to Catalog
Mon, 24 Aug 26 12:00:00 +0000
the_hacker_newssecurityNew
Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account
Mon, 24 Aug 2026 17:26:34 +0530
the_hacker_newssecurityNew
Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor
Mon, 24 Aug 2026 17:21:36 +0530
the_hacker_newssecurityNew
The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk
Mon, 24 Aug 2026 17:00:00 +0530
the_hacker_newssecurityNew
UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit
Mon, 24 Aug 2026 13:38:31 +0530
Saturday 2026-08-22 (1)
the_hacker_newssecurityNew
TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit
Sat, 22 Aug 2026 20:02:41 +0530
Friday 2026-08-21 (8)
the_hacker_newssecurityNew
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
Sat, 22 Aug 2026 00:23:00 +0530
the_hacker_newssecurityNew
Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
Fri, 21 Aug 2026 21:22:10 +0530
the_hacker_newssecurityNew
Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet
Fri, 21 Aug 2026 21:11:44 +0530
cisasecurityNew
CISA Adds One Known Exploited Vulnerability to Catalog
Fri, 21 Aug 26 12:00:00 +0000
the_hacker_newssecurityNew
Wazuh and AI For Enhanced SOC Workflows
Fri, 21 Aug 2026 16:51:39 +0530
the_hacker_newssecurityNew
Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0
Fri, 21 Aug 2026 15:33:11 +0530
the_hacker_newssecurityNew
GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure
Fri, 21 Aug 2026 12:34:25 +0530
the_hacker_newssecurityNew
Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution
Fri, 21 Aug 2026 11:36:11 +0530
Thursday 2026-08-20 (8)
the_hacker_newssecurityNew
Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
Fri, 21 Aug 2026 01:52:35 +0530
the_hacker_newssecurityNew
Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts
Fri, 21 Aug 2026 01:29:19 +0530
the_hacker_newssecurityNew
ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit, and More
Thu, 20 Aug 2026 22:53:48 +0530
the_hacker_newssecurityNew
AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure
Thu, 20 Aug 2026 22:29:44 +0530
the_hacker_newssecurityNew
New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data
Thu, 20 Aug 2026 20:06:27 +0530
the_hacker_newssecurityNew
Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
Thu, 20 Aug 2026 19:18:24 +0530
the_hacker_newssecurityNew
Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers
Thu, 20 Aug 2026 19:05:13 +0530
the_hacker_newssecurityNew
Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution
Thu, 20 Aug 2026 18:54:28 +0530