The Hacker News

Uebersicht

Letzter Fetch Letzter Erfolg Aufeinanderfolgende Fehler Letzte Fehlermeldung ETag Last-Modified
2026-10-21 14:15 UTC 2026-10-21 14:15 UTC 0 - - Wed, 21 Oct 2026 13:17:57 GMT

Letzte Eintraege

1251 Eintraege · 50 pro Seite · Seite 24 von 26

Veroeffentlicht Titel CVEs EPSS-Pctl Severity
2026-05-23 07:35

LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root

CVE-2026-48172

CRITICAL
2026-05-23 07:23

Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

CVE-2026-9082

MEDIUM
2026-05-22 17:35

First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groups

—

-
2026-05-22 16:20

Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware

—

-
2026-05-22 11:55

Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows

—

-
2026-05-22 11:38

Making Vulnerable Drivers Exploitable Without Hardware - The BYOVD Perspective

—

-
2026-05-22 08:50

Kimwolf DDoS Botnet Operator Arrested in Canada Over DDoS-for-Hire Attacks

—

-
2026-05-22 05:47

CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV

CVE-2025-34291

CRITICAL
2026-05-22 05:36

Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access

CVE-2026-20223

CRITICAL
2026-05-21 14:17

Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoor

—

-
2026-05-21 11:52

ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories

—

-
2026-05-21 10:55

Microsoft Warns of Two Actively Exploited Defender Vulnerabilities

CVE-2026-41091

HIGH
2026-05-21 10:30

When Identity is the Attack Path

—

-
2026-05-21 07:35

9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros

CVE-2026-46333

HIGH
2026-05-21 04:27

GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension

—

-
2026-05-21 03:44

Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks

CVE-2026-9082

MEDIUM
2026-05-20 17:06

Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development

—

-
2026-05-20 14:36

Microsoft Takes Down Malware-Signing Service Behind Ransomware Attacks

—

-
2026-05-20 12:51

Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph API

—

-
2026-05-20 11:58

Agent AI is Coming. Are You Ready?

—

-
2026-05-20 11:38

GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal Repos

—

-
2026-05-20 10:30

Typosquatting Is No Longer a User Problem. It's a Supply Chain Problem

—

-
2026-05-20 08:28

Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit

CVE-2026-45585

MEDIUM
2026-05-20 05:12

Grafana GitHub Breach Exposes Source Code via TanStack npm Attack

—

-
2026-05-19 16:38

Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid Requests Using 455 Apps

—

-
2026-05-19 14:56

DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability

CVE-2026-31635

HIGH
2026-05-19 11:30

The New Phishing Click: How OAuth Consent Bypasses MFA

—

-
2026-05-19 10:44

Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare

—

-
2026-05-19 09:23

SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access

—

-
2026-05-19 07:49

Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer

—

-
2026-05-19 05:28

Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD Credentials

—

-
2026-05-19 04:54

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

—

-
2026-05-18 17:21

INTERPOL Operation Ramz Disrupts MENA Cybercrime Networks with 201 Arrests

—

-
2026-05-18 13:50

⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More

—

-
2026-05-18 13:00

How to Reduce Phishing Exposure Before It Turns into Business Disruption

—

-
2026-05-18 11:23

Developer Workstations Are Now Part of the Software Supply Chain

—

-
2026-05-18 10:54

Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flaws

CVE-2026-8043

CRITICAL
2026-05-18 08:57

MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems

—

-
2026-05-18 08:57

Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware

—

-
2026-05-18 06:46

Pre-Stuxnet Fast16 Malware Tampered with Nuclear Weapons Simulations

—

-
2026-05-17 11:57

NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE

CVE-2026-42945

CRITICAL
2026-05-17 07:13

Grafana GitHub Token Breach Led to Codebase Download and Extortion Attempt

—

-
2026-05-16 15:20

Funnel Builder Flaw Under Active Exploitation Enables WooCommerce Checkout Skimming

—

-
2026-05-15 17:10

Turla Turns Kazuar Backdoor Into Modular P2P Botnet for Persistent Access

—

-
2026-05-15 13:35

Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistence

—

-
2026-05-15 11:00

What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface

—

-
2026-05-15 10:54

TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updates

—

-
2026-05-15 06:19

On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email

CVE-2026-42897

HIGH
2026-05-15 05:28

CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits

CVE-2026-20182

CRITICAL
2026-05-14 17:45

Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Access

CVE-2026-20182

CRITICAL