The Hacker News

Uebersicht

Letzter Fetch Letzter Erfolg Aufeinanderfolgende Fehler Letzte Fehlermeldung ETag Last-Modified
2026-10-21 10:18 UTC 2026-10-21 10:18 UTC 0 - - Wed, 21 Oct 2026 09:42:23 GMT

Letzte Eintraege

1245 Eintraege · 50 pro Seite · Seite 4 von 25

Veroeffentlicht Titel CVEs EPSS-Pctl Severity
2026-10-02 08:01

Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools

—

-
2026-10-02 05:49

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

CVE-2026-104286

CRITICAL
2026-10-01 16:55

Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers

—

-
2026-10-01 16:45

ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories

—

-
2026-10-01 14:37

WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory

—

-
2026-10-01 11:45

How Financial Services Companies Can Modernize Their Software Supply Chain

—

-
2026-10-01 10:42

OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates

—

-
2026-10-01 10:33

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV

CVE-2026-76504

CRITICAL
2026-10-01 07:49

Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version

—

-
2026-10-01 05:54

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path

CVE-2026-86950

HIGH
2026-10-01 05:21

Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft

—

-
2026-10-01 05:10

MetaMask Security Incident Prompts Exit of Affected Ethereum Validators

—

-
2026-10-01 04:35

Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs

—

-
2026-09-30 16:46

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

CVE-2026-73570

HIGH
2026-09-30 16:32

Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks

—

-
2026-09-30 15:24

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

CVE-2026-76504

CRITICAL
2026-09-30 15:00

Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures

—

-
2026-09-30 11:58

Know Your Enemy: Browser-Based Attack Techniques in 2026

—

-
2026-09-30 11:30

AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub

—

-
2026-09-30 10:45

US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access

—

-
2026-09-30 08:24

Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT

—

-
2026-09-30 08:09

OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted

—

-
2026-09-30 05:30

Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution

CVE-2026-88772

0.70063 CRITICAL
2026-09-29 17:47

French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks

—

-
2026-09-29 17:20

New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses

—

-
2026-09-29 17:20

Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor

—

-
2026-09-29 14:13

Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown

—

-
2026-09-29 13:45

101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent

—

-
2026-09-29 08:35

Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation

—

-
2026-09-29 06:08

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

—

-
2026-09-29 05:12

OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions

—

-
2026-09-29 04:45

OpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External Chatbot

—

-
2026-09-28 19:18

Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

CVE-2026-86950

HIGH
2026-09-28 18:35

Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks

—

-
2026-09-28 18:20

IAM for AI agents: A Practical Enterprise Framework

—

-
2026-09-28 17:42

Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M

—

-
2026-09-28 17:38

RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims

—

-
2026-09-28 14:00

⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats

—

-
2026-09-28 11:58

Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI

—

-
2026-09-28 11:46

Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent

—

-
2026-09-28 09:08

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources

—

-
2026-09-28 07:21

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally

CVE-2026-88771

0.64716 CRITICAL
2026-09-27 07:47

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

—

-
2026-09-26 18:22

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

—

-
2026-09-26 11:46

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

CVE-2026-35273

CRITICAL
2026-09-26 10:30

Zero Trust for AI Agents Starts With Fixing Zero Visibility

—

-
2026-09-26 09:55

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link

—

-
2026-09-26 08:49

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

CVE-2026-65660

HIGH
2026-09-26 07:48

Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack

—

-
2026-09-25 14:44

Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware

—

-