Sec Feed Reader

The Hacker News

Uebersicht

Quellen-ID (source_id): thn_global
Feed (extern): Feed-URL oeffnen
Vendor / Produktinfos: Vendor-Web (Domain der Feed-URL)
Kategorie: security_news
Provider: feed
Sprache: de
Zielgruppe: —
Tags:
Aktiv: Ja

Letzter Fetch	Letzter Erfolg	Aufeinanderfolgende Fehler	Letzte Fehlermeldung	ETag	Last-Modified
2026-10-21 10:18 UTC	2026-10-21 10:18 UTC	0	-	-	Wed, 21 Oct 2026 09:42:23 GMT

Letzte Eintraege

1245 Eintraege · 50 pro Seite · Seite 5 von 25

Veroeffentlicht	Titel	CVEs	EPSS-Pctl	Severity
2026-09-25 13:18	PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence	—		-
2026-09-25 11:30	The SOC Doesn't Need to Start Over with Every Alert	—		-
2026-09-25 10:35	Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise	—		-
2026-09-25 10:14	Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild	CVE-2026-48842		HIGH
2026-09-25 04:49	Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data	—		-
2026-09-25 04:46	WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV	CVE-2026-5430		CRITICAL
2026-09-24 18:10	Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions	—		-
2026-09-24 17:52	ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories	—		-
2026-09-24 15:27	Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content	—		-
2026-09-24 14:29	Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer	—		-
2026-09-24 12:05	Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls	—		-
2026-09-24 11:00	Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore	—		-
2026-09-24 09:14	17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360	—		-
2026-09-24 07:07	OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files	—		-
2026-09-24 06:32	TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords	—		-
2026-09-24 05:36	Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure	CVE-2026-87902		HIGH
2026-09-23 18:06	Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry	—		-
2026-09-23 16:53	A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You	—		-
2026-09-23 16:06	MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key	CVE-2026-67279 CVE-2026-86060		CRITICAL
2026-09-23 14:17	This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move	—		-
2026-09-23 13:52	Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI	—		-
2026-09-23 12:16	New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control	—		-
2026-09-23 11:47	545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent	—		-
2026-09-23 11:47	Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests	—		-
2026-09-23 11:12	Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape	CVE-2026-80521		HIGH
2026-09-23 08:29	F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers	CVE-2026-94127	0.8248	CRITICAL
2026-09-23 08:29	Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware	CVE-2026-85046 CVE-2026-85880 CVE-2026-87491		HIGH
2026-09-23 07:04	Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input	—		-
2026-09-23 05:30	ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants	—		-
2026-09-22 18:29	Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks	CVE-2026-93616	0.99525	CRITICAL
2026-09-22 18:03	WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers	—		-
2026-09-22 17:58	Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials	—		-
2026-09-22 17:03	Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises	—		-
2026-09-22 16:41	Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials	CVE-2026-90898		CRITICAL
2026-09-22 16:14	Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates	—		-
2026-09-22 12:30	AI Agents Are Rewriting the Rules of Lateral Movement	—		-
2026-09-22 12:29	New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups	CVE-2026-93952		CRITICAL
2026-09-22 11:45	DORA Year Two: Can Your SOC Actually See the Attack?	—		-
2026-09-22 11:38	New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory	CVE-2026-89775		CRITICAL
2026-09-22 11:17	SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE	CVE-2026-65660		HIGH
2026-09-22 09:38	Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal	—		-
2026-09-22 07:52	SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing	—		-
2026-09-22 06:33	One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor	—		-
2026-09-22 06:03	WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session	CVE-2026-93485		HIGH
2026-09-22 05:31	Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access	CVE-2026-7273		HIGH
2026-09-21 17:31	Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR	—		-
2026-09-21 17:19	Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto	—		-
2026-09-21 16:57	Google Fined €403 Million Over GDPR Violations Tied to Location Data	—		-
2026-09-21 14:24	⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks	—		-
2026-09-21 14:15	TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data	—		-

Alle Quellen