Sec Feed Reader

The Hacker News

Uebersicht

Quellen-ID (source_id): thn_global
Feed (extern): Feed-URL oeffnen
Vendor / Produktinfos: Vendor-Web (Domain der Feed-URL)
Kategorie: security_news
Provider: feed
Sprache: de
Zielgruppe: —
Tags:
Aktiv: Ja

Letzter Fetch	Letzter Erfolg	Aufeinanderfolgende Fehler	Letzte Fehlermeldung	ETag	Last-Modified
2026-10-21 10:18 UTC	2026-10-21 10:18 UTC	0	-	-	Wed, 21 Oct 2026 09:42:23 GMT

Letzte Eintraege

1245 Eintraege · 50 pro Seite · Seite 6 von 25

Veroeffentlicht	Titel	CVEs	EPSS-Pctl	Severity
2026-09-21 08:39	ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure	—		-
2026-09-21 06:06	Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors	—		-
2026-09-19 18:36	Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws	—		-
2026-09-19 13:28	Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar	—		-
2026-09-19 13:28	Identity Visibility in 2026: The Foundation of Identity Security	—		-
2026-09-19 09:31	SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE	CVE-2026-28326		HIGH
2026-09-19 08:18	Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild	CVE-2026-58138		CRITICAL
2026-09-19 07:51	Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up	—		-
2026-09-19 07:14	CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories	—		-
2026-09-19 06:24	CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild	CVE-2025-39682		CRITICAL
2026-09-18 18:02	Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root	—		-
2026-09-18 16:56	New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution	—		-
2026-09-18 15:24	Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2	—		-
2026-09-18 12:47	Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation	CVE-2026-85889		CRITICAL
2026-09-18 11:01	An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.	—		-
2026-09-18 11:01	Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents	—		-
2026-09-18 10:40	WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage	—		-
2026-09-18 09:18	Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer	—		-
2026-09-18 06:17	RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall	—		-
2026-09-17 18:08	Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root	—		-
2026-09-17 17:32	ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories	—		-
2026-09-17 15:37	Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files	CVE-2026-77179		CRITICAL
2026-09-17 14:03	Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords	—		-
2026-09-17 12:30	Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone	CVE-2026-81642		CRITICAL
2026-09-17 10:50	CISO's Expert Guide to Agentic Pentesting for Websites	—		-
2026-09-17 10:05	China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America	—		-
2026-09-17 09:53	OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads	—		-
2026-09-17 08:00	BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS	—		-
2026-09-17 07:30	Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records	—		-
2026-09-17 06:39	Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks	CVE-2026-76460		CRITICAL
2026-09-17 05:13	U.S. Seizes NightmareStresser Domains Linked to Hundreds of Thousands of DDoS Attacks	—		-
2026-09-16 15:50	Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution	CVE-2026-89026		CRITICAL
2026-09-16 15:27	Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers	—		-
2026-09-16 14:36	One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude	—		-
2026-09-16 13:37	Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories	—		-
2026-09-16 13:14	Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix	—		-
2026-09-16 11:58	N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security	—		-
2026-09-16 11:15	Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation	CVE-2026-58704		HIGH
2026-09-16 11:15	Threat Intelligence Alone Won't Close the Exploitation Gap	—		-
2026-09-16 11:08	Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks	CVE-2026-87886		HIGH
2026-09-16 05:48	Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells	—		-
2026-09-16 05:18	Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens	CVE-2026-5430		CRITICAL
2026-09-15 18:54	KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens	—		-
2026-09-15 16:29	Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists	—		-
2026-09-15 15:23	BambooToken Malware Uses MQTT to Control Windows and Linux Systems	—		-
2026-09-15 11:52	Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds	—		-
2026-09-15 11:26	Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point	—		-
2026-09-15 11:12	Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers	—		-
2026-09-15 06:52	LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server	—		-
2026-09-15 06:11	Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution	CVE-2026-76461	0.98179	CRITICAL

Alle Quellen