The Hacker News

Uebersicht

Letzter Fetch Letzter Erfolg Aufeinanderfolgende Fehler Letzte Fehlermeldung ETag Last-Modified
2026-10-21 13:03 UTC 2026-10-21 13:03 UTC 0 - - Wed, 21 Oct 2026 12:42:53 GMT

Letzte Eintraege

1250 Eintraege · 50 pro Seite · Seite 10 von 25

Veroeffentlicht Titel CVEs EPSS-Pctl Severity
2026-08-26 11:55

Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code

CVE-2026-19912
CVE-2026-19913

HIGH
2026-08-26 11:36

Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine

—

-
2026-08-26 10:27

Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests

—

-
2026-08-26 09:38

OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation

—

-
2026-08-26 07:54

INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown

—

-
2026-08-26 07:12

New SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode

—

-
2026-08-26 06:27

Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

CVE-2026-60004

CRITICAL
2026-08-26 05:47

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

—

-
2026-08-25 18:17

U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches

—

-
2026-08-25 14:07

A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw

—

-
2026-08-25 13:19

WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android

—

-
2026-08-25 12:43

Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode

—

-
2026-08-25 11:56

Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows

—

-
2026-08-25 11:52

24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages

—

-
2026-08-25 11:33

E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands

—

-
2026-08-25 11:14

Frontier AI: Vulnerability Management's Systemic Revolution

—

-
2026-08-25 08:34

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

CVE-2026-61979

HIGH
2026-08-25 06:12

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

CVE-2026-21962

CRITICAL
2026-08-24 17:41

Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt

—

-
2026-08-24 17:41

Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning

—

-
2026-08-24 14:32

⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More

—

-
2026-08-24 12:35

WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords

—

-
2026-08-24 11:56

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account

CVE-2026-18963

CRITICAL
2026-08-24 11:51

Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor

—

-
2026-08-24 11:30

The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk

—

-
2026-08-24 08:08

UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit

—

-
2026-08-22 14:32

TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit

—

-
2026-08-21 18:53

14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2

—

-
2026-08-21 15:52

Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot

—

-
2026-08-21 15:41

Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet

—

-
2026-08-21 11:21

Wazuh and AI For Enhanced SOC Workflows

—

-
2026-08-21 10:03

Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0

—

-
2026-08-21 07:04

GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure

CVE-2026-19478

CRITICAL
2026-08-21 06:06

Microsoft Patches Severe Entra ID Flaw (CVSS 10.0) Allowing Remote Code Execution

—

-
2026-08-20 20:22

Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads

—

-
2026-08-20 19:59

Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts

—

-
2026-08-20 17:23

ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit, and More

—

-
2026-08-20 16:59

AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure

—

-
2026-08-20 14:36

New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data

—

-
2026-08-20 13:48

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

—

-
2026-08-20 13:35

Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers

—

-
2026-08-20 13:24

Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution

CVE-2026-73570

HIGH
2026-08-20 12:01

Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments

—

-
2026-08-20 11:45

Why "Shady AI" is Security's Next Big Governance Problem

—

-
2026-08-20 11:39

CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification

—

-
2026-08-20 11:26

Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices

—

-
2026-08-20 11:05

NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

—

-
2026-08-20 10:38

ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud

—

-
2026-08-20 08:42

40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets

—

-
2026-08-20 06:04

Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code

CVE-2026-32475

CRITICAL