The Hacker News

Uebersicht

Letzter Fetch Letzter Erfolg Aufeinanderfolgende Fehler Letzte Fehlermeldung ETag Last-Modified
2026-10-21 13:03 UTC 2026-10-21 13:03 UTC 0 - - Wed, 21 Oct 2026 12:42:53 GMT

Letzte Eintraege

1250 Eintraege · 50 pro Seite · Seite 11 von 25

Veroeffentlicht Titel CVEs EPSS-Pctl Severity
2026-08-19 19:02

Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

—

-
2026-08-19 18:06

OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior

—

-
2026-08-19 13:12

SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs

—

-
2026-08-19 11:34

Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P

—

-
2026-08-19 11:30

Phishing 3.0: The Fight Moves to Agent Versus Agent

—

-
2026-08-19 11:25

StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data

—

-
2026-08-19 11:01

Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

CVE-2026-65400

HIGH
2026-08-19 06:01

Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure

—

-
2026-08-19 05:39

Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data

—

-
2026-08-18 17:47

Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps

—

-
2026-08-18 17:44

Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets

—

-
2026-08-18 16:58

Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000

—

-
2026-08-18 12:38

AI "Mind Viruses" Can Spread Between Agents Through Persistent Prompt Files

—

-
2026-08-18 12:38

TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

—

-
2026-08-18 11:30

One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025

—

-
2026-08-18 11:20

16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets

—

-
2026-08-18 09:10

SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers

—

-
2026-08-18 06:34

CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE

—

-
2026-08-17 21:03

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

CVE-2026-19478

CRITICAL
2026-08-17 18:44

Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

—

-
2026-08-17 18:22

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

CVE-2026-15748

CRITICAL
2026-08-17 17:41

Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic

—

-
2026-08-17 13:23

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

—

-
2026-08-17 11:58

How MCP Servers Can Expose Enterprise Secrets

—

-
2026-08-17 10:52

Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access

—

-
2026-08-17 09:29

Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies

—

-
2026-08-17 07:36

Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware

CVE-2026-59310

CRITICAL
2026-08-15 08:38

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

CVE-2026-58231

CRITICAL
2026-08-15 07:24

Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner

CVE-2026-65400

HIGH
2026-08-14 18:48

Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware

—

-
2026-08-14 17:19

IAM Compliance Requirements and Best Practices

—

-
2026-08-14 13:08

Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealth

—

-
2026-08-14 11:07

Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers

—

-
2026-08-14 10:57

CTM360 Uncovers Over 3,000 Recruitment Phishing URLs Using Browser-in-the-Browser (BitB) Credential Traps

—

-
2026-08-14 10:44

Apple Warns Users in 110 Countries They May Be Targets of Mercenary Spyware

—

-
2026-08-14 09:38

Trump Memo Paves Way for U.S. Firms to Hack and Disrupt Foreign Crime Groups

—

-
2026-08-14 07:54

China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud

—

-
2026-08-13 18:45

GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE

—

-
2026-08-13 18:17

ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories

—

-
2026-08-13 15:00

New PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical Infrastructure

—

-
2026-08-13 13:43

AmnesiaStealer Hijacks Chromium Sessions to Give Attackers Live Browser Control on macOS

—

-
2026-08-13 11:53

WindRelay Android Malware Turns Victims' Phones Into NFC Relays for Payment Fraud

—

-
2026-08-13 11:45

North Korean Remote Workers Are Infiltrating Government and Businesses: How to Expose Them Before Hiring

—

-
2026-08-13 06:09

Attackers Exploit SharePoint Authentication Bypass After Public PoC Release

CVE-2026-55040

CRITICAL
2026-08-12 17:39

Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor

—

-
2026-08-12 14:09

737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One

—

-
2026-08-12 11:47

OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoning

—

-
2026-08-12 11:41

Enterprise Defenses Recovered at the Edge and Collapsed Inside

—

-
2026-08-12 11:13

Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws

CVE-2026-48362

CRITICAL
2026-08-12 09:01

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

CVE-2026-59310

CRITICAL