The Hacker News

Uebersicht

Letzter Fetch Letzter Erfolg Aufeinanderfolgende Fehler Letzte Fehlermeldung ETag Last-Modified
2026-10-21 13:03 UTC 2026-10-21 13:03 UTC 0 - - Wed, 21 Oct 2026 12:42:53 GMT

Letzte Eintraege

1250 Eintraege · 50 pro Seite · Seite 12 von 25

Veroeffentlicht Titel CVEs EPSS-Pctl Severity
2026-08-12 08:04

Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations

—

-
2026-08-12 07:31

SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

CVE-2026-58231

CRITICAL
2026-08-12 06:41

ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access

CVE-2026-50656

HIGH
2026-08-12 06:15

Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS

CVE-2026-20349

HIGH
2026-08-11 20:10

Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack

CVE-2026-68820

HIGH
2026-08-11 19:36

Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing

—

-
2026-08-11 19:08

Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client

—

-
2026-08-11 18:36

Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

—

-
2026-08-11 16:47

Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

CVE-2026-55040

CRITICAL
2026-08-11 16:35

DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt

—

-
2026-08-11 13:11

OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development

—

-
2026-08-11 12:05

A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices

—

-
2026-08-11 12:04

Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo

—

-
2026-08-11 11:35

Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers

—

-
2026-08-11 10:48

Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11

—

-
2026-08-11 10:24

Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets

—

-
2026-08-11 09:16

Gunra Ransomware Exploits Fortinet FortiOS, FortiProxy Flaws to Breach Networks

—

-
2026-08-11 06:55

Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine

—

-
2026-08-11 05:48

BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins

—

-
2026-08-10 17:29

Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development

—

-
2026-08-10 16:38

China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw

—

-
2026-08-10 15:00

⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors

—

-
2026-08-10 13:19

Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development

—

-
2026-08-10 12:25

New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA

—

-
2026-08-10 11:33

TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore

—

-
2026-08-10 07:38

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

—

-
2026-08-10 05:50

OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause

—

-
2026-08-08 08:54

Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers

—

-
2026-08-08 08:03

New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens

—

-
2026-08-08 06:58

Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication

—

-
2026-08-08 06:57

N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist

—

-
2026-08-08 06:52

Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts

CVE-2026-8037

CRITICAL
2026-08-07 18:48

Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer

—

-
2026-08-07 18:29

ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets

—

-
2026-08-07 18:16

UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data

—

-
2026-08-07 12:56

New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP

CVE-2026-64638

HIGH
2026-08-07 11:55

Growing Up The Hard Way

—

-
2026-08-07 11:10

18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers

—

-
2026-08-07 10:58

New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables

—

-
2026-08-07 10:38

Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails

—

-
2026-08-07 10:09

AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day

—

-
2026-08-07 08:52

Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access

—

-
2026-08-07 08:18

Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets

—

-
2026-08-07 06:50

TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign

—

-
2026-08-06 17:58

New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts

CVE-2026-64561

HIGH
2026-08-06 17:13

Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs

—

-
2026-08-06 16:17

New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs

—

-
2026-08-06 15:24

ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories

—

-
2026-08-06 12:16

Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities

—

-
2026-08-06 11:49

CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps

—

-