The Hacker News

Uebersicht

Letzter Fetch Letzter Erfolg Aufeinanderfolgende Fehler Letzte Fehlermeldung ETag Last-Modified
2026-10-21 13:03 UTC 2026-10-21 13:03 UTC 0 - - Wed, 21 Oct 2026 12:42:53 GMT

Letzte Eintraege

1250 Eintraege · 50 pro Seite · Seite 13 von 25

Veroeffentlicht Titel CVEs EPSS-Pctl Severity
2026-08-06 11:33

Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses

—

-
2026-08-06 11:30

AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memory

—

-
2026-08-06 09:19

Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access

—

-
2026-08-06 08:57

AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model

—

-
2026-08-06 08:05

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells

—

-
2026-08-06 07:19

Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Service

—

-
2026-08-06 06:51

CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild

CVE-2026-63077

CRITICAL
2026-08-06 06:04

Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People

—

-
2026-08-05 18:44

Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures

—

-
2026-08-05 18:33

OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes

—

-
2026-08-05 15:36

Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt

—

-
2026-08-05 15:14

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports

—

-
2026-08-05 14:27

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug

—

-
2026-08-05 13:41

Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain

—

-
2026-08-05 11:43

New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch

CVE-2026-64531

HIGH
2026-08-05 11:43

Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk

—

-
2026-08-05 11:04

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

CVE-2026-59774

-
2026-08-05 10:35

Leaked n8n API Tokens Exposed Live Instances to Credential Theft

—

-
2026-08-05 09:23

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

—

-
2026-08-05 07:53

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself

—

-
2026-08-05 07:40

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

CVE-2026-9198

CRITICAL
2026-08-05 05:47

QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer

—

-
2026-08-04 17:27

Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

—

-
2026-08-04 13:30

Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

—

-
2026-08-04 13:11

Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access

—

-
2026-08-04 11:30

When Vibe Hacking Turns AI into the Junior Hacker Every Adversary Always Wanted

—

-
2026-08-04 11:16

Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent

—

-
2026-08-04 10:36

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

CVE-2026-58048

CRITICAL
2026-08-04 09:03

DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT

—

-
2026-08-04 07:00

CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises

CVE-2026-18556
CVE-2026-18577

HIGH
2026-08-03 18:43

18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users

—

-
2026-08-03 16:24

Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts

—

-
2026-08-03 16:15

INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws

—

-
2026-08-03 14:03

⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks

—

-
2026-08-03 11:30

FOMO in the SOC: Where AI Platforms like Claude Actually Fit

—

-
2026-08-03 10:49

Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS

—

-
2026-08-03 09:13

PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web

—

-
2026-08-03 08:05

Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable

CVE-2026-17583

HIGH
2026-08-03 06:41

N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete

CVE-2026-18577

HIGH
2026-08-03 06:40

Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code

—

-
2026-08-01 17:17

Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes

—

-
2026-08-01 09:03

Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites

—

-
2026-08-01 07:12

Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction

CVE-2026-48449

CRITICAL
2026-08-01 06:29

Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware

—

-
2026-07-31 18:52

Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk

—

-
2026-07-31 16:39

HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm

—

-
2026-07-31 14:45

Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies

—

-
2026-07-31 12:51

Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined

—

-
2026-07-31 11:55

Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw

—

-
2026-07-31 11:24

6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026

—

-