The Hacker News

Uebersicht

Letzter Fetch Letzter Erfolg Aufeinanderfolgende Fehler Letzte Fehlermeldung ETag Last-Modified
2026-10-21 13:03 UTC 2026-10-21 13:03 UTC 0 - - Wed, 21 Oct 2026 12:42:53 GMT

Letzte Eintraege

1250 Eintraege · 50 pro Seite · Seite 15 von 25

Veroeffentlicht Titel CVEs EPSS-Pctl Severity
2026-07-25 10:14

Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE

—

-
2026-07-25 09:53

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

—

-
2026-07-24 15:12

BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

—

-
2026-07-24 14:15

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

—

-
2026-07-24 11:53

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

—

-
2026-07-24 11:45

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

CVE-2026-32194

CRITICAL
2026-07-24 11:30

Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do

—

-
2026-07-24 10:15

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

—

-
2026-07-24 10:09

Golden Chickens Resurfaces With Four New Malware Families and Modular Implants

—

-
2026-07-24 07:41

NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

—

-
2026-07-24 06:58

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

—

-
2026-07-24 06:50

Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

—

-
2026-07-23 18:36

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

—

-
2026-07-23 15:02

ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories

—

-
2026-07-23 13:27

Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files

—

-
2026-07-23 13:11

Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge

—

-
2026-07-23 12:20

China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks

—

-
2026-07-23 11:45

How Synthetic Identity Fraud is Coming for Machine Identities

—

-
2026-07-23 11:28

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers

—

-
2026-07-23 10:00

Google Adds Selfie Video Recovery for Users Locked Out of Their Accounts

—

-
2026-07-23 08:04

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

CVE-2026-64600

HIGH
2026-07-23 06:34

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

CVE-2026-16232

CRITICAL
2026-07-22 18:37

GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier

—

-
2026-07-22 18:07

Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs

CVE-2026-8933

HIGH
2026-07-22 15:01

Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data

CVE-2026-48294

HIGH
2026-07-22 12:36

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication

CVE-2026-29059

MEDIUM
2026-07-22 11:58

The Fastest Path to AI Adoption Runs Through Security

—

-
2026-07-22 11:30

OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark

—

-
2026-07-22 11:25

Why Modern SOCs Need Multi-Layered Detections

—

-
2026-07-22 06:38

Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA

—

-
2026-07-22 06:00

Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library

—

-
2026-07-22 04:57

Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents

—

-
2026-07-21 18:46

Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs

—

-
2026-07-21 16:06

AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code

—

-
2026-07-21 15:09

Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities

—

-
2026-07-21 14:57

Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC

CVE-2026-50522

CRITICAL
2026-07-21 14:04

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access

CVE-2026-0257

MEDIUM
2026-07-21 13:18

Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities

—

-
2026-07-21 11:58

Open-Source Android AI Agents Could Let Invisible Screen Text Run Code on Host PCs

—

-
2026-07-21 11:42

N-day is Becoming N-Hour. Patching Faster Won't Save You.

—

-
2026-07-21 11:24

New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit

—

-
2026-07-21 08:59

WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning

CVE-2026-60137
CVE-2026-63030

0.95769 CRITICAL
2026-07-21 07:34

New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack

—

-
2026-07-21 06:29

Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution

CVE-2026-6875

CRITICAL
2026-07-20 18:23

FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware

—

-
2026-07-20 17:29

Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign

—

-
2026-07-20 14:33

HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050

—

-
2026-07-20 13:32

⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More

—

-
2026-07-20 12:13

Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine

—

-
2026-07-20 11:30

Mythos Didn't Break Your Security Program. Your Exposure Window Could.

—

-