The Hacker News

Uebersicht

Letzter Fetch Letzter Erfolg Aufeinanderfolgende Fehler Letzte Fehlermeldung ETag Last-Modified
2026-10-21 10:18 UTC 2026-10-21 10:18 UTC 0 - - Wed, 21 Oct 2026 09:42:23 GMT

Letzte Eintraege

1245 Eintraege · 50 pro Seite · Seite 1 von 25

Veroeffentlicht Titel CVEs EPSS-Pctl Severity
2026-10-21 09:05

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

—

-
2026-10-21 09:01

Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites

—

-
2026-10-21 08:04

U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases

—

-
2026-10-21 07:44

State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web

—

-
2026-10-21 07:26

CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

CVE-2026-96652

MEDIUM
2026-10-21 06:05

Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion

—

-
2026-10-20 17:09

Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software

—

-
2026-10-20 15:38

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

CVE-2026-106173

CRITICAL
2026-10-20 15:32

Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA

CVE-2026-0257

MEDIUM
2026-10-20 14:07

Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites

—

-
2026-10-20 12:59

Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election

—

-
2026-10-20 11:41

WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators

—

-
2026-10-20 11:33

What Security Teams Can Do To Tame Wild Code

—

-
2026-10-20 11:32

Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns

—

-
2026-10-20 11:06

Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader

—

-
2026-10-20 10:56

ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident

—

-
2026-10-20 08:21

Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware

—

-
2026-10-20 07:11

ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan

CVE-2026-110936

HIGH
2026-10-20 05:53

Ex-OpenAI Engineer Detained in Spy Device Case as Saudi Royal Contacts Emerge

—

-
2026-10-20 04:05

Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware

—

-
2026-10-19 17:32

Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor

—

-
2026-10-19 16:28

Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor

—

-
2026-10-19 14:14

⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More

—

-
2026-10-19 13:05

GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories

—

-
2026-10-19 11:50

From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software

—

-
2026-10-19 10:06

Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic

—

-
2026-10-19 06:29

Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers

—

-
2026-10-19 06:07

OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys

—

-
2026-10-18 08:23

ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants

—

-
2026-10-17 11:11

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

—

-
2026-10-17 06:16

Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

—

-
2026-10-16 17:48

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

—

-
2026-10-16 16:43

Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor

—

-
2026-10-16 16:16

UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing

—

-
2026-10-16 14:03

OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract

—

-
2026-10-16 11:30

AI Decision Models and Their Impact on AI SOC Platforms

—

-
2026-10-16 06:55

China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers

CVE-2026-102764

0.67244 CRITICAL
2026-10-16 06:53

CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing

—

-
2026-10-16 04:59

PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions

CVE-2025-61624

MEDIUM
2026-10-15 20:24

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

CVE-2026-99999

CRITICAL
2026-10-15 18:49

ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More

—

-
2026-10-15 16:01

Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads

—

-
2026-10-15 16:00

Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks

—

-
2026-10-15 14:11

Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams

—

-
2026-10-15 12:58

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

—

-
2026-10-15 12:28

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

—

-
2026-10-15 12:07

Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules

—

-
2026-10-15 11:46

Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early

—

-
2026-10-15 11:46

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

CVE-2026-0322

HIGH
2026-10-15 11:04

Why AI Confidence Is Not Validation

—

-