Sáb. Oct 31st, 2026
Trending News: Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity DataAttackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root AccessCloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private ChatsChinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations WorldwideWordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursTeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control ThemSyrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in PrisonWhy Urgent Security Fixes Aren’t Fixed. Observe, Prove, Act, Confirm Gets Them MovingTrezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilisOfficial Claude Code VS Code Extension Compromised to Install Persistent SSH BackdoorHackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass FlawCISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEVBinance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion FrozenCritical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More StoriesAttacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left OpenGitHub Launches npm Firewall to Block Malicious Packages Before InstallationLinux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other DistributionsFake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee RepositoriesGoogle’s Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching VulnerabilitiesHow AI Will Redefine Security Operations and CareersTelegram Android Flaw Lets Attackers Run Code When Users Answer Voice CallsCisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash FirewallsHackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption KeysAttackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management InterfacesChina-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail VisibilityAdobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic EmergesShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained FlawsResearcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own WinVolt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation CampaignsGoogle to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated NetworkWazuh and AI for Enhanced SOC WorkflowsCritical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting ServersHackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security PatchSkyw4lker Device Code Phishing Campaign ExposedAdobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security BypassTailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other ServersFBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money LaunderingAnthropic’s Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux ExploitsJapan’s GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud BreachCyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan TargetsApple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPadsGoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session DecryptionLazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum EncryptionAI-Generated Fake Login Pages Are Making Account Takeovers EasierKeystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification KeyMicrosoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account TokensOpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning ProtectionsAustralia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected ComputersAttackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth WeaknessesCISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code ExecutionEl 35% de los ataques con infostealers comienza al ejecutar archivos descargadosEl grupo de extorsión MAJINAHANASHI ataca a Grupo Caliche y amenaza con filtrar DNIs y carnets de conducirUna operación de la policía ucraniana clausura un centenar de call centers fraudulentosEscudo Digital ya alertó de la brecha que ahora expone a los espías de MarruecosHackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on MagentoAttackers Use Microsoft Teams IT Support Scams to Deploy Malware and RansomwarePHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution FlawThis2Shell, That2Shell, Everything’s an RCE? Rogue AI, Supply Chain Chaos and MoreTwo Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape SandboxesGheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions LogsWhat Attackers Do in the Spaces Ordinary Detection MissesuCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat AccountsMicrosoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 OrganizationsMalicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing MalwarePHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted HackingUnpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other ServersOpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox CommunicationGoogle Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted AdsLeaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release PipelineBrotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used SoftwareResearchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a BotnetCISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloudExposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute IntrusionsBlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing RevocationsRuby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE FlawsHackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 CredentialsPHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai MalwareRussian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine AttackPHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell PatchesCritical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted ImageCritical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token BalancesResearchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli DataTwo CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel FixesArista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in AttacksZelenski pone la ciberseguridad ucraniana en manos de su nuevo jefe de Seguridad y DefensaEl hacker de TuLotero pone a la venta los datos de los clientes, con cientos de miles de copias de DNIsLas cámaras IP se convierten en un nuevo vector de entrada para los ciberdelincuentesFalsos agentes de aerolíneas captan en redes a pasajeros para robarles datos por WhatsAppCondenan a cuatro años de cárcel a uno de los integrantes del peligroso grupo de ransomware ContiAI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 MoreeMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily GuessableMeta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy ViolationsSomeone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly DisclosedWatch Expert Webinar On Your Newest Insider ThreatINTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global CrackdownOpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSLRailway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation
Chicago 12, Melborne City, USA
Sáb. Oct 31st, 2026
Trending News: Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity DataAttackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root AccessCloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private ChatsChinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations WorldwideWordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursTeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control ThemSyrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in PrisonWhy Urgent Security Fixes Aren’t Fixed. Observe, Prove, Act, Confirm Gets Them MovingTrezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilisOfficial Claude Code VS Code Extension Compromised to Install Persistent SSH BackdoorHackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass FlawCISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEVBinance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion FrozenCritical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More StoriesAttacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left OpenGitHub Launches npm Firewall to Block Malicious Packages Before InstallationLinux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other DistributionsFake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee RepositoriesGoogle’s Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching VulnerabilitiesHow AI Will Redefine Security Operations and CareersTelegram Android Flaw Lets Attackers Run Code When Users Answer Voice CallsCisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash FirewallsHackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption KeysAttackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management InterfacesChina-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail VisibilityAdobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic EmergesShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained FlawsResearcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own WinVolt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation CampaignsGoogle to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated NetworkWazuh and AI for Enhanced SOC WorkflowsCritical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting ServersHackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security PatchSkyw4lker Device Code Phishing Campaign ExposedAdobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security BypassTailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other ServersFBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money LaunderingAnthropic’s Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux ExploitsJapan’s GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud BreachCyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan TargetsApple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPadsGoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session DecryptionLazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum EncryptionAI-Generated Fake Login Pages Are Making Account Takeovers EasierKeystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification KeyMicrosoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account TokensOpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning ProtectionsAustralia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected ComputersAttackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth WeaknessesCISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code ExecutionEl 35% de los ataques con infostealers comienza al ejecutar archivos descargadosEl grupo de extorsión MAJINAHANASHI ataca a Grupo Caliche y amenaza con filtrar DNIs y carnets de conducirUna operación de la policía ucraniana clausura un centenar de call centers fraudulentosEscudo Digital ya alertó de la brecha que ahora expone a los espías de MarruecosHackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on MagentoAttackers Use Microsoft Teams IT Support Scams to Deploy Malware and RansomwarePHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution FlawThis2Shell, That2Shell, Everything’s an RCE? Rogue AI, Supply Chain Chaos and MoreTwo Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape SandboxesGheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions LogsWhat Attackers Do in the Spaces Ordinary Detection MissesuCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat AccountsMicrosoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 OrganizationsMalicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing MalwarePHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted HackingUnpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other ServersOpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox CommunicationGoogle Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted AdsLeaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release PipelineBrotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used SoftwareResearchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a BotnetCISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloudExposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute IntrusionsBlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing RevocationsRuby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE FlawsHackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 CredentialsPHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai MalwareRussian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine AttackPHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell PatchesCritical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted ImageCritical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token BalancesResearchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli DataTwo CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel FixesArista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in AttacksZelenski pone la ciberseguridad ucraniana en manos de su nuevo jefe de Seguridad y DefensaEl hacker de TuLotero pone a la venta los datos de los clientes, con cientos de miles de copias de DNIsLas cámaras IP se convierten en un nuevo vector de entrada para los ciberdelincuentesFalsos agentes de aerolíneas captan en redes a pasajeros para robarles datos por WhatsAppCondenan a cuatro años de cárcel a uno de los integrantes del peligroso grupo de ransomware ContiAI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 MoreeMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily GuessableMeta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy ViolationsSomeone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly DisclosedWatch Expert Webinar On Your Newest Insider ThreatINTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global CrackdownOpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSLRailway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation
Chicago 12, Melborne City, USA

Etiqueta Catalyst

Other Story

Uncategorized

Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data

Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
Uncategorized

Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
Uncategorized

Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%

Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
Uncategorized

A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats

A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
Uncategorized

Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide

Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
Uncategorized

WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours

WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours