adminDawn of the Apex Agentic Adversary
The Hacker NewsJun 24, 2026Network Security / Vulnerability Management We are standing at the end of an era we never thought to mourn: the era of human-speed threats. For years,…
Sáb. Ago 29th, 2026
Trending News:
ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research BodyBerlin Refuses to Pay Hackers Who Stole Data From the City’s State NetworkCosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was VulnerableAndroid 17 Adds OS-Wide ECH to Hide Website Visits From Network ProvidersAttackers Chain Two PaperCut Flaws to Execute Code Without Authentication19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining CodeChina-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root AccessKey Reasons Why Identity Fabric Matters in 2026Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over BluetoothThree CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQLCritical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole ServerAPT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic OrganizationsPaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF VersionsOpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New StoriesNext.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCEWhat the Data Says About AI in Security Operations in 2026Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro PowersAlleged TeamPCP Hackers Charged in Australia Over Major Supply Chain AttacksLearn How to Build Security Operations Ready for AI-Powered AttacksSpark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security ToolsGoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 AddressNew GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root AccessCISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server BugsNimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH TunnelerFBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. OrganizationsNew SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own BytecodeCISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected NothingNovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 SessionsUnpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run CodeFrom Alert Backlog to AI Hypothesis EngineOpenAI Bans Russian ChatGPT Accounts Used to Run Influence OperationClaude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users’ Reservations in TestsINTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud CrackdownFake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA CodesCritical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like PayloadFrontier AI: Vulnerability Management’s Systemic RevolutionU.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure BreachesE4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA PagesMarimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit ModeA Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClawWhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and AndroidMirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login FlowsAttackers Target miniOrange SAML Flaws That Can Grant WordPress Admin AccessActively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical DataWeedhack Malware Spreads via Fake Minecraft Clients and SEO PoisoningWhy 5% of AI Users Are Your Biggest Security RiskAI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and MoreOperation QUICSILVER Targets Myanmar Government and IT with QUICAgent BackdoorWordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows PasswordsCritical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any AccountShipping More AI Code Than You Can Secure? Watch How to Control Remediation DebtUAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux RootkitTikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy BotnetMicrosoft Defender’s Own Driver Can Be Weaponized to Delete Security Software at BootWazuh and AI For Enhanced SOC WorkflowsCisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of DisclosureMicrosoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet SecretsManic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected DevicesCDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS AmplificationWhy «Shady AI» is Security’s Next Big Governance ProblemRust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million DownloadsSuspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack AccountsAttackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code ExecutionGogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and MoreAI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical InfrastructureNew Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat DataCritical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA ServersIsolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCEZombie Card Attack Can Revive Expired Visa Cards for Contactless PaymentsToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device FraudNASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft CommandsElementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute CodeOpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI BehaviorCloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/SecondThe Fight Moves to Agent Versus AgentHackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2PSilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATsCritical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active ExploitationStopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal DataClop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering DataMicrosoft Links 30+ Rotating Domains to MacSync Stealer InfrastructureRansom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and SecretsMicrosoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected AppsHow to Expose Them Before HiringWindRelay Android Malware Turns Victims’ Phones Into NFC Relays for Payment FraudOne Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across NetworksAI «Mind Viruses» Can Spread Between Agents Through Persistent Prompt Files16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto WalletsAmnesiaStealer Hijacks Chromium Sessions to Give Attackers Live Browser Control on macOSSafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 CustomersNew PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical InfrastructureGhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories
Chicago 12, Melborne City, USA
Sáb. Ago 29th, 2026
Trending News:
ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research BodyBerlin Refuses to Pay Hackers Who Stole Data From the City’s State NetworkCosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was VulnerableAndroid 17 Adds OS-Wide ECH to Hide Website Visits From Network ProvidersAttackers Chain Two PaperCut Flaws to Execute Code Without Authentication19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining CodeChina-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root AccessKey Reasons Why Identity Fabric Matters in 2026Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over BluetoothThree CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQLCritical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole ServerAPT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic OrganizationsPaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF VersionsOpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New StoriesNext.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCEWhat the Data Says About AI in Security Operations in 2026Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro PowersAlleged TeamPCP Hackers Charged in Australia Over Major Supply Chain AttacksLearn How to Build Security Operations Ready for AI-Powered AttacksSpark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security ToolsGoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 AddressNew GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root AccessCISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server BugsNimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH TunnelerFBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. OrganizationsNew SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own BytecodeCISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected NothingNovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 SessionsUnpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run CodeFrom Alert Backlog to AI Hypothesis EngineOpenAI Bans Russian ChatGPT Accounts Used to Run Influence OperationClaude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users’ Reservations in TestsINTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud CrackdownFake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA CodesCritical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like PayloadFrontier AI: Vulnerability Management’s Systemic RevolutionU.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure BreachesE4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA PagesMarimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit ModeA Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClawWhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and AndroidMirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login FlowsAttackers Target miniOrange SAML Flaws That Can Grant WordPress Admin AccessActively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical DataWeedhack Malware Spreads via Fake Minecraft Clients and SEO PoisoningWhy 5% of AI Users Are Your Biggest Security RiskAI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and MoreOperation QUICSILVER Targets Myanmar Government and IT with QUICAgent BackdoorWordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows PasswordsCritical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any AccountShipping More AI Code Than You Can Secure? Watch How to Control Remediation DebtUAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux RootkitTikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy BotnetMicrosoft Defender’s Own Driver Can Be Weaponized to Delete Security Software at BootWazuh and AI For Enhanced SOC WorkflowsCisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of DisclosureMicrosoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet SecretsManic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected DevicesCDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS AmplificationWhy «Shady AI» is Security’s Next Big Governance ProblemRust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million DownloadsSuspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack AccountsAttackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code ExecutionGogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and MoreAI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical InfrastructureNew Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat DataCritical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA ServersIsolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCEZombie Card Attack Can Revive Expired Visa Cards for Contactless PaymentsToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device FraudNASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft CommandsElementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute CodeOpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI BehaviorCloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/SecondThe Fight Moves to Agent Versus AgentHackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2PSilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATsCritical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active ExploitationStopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal DataClop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering DataMicrosoft Links 30+ Rotating Domains to MacSync Stealer InfrastructureRansom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and SecretsMicrosoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected AppsHow to Expose Them Before HiringWindRelay Android Malware Turns Victims’ Phones Into NFC Relays for Payment FraudOne Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across NetworksAI «Mind Viruses» Can Spread Between Agents Through Persistent Prompt Files16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto WalletsAmnesiaStealer Hijacks Chromium Sessions to Give Attackers Live Browser Control on macOSSafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 CustomersNew PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical InfrastructureGhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories
Chicago 12, Melborne City, USA
