Mar. Oct 27th, 2026
Trending News: Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification KeyMicrosoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account TokensOpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning ProtectionsAustralia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected ComputersAttackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth WeaknessesCISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code ExecutionEl 35% de los ataques con infostealers comienza al ejecutar archivos descargadosEl grupo de extorsión MAJINAHANASHI ataca a Grupo Caliche y amenaza con filtrar DNIs y carnets de conducirUna operación de la policía ucraniana clausura un centenar de call centers fraudulentosEscudo Digital ya alertó de la brecha que ahora expone a los espías de MarruecosHackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on MagentoAttackers Use Microsoft Teams IT Support Scams to Deploy Malware and RansomwarePHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution FlawThis2Shell, That2Shell, Everything’s an RCE? Rogue AI, Supply Chain Chaos and MoreTwo Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape SandboxesGheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions LogsWhat Attackers Do in the Spaces Ordinary Detection MissesuCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat AccountsMicrosoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 OrganizationsMalicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing MalwarePHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted HackingUnpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other ServersOpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox CommunicationGoogle Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted AdsLeaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release PipelineBrotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used SoftwareResearchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a BotnetCISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloudExposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute IntrusionsBlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing RevocationsRuby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE FlawsHackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 CredentialsPHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai MalwareRussian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine AttackPHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell PatchesCritical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted ImageCritical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token BalancesResearchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli DataTwo CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel FixesArista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in AttacksZelenski pone la ciberseguridad ucraniana en manos de su nuevo jefe de Seguridad y DefensaEl hacker de TuLotero pone a la venta los datos de los clientes, con cientos de miles de copias de DNIsLas cámaras IP se convierten en un nuevo vector de entrada para los ciberdelincuentesFalsos agentes de aerolíneas captan en redes a pasajeros para robarles datos por WhatsAppCondenan a cuatro años de cárcel a uno de los integrantes del peligroso grupo de ransomware ContiAI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 MoreeMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily GuessableMeta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy ViolationsSomeone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly DisclosedWatch Expert Webinar On Your Newest Insider ThreatINTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global CrackdownOpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSLRailway Says Intruder May Have Accessed Customer Secrets, Urges Credential RotationNew QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory AmplificationNode.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported VersionsLiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package ReleaseChina-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain AttackHackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare IntrusionU.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New PurchasesCritical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of ReleasesUn grupo de hackers obtiene información sensible de empleados y clientes de BigMat en EspañaTres años de advertencias ignoradas: crónica del ciberataque a los supermercados francesesDécadas de secretos de Cartoon Network, expuestas en una filtración de datosLos cibercriminales utilizan ‘La Odisea’ como cebo para infectar ordenadoresReivindican el robo de más de 200 millones de filas de bases de datos de CanvaAttackers Hijacked Over 300 Tor Exit Relays to Intercept SSH ConnectionsLiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and BackdoorOpenAI’s GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing SoGenerative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint ReportsPHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts EmergeChina-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy BackdoorsGoogle Chrome Adds ClickFix Warnings to Stop Users From Running Malicious CommandsThe Harness Is the Hard Part of Agentic Pentesting00 UTC PHP RCE Patch, and What Doesn’tAttackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress SitesCISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard FlawsState Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark WebTwo Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security AlertConnectWise Resets Credentials as Cloud Backup Remains Offline After Security IncidentRussian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective LoaderGo Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security ConcernsEight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and SoftwareWhat Security Teams Can Do To Tame Wild CodeQilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFACritical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code ExecutionHackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 SitesPegasus Spyware Infection Confirmed on Serbian University Rector’s iPhone Days Before ElectionWhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy RegulatorsHackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing MalwareClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access TrojanEx-OpenAI Engineer Detained in Spy Device Case as Saudi Royal Contacts EmergeHackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other MalwareHackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy BackdoorPopular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring BackdoorHow Inherited Agents Break Governance Built for Software98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and MoreGhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub RepositoriesFake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent TrafficOpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API KeysUnpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers
Chicago 12, Melborne City, USA
Mar. Oct 27th, 2026
Trending News: Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification KeyMicrosoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account TokensOpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning ProtectionsAustralia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected ComputersAttackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth WeaknessesCISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code ExecutionEl 35% de los ataques con infostealers comienza al ejecutar archivos descargadosEl grupo de extorsión MAJINAHANASHI ataca a Grupo Caliche y amenaza con filtrar DNIs y carnets de conducirUna operación de la policía ucraniana clausura un centenar de call centers fraudulentosEscudo Digital ya alertó de la brecha que ahora expone a los espías de MarruecosHackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on MagentoAttackers Use Microsoft Teams IT Support Scams to Deploy Malware and RansomwarePHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution FlawThis2Shell, That2Shell, Everything’s an RCE? Rogue AI, Supply Chain Chaos and MoreTwo Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape SandboxesGheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions LogsWhat Attackers Do in the Spaces Ordinary Detection MissesuCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat AccountsMicrosoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 OrganizationsMalicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing MalwarePHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted HackingUnpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other ServersOpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox CommunicationGoogle Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted AdsLeaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release PipelineBrotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used SoftwareResearchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a BotnetCISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloudExposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute IntrusionsBlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing RevocationsRuby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE FlawsHackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 CredentialsPHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai MalwareRussian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine AttackPHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell PatchesCritical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted ImageCritical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token BalancesResearchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli DataTwo CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel FixesArista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in AttacksZelenski pone la ciberseguridad ucraniana en manos de su nuevo jefe de Seguridad y DefensaEl hacker de TuLotero pone a la venta los datos de los clientes, con cientos de miles de copias de DNIsLas cámaras IP se convierten en un nuevo vector de entrada para los ciberdelincuentesFalsos agentes de aerolíneas captan en redes a pasajeros para robarles datos por WhatsAppCondenan a cuatro años de cárcel a uno de los integrantes del peligroso grupo de ransomware ContiAI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 MoreeMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily GuessableMeta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy ViolationsSomeone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly DisclosedWatch Expert Webinar On Your Newest Insider ThreatINTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global CrackdownOpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSLRailway Says Intruder May Have Accessed Customer Secrets, Urges Credential RotationNew QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory AmplificationNode.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported VersionsLiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package ReleaseChina-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain AttackHackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare IntrusionU.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New PurchasesCritical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of ReleasesUn grupo de hackers obtiene información sensible de empleados y clientes de BigMat en EspañaTres años de advertencias ignoradas: crónica del ciberataque a los supermercados francesesDécadas de secretos de Cartoon Network, expuestas en una filtración de datosLos cibercriminales utilizan ‘La Odisea’ como cebo para infectar ordenadoresReivindican el robo de más de 200 millones de filas de bases de datos de CanvaAttackers Hijacked Over 300 Tor Exit Relays to Intercept SSH ConnectionsLiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and BackdoorOpenAI’s GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing SoGenerative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint ReportsPHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts EmergeChina-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy BackdoorsGoogle Chrome Adds ClickFix Warnings to Stop Users From Running Malicious CommandsThe Harness Is the Hard Part of Agentic Pentesting00 UTC PHP RCE Patch, and What Doesn’tAttackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress SitesCISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard FlawsState Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark WebTwo Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security AlertConnectWise Resets Credentials as Cloud Backup Remains Offline After Security IncidentRussian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective LoaderGo Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security ConcernsEight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and SoftwareWhat Security Teams Can Do To Tame Wild CodeQilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFACritical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code ExecutionHackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 SitesPegasus Spyware Infection Confirmed on Serbian University Rector’s iPhone Days Before ElectionWhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy RegulatorsHackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing MalwareClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access TrojanEx-OpenAI Engineer Detained in Spy Device Case as Saudi Royal Contacts EmergeHackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other MalwareHackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy BackdoorPopular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring BackdoorHow Inherited Agents Break Governance Built for Software98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and MoreGhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub RepositoriesFake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent TrafficOpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API KeysUnpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers
Chicago 12, Melborne City, USA

Etiqueta Disclosed

Other Story

Uncategorized

Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key

Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key
Uncategorized

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
Uncategorized

OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections

OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections
Uncategorized

Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers

Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers
Uncategorized

Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses

Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
Uncategorized

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution