adminSmart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories
Ravie LakshmananJun 25, 2026Hacking News / Cybersecurity News It’s dumb out there again. This week has the usual smell of prod on fire and nobody wanting to admit who left…
Sáb. Jun 27th, 2026
Trending News:
Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging CredentialsOpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber SafeguardsCIBER-TEC, Liderada por Franklin Herrera Suárez, Impulsa el Futuro de la Defensa con Plataformas de Drones, Anti-Drones y CiberguerraFBI Warns Russian Intelligence Hackers Target Signal Backup Recovery KeysNew SharkLoader Malware Deploys Cobalt Strike in StrikeShark CyberattacksChinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia CampaignThe Next Layer of Identity GovernanceCISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks ContinueAmazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP ConfigsNew Linux pedit COW Exploit Enables Root Access by Poisoning Cached BinariesNew DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned PacketsMiasma Malware Targets npm Packages and GitHub Actions in Supply Chain AttackMicrosoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js ImplantRussia Used Cellebrite on Jailed Activist’s iPhone Months After Sales CutoffGoogle Details Turla’s New STOCKSTAY Backdoor Used in Ukraine Espionage AttacksChrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection CapabilitySmart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More StoriesRichard Bejtlich on the Case for NDRNew Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted AnalysisNew Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT CampaignsCisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root AccessCISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively ExploitedAmadey and StealC Malware Network Disrupted, 27M Stolen Credentials RecoveredDawn of the Apex Agentic AdversaryCordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain AttacksDoJ Seizes Huione Cloud Account Tied to Cyber Scam Money LaunderingCisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to RootFortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting OperationTrump Order Sets 2030 Deadline for Federal Post-Quantum Crypto MigrationFake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 AgentsGitHub Updates actions/checkout to Block Common Pwn Request Attack PatternsThe Weapon That No Longer Needs a WarriorMalicious npm Packages Pose as PostCSS Tools to Deliver Windows RATWhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM ToolOpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security FlawsShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain AttackResearchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across TenantsBrowser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and MoreGoogle Sets Sept. 30 Deadline for Android Developer Verification in Four Countries29-Year-Old Squid Proxy Bug ‘Squidbleed’ Can Leak Cleartext HTTP RequestsNew OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealerStop Your Legacy Infrastructure from Hijacking Your AI AgentsCanada’s Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected DevicesAryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy NetworkINTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-PacificHackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API KeysThe Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security ProcessesUnpatchable ‘usbliter8’ Exploit Breaks Apple A12 and A13 SecureROM Boot ChainAutoJack Attack Lets One Web Page Hijack AI Agent for Host Code ExecutionOperation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress SitesCISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate DevicesThe AI Shift That’s Redefining Threat ManagementShadow AI’s Real Threat Is Access ControlSalesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer DataApple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via MicrophoneF5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code ExecutionINC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More StoriesMicrosoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 TrafficHow to Find Hidden Access Risks Inside Your NetworkThe Scripts on Your Checkout Page Are Now a PCI DSS ProblemMicrosoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in DevelopmentCrypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal CommentsJunior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went OfflineAdversarial Exposure Validation Turns Security Visibility into Confident PrioritizationThe Top 10 Attack Surface Exposures in 2026Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats144 Mastra npm Packages Compromised via Hijacked Contributor AccountCISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code ExecutionGoogle Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket SquattingClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update LuresNew Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet FundsChina-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth94% of Incidents Involve Anonymized Infrastructure. Teams Are Still ReactiveAttackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last WeekFake Microsoft Alerts Used to Deploy North Korean NarwhalRAT MalwareCISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege EscalationCisco Releases Security Updates for Actively Exploited SD-WAN Manager FlawChinese Hackers Abused Google Workspace Rules to Steal Research and Defense EmailsNorth Korean Hackers Are Turning Developer Tools Into Malware Delivery ChannelsLiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway ServersChrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and MoreOne-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA CodesPopular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on SitesThe Onboarding Password Mistake That Creates Unnecessary Risk152 Chrome Wallpaper Extensions with 105K Installs Linked to Adware and Fake TrafficPalo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN FlawSniper Dz Scams Target MENA Users via Fake Facebook Offers and Browser AlertsCritical Splunk Enterprise Flaw Lets Attackers Run Code Without AuthenticationU.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign NationalsChina-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a DecadeGoogle Sues Chinese Smishing Network Accused of Using Gemini AI in PhishingOver 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF RootkitOver 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF RootkitRethinking MDR as Attackers and Defenders Embrace AIAgentjacking Attack Tricks AI Coding Agents Into Running Malicious CodeINTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests AdministratorLangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code ExecutionEuropol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs
Chicago 12, Melborne City, USA
Sáb. Jun 27th, 2026
Trending News:
Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging CredentialsOpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber SafeguardsCIBER-TEC, Liderada por Franklin Herrera Suárez, Impulsa el Futuro de la Defensa con Plataformas de Drones, Anti-Drones y CiberguerraFBI Warns Russian Intelligence Hackers Target Signal Backup Recovery KeysNew SharkLoader Malware Deploys Cobalt Strike in StrikeShark CyberattacksChinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia CampaignThe Next Layer of Identity GovernanceCISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks ContinueAmazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP ConfigsNew Linux pedit COW Exploit Enables Root Access by Poisoning Cached BinariesNew DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned PacketsMiasma Malware Targets npm Packages and GitHub Actions in Supply Chain AttackMicrosoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js ImplantRussia Used Cellebrite on Jailed Activist’s iPhone Months After Sales CutoffGoogle Details Turla’s New STOCKSTAY Backdoor Used in Ukraine Espionage AttacksChrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection CapabilitySmart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More StoriesRichard Bejtlich on the Case for NDRNew Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted AnalysisNew Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT CampaignsCisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root AccessCISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively ExploitedAmadey and StealC Malware Network Disrupted, 27M Stolen Credentials RecoveredDawn of the Apex Agentic AdversaryCordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain AttacksDoJ Seizes Huione Cloud Account Tied to Cyber Scam Money LaunderingCisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to RootFortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting OperationTrump Order Sets 2030 Deadline for Federal Post-Quantum Crypto MigrationFake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 AgentsGitHub Updates actions/checkout to Block Common Pwn Request Attack PatternsThe Weapon That No Longer Needs a WarriorMalicious npm Packages Pose as PostCSS Tools to Deliver Windows RATWhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM ToolOpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security FlawsShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain AttackResearchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across TenantsBrowser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and MoreGoogle Sets Sept. 30 Deadline for Android Developer Verification in Four Countries29-Year-Old Squid Proxy Bug ‘Squidbleed’ Can Leak Cleartext HTTP RequestsNew OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealerStop Your Legacy Infrastructure from Hijacking Your AI AgentsCanada’s Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected DevicesAryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy NetworkINTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-PacificHackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API KeysThe Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security ProcessesUnpatchable ‘usbliter8’ Exploit Breaks Apple A12 and A13 SecureROM Boot ChainAutoJack Attack Lets One Web Page Hijack AI Agent for Host Code ExecutionOperation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress SitesCISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate DevicesThe AI Shift That’s Redefining Threat ManagementShadow AI’s Real Threat Is Access ControlSalesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer DataApple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via MicrophoneF5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code ExecutionINC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More StoriesMicrosoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 TrafficHow to Find Hidden Access Risks Inside Your NetworkThe Scripts on Your Checkout Page Are Now a PCI DSS ProblemMicrosoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in DevelopmentCrypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal CommentsJunior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went OfflineAdversarial Exposure Validation Turns Security Visibility into Confident PrioritizationThe Top 10 Attack Surface Exposures in 2026Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats144 Mastra npm Packages Compromised via Hijacked Contributor AccountCISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code ExecutionGoogle Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket SquattingClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update LuresNew Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet FundsChina-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth94% of Incidents Involve Anonymized Infrastructure. Teams Are Still ReactiveAttackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last WeekFake Microsoft Alerts Used to Deploy North Korean NarwhalRAT MalwareCISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege EscalationCisco Releases Security Updates for Actively Exploited SD-WAN Manager FlawChinese Hackers Abused Google Workspace Rules to Steal Research and Defense EmailsNorth Korean Hackers Are Turning Developer Tools Into Malware Delivery ChannelsLiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway ServersChrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and MoreOne-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA CodesPopular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on SitesThe Onboarding Password Mistake That Creates Unnecessary Risk152 Chrome Wallpaper Extensions with 105K Installs Linked to Adware and Fake TrafficPalo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN FlawSniper Dz Scams Target MENA Users via Fake Facebook Offers and Browser AlertsCritical Splunk Enterprise Flaw Lets Attackers Run Code Without AuthenticationU.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign NationalsChina-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a DecadeGoogle Sues Chinese Smishing Network Accused of Using Gemini AI in PhishingOver 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF RootkitOver 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF RootkitRethinking MDR as Attackers and Defenders Embrace AIAgentjacking Attack Tricks AI Coding Agents Into Running Malicious CodeINTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests AdministratorLangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code ExecutionEuropol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs
Chicago 12, Melborne City, USA
