Mié. May 6th, 2026
Trending News: The Hacker News Launches ‘Cybersecurity Stars Awards 2026’ — Submissions Now OpenWindows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPsGoogle’s Android Apps Get Public Verification to Stop Supply Chain AttacksPalo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code ExecutionDAEMON Tools Supply Chain Attack Compromises Official Installers with MalwareCritical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCEChina-Linked UAT-8302 Targets Governments Using Shared APT Malware Across RegionsMetInfo CMS CVE-2026-29014 Exploited for Remote Code Execution AttacksThe Back Door Attackers Know About — and Most Security Teams Still Haven’t ClosedWe Scanned 1 Million Exposed AI Services. Here’s How Bad the Security Actually IsScarCruft Hacks Gaming Platform to Deploy BirdCall Malware on Android and WindowsMicrosoft Details Phishing Campaign Targeting 35,000 Users Across 26 CountriesWeaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug APIPhishing Campaign Hits 80+ Orgs Using SimpleHelp and ScreenConnect RMM ToolsProgress Patches Critical MOVEit Automation Bug Enabling Authentication BypassAI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & MoreSilver Fox Deploys ABCDoor Malware via Tax-Themed Phishing in India and RussiaThe Year of AI-Assisted AttacksCritical cPanel Vulnerability Weaponized to Target Government and MSP NetworksGlobal Crackdown Arrests 276, Shuts 9 Crypto Scam Centers, Seizes $701MCISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEVTrellix Confirms Source Code Breach With Unauthorized Repository Access30,000 Facebook Accounts Hacked via Google AppSheet Phishing CampaignChina-Linked Hackers Target Asian Governments, NATO State, Journalists, and ActivistsCybercrime Groups Using Vishing and SSO Abuse in Rapid SaaS Extortion AttacksTwo Cybersecurity Professionals Get 4-Year Sentences in BlackCat Ransomware AttacksTop Five Sales Challenges Costing MSPs Cybersecurity RevenuePoisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential TheftPyTorch Lightning Compromised in PyPI Supply Chain Attack to Steal CredentialsEtherRAT Distribution Spoofing Administrative Tools via GitHub FacadesSMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More StoriesNew Python Backdoor Uses Tunneling Service to Steal Browser and Cloud CredentialsNew Linux ‘Copy Fail’ Vulnerability Enables Root Access on Major DistributionsGoogle Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code ExecutionSAP-Related npm Packages Compromised in Credential-Stealing Supply Chain AttackNew Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATsHow to Automate Exposure Validation to Match the Speed of AI AttacksWhat to Look for in an Exposure Management Platform (And What Most of Them Get Wrong)Critical cPanel Authentication Vulnerability Identified — Update Your Server ImmediatelyCISA Adds Actively Exploited ConnectWise and Windows Flaws to KEVLiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of DisclosureResearchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git PushBrazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer CampaignVECT 2.0 Ransomware Irreversibly Destroys Files Over 131KB on Windows, Linux, ESXiWhy Secure Data Movement Is the Zero Trust Bottleneck Nobody Talks AboutCritical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCENew Playbooks For a Zero-Window EraChinese Silk Typhoon Hacker Extradited to U.S. Over COVID Research CyberattacksMicrosoft Confirms Active Exploitation of Windows Shell CVE-2026-32202Microsoft Patches Entra ID Role Flaw That Enabled Service Principal TakeoverFast16 Malware, XChat Launch, Federal Backdoor, AI Employee Tracking & MoreCheckmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 AttackResearchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 MalwarePhantomCore Exploits TrueConf Vulnerabilities to Breach Russian NetworksMythos Changed the Math on Vulnerability Discovery. Most Teams Aren’t Ready for the Remediation SideFake CAPTCHA IRSF Scam and 120 Keitaro Campaigns Drive Global SMS, Crypto FraudResearchers Uncover Pre-Stuxnet ‘fast16’ Malware Targeting Engineering SoftwareCISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal DeadlineFIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security PatchesNASA Employees Duped in Chinese Phishing Scheme Targeting U.S. Defense Software26 FakeWallet Apps Found on Apple App Store Targeting Crypto Seed PhrasesContinuous Observability as the Decision EngineTropic Trooper Uses Trojanized SumatraPDF and GitHub to Deploy AdaptixC2LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of DisclosureUNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware$290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New StoriesBitwarden CLI Compromised in Ongoing Checkmarx Supply Chain CampaignProject Glasswing Proved AI Can Find the Bugs. Who’s Going to Fix Them?Beating Automated Exploitation at AI SpeedApple Fixes iOS Flaw That Let FBI Recover Deleted Signal MessagesVercel Finds More Compromised Accounts in Context.ai-Linked BreachChina-Linked GopherWhisper Infects 12 Mongolian Government Systems with Go BackdoorsMalicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply ChainSelf-Propagating Supply Chain Worm Hijacks npm Packages to Steal Developer TokensHarvester Deploys Linux GoGra Backdoor in South Asia Using Microsoft Graph APIWhen Cross-App Permissions Stack into RiskLotus Wiper Malware Targets Venezuelan Energy Systems in Destructive AttackMicrosoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation BugCohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container EscapeMustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy CirclesSystemBC C2 Server Reveals 1,570+ Victims in The Gentlemen Ransomware OperationGoogle Patches Antigravity IDE Flaw Enabling Prompt Injection Code Execution22 BRIDGE:BREAK Flaws Expose Thousands of Lantronix and Silex Serial-to-IP ConvertersRansomware Negotiator Pleads Guilty to Aiding BlackCat Attacks in 20235 Places where Mature SOCs Keep MTTR Fast and Others Waste TimeNGate Campaign Targets Brazil, Trojanizes HandyPay to Steal NFC Data and PINsHow Attackers Walk Through the Front Door via Identity-Based AttacksCISA Adds 8 Exploited Flaws to KEV, Sets April-May 2026 Federal DeadlinesSGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious GGUF Model FilesVercel Hack, Push Fraud, QEMU Abused, New Android RATs Emerge & MoreWhy Most AI Deployments Stall After the DemoAnthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply ChainResearchers Detect ZionSiphon Malware Targeting Israeli Water, Desalination OT SystemsVercel Breach Tied to Context AI Hack Exposes Limited Customer Credentials$13.74M Hack Shuts Down Sanctioned Grinex Exchange After Intelligence ClaimsMirai Variant Nexcorium Exploits CVE-2024-3721 to Hijack TBK DVRs for DDoS BotnetThree Microsoft Defender Zero-Days Actively Exploited; Two Still UnpatchedGoogle Blocks 8.3B Policy-Violating Ads in 2025, Launches Android 17 Privacy OverhaulNIST Limits CVE Enrichment After 263% Surge in Vulnerability SubmissionsOperation PowerOFF Seizes 53 DDoS Domains, Exposes 3 Million Criminal Accounts
Chicago 12, Melborne City, USA
Mié. May 6th, 2026
Trending News: The Hacker News Launches ‘Cybersecurity Stars Awards 2026’ — Submissions Now OpenWindows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPsGoogle’s Android Apps Get Public Verification to Stop Supply Chain AttacksPalo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code ExecutionDAEMON Tools Supply Chain Attack Compromises Official Installers with MalwareCritical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCEChina-Linked UAT-8302 Targets Governments Using Shared APT Malware Across RegionsMetInfo CMS CVE-2026-29014 Exploited for Remote Code Execution AttacksThe Back Door Attackers Know About — and Most Security Teams Still Haven’t ClosedWe Scanned 1 Million Exposed AI Services. Here’s How Bad the Security Actually IsScarCruft Hacks Gaming Platform to Deploy BirdCall Malware on Android and WindowsMicrosoft Details Phishing Campaign Targeting 35,000 Users Across 26 CountriesWeaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug APIPhishing Campaign Hits 80+ Orgs Using SimpleHelp and ScreenConnect RMM ToolsProgress Patches Critical MOVEit Automation Bug Enabling Authentication BypassAI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & MoreSilver Fox Deploys ABCDoor Malware via Tax-Themed Phishing in India and RussiaThe Year of AI-Assisted AttacksCritical cPanel Vulnerability Weaponized to Target Government and MSP NetworksGlobal Crackdown Arrests 276, Shuts 9 Crypto Scam Centers, Seizes $701MCISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEVTrellix Confirms Source Code Breach With Unauthorized Repository Access30,000 Facebook Accounts Hacked via Google AppSheet Phishing CampaignChina-Linked Hackers Target Asian Governments, NATO State, Journalists, and ActivistsCybercrime Groups Using Vishing and SSO Abuse in Rapid SaaS Extortion AttacksTwo Cybersecurity Professionals Get 4-Year Sentences in BlackCat Ransomware AttacksTop Five Sales Challenges Costing MSPs Cybersecurity RevenuePoisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential TheftPyTorch Lightning Compromised in PyPI Supply Chain Attack to Steal CredentialsEtherRAT Distribution Spoofing Administrative Tools via GitHub FacadesSMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More StoriesNew Python Backdoor Uses Tunneling Service to Steal Browser and Cloud CredentialsNew Linux ‘Copy Fail’ Vulnerability Enables Root Access on Major DistributionsGoogle Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code ExecutionSAP-Related npm Packages Compromised in Credential-Stealing Supply Chain AttackNew Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATsHow to Automate Exposure Validation to Match the Speed of AI AttacksWhat to Look for in an Exposure Management Platform (And What Most of Them Get Wrong)Critical cPanel Authentication Vulnerability Identified — Update Your Server ImmediatelyCISA Adds Actively Exploited ConnectWise and Windows Flaws to KEVLiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of DisclosureResearchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git PushBrazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer CampaignVECT 2.0 Ransomware Irreversibly Destroys Files Over 131KB on Windows, Linux, ESXiWhy Secure Data Movement Is the Zero Trust Bottleneck Nobody Talks AboutCritical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCENew Playbooks For a Zero-Window EraChinese Silk Typhoon Hacker Extradited to U.S. Over COVID Research CyberattacksMicrosoft Confirms Active Exploitation of Windows Shell CVE-2026-32202Microsoft Patches Entra ID Role Flaw That Enabled Service Principal TakeoverFast16 Malware, XChat Launch, Federal Backdoor, AI Employee Tracking & MoreCheckmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 AttackResearchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 MalwarePhantomCore Exploits TrueConf Vulnerabilities to Breach Russian NetworksMythos Changed the Math on Vulnerability Discovery. Most Teams Aren’t Ready for the Remediation SideFake CAPTCHA IRSF Scam and 120 Keitaro Campaigns Drive Global SMS, Crypto FraudResearchers Uncover Pre-Stuxnet ‘fast16’ Malware Targeting Engineering SoftwareCISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal DeadlineFIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security PatchesNASA Employees Duped in Chinese Phishing Scheme Targeting U.S. Defense Software26 FakeWallet Apps Found on Apple App Store Targeting Crypto Seed PhrasesContinuous Observability as the Decision EngineTropic Trooper Uses Trojanized SumatraPDF and GitHub to Deploy AdaptixC2LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of DisclosureUNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware$290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New StoriesBitwarden CLI Compromised in Ongoing Checkmarx Supply Chain CampaignProject Glasswing Proved AI Can Find the Bugs. Who’s Going to Fix Them?Beating Automated Exploitation at AI SpeedApple Fixes iOS Flaw That Let FBI Recover Deleted Signal MessagesVercel Finds More Compromised Accounts in Context.ai-Linked BreachChina-Linked GopherWhisper Infects 12 Mongolian Government Systems with Go BackdoorsMalicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply ChainSelf-Propagating Supply Chain Worm Hijacks npm Packages to Steal Developer TokensHarvester Deploys Linux GoGra Backdoor in South Asia Using Microsoft Graph APIWhen Cross-App Permissions Stack into RiskLotus Wiper Malware Targets Venezuelan Energy Systems in Destructive AttackMicrosoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation BugCohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container EscapeMustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy CirclesSystemBC C2 Server Reveals 1,570+ Victims in The Gentlemen Ransomware OperationGoogle Patches Antigravity IDE Flaw Enabling Prompt Injection Code Execution22 BRIDGE:BREAK Flaws Expose Thousands of Lantronix and Silex Serial-to-IP ConvertersRansomware Negotiator Pleads Guilty to Aiding BlackCat Attacks in 20235 Places where Mature SOCs Keep MTTR Fast and Others Waste TimeNGate Campaign Targets Brazil, Trojanizes HandyPay to Steal NFC Data and PINsHow Attackers Walk Through the Front Door via Identity-Based AttacksCISA Adds 8 Exploited Flaws to KEV, Sets April-May 2026 Federal DeadlinesSGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious GGUF Model FilesVercel Hack, Push Fraud, QEMU Abused, New Android RATs Emerge & MoreWhy Most AI Deployments Stall After the DemoAnthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply ChainResearchers Detect ZionSiphon Malware Targeting Israeli Water, Desalination OT SystemsVercel Breach Tied to Context AI Hack Exposes Limited Customer Credentials$13.74M Hack Shuts Down Sanctioned Grinex Exchange After Intelligence ClaimsMirai Variant Nexcorium Exploits CVE-2024-3721 to Hijack TBK DVRs for DDoS BotnetThree Microsoft Defender Zero-Days Actively Exploited; Two Still UnpatchedGoogle Blocks 8.3B Policy-Violating Ads in 2025, Launches Android 17 Privacy OverhaulNIST Limits CVE Enrichment After 263% Surge in Vulnerability SubmissionsOperation PowerOFF Seizes 53 DDoS Domains, Exposes 3 Million Criminal Accounts
Chicago 12, Melborne City, USA

Etiqueta Link

Other Story

Uncategorized

The Hacker News Launches ‘Cybersecurity Stars Awards 2026’ — Submissions Now Open

The Hacker News Launches ‘Cybersecurity Stars Awards 2026’ — Submissions Now Open
Uncategorized

Windows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPs

Windows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPs
Uncategorized

Google’s Android Apps Get Public Verification to Stop Supply Chain Attacks

Google’s Android Apps Get Public Verification to Stop Supply Chain Attacks
Uncategorized

Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution

Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution
Uncategorized

DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware

DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware
Uncategorized

Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE

Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE