GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure 2026-09-11 True [email protected] (The Hacker News)True Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors 2026-09-11 True [email protected] (The Hacker News)True China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor 2026-09-11 True [email protected] (The Hacker News)True PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws 2026-09-11 True [email protected] (The Hacker News)True ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories 2026-09-10 True [email protected] (The Hacker News)True Google Play Early Access Abused to Push Thousands of Deceptive Android Apps 2026-09-10 True [email protected] (The Hacker News)True Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE 2026-09-10 True [email protected] (The Hacker News)True PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances 2026-09-10 True [email protected] (The Hacker News)True Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks 2026-09-10 True [email protected] (The Hacker News)True ⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More 2026-08-31 True [email protected] (The Hacker News)True ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions 2026-08-31 True [email protected] (The Hacker News)True Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets 2026-08-31 True [email protected] (The Hacker News)True China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs 2026-08-31 True [email protected] (The Hacker News)True DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims 2026-08-31 True [email protected] (The Hacker News)True TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor 2026-08-30 True [email protected] (The Hacker News)True Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE 2026-08-29 True [email protected] (The Hacker News)True Berlin Refuses to Pay Hackers Who Stole Data From the City's State Network 2026-08-28 True [email protected] (The Hacker News)True Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable 2026-08-28 True [email protected] (The Hacker News)True Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication 2026-08-28 True [email protected] (The Hacker News)True ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body 2026-08-28 True [email protected] (The Hacker News)True 19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code 2026-08-28 True [email protected] (The Hacker News)True Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth 2026-08-28 True [email protected] (The Hacker News)True Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL 2026-08-28 True [email protected] (The Hacker News)True China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access 2026-08-28 True [email protected] (The Hacker News)True Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server 2026-08-28 True [email protected] (The Hacker News)True PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions 2026-08-28 True [email protected] (The Hacker News)True APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations 2026-08-28 True [email protected] (The Hacker News)True OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face 2026-08-27 True [email protected] (The Hacker News)True Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE 2026-08-27 True [email protected] (The Hacker News)True ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories 2026-08-27 True [email protected] (The Hacker News)True Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers 2026-08-27 True [email protected] (The Hacker News)True Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks 2026-08-27 True [email protected] (The Hacker News)True Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools 2026-08-27 True [email protected] (The Hacker News)True GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address 2026-08-27 True [email protected] (The Hacker News)True New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access 2026-08-27 True [email protected] (The Hacker News)True CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs 2026-08-27 True [email protected] (The Hacker News)True U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches 2026-08-25 True [email protected] (The Hacker News)True A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw 2026-08-25 True [email protected] (The Hacker News)True Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode 2026-08-25 True [email protected] (The Hacker News)True Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows 2026-08-25 True [email protected] (The Hacker News)True 24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages 2026-08-25 True [email protected] (The Hacker News)True E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands 2026-08-25 True [email protected] (The Hacker News)True Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access 2026-08-25 True [email protected] (The Hacker News)True Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data 2026-08-25 True [email protected] (The Hacker News)True Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning 2026-08-24 True [email protected] (The Hacker News)True ⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More 2026-08-24 True [email protected] (The Hacker News)True WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords 2026-08-24 True [email protected] (The Hacker News)True Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account 2026-08-24 True [email protected] (The Hacker News)True Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor 2026-08-24 True [email protected] (The Hacker News)True The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk 2026-08-24 True [email protected] (The Hacker News)True 
