OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face 2026-08-27 True [email protected] (The Hacker News)True Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE 2026-08-27 True [email protected] (The Hacker News)True ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories 2026-08-27 True [email protected] (The Hacker News)True Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers 2026-08-27 True [email protected] (The Hacker News)True Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks 2026-08-27 True [email protected] (The Hacker News)True Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools 2026-08-27 True [email protected] (The Hacker News)True GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address 2026-08-27 True [email protected] (The Hacker News)True New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access 2026-08-27 True [email protected] (The Hacker News)True CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs 2026-08-27 True [email protected] (The Hacker News)True U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches 2026-08-25 True [email protected] (The Hacker News)True A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw 2026-08-25 True [email protected] (The Hacker News)True Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode 2026-08-25 True [email protected] (The Hacker News)True Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows 2026-08-25 True [email protected] (The Hacker News)True 24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages 2026-08-25 True [email protected] (The Hacker News)True E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands 2026-08-25 True [email protected] (The Hacker News)True Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access 2026-08-25 True [email protected] (The Hacker News)True Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data 2026-08-25 True [email protected] (The Hacker News)True Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning 2026-08-24 True [email protected] (The Hacker News)True ⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More 2026-08-24 True [email protected] (The Hacker News)True WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords 2026-08-24 True [email protected] (The Hacker News)True Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account 2026-08-24 True [email protected] (The Hacker News)True Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor 2026-08-24 True [email protected] (The Hacker News)True The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk 2026-08-24 True [email protected] (The Hacker News)True UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit 2026-08-24 True [email protected] (The Hacker News)True 14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2 2026-08-21 True [email protected] (The Hacker News)True Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot 2026-08-21 True [email protected] (The Hacker News)True Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet 2026-08-21 True [email protected] (The Hacker News)True Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0 2026-08-21 True [email protected] (The Hacker News)True GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure 2026-08-21 True [email protected] (The Hacker News)True Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution 2026-08-21 True [email protected] (The Hacker News)True Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads 2026-08-20 True [email protected] (The Hacker News)True ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More 2026-08-20 True [email protected] (The Hacker News)True AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure 2026-08-20 True [email protected] (The Hacker News)True Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE 2026-08-20 True [email protected] (The Hacker News)True Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers 2026-08-20 True [email protected] (The Hacker News)True Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution 2026-08-20 True [email protected] (The Hacker News)True Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments 2026-08-20 True [email protected] (The Hacker News)True Why "Shady AI" is Security's Next Big Governance Problem 2026-08-20 True [email protected] (The Hacker News)True CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification 2026-08-20 True [email protected] (The Hacker News)True Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices 2026-08-20 True [email protected] (The Hacker News)True NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands 2026-08-20 True [email protected] (The Hacker News)True ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud 2026-08-20 True [email protected] (The Hacker News)True 40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets 2026-08-20 True [email protected] (The Hacker News)True Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code 2026-08-20 True [email protected] (The Hacker News)True Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second 2026-08-19 True [email protected] (The Hacker News)True Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P 2026-08-19 True [email protected] (The Hacker News)True Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation 2026-08-19 True [email protected] (The Hacker News)True Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure 2026-08-19 True [email protected] (The Hacker News)True Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data 2026-08-19 True [email protected] (The Hacker News)True Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps 2026-08-18 True [email protected] (The Hacker News)True 
