Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories Artificial Intelligence / Software SecurityMandiant says an attacker hijacked an active AI coding-... 2026-9-16 13:37:7 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com attacker mandiant shai hulud poisoned

Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix Parallels Desktop for Mac has a flaw that lets an ordinary local account run code as root, the high... 2026-9-16 13:14:5 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com jfrog 2026 machine silicon macs

N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security N0va is targeting organizations across North America and Europe with phishing campaigns that impers... 2026-9-16 11:58:0 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com n0va security phishing tier

Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation Vulnerability / Mobile SecurityGoogle has disclosed that a high-severity security flaw in its Pixe... 2026-9-16 11:15:58 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com 2026 security 58704 remote cellular

Threat Intelligence Alone Won't Close the Exploitation Gap Threat Intelligence / Security ValidationA leaked credential shows up in a criminal marketplace, o... 2026-9-16 11:15:48 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com security tlpt pentera exposure backlog

Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host... 2026-9-16 11:8:54 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com acronis backup security cpanel hf3

Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells Vulnerability / Web SecurityThreat actors are exploiting a critical security flaw in WooCommerce... 2026-9-16 05:48:28 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com php wordpress remote wordfence 2026

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens Vulnerability / API SecurityA critical security flaw in WSO2 API Manager has come under active exp... 2026-9-16 05:18:6 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com wso2 universal plane 2026 watchtowr

KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware... 2026-9-15 18:54:14 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com kremlin malicious stage chrome c2

Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed... 2026-9-15 16:29:51 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com iran windows security network attackers

BambooToken Malware Uses MQTT to Control Windows and Linux Systems Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message... 2026-9-15 15:23:19 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com c2 mqtt bambootoken tendyron lumen

Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds With artificial intelligence (AI) shrinking the window between vulnerability discovery and exploita... 2026-9-15 11:52:28 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com ssh marimo bastion sysdig skilled

Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point IntroductionSecurity teams have gotten pretty good at testing against what can hurt them. Can thi... 2026-9-15 11:26:36 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com chaining gap security stage phishing

Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers Vulnerability / Cloud SecurityCybersecurity researchers have disclosed details of a mass-scanning... 2026-9-15 11:12:32 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com vite cloud deny attackers security

LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server Vulnerability / Web SecurityA critical vulnerability in LiteSpeed Web Server Enterprise could let... 2026-9-15 06:52:16 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com litespeed cpanel security neither exploited

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution Vulnerability / Network SecurityCisco has warned that a new critical vulnerability impacting Asy... 2026-9-15 06:11:11 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com malicious 2026 attacker privileges security

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patc... 2026-9-15 05:31:5 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com chrome windows c2 volexity uta0560

3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials Network Security / Cyber AttackAn attacker was operating inside the network of 3BB, one of Thailan... 2026-9-14 18:1:49 | 阅读: 18 | 收藏 | The Hacker News - thehackernews.com attacker 3bb meshcentral hunt recovered

Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports A flaw in Telegram Desktop let a bot's message plant hidden JavaScript inside chats that users ex... 2026-9-14 17:58:16 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com chats buttons publication shipped escaping

New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection i... 2026-9-14 16:58:42 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com memory ddrop machine interposer tdx