Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root A critical vulnerability in Check Point's Security Management and Log Servers could allow an attack... 2026-9-17 18:8:28 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com 2026 security hotfix jumbo r82

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories Attackers keep finding new keys. The funny part is that defenders keep inventing where to store them... 2026-9-17 17:32:22 | 阅读: 2 | 收藏 | The Hacker News - thehackernews.com 2026 windows software payload ransomware

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files Vulnerability / Artificial IntelligenceMalicious code running inside a Docker Sandboxes virtual ma... 2026-9-17 15:37:56 | 阅读: 0 | 收藏 | The Hacker News - thehackernews.com machine 2026 79994 catalog repository

Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords The Iran-linked "hacktivist" persona known as Handala Hack has been attributed to a Telegram-based... 2026-9-17 14:3:13 | 阅读: 0 | 收藏 | The Hacker News - thehackernews.com heavygram windows c2 iran stage

Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone Vulnerability / DNS SecurityEvery release of the Unbound DNS resolver before 1.26.1 has a critical... 2026-9-17 12:30:0 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com 2026 nlnet 81642 remote security

Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar Security Operations / Artificial IntelligenceA new CVE drops. Your scanner finds it. The severity... 2026-9-17 11:50:0 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com security prove matters mythos gap

CISO's Expert Guide to Agentic Pentesting for Websites Attackers now weaponize new vulnerabilities in about five days (Mandiant, part of Google Cloud). Th... 2026-9-17 10:50:53 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com agentic 2026 attackers annual engagement

China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America Malware / Cyber EspionageThe China-aligned state-sponsored threat actor known as FamousSparrow ha... 2026-9-17 10:5:45 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com sparrowocky eset america latin

OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads Artificial Intelligence / VulnerabilityOpenAI on Wednesday disclosed six new instances of "unexpec... 2026-9-17 09:53:38 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com openai 2026 agents alignment

BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS The Internet Systems Consortium (ISC) has released BIND 9.20.29 and 9.21.26 to fix fourteen secur... 2026-9-17 08:0:29 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com 2026 isc resolver fourteen attacker

Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records A security breach at Gyazo, Helpfeel's image-sharing service, exposed about 23.62 million user re... 2026-9-17 07:30:1 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com helpfeel gyazo captures attacker maintenance

Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks Vulnerability / Web SecurityCisco has warned of a fresh maximum-severity security flaw impacting I... 2026-9-17 06:39:40 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com 2026 ise attacker remote

U.S. Seizes NightmareStresser Domains Linked to Hundreds of Thousands of DDoS Attacks Cybercrime / DDoS-for-HireThe U.S. Department of Justice (DoJ) on Tuesday announced the court-auth... 2026-9-17 05:13:46 | 阅读: 2 | 收藏 | The Hacker News - thehackernews.com hire doj seized district

Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution Vulnerability / Web SecurityA critical security flaw in Issabel Framework, a web-based framework f... 2026-9-16 15:50:59 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com 2026 issabel coded asterisk security

Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers Enterprises in Russia have emerged as the target of three threat activity clusters tracked as Night... 2026-9-16 15:27:49 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com windows victim ransomware c2 attackers

One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude Security researchers at Forever Security have shown that one ordinary browser extension could take... 2026-9-16 14:36:44 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com security chrome forever comet opera

Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories Artificial Intelligence / Software SecurityMandiant says an attacker hijacked an active AI coding-... 2026-9-16 13:37:7 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com attacker mandiant shai hulud poisoned

Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix Parallels Desktop for Mac has a flaw that lets an ordinary local account run code as root, the high... 2026-9-16 13:14:5 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com jfrog 2026 machine silicon macs

N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security N0va is targeting organizations across North America and Europe with phishing campaigns that impers... 2026-9-16 11:58:0 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com n0va security phishing tier

Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation Vulnerability / Mobile SecurityGoogle has disclosed that a high-severity security flaw in its Pixe... 2026-9-16 11:15:58 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com 2026 security 58704 remote cellular