⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More The expensive attacks are not always the clever ones.This week had plenty of proof. Exposed servi... 2026-8-17 13:23:51 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com 2026 microsoft security remote chromium

How MCP Servers Can Expose Enterprise Secrets MCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned... 2026-8-17 11:58:0 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com mcp agents attacker injection security

Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access Vulnerability / Mobile SecuritySecurity researchers at SSD Secure Disclosure have published a two-... 2026-8-17 10:52:34 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com modem unisoc security 2026 memory

Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies Cybersecurity researchers have flagged a previously undocumented Linux botnet family dubbed Evooo1B... 2026-8-17 09:29:55 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com injection proxy remote routers c2

Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broa... 2026-8-17 07:36:19 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com 2026 vcenter 59310 vsphere ssh

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch Vulnerability / Cloud SecurityA maximum-severity security vulnerability impacting SAP Commerce Clo... 2026-8-15 08:38:46 | 阅读: 0 | 收藏 | The Hacker News - thehackernews.com cloud 58231 2026 security netweaver

Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner A recently patched security flaw in Apple macOS has come under active exploitation in the wild to d... 2026-8-15 07:24:4 | 阅读: 0 | 收藏 | The Hacker News - thehackernews.com 2026 remote security machine

Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware Threat actors are acquiring expired domains to inherit website traffic and reputation to redirect v... 2026-8-14 18:48:46 | 阅读: 0 | 收藏 | The Hacker News - thehackernews.com squirrel dropcatch expired sable reputation

IAM Compliance Requirements and Best Practices IAM compliance is the practice of demonstrating that identity and access controls are not only docu... 2026-8-14 17:19:49 | 阅读: 0 | 收藏 | The Hacker News - thehackernews.com privileged identities auditors lifecycle

Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealth The threat actor known as HoneyMyte (aka Mustang Panda) has been observed deploying an updated vers... 2026-8-14 13:8:56 | 阅读: 0 | 收藏 | The Hacker News - thehackernews.com coolclient windows msagent c2 stage

Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers Browser Security / Endpoint SecurityCybersecurity researchers have detailed a post-exploitation te... 2026-8-14 11:7:45 | 阅读: 0 | 收藏 | The Hacker News - thehackernews.com chrome cdp remote repository specterops

Attackers Exploit SharePoint Authentication Bypass After Public PoC Release Vulnerability / Enterprise SecurityThreat actors have begun to exploit a newly disclosed Microsoft... 2026-8-13 06:9:48 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com attacker 2026 rapid7 microsoft

Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor Vulnerability / Cyber EspionageThe North Korean threat actor known as Lazarus Group has been attri... 2026-8-12 17:39:27 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com enveil download securitypdf security malicious

737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One Browser Security / PrivacyA massive set of 737 free VPN and proxy extensions have been found to ma... 2026-8-12 14:9:50 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com proxy chrome premium approval

OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoning A newly disclosed flaw in the way OpenAI, Anthropic, and Google carried hidden AI reasoning between... 2026-8-12 11:47:38 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com reasoning replay traces openai anthropic

Enterprise Defenses Recovered at the Edge and Collapsed Inside Enterprise defenses are tuned to catch the attacks that make noise. This year's data shows attacker... 2026-8-12 11:41:34 | 阅读: 17 | 收藏 | The Hacker News - thehackernews.com quiet defenses 2026 memory attackers

Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws Vulnerability / Web SecurityAdobe has shipped updates to address multiple critical security vulner... 2026-8-12 11:13:3 | 阅读: 21 | 收藏 | The Hacker News - thehackernews.com 2026 coldfusion incorrect security 9400

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access Vulnerability / Threat IntelligenceThreat actors have begun to actively exploit a recently patched... 2026-8-12 09:1:54 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com 2026 ssh attacker vcenter reverse

Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-steali... 2026-8-12 08:4:52 | 阅读: 25 | 收藏 | The Hacker News - thehackernews.com litellm trivy cloudsek malicious pypi

SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code Enterprise Security / VulnerabilitySAP has released patches to address a maximum-severity security... 2026-8-12 07:31:40 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com 2026 attacker cloud injection security