⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats Cybersecurity News / HackingA domain used as harmless placeholder text showed up in roughly 1,700... 2026-9-28 14:0:53 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com 2026 ransomware security agents payload

Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI Identity Security / AI Agent SecurityAI agents are moving into production faster than security tea... 2026-9-28 11:58:0 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com agents governance security excessive okta

Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's ta... 2026-9-28 11:46:0 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com hermes deepseek 2026 daemons persona

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a M... 2026-9-28 09:8:21 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com microsoft destructive deletion database ransomware

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally Vulnerability / Network SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) o... 2026-9-28 07:21:49 | 阅读: 1 | 收藏 | The Hacker News - thehackernews.com netscaler citrix adc fips 2026

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation Vulnerability / Network SecurityTwo new unpatched zero-day vulnerabilities in Citrix NetScaler ADC... 2026-9-27 07:47:57 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com netscaler citrix watchtowr remote

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style... 2026-9-26 18:22:52 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com stealer lunex chrome psychedelic

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells Vulnerability / Web Security Google is warning of renewed mass exploitation of a known security v... 2026-9-26 11:46:40 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com peoplesoft psemhub 2026 shells

Zero Trust for AI Agents Starts With Fixing Zero Visibility The way we talk about AI agents is shifting, and the way we implement them requires an even more fu... 2026-9-26 10:30:0 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com agents monitoring governance attacker security

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link Vulnerability / Web Security Details have emerged about a high-severity security flaw in the Elem... 2026-9-26 09:55:22 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com wordpress security elementor attacker wp

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild Vulnerability / Network SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) o... 2026-9-26 08:49:53 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com 2026 routeros microsoft security

Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack Threat Intelligence / VulnerabilityKiteworks (formerly Accellion) is urging customers to shut down... 2026-9-26 07:48:33 | 阅读: 27 | 收藏 | The Hacker News - thehackernews.com kiteworks nine authorities

Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware Malware / Supply Chain AttackTwo actions-cool GitHub Actions have been disabled for a second time... 2026-9-25 14:44:41 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com github 2026 workflows repository malicious

PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence Malware / Social EngineeringCybersecurity researchers have flagged a new version of PamStealer tha... 2026-9-25 13:18:6 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com payload jxa zsh exchange wavel

The SOC Doesn't Need to Start Over with Every Alert Security leaders keep debating whether AI will produce an entirely new class of cyberattack. The ne... 2026-9-25 11:30:0 | 阅读: 17 | 收藏 | The Hacker News - thehackernews.com forwarding matters verdict stateful lands

Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise Cryptocurrency / Cybercrime Cryptocurrency exchange Bitget said suspected North Korean threat act... 2026-9-25 10:35:55 | 阅读: 21 | 收藏 | The Hacker News - thehackernews.com bitget north wallets exchange involving

Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild Vulnerability / Email SecurityThe Canadian Centre for Cyber Security has warned that a now-patched... 2026-9-25 10:14:2 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com roundcube 2026 security exploited centre

Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data Cloud Security / VulnerabilityA flaw in Cloudflare Containers let a paying customer read data tha... 2026-9-25 04:49:22 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com containers wiping held recovered kilobyte

WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV Vulnerability / Web SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA), on T... 2026-9-25 04:46:34 | 阅读: 24 | 收藏 | The Hacker News - thehackernews.com 2026 security magento kev

Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions Vulnerability / Mobile SecurityA OnePlus 15 running the latest OxygenOS can be rooted by a malicio... 2026-9-24 18:10:18 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com oneplus moorats warned ships phones