French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks An attacker used stolen passwords of staff at France's tax administration to take tax data on hun... 2026-9-29 17:47:1 | 阅读: 1 | 收藏 | The Hacker News - thehackernews.com dgfip attacker anssi tax ader

Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor Russian state hackers known as Star Blizzard have been using fake event invitations to trick people... 2026-9-29 17:20:8 | 阅读: 1 | 收藏 | The Hacker News - thehackernews.com microsoft windows defender invitations ukraine

New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses Vulnerability / Hardware SecurityA group of academics from VUSec and Scuola Superiore Sant'Anna ha... 2026-9-29 17:0:0 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com attacker spectre btr stale btb

Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown Vulnerability / Enterprise SecurityKiteworks on Monday said it worked with federal intelligence au... 2026-9-29 14:13:20 | 阅读: 0 | 收藏 | The Hacker News - thehackernews.com kiteworks exploited security frank specifics

101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap devel... 2026-9-29 13:45:10 | 阅读: 1 | 收藏 | The Hacker News - thehackernews.com baileys followers security malicious ox

Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation Dutch authorities have confirmed that they arrested a 24-year-old man from Amsterdam in connection... 2026-9-29 08:35:10 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com stap van security arrested

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials Identity Security / Artificial IntelligenceA malicious MCP server could trick an application bui... 2026-9-29 06:8:25 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com mcp client attacker cycode security

OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions Artificial Intelligence / Supply ChainOpenAI on Monday shelved plans to release GPT-6.1 Astra, a n... 2026-9-29 05:12:32 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com gpt astra development openai journal

OpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External Chatbot OpenAI said it has made the decision to pause training of its most powerful models after one of i... 2026-9-29 04:45:20 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com openai 2026 agents australian evaluation

Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks Vulnerability / Endpoint SecurityApple has released security updates to address a vulnerability in... 2026-9-28 19:18:1 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com security addressed 2026 tahoe sequoia

Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they... 2026-9-28 18:35:42 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com microsoft needymantis 3069 malicious defender

IAM for AI agents: A Practical Enterprise Framework What is IAM for AI agents?AI agents authenticate, invoke tools, and act across enterprise systems... 2026-9-28 18:20:38 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com agents governance identities lifecycle

Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M Vulnerability / CybercrimeThe attacker who stole about $388 million from the cryptocurrency exchan... 2026-9-28 17:42:18 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com bitget wallets attacker funds monday

RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims RatHat's operators build and publish the Android banking trojan and control infected phones from a... 2026-9-28 17:38:33 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com cleafy 2026 phones gemini rathat

⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats Cybersecurity News / HackingA domain used as harmless placeholder text showed up in roughly 1,700... 2026-9-28 14:0:53 | 阅读: 25 | 收藏 | The Hacker News - thehackernews.com 2026 ransomware security agents payload

Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI Identity Security / AI Agent SecurityAI agents are moving into production faster than security tea... 2026-9-28 11:58:0 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com agents governance security excessive okta

Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's ta... 2026-9-28 11:46:0 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com hermes deepseek 2026 daemons persona

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a M... 2026-9-28 09:8:21 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com microsoft destructive deletion database ransomware

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally Vulnerability / Network SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) o... 2026-9-28 07:21:49 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com netscaler citrix adc fips 2026

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation Vulnerability / Network SecurityTwo new unpatched zero-day vulnerabilities in Citrix NetScaler ADC... 2026-9-27 07:47:57 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com netscaler citrix watchtowr remote