Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second Cloud Security / VulnerabilityCybersecurity researchers have disclosed details of a remote Spectre... 2026-8-19 19:2:40 | 阅读: 1 | 收藏 | The Hacker News - thehackernews.com dypris memory isolates victim remote

OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior OpenAI on Tuesday revealed that it paused reinforcement learning (RL) training for its latest arti... 2026-8-19 18:6:44 | 阅读: 2 | 收藏 | The Hacker News - thehackernews.com openai security monitoring alignment safeguards

SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs A previously unreported cyber espionage operation dubbed SilkParasite has been observed targeting g... 2026-8-19 13:12:17 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com goginrat nomadrat sideloading c2

Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised... 2026-8-19 11:34:28 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com dahua firmware hunt bypass

Phishing 3.0: The Fight Moves to Agent Versus Agent Most email defenses still do the job they did a decade ago. Scan the message, look for something ma... 2026-8-19 11:30:0 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com security microsoft 2026 phishing ironscales

StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data Cybersecurity researchers have flagged a global cybercrime operation that abuses thousands of hacke... 2026-8-19 11:25:28 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com wordpress php victim stealer ransomware

Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation Vulnerability / RansomwareThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tues... 2026-8-19 11:1:48 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com 2026 exploited network vcenter

Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure Microsoft Defender Experts have linked more than 30 web domains to MacSync Stealer, a macOS-focused... 2026-8-19 06:1:53 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com microsoft recurring cloud rst macsync

Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data A JavaServer Pages (JSP) web shell deployed following the exploitation of a critical security flaw... 2026-8-19 05:39:25 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com windchill shells reliaquest database clop

Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that it sai... 2026-8-18 17:47:22 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com copilot memory microsoft varonis attacker

Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets Vulnerability / Artificial IntelligenceTwo critical vulnerabilities impacting MLflow, an open-sour... 2026-8-18 17:44:5 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com 2026 mlflow fuxa cloud attacker

Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000 A ransomware affiliate calling itself Ransom Busters has been spotted proactively sending emails to... 2026-8-18 16:58:16 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com ransomware extortion victim crpx0 affiliate

AI "Mind Viruses" Can Spread Between Agents Through Persistent Prompt Files Security researchers at Anthropic and Switzerland's EPFL have demonstrated that self-propagating... 2026-8-18 12:38:36 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com agents payload 2026 claude soul

TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks Cybersecurity researchers have disclosed details of a previously undocumented Python implant framew... 2026-8-18 12:38:20 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com victim microsoft c2 twinloot ontinue

16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets Cybersecurity researchers have flagged a new typosquatting campaign targeting RubyGems users with a... 2026-8-18 11:40:6 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com malicious rubygems gem yanked payload

One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025 SaaS Security / Cloud SecurityA single piece of infrastructure has been pulling records out of Sal... 2026-8-18 11:30:0 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com reco security salesforce servicenow portals

SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers SafePal has disclosed that an authorization flaw in an order-tracking plug-in exposed the names, em... 2026-8-18 09:10:45 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com safepal security 2026 phishing shipping

CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE Vulnerability / Network SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) o... 2026-8-18 06:34:20 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com ray rebinding security malicious network

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects GitLab has released security updates to address a critical vulnerability impacting its Community Ed... 2026-8-17 21:3:4 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com gitlab 2026 directive multiplex attacker

Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection Vulnerability / Artificial IntelligenceCybersecurity researchers at Wiz have disclosed a new GitHu... 2026-8-17 18:44:17 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com jira github snowflake wiz copilot