How Financial Services Companies Can Modernize Their Software Supply Chain Every security leader at a bank, insurer, or asset manager has had a version of this conversation:... 2026-10-1 11:45:0 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com software security maintaining

OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates Artificial Intelligence / VulnerabilityOpenAI on Wednesday said it identified and disrupted a coor... 2026-10-1 10:42:36 | 阅读: 2 | 收藏 | The Hacker News - thehackernews.com reasoning openai 2026 moonshot

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV Vulnerability / Network SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) o... 2026-10-1 10:33:16 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com 2026 security catalyst attacker 76504

Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version Artificial Intelligence / AI SafetyGoogle on Wednesday announced its latest frontier artificial in... 2026-10-1 07:49:36 | 阅读: 17 | 收藏 | The Hacker News - thehackernews.com argon software outperforms gemini

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path Vulnerability / Mobile SecuritySecurity researchers have published the first public proof-of-conce... 2026-10-1 05:54:41 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com calif analysis security publication

Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft Cryptocurrency exchange Bitget on Wednesday confirmed that attackers who stole $387.5 million last... 2026-10-1 05:21:10 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com security bitget malicious 2026 attacker

MetaMask Security Incident Prompts Exit of Affected Ethereum Validators MetaMask on Thursday said it's responding to what it described as an "ongoing security incident" im... 2026-10-1 05:10:9 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com validators metamask security staking lido

Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs Vulnerability / Web SecurityThreat actors have been observed exploiting a critical pre-authentic... 2026-10-1 04:35:34 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com netscaler 2026 shells levelblue attacker

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to de... 2026-9-30 16:46:29 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com zimbra 2026 mailbox microsoft shells

Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks Endpoint Security / Social EngineeringMicrosoft has warned of phishing campaigns distributing an i... 2026-9-30 16:32:59 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com rmm remote msp360 microsoft

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager Vulnerability / Network SecurityAttackers are exploiting a new critical zero-day flaw in Cisco Cat... 2026-9-30 15:24:54 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com 2026 security 76504 attacker 6a

Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures Malware / Artificial IntelligenceThreat actors are abusing ChatGPT Custom GPTs to disguise them as... 2026-9-30 15:0:15 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com chatgpt clickfix stealer malicious gpt

Know Your Enemy: Browser-Based Attack Techniques in 2026 Given that the browser is where business apps are accessed and used, it makes sense that attacks ar... 2026-9-30 11:58:0 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com phishing malicious clickfix security

AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub AI coding agents asked to share screenshots of code changes for review have put internal company im... 2026-9-30 11:30:0 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com glow repository agents github gitshot

US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access ANY.RUN researchers traced a US-focused CSuite phishing campaign across 351 sandbox analyses, with... 2026-9-30 10:45:0 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com csuite phishing tier remote attackers

Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetSc... 2026-9-30 08:24:35 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com php netscaler shells 2026 sig

OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash... 2026-9-30 08:9:28 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com dtls 2026 security handshake resend

Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution Vulnerability / Network SecurityCybersecurity researchers have disclosed technical details of a re... 2026-9-30 05:30:30 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com netscaler security handshake fragment overflow

French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks An attacker used stolen passwords of staff at France's tax administration to take tax data on hun... 2026-9-29 17:47:1 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com dgfip attacker anssi tax ader

Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor Russian state hackers known as Star Blizzard have been using fake event invitations to trick people... 2026-9-29 17:20:8 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com microsoft windows defender invitations ukraine