GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers Vulnerability / Application SecurityA critical flaw in GitLab's AI Gateway could let a logged-in u... 2026-10-2 17:33:31 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com gitlab duo security gateways connects

Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign Government and policy organizations across Asia have become the target of a new campaign orchestrat... 2026-10-2 17:33:16 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com antino uat 11587 talos attachment

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes Vulnerability / Cloud SecurityDell has released security updates to address multiple critical secu... 2026-10-2 17:2:12 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com 2026 attacker dell csm

OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandling Artificial Intelligence / Data SecurityOpenAI has parted ways with three members of its safety tea... 2026-10-2 12:23:15 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com openai agents security canadian 2026

Why CISOs Struggle to Answer the Board's Three Hardest Questions, and How to Fix the Report The quarterly board meeting is two weeks out. The security team is pulling exports from the identit... 2026-10-2 11:30:0 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com security quarter exposure cloud boards

Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools Mobile Security / AndroidGoogle has announced a new security measure that limits access to Android... 2026-10-2 08:1:30 | 阅读: 17 | 收藏 | The Hacker News - thehackernews.com security malicious spyware preserving

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes Vulnerability / Enterprise SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA... 2026-10-2 05:49:50 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com 2026 fortimail security improper workarounds

Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ranso... 2026-10-1 16:55:57 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com police killsec ransomware hamburg

ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories This week, the useful words are boring ones: inspect, cache, compile, store, trust. Each sounds harm... 2026-10-1 16:45:38 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com 2026 security victim injection

WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory Vulnerability / Web SecurityCybersecurity researchers have shed light on a WordPress compromise in... 2026-10-1 14:37:35 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com php wordpress wp database payload

How Financial Services Companies Can Modernize Their Software Supply Chain Every security leader at a bank, insurer, or asset manager has had a version of this conversation:... 2026-10-1 11:45:0 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com software security maintaining

OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates Artificial Intelligence / VulnerabilityOpenAI on Wednesday said it identified and disrupted a coor... 2026-10-1 10:42:36 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com reasoning openai 2026 moonshot

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV Vulnerability / Network SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) o... 2026-10-1 10:33:16 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com 2026 security catalyst attacker 76504

Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version Artificial Intelligence / AI SafetyGoogle on Wednesday announced its latest frontier artificial in... 2026-10-1 07:49:36 | 阅读: 18 | 收藏 | The Hacker News - thehackernews.com argon software outperforms gemini

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path Vulnerability / Mobile SecuritySecurity researchers have published the first public proof-of-conce... 2026-10-1 05:54:41 | 阅读: 19 | 收藏 | The Hacker News - thehackernews.com calif analysis security publication

Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft Cryptocurrency exchange Bitget on Wednesday confirmed that attackers who stole $387.5 million last... 2026-10-1 05:21:10 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com security bitget malicious 2026 attacker

MetaMask Security Incident Prompts Exit of Affected Ethereum Validators MetaMask on Thursday said it's responding to what it described as an "ongoing security incident" im... 2026-10-1 05:10:9 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com validators metamask security staking lido

Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs Vulnerability / Web SecurityThreat actors have been observed exploiting a critical pre-authentic... 2026-10-1 04:35:34 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com netscaler 2026 shells levelblue attacker

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to de... 2026-9-30 16:46:29 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com zimbra 2026 mailbox microsoft shells

Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks Endpoint Security / Social EngineeringMicrosoft has warned of phishing campaigns distributing an i... 2026-9-30 16:32:59 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com rmm remote msp360 microsoft