LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings Vulnerability / Open SourceA malicious spreadsheet can make LibreOffice and Apache OpenOffice run... 2026-10-6 11:57:0 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com openoffice libreoffice database attacker spreadsheet

Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by r... 2026-10-6 11:26:25 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com openai agents wikimedia misaligned 2026

Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers Supply Chain / Artificial IntelligenceIn 2024, MCP (Model Context Protocol) set out to become the... 2026-10-6 11:2:30 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com mcp security ox 465

Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports Vulnerability / Open SourceGoogle has stopped accepting product vulnerability reports through its... 2026-10-6 09:21:47 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com security vrp cloud flagship rewards

Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an at... 2026-10-6 06:58:56 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com atlassian crowd jira bitbucket cloud

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their allege... 2026-10-6 06:56:57 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com contractor reuters accenture bureau

Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account Unauthorized parties have gained access to the names, addresses, and personal identification numbe... 2026-10-6 06:0:30 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com cpr ministry denmark identify

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits A new type of ClickFix attack is using compromised websites to trick users into executing a malicio... 2026-10-6 05:22:55 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com clickfix powershell payload windows captcha

Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes Vulnerability / Email SecurityMicrosoft has released out-of-band security updates to address a hi... 2026-10-5 16:21:52 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com microsoft exchange cumulative attacker privileges

⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests A blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramat... 2026-10-5 14:20:43 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com 2026 security netscaler microsoft phishing

The Credential Layer Is Expanding Faster Than Security Teams Can See It Every modern enterprise depends on credentials. This is how humans, systems, and now AI, all connec... 2026-10-5 11:55:0 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com security developer agents gitguardian exposure

Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2 Threat actors have been observed attempting to exploit a now-patched critical security flaw impacti... 2026-10-5 11:46:25 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com stun cling nozomi network realtek

Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access Vulnerability / Artificial IntelligenceApple has announced that it's taking steps to tighten con... 2026-10-5 10:38:50 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com muse security wardle attacker machine

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE Vulnerability / Web SecurityA critical security flaw impacting Rejetto HTTP File Server (HFS) is w... 2026-10-5 08:9:23 | 阅读: 17 | 收藏 | The Hacker News - thehackernews.com hfs 2026 rejetto remote attacker

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline Citrix has released security updates for a high-severity security flaw in NetScaler ADC and Citrix... 2026-10-5 06:40:19 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com netscaler citrix adc 2026 fips

ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members A suspected member of the ShinyHunters digital extortion group, who goes by the online alias "Rey... 2026-10-4 07:22:5 | 阅读: 25 | 收藏 | The Hacker News - thehackernews.com rey security arrest extortion

China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing Cyber Espionage / PhishingA new China-nexus cyber espionage group known as TA419 has been attribut... 2026-10-4 07:20:32 | 阅读: 19 | 收藏 | The Hacker News - thehackernews.com phishing ta419 bitb security espionage

MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics Cyber Espionage / Artificial IntelligenceThe U.K.'s domestic intelligence and security agency has... 2026-10-3 14:38:46 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com cgtri security mss espionage

Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware Vulnerability / Critical InfrastructureThe suspected China-linked threat actor known as Warlock is... 2026-10-3 14:36:33 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com warlock ransomware software security

The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations Featuring:Cybersecurity is being reshaped by the expansion of cloud infrastructure, AI, distrib... 2026-10-3 11:0:0 | 阅读: 27 | 收藏 | The Hacker News - thehackernews.com security cloud toward identities