Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legi... 2026-8-20 19:59:19 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com phishing attacker unc7005 2026

ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do.S... 2026-8-20 17:23:48 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com security 2026 remote glm kriminal

AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure The U.S. government on Wednesday warned of an "active threat" targeting critical infrastructure or... 2026-8-20 16:59:44 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com s7 plcs siemens plc agents

New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data Adversa AI has disclosed an attack technique that it says can cause xAI's Grok chatbot to send a us... 2026-8-20 14:36:27 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com grok adversa xai 2026 gemini

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE Vulnerability / Application SecurityCybersecurity researchers have disclosed a critical security f... 2026-8-20 13:48:24 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com isolate isolated crash memory corrupt

Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers Network Security / Enterprise SecurityCitrix has released updates to address two security flaws... 2026-8-20 13:35:13 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com netscaler proxy adc fips vserver

Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution Vulnerability / Email SecurityA now-patched security flaw impacting Zimbra Collaboration (ZCS) has... 2026-8-20 13:24:28 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com zimbra security polska jetty

Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments Researchers at the University of Massachusetts Amherst have demonstrated an attack that revives exp... 2026-8-20 12:1:24 | 阅读: 27 | 收藏 | The Hacker News - thehackernews.com expiry visa expired expiration

Why "Shady AI" is Security's Next Big Governance Problem In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company an... 2026-8-20 11:45:0 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com security governance shady approved shadow

CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification Cybersecurity researchers have disclosed two denial-of-service (DoS) attacks that exploit how major... 2026-8-20 11:39:35 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com cloudfront alibaba bandwidth fastly qpack

Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices A new Android threat codenamed Manic has been observed actively targeting Ukrainian banks, governme... 2026-8-20 11:26:8 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com manic queued c2

NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operat... 2026-8-20 11:5:11 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com 2026 instrument ait cycode spacecraft

ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud Malware / Mobile SecurityCybersecurity researchers have shed light on an updated version of ToxicP... 2026-8-20 10:38:28 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com golddigger toxicpanda security c2

40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets Browser Security / CryptocurrencyA set of 40 Mozilla Firefox extensions has been found to engage i... 2026-8-20 08:42:3 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com malicious sports football ons identities

Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code Vulnerability / Web SecurityCybersecurity researchers have disclosed details of a critical flaw in... 2026-8-20 06:4:34 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com wordpress security php elementor remote

Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second Cloud Security / VulnerabilityCybersecurity researchers have disclosed details of a remote Spectre... 2026-8-19 19:2:40 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com dypris memory isolates victim remote

OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior OpenAI on Tuesday revealed that it paused reinforcement learning (RL) training for its latest arti... 2026-8-19 18:6:44 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com openai security monitoring alignment safeguards

SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs A previously unreported cyber espionage operation dubbed SilkParasite has been observed targeting g... 2026-8-19 13:12:17 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com goginrat nomadrat sideloading c2

Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised... 2026-8-19 11:34:28 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com dahua firmware hunt bypass

Phishing 3.0: The Fight Moves to Agent Versus Agent Most email defenses still do the job they did a decade ago. Scan the message, look for something ma... 2026-8-19 11:30:0 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com security microsoft 2026 phishing ironscales