Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to en... 2026-10-8 10:30:0 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com wazza phishing attackers security stage

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases Browser Security / MalwareCybersecurity researchers have discovered a cluster of 16 malicious Mo... 2026-10-8 09:46:32 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com chrome browserweb malicious phrases webtools

U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks Cybercrime / Cyber EspionageThe U.S. State Department is offering up to $10 million for informat... 2026-10-8 07:42:4 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com xu microsoft hafnium shanghai justice

MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and... 2026-10-8 07:41:44 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com pinhasi ransomware paying

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm Artificial Intelligence / Cloud SecurityThe npm package known as "tensorlake," a TypeScript softwa... 2026-10-8 05:46:20 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com github shai hulud repository tensorlake

Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTP... 2026-10-7 18:48:17 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com gh youtube cas revoked ct

Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaig... 2026-10-7 17:43:20 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com payload portuguese 2026 malicious overlord

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances Vulnerability / Network SecuritySonicWall has released hotfixes for four flaws in its SMA1000 ap... 2026-10-7 16:17:44 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com 2026 appliance attacker ssrf sma1000

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely Vulnerability / Artificial IntelligenceA critical vulnerability in LMCache, open-source software t... 2026-10-7 15:34:53 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com lmcache network jfrog vllm

PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet Cybersecurity researchers are calling attention to a new malware family that has been observed targ... 2026-10-7 15:33:51 | 阅读: 17 | 收藏 | The Hacker News - thehackernews.com lumen c2 llm expand github

The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflow The 2026 findings are not just a year-over-year shift. They mark the latest point in a five-year ar... 2026-10-7 11:57:5 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com cisos 2026 ciso security resilience

FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials Cybercrime / Network SecurityThe U.S. Federal Bureau of Investigation (FBI) and Secret Service (... 2026-10-7 11:56:56 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com network fortibleed firewalls usss

Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details Vulnerability / Web SecurityThreat actors have begun to exploit a newly disclosed critical securit... 2026-10-7 11:49:26 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com jira atlassian crowd bitbucket bamboo

What Is Agentic Pentesting? What It Proves, and Where It Stops. If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch... 2026-10-7 11:42:24 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com agentic gap answers exposure

Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws Artificial Intelligence / VulnerabilityAnthropic on Tuesday said it's expanding a program that all... 2026-10-7 08:7:38 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com security anthropic 2026 claude

100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised... 2026-10-7 06:57:54 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com lunaraxe stealer windows microsoft

Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes Cybersecurity researchers have disclosed details of a "human-operated phishing platform" that imper... 2026-10-6 18:38:55 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com island victim phishing advertising chatgpt

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disgui... 2026-10-6 18:24:25 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com bpfdoor telecom processes rapid7 averat

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings Vulnerability / Open SourceA malicious spreadsheet can make LibreOffice and Apache OpenOffice run... 2026-10-6 11:57:0 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com openoffice libreoffice database attacker spreadsheet

Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by r... 2026-10-6 11:26:25 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com openai agents wikimedia misaligned 2026