Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows Phishing / Enterprise SecurityThousands of companies have been affected by the Mirage2FA campaign... 2026-8-25 11:56:15 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com mirage2fa phishing microsoft security

24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages Phishing / Threat IntelligenceCybersecurity researchers have disclosed details of a new campaign t... 2026-8-25 11:52:43 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com phishing mirrors captcha clickfix unpkg

E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands Cybersecurity researchers are calling attention to a new campaign that employs FTP banners as dead... 2026-8-25 11:33:44 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com c2 socradar payload pinhole powershell

Frontier AI: Vulnerability Management's Systemic Revolution Attack Surface ManagementVulnerability management has been a staple of security programs since the... 2026-8-25 11:14:7 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com frontier prioritize prioritized 2026

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access Vulnerability / Web SecurityBad actors are attempting to exploit two severe unauthenticated authen... 2026-8-25 08:34:7 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com wordpress attacker 2026 security patchstack

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data Vulnerability / Enterprise SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA... 2026-8-25 06:12:35 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com weblogic 2026 cloudsek security

Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning Cybersecurity researchers have found that several websites are still actively distributing a malwar... 2026-8-24 17:41:11 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com client github replicates weedhack poisoning

⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks... 2026-8-24 14:32:10 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com 2026 security software remote

WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords Cybersecurity researchers have flagged two new malware families called WordlistLoader and SynkLoad... 2026-8-24 12:35:36 | 阅读: 18 | 收藏 | The Hacker News - thehackernews.com microsoft clickfix stealer malicious

Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt If your developers are using AI coding tools, you are probably already seeing the upside: faster de... 2026-8-24 11:58:0 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com security webinar debt activestate

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account Vulnerability / Identity SecurityRed Hat and the Keycloak project have released patches to addre... 2026-8-24 11:56:34 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com keycloak 2026 rhbk rhsa attacker

Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor Cyber Espionage / Cyber AttackCybersecurity researchers have flagged a cyber espionage campaign ta... 2026-8-24 11:51:36 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com windows c2 myanmar coolclient quicagent

The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk Artificial Intelligence / Browser SecurityBig security risks come in small packages. While enterpr... 2026-8-24 11:30:0 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com security akamai eshed agents prompts

UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit Cybersecurity researchers have disclosed details of a Chinese-speaking cybercrime group dubbed UAT-... 2026-8-24 08:8:31 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com spectre talos 10147 uat c2

TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit The U.S. Department of Justice (DoJ) announced on Friday that ByteDance-owned TikTok will pay $400... 2026-8-22 14:32:41 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com doj settlement parents ban bytedance

14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2 Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as worki... 2026-8-21 18:53:0 | 阅读: 19 | 收藏 | The Hacker News - thehackernews.com streak beacon redc2 windows c2

Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot Check Point Research has disclosed a technique that uses Microsoft Defender's own legitimately sign... 2026-8-21 15:52:10 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com btr windows defender sysmon microsoft

Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet Malware / Automotive SecurityCybersecurity researchers have flagged a new malware family that's sp... 2026-8-21 15:41:44 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com software c2 badbox proxy malicious

Wazuh and AI For Enhanced SOC Workflows Artificial Intelligence (AI) has become one of this decade's defining technologies. From healthcare... 2026-8-21 11:21:39 | 阅读: 17 | 收藏 | The Hacker News - thehackernews.com wazuh security cloud llm

Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0 Vulnerability / Enterprise SecurityCisco has published another round of security updates for Cross... 2026-8-21 10:3:11 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com 2026 security software