U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches The U.S. Department of the Treasury has announced fresh sanctions on Iranian cyber actors as part o... 2026-8-25 18:17:17 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com iran economic iranian treasury mois

A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw AI Security / VulnerabilityOasis Security has disclosed a weakness in NVIDIA NemoClaw that could l... 2026-8-25 14:7:37 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com ollama nemoclaw proxy security 11434

WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android Authentication / Password SecurityMeta on Tuesday announced a set of WhatsApp account security fea... 2026-8-25 13:19:41 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com passkeys security upgraded parties digit

Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode Vulnerability / AI SecurityMarimo has addressed a high-severity security flaw in its notebook soft... 2026-8-25 12:43:51 | 阅读: 2 | 收藏 | The Hacker News - thehackernews.com notebook marimo 2026 attacker mcp

Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows Phishing / Enterprise SecurityThousands of companies have been affected by the Mirage2FA campaign... 2026-8-25 11:56:15 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com mirage2fa phishing microsoft security

24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages Phishing / Threat IntelligenceCybersecurity researchers have disclosed details of a new campaign t... 2026-8-25 11:52:43 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com phishing mirrors captcha clickfix unpkg

E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands Cybersecurity researchers are calling attention to a new campaign that employs FTP banners as dead... 2026-8-25 11:33:44 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com c2 socradar payload pinhole powershell

Frontier AI: Vulnerability Management's Systemic Revolution Attack Surface ManagementVulnerability management has been a staple of security programs since the... 2026-8-25 11:14:7 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com frontier prioritize prioritized 2026

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access Vulnerability / Web SecurityBad actors are attempting to exploit two severe unauthenticated authen... 2026-8-25 08:34:7 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com wordpress attacker 2026 security patchstack

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data Vulnerability / Enterprise SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA... 2026-8-25 06:12:35 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com weblogic 2026 cloudsek security

Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning Cybersecurity researchers have found that several websites are still actively distributing a malwar... 2026-8-24 17:41:11 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com client github replicates weedhack poisoning

⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks... 2026-8-24 14:32:10 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com 2026 security software remote

WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords Cybersecurity researchers have flagged two new malware families called WordlistLoader and SynkLoad... 2026-8-24 12:35:36 | 阅读: 18 | 收藏 | The Hacker News - thehackernews.com microsoft clickfix stealer malicious

Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt If your developers are using AI coding tools, you are probably already seeing the upside: faster de... 2026-8-24 11:58:0 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com security webinar debt activestate

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account Vulnerability / Identity SecurityRed Hat and the Keycloak project have released patches to addre... 2026-8-24 11:56:34 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com keycloak 2026 rhbk rhsa attacker

Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor Cyber Espionage / Cyber AttackCybersecurity researchers have flagged a cyber espionage campaign ta... 2026-8-24 11:51:36 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com windows c2 myanmar coolclient quicagent

The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk Artificial Intelligence / Browser SecurityBig security risks come in small packages. While enterpr... 2026-8-24 11:30:0 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com security akamai eshed agents prompts

UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit Cybersecurity researchers have disclosed details of a Chinese-speaking cybercrime group dubbed UAT-... 2026-8-24 08:8:31 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com spectre talos 10147 uat c2

TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit The U.S. Department of Justice (DoJ) announced on Friday that ByteDance-owned TikTok will pay $400... 2026-8-22 14:32:41 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com doj settlement parents ban bytedance

14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2 Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as worki... 2026-8-21 18:53:0 | 阅读: 19 | 收藏 | The Hacker News - thehackernews.com streak beacon redc2 windows c2