Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a... 2026-10-26 18:12:22 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com loader 2026 sansec magento polyshell

PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw Vulnerability / Web SecurityPHP has rebuilt its official Windows packages for PHP 8.2 through 8.5... 2026-10-26 17:45:57 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com php brotli windows guzzle rebuilt

Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware Social Engineering / MalwareCybersecurity researchers are calling attention to what they say is... 2026-10-26 15:52:40 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com microsoft desk onmicrosoft arctic wolf

⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs... 2026-10-26 14:6:13 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com 2026 security remote agents software

Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, coul... 2026-10-26 11:52:41 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com wasmtime 2026 webassembly cranelift 115893

Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started o... 2026-10-26 11:23:56 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com network ndr corelight telemetry sequences

uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding it... 2026-10-26 09:54:2 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com ovi doctor tampered wechat baohuo

Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging... 2026-10-26 08:35:51 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com microsoft starkrdp victim huntress attacker

Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's se... 2026-10-26 07:49:46 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com github wiz repository gheist workflows

Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware Artificial Intelligence / Endpoint SecurityA malicious instruction file sitting in a developer's D... 2026-10-26 06:3:48 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com codex forever claude agents anthropic

Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers A single hacked device on a Tailscale network can be used to gain root access to other servers it c... 2026-10-25 17:44:9 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com tailscale ssh windisch forwarding security

PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking Threat actors have been observed using agentic artificial intelligence (AI) platforms for post-expl... 2026-10-25 17:19:46 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com php 2026 php2shell cyfirma memory

OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication OpenAI has announced plans to conduct frontier model training with no live internet access, as it r... 2026-10-25 06:54:29 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com agents openai frontier reasoning teaming

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compr... 2026-10-24 11:9:29 | 阅读: 19 | 收藏 | The Hacker News - thehackernews.com brotli python decodes client envoy

Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public Gi... 2026-10-24 11:3:33 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com litellm 2026 github workflows repository

Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads Privacy / Artificial IntelligenceGoogle has updated its privacy policy to spell out that using p... 2026-10-24 10:36:33 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com chatgpt answers gemini 2026

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 mill... 2026-10-24 09:4:24 | 阅读: 18 | 收藏 | The Hacker News - thehackernews.com updater windows popcorn abandoned firm

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud Vulnerability / Network SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) o... 2026-10-24 06:25:57 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com 2026 exploited arista vco

BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensib... 2026-10-23 18:50:13 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com bootkit blackx blacklotus security windows

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws Vulnerability / Software SecurityRuby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three... 2026-10-23 17:54:8 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com gitlab 2026 110264 compiles corrupt