13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagis... 2026-9-1 14:7:20 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com payload gambling spyware malicious motchill

Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests The Iranian Nimbus Manticore hacking group has been attributed to two previously undocumented mal... 2026-9-1 13:8:58 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com windows pollcat noderabbit c2 manticore

Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones The most common way into a company last year was to ask.A web page tells the visitor to prove the... 2026-9-1 11:30:0 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com playbook victim ransomware attackers machine

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000 Cyber Attack / Artificial IntelligenceMETR (short for Model Evaluation and Threat Research and pro... 2026-9-1 09:5:30 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com metr attackers agents credits

Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis Malware / Artificial IntelligenceCybersecurity researchers have disclosed a new technique dubbed G... 2026-9-1 08:26:24 | 阅读: 21 | 收藏 | The Hacker News - thehackernews.com security teampcp shai hulud malicious

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity Vulnerability / Artificial IntelligenceThreat actors are exploiting two critical flaws impacting L... 2026-9-1 07:22:30 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com 2026 vulncheck langflow rails libvips

North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales Threat actors with ties to the Democratic People's Republic of Korea (aka DPRK or North Korea) ha... 2026-8-31 17:24:28 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com north dprk purpledelta pikvm remote

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More The boring parts caused most of the trouble.A router shipped ready to listen. A fake check turned... 2026-8-31 13:50:0 | 阅读: 21 | 收藏 | The Hacker News - thehackernews.com 2026 security ransomware backdoors malicious

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions Malware / Endpoint SecurityThe threat actor known as Silver Fox has been observed distributing the... 2026-8-31 12:14:0 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com valleyrat software libcef sideloading silver

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets Threat actors associated with Aurora (aka Aur0ra) ransomware have been observed using SpaceX's arti... 2026-8-31 11:47:24 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com gryxa windows victim security aurora

Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance Claude Code reads files, runs shell commands, invokes MCP tools, and acts through the credentials a... 2026-8-31 11:31:47 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com claude agents anthropic transcripts security

China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs A China-nexus cyber espionage actor tracked as Fire Ant has expanded a long-running campaign beyond... 2026-8-31 09:4:55 | 阅读: 18 | 收藏 | The Hacker News - thehackernews.com sygnia routers tacacs ant fire

DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims Cyber Espionage / IoT BotnetThe U.S. Department of Justice (DoJ) on Friday corrected a previousl... 2026-8-31 07:56:53 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com qtfy network qscan malicious qtrouter

TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor Social Engineering / MalwareMicrosoft has disclosed details of a new ClickFix variant, dubbed Term... 2026-8-30 07:36:33 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com powershell windows tunnel network reverse

Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE Vulnerability / Web SecurityMultiple critical security flaws have been disclosed in WordPress plug... 2026-8-29 16:25:3 | 阅读: 17 | 收藏 | The Hacker News - thehackernews.com attacker 2026 affects givewp wpmu

Berlin Refuses to Pay Hackers Who Stole Data From the City's State Network Berlin's state government has confirmed that it is the target of an extortion attempt following the... 2026-8-28 21:30:52 | 阅读: 17 | 收藏 | The Hacker News - thehackernews.com berlin senate network mag security

Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was ex... 2026-8-28 20:38:47 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com cosmos evm chains vesting coordinated

Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication Vulnerability / Web SecurityMalicious actors are exploiting a newly patched security flaw in Pape... 2026-8-28 17:12:15 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com papercut 2026 mf remote emergency

Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers Cellular Security / EncryptionGoogle on Thursday announced new network security protections in And... 2026-8-28 16:20:46 | 阅读: 18 | 收藏 | The Hacker News - thehackernews.com ech network security jigsaw 2g

ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical secur... 2026-8-28 15:56:55 | 阅读: 20 | 收藏 | The Hacker News - thehackernews.com nuclear 2026 wordpress webdav exploited