Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars Vulnerability / Automotive SecurityThe login systems behind two car brands' mobile apps could be t... 2026-11-9 11:27:53 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com brands cars forgerock security shah

Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety Cryptocurrency / VulnerabilitySome people who set up a Keplr crypto wallet with their Google or Ap... 2026-11-9 10:56:25 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com wallets keplr maker attacker security

LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks Vulnerability / CryptocurrencyEveryone running LNbits, a free, open-source Bitcoin Lightning walle... 2026-11-9 10:1:21 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com yesterday lnbits paywall ravensberg shut

Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records A single attacker using AI agents pulled emergency dispatch records covering seven Taipei districts... 2026-11-9 09:1:50 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com agents attacker emergency taiwan fire

Former OpenAI Engineer Pleads Not Guilty to Planting Covert Device in Executive Meeting Room Cyber Espionage / Insider ThreatThe OpenAI engineer who was arrested and charged last month for pl... 2026-11-9 07:5:48 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com saudi flight openai wife court

U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory Losses Critical Infrastructure / Cyber AttackU.S. government agencies have warned that threat actors are... 2026-11-9 06:15:10 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com exposure globally defrost remote

CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation Vulnerability / Network SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) h... 2026-11-9 06:5:24 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com 2026 sonicos security attacker

Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub Passwords and API keys that developers typed into commands they approved in Claude Code are sitting... 2026-11-7 06:44:17 | 阅读: 31 | 收藏 | The Hacker News - thehackernews.com claude repository github database passwords

Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time Some WordPress sites can still be attacked while they install the fix for an actively exploited fl... 2026-11-6 16:8:38 | 阅读: 19 | 收藏 | The Hacker News - thehackernews.com wordpress wp partial php updater

Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot Vulnerability / Cyber AttackThreat actors are attempting to exploit a recently disclosed securit... 2026-11-6 15:21:49 | 阅读: 25 | 收藏 | The Hacker News - thehackernews.com openssh alpine passwords sshole security

OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits Artificial Intelligence / Software SecurityOpenAI on Thursday unveiled GPT‑6 Cyber, which it descr... 2026-11-6 14:58:32 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com gpt openai 2026

Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It Vulnerability / Windows SecurityA fix for CVE-2026-83844, a remote code execution flaw in Windows... 2026-11-6 12:6:43 | 阅读: 25 | 收藏 | The Hacker News - thehackernews.com paint microsoft 401 2609 windows

Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers Artificial Intelligence / Browser SecurityA browser extension that can run scripts on claude.ai co... 2026-11-6 12:6:35 | 阅读: 27 | 收藏 | The Hacker News - thehackernews.com claude security prompts anthropic cowork

The Flood is Coming And The Pipes Were Already Full An update on Athena, and some unsolicited predictions on what's coming nextOn Saturday, Dario Amo... 2026-11-6 11:30:0 | 阅读: 24 | 收藏 | The Hacker News - thehackernews.com athena frontier agents chainguard maintainer

Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic... 2026-11-6 08:4:49 | 阅读: 19 | 收藏 | The Hacker News - thehackernews.com chainalysis llm microsoft agentic cloud

Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs A backdoor has been found hiding in the web server that runs Control Web Panel (CWP), a free panel... 2026-11-6 05:58:54 | 阅读: 24 | 收藏 | The Hacker News - thehackernews.com cwpsrv attackers backdoored ngx axp

Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login Vulnerability / Email SecurityTwo flaws in Barracuda's Email Security Gateway, an email-filtering... 2026-11-6 05:39:10 | 阅读: 25 | 收藏 | The Hacker News - thehackernews.com security appliance attacker bypass backup

OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux Attackers can log in to accounts that have no password, such as SSH key-only accounts, on some Alp... 2026-11-5 16:42:46 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com sshd alpine openssh cloud

Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction Cybersecurity researchers have disclosed details of a now-patched vulnerability that could be exp... 2026-11-5 16:42:32 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com security attacker malicious chatgpt exploited

ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories How much damage can someone do without breaking much? Quite a lot, it seems. A stolen login can open... 2026-11-5 14:41:10 | 阅读: 17 | 收藏 | The Hacker News - thehackernews.com 2026 cloud ransomware security attacker