Fake Software Installers Disable Windows Update and Weaken Microsoft Defender An active malware campaign is using bogus software-download websites to impersonate trusted vendors... 2026-9-2 16:41:6 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com download microsoft valleyrat hl malicious

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in... 2026-9-2 14:6:59 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com manifold claude fsmonitor repository 2026

Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages A Chinese-speaking cybercrime cluster known as Gambling Goblin has been observed installing malicio... 2026-9-2 13:44:16 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com gambling betting brazil brazilian 3snake

BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access Network Security / Supply Chain AttackVirtualizor said hackers used a Border Gateway Protocol (BGP... 2026-9-2 13:12:45 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com virtualizor client ssh malicious payload

Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control Malvertising / Mobile SecurityCybersecurity researchers have disclosed details of a new Android ba... 2026-9-2 12:22:2 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com streamrat payload c2 apk

How to Secure Enterprise AI: From Adoption to Incident Readiness The debate about whether AI delivers business value is over. The challenge now is implementing it a... 2026-9-2 11:30:0 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com security governance adoption sygnia lifecycle

Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain Vulnerability / Network SecuritySonicWall has released security updates to address two security fl... 2026-9-2 10:53:49 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com hotfix 2026 security remote

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends Vulnerability / Web SecurityTwo vulnerabilities in GeoNetwork can be chained to achieve unauthenti... 2026-9-2 09:18:2 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com formatter geonetwork geoserver 2026 catalog

Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands The U.S. Department of Justice (DoJ) has charged a Russian national, extradited from Cyprus on Au... 2026-9-2 09:10:23 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com teamviewer aktulaev doj indictment district

Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another Forescout Research - Vedere Labs said it used Anthropic's Claude to port a working pre-authenticati... 2026-9-2 07:47:13 | 阅读: 22 | 收藏 | The Hacker News - thehackernews.com 750 forescout fw16 nucleus claude

Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials Vulnerability / Network SecurityThreat actors are exploiting a severe security vulnerability in Sa... 2026-9-2 07:8:50 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com switchvox 2026 sangoma database attacker

Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads The U.S. Department of Justice (DoJ) on Tuesday announced the takedown of a long-standing peer-to... 2026-9-2 06:56:30 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com sality network crowdstrike peers disruption

Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure Vulnerability / Supply Chain AttackThreat actors are exploiting a newly patched critical security... 2026-9-1 17:53:11 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com artifactory jfrog ganchev 2026 software

Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems Brazilian financial services, retail, and e-commerce organizations have become the target of a fin... 2026-9-1 17:19:24 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com network breeze comet software retail

13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagis... 2026-9-1 14:7:20 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com payload gambling spyware malicious motchill

Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests The Iranian Nimbus Manticore hacking group has been attributed to two previously undocumented mal... 2026-9-1 13:8:58 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com windows pollcat noderabbit c2 manticore

Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones The most common way into a company last year was to ask.A web page tells the visitor to prove the... 2026-9-1 11:30:0 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com playbook victim ransomware attackers machine

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000 Cyber Attack / Artificial IntelligenceMETR (short for Model Evaluation and Threat Research and pro... 2026-9-1 09:5:30 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com metr attackers agents credits

Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis Malware / Artificial IntelligenceCybersecurity researchers have disclosed a new technique dubbed G... 2026-9-1 08:26:24 | 阅读: 23 | 收藏 | The Hacker News - thehackernews.com security teampcp shai hulud malicious

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity Vulnerability / Artificial IntelligenceThreat actors are exploiting two critical flaws impacting L... 2026-9-1 07:22:30 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com 2026 vulncheck langflow rails libvips