ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories The worst part is how normal these attacks look. A call from IT. A shared file. A trusted app. A sim... 2026-9-3 18:2:47 | 阅读: 0 | 收藏 | The Hacker News - thehackernews.com ransomware malicious remote security software

Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root Cisco has released patches to address a critical security flaw affecting 10 Silicon One-based Nexus... 2026-9-3 15:52:7 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com 2026 nexus routers smus cscwv19171

BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory Cybersecurity researchers have disclosed details of a sophisticated Python-based Windows malware... 2026-9-3 15:26:47 | 阅读: 0 | 收藏 | The Hacker News - thehackernews.com brazetsu marketplace cnab ib 2026

Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data Thomson Reuters disclosed on Wednesday that an unauthorized party obtained files from C-Track, the... 2026-9-3 14:39:5 | 阅读: 0 | 收藏 | The Hacker News - thehackernews.com court courts supreme reuters thomson

US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries Social Engineering / MalwareAn RMM phishing campaign initially associated with Canadian targeting... 2026-9-3 11:58:0 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com rmm disposable lures phishing software

Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks Threat actors are leveraging the trusted Node.js JavaScript runtime in multiple cyber attacks as a... 2026-9-3 10:43:1 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com clickfix attackers attacker malicious symantec

Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means In early August, GitGuardian researchers found that a recent Shai-Hulud infostealer worm variant ha... 2026-9-3 10:36:39 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com publishing security developer cloud hulud

Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone Spyware / Mobile SecurityThe iPhone belonging to a member of Serbia's student protest movement w... 2026-9-3 08:43:17 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com spyware 2026 novispy security serbian

Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon Vulnerability / Endpoint SecurityThe security researcher known as Chaotic Eclipse (aka INFINITE... 2026-9-3 06:26:59 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com windows defender microsoft crowdstrike 2026

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security... 2026-9-3 05:19:4 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com 2026 litellm remote attacker

Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs Google on Wednesday announced Gemini 3.8 Flash Cyber, which it described as its most capable cybers... 2026-9-2 18:27:49 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com astra openai anthropic safeguards

Fake Software Installers Disable Windows Update and Weaken Microsoft Defender An active malware campaign is using bogus software-download websites to impersonate trusted vendors... 2026-9-2 16:41:6 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com download microsoft valleyrat hl malicious

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in... 2026-9-2 14:6:59 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com manifold claude fsmonitor repository 2026

Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages A Chinese-speaking cybercrime cluster known as Gambling Goblin has been observed installing malicio... 2026-9-2 13:44:16 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com gambling betting brazil brazilian 3snake

BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access Network Security / Supply Chain AttackVirtualizor said hackers used a Border Gateway Protocol (BGP... 2026-9-2 13:12:45 | 阅读: 17 | 收藏 | The Hacker News - thehackernews.com virtualizor client ssh malicious payload

Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control Malvertising / Mobile SecurityCybersecurity researchers have disclosed details of a new Android ba... 2026-9-2 12:22:2 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com streamrat payload c2 apk

How to Secure Enterprise AI: From Adoption to Incident Readiness The debate about whether AI delivers business value is over. The challenge now is implementing it a... 2026-9-2 11:30:0 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com security governance adoption sygnia lifecycle

Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain Vulnerability / Network SecuritySonicWall has released security updates to address two security fl... 2026-9-2 10:53:49 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com hotfix 2026 security remote

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends Vulnerability / Web SecurityTwo vulnerabilities in GeoNetwork can be chained to achieve unauthenti... 2026-9-2 09:18:2 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com formatter geonetwork geoserver 2026 catalog

Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands The U.S. Department of Justice (DoJ) has charged a Russian national, extradited from Cyprus on Au... 2026-9-2 09:10:23 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com teamviewer aktulaev doj indictment district