CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations i... 2026-10-27 18:26:46 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com 2026 security microsoft malicious japan

GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend... 2026-10-27 13:59:48 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com client goahead revocation embedthis revoked

Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads Vulnerability / Mobile SecurityApple on Monday backported fixes for a high-severity security flaw... 2026-10-27 13:59:9 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com exploited 2026 security xs spotlight

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens Vulnerability / Mobile SecurityMicrosoft has fixed a flaw in its Authenticator app for Android tha... 2026-10-27 12:9:50 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com microsoft 2026 enclave broker

Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key Cryptocurrency / Data BreachAn attacker who gained access to Keystone's website obtained the key t... 2026-10-27 11:46:0 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com keystone counterfeit shipping attacker genuine

AI-Generated Fake Login Pages Are Making Account Takeovers Easier Identity Security / Artificial IntelligenceFake login pages are nothing new, but generative AI is... 2026-10-27 11:32:46 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com phishing attackers security fraudulent

Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Opera... 2026-10-27 11:32:31 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com software security flashhole malicious korean

Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers A criminal using the Amadey malware can no longer access or steal data from 180,000 infected comput... 2026-10-27 09:33:6 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com amadey asd buyer criminal australia

OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections Artificial Intelligence / Data SecurityOpenAI's compaction feature, which shrinks a long conversat... 2026-10-27 08:22:43 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com reasoning openai xint compaction gpt

Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthor... 2026-10-27 06:34:47 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com cameras dahua ukraine military

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution Vulnerability / Web SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Mo... 2026-10-27 04:37:59 | 阅读: 20 | 收藏 | The Hacker News - thehackernews.com php 2026 remote security

Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a... 2026-10-26 18:12:22 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com loader 2026 sansec magento polyshell

PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw Vulnerability / Web SecurityPHP has rebuilt its official Windows packages for PHP 8.2 through 8.5... 2026-10-26 17:45:57 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com php brotli windows guzzle rebuilt

Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware Social Engineering / MalwareCybersecurity researchers are calling attention to what they say is... 2026-10-26 15:52:40 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com microsoft desk onmicrosoft arctic wolf

⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs... 2026-10-26 14:6:13 | 阅读: 17 | 收藏 | The Hacker News - thehackernews.com 2026 security remote agents software

Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, coul... 2026-10-26 11:52:41 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com wasmtime 2026 webassembly cranelift 115893

Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started o... 2026-10-26 11:23:56 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com network ndr corelight telemetry sequences

uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding it... 2026-10-26 09:54:2 | 阅读: 24 | 收藏 | The Hacker News - thehackernews.com ovi doctor tampered wechat baohuo

Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging... 2026-10-26 08:35:51 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com microsoft starkrdp victim huntress attacker

Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's se... 2026-10-26 07:49:46 | 阅读: 17 | 收藏 | The Hacker News - thehackernews.com github wiz repository gheist workflows