Liquid Hackers Return 3,400 Bitcoin Taken via Elements Bug, Still Holding $47M in BTC Cryptocurrency / VulnerabilityWhoever took nearly 4,000 bitcoin from the Liquid Network on Sunday,... 2026-9-8 14:54:30 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com liquid blockstream btc federation 598

ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another Account Vulnerability / Artificial IntelligenceCheck Point Research said in a report published today that... 2026-9-8 14:19:17 | 阅读: 2 | 收藏 | The Hacker News - thehackernews.com chatgpt openai containers attacker python

Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours Threat actors are continuing to leverage artificial intelligence (AI) to streamline their operation... 2026-9-8 13:48:16 | 阅读: 2 | 收藏 | The Hacker News - thehackernews.com gemini financially extortion espionage dustmaker

WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls Vulnerability / Mobile SecurityResearchers at the security firm Calif have built a worm that takes... 2026-9-8 11:54:29 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com calif wechat attacker security worm

What It Took to Reach 1 Billion Build Manifests In the last six months, Chainguard doubled its output from 500 million to more than 1 billion conta... 2026-9-8 11:49:2 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com chainguard catalog driftlessaf rebuild agentic

FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials A flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choo... 2026-9-8 11:22:7 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com freeipa 389 2026 client attacker

Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell Vulnerability / Web SecurityAdobe on Monday released security patches to address a maximum-sever... 2026-9-8 09:13:47 | 阅读: 19 | 收藏 | The Hacker News - thehackernews.com 2026 magento security php 75650

BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) po... 2026-9-8 08:43:51 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com bengalseo lure github dfir mayabot

Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing Data Privacy / RegulationOnline dating app Grindr has opted to pay £26 million ($35.1 million) to... 2026-9-8 07:0:43 | 阅读: 30 | 收藏 | The Hacker News - thehackernews.com grindr hiv advertisers parties 2026

PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution Malware / Browser SecurityCybersecurity researchers have disclosed details of a complex Chromium-b... 2026-9-7 18:12:9 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com peep socradar c2 chrome sideloading

Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks Phishing / Identity SecurityThreat hunters have disclosed details of a widespread data theft and e... 2026-9-7 15:51:56 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com lure extortion phishing victim

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More Turning off email images should at least stop the pictures. This week, attackers had a workaround:... 2026-9-7 14:36:7 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com 2026 attackers coder phishing

Your Cloud Security Checklist Doesn't Work the Way You Think It Does Cloud Security / Data SecurityIf managing security across multiple cloud providers wasn't hard e... 2026-9-7 11:45:0 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com cloud permissive security encryption firewalls

Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts Cybersecurity researchers have disclosed details of worm-like activity that abuses ConnectWise Scre... 2026-9-7 11:36:39 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com client huntress vbscript rogue

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJAX into u... 2026-9-7 11:20:14 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com 2026 tantosec telerik attacker encryption

N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw Vulnerability / Enterprise SecurityEvery on-premises N-central build below 2026.3.1.14 — including... 2026-9-7 08:31:12 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com 2026 hotfix exploited security

JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malwar... 2026-9-7 07:53:4 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com jsceal proxy victim opera payload

Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication Vulnerability / Network SecurityAttackers are exploiting MikroTik routers with their Secure Shell... 2026-9-6 09:32:38 | 阅读: 17 | 收藏 | The Hacker News - thehackernews.com routeros security mikrotik ssh recommends

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner Elastic Security Labs has documented four previously unreported programs associated with REVSTEALER... 2026-9-6 08:34:20 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com revstealer stealer windows promanager lockapphost

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce th... 2026-9-5 20:14:47 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com disrex sansec magento php gvfsd