OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication OpenAI has announced plans to conduct frontier model training with no live internet access, as it r... 2026-10-25 06:54:29 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com agents openai frontier reasoning teaming

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compr... 2026-10-24 11:9:29 | 阅读: 17 | 收藏 | The Hacker News - thehackernews.com brotli python decodes client envoy

Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public Gi... 2026-10-24 11:3:33 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com litellm 2026 github workflows repository

Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads Privacy / Artificial IntelligenceGoogle has updated its privacy policy to spell out that using p... 2026-10-24 10:36:33 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com chatgpt answers gemini 2026

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 mill... 2026-10-24 09:4:24 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com updater windows popcorn abandoned firm

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud Vulnerability / Network SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) o... 2026-10-24 06:25:57 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com 2026 exploited arista vco

BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensib... 2026-10-23 18:50:13 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com bootkit blackx blacklotus security windows

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws Vulnerability / Software SecurityRuby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three... 2026-10-23 17:54:8 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com gitlab 2026 110264 compiles corrupt

Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosyste... 2026-10-23 17:50:47 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com 2026 victim reverse exploited ransomware

Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials Vulnerability / Cyber AttackCybersecurity researchers have disclosed details of a large-scale camp... 2026-10-23 13:50:56 | 阅读: 18 | 收藏 | The Hacker News - thehackernews.com network 2026 ib k0t fortibleed

PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches Vulnerability / Web SecurityPHP has warned of another way an attacker could run code on a web serv... 2026-10-23 11:25:43 | 阅读: 20 | 收藏 | The Hacker News - thehackernews.com php 2026 emergency 109619 php2shell

Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack Malware / Cyber EspionageThe Russian state-sponsored hacking group Sandworm teamed up with anoth... 2026-10-23 11:11:23 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com eset sandworm yggdrasil 0099 c2

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image Vulnerability / Web SecurityPillow, the most widely used image library for Python, can be made to... 2026-10-23 09:36:0 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com pillow eps memory tiff maintainers

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data Vulnerability / Web SecurityMalicious Brotli data can make an application on an official build of... 2026-10-23 08:40:43 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com brotli imperva memory continuing reproduced

Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a... 2026-10-23 08:35:45 | 阅读: 30 | 收藏 | The Hacker News - thehackernews.com x402 typescript v12 facilitator client

PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shel... 2026-10-23 07:40:45 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com php php2shell 2026 aslr memory

Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks Vulnerability / Enterprise SecurityAttackers are exploiting a zero-day SQL injection flaw in Arist... 2026-10-22 19:5:17 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com vco arista velocloud 2026

eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate bu... 2026-10-22 18:12:43 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com emudhra chrome g1 incommon mozilla

ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More But those big headlines are only half the story. Stolen passwords, exposed databases, broken login c... 2026-10-22 17:45:44 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com security 2026 attacker repository remote

Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported... 2026-10-22 17:1:53 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com zdi ksmbd 33549 rdma neither