PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network Vulnerability / Cyber EspionageCybersecurity researchers have disclosed details of what appears... 2026-10-28 16:2:45 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com attacker 2026 php2shell rooted php

Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch Vulnerability / Enterprise SecurityThreat actors are beginning to probe for a newly patched critic... 2026-10-28 12:48:3 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com ebs 2026 database attacker horizon3

Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build... 2026-10-28 11:50:0 | 阅读: 4 | 收藏 | The Hacker News - thehackernews.com network edk attacker firmware machine

Wazuh and AI for Enhanced SOC Workflows Artificial Intelligence (AI) has become one of this decade's defining technologies. From healthcare... 2026-10-28 11:30:0 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com wazuh cloud security claude

Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass Vulnerability / Web SecurityAdobe has released patches to address multiple critical security flaws... 2026-10-28 11:15:51 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com 2026 injection security bypass windows

American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed Modern phishing campaigns can compromise American businesses without relying on traditional credent... 2026-10-28 10:30:0 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com skyw4lker phishing security malicious

Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Lin... 2026-10-28 08:15:7 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com anthropic chrome windows memory 2026

FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a domain associated with a... 2026-10-28 07:37:50 | 阅读: 37 | 收藏 | The Hacker News - thehackernews.com virtualine criminal sexually memory doj

Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach Japan's GMO Internet Group is offering up to $1 million in total for tips that help catch the att... 2026-10-28 07:13:21 | 阅读: 37 | 收藏 | The Hacker News - thehackernews.com gmo attackers japan broker pcs

Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an at... 2026-10-28 06:20:37 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com tailscale ssh forwarding attacker windisch

ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws Vulnerability / Enterprise SecurityThe critical Oracle PeopleSoft bug that ShinyHunters has exploi... 2026-10-28 06:4:58 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com peoplesoft zdi mandiant psemhub attacker

Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges Vulnerability / Web SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tu... 2026-10-28 05:42:26 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com brotli 2026 attacker 111497 php

CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations i... 2026-10-27 18:26:46 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com 2026 security microsoft malicious japan

GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend... 2026-10-27 13:59:48 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com client goahead revocation embedthis revoked

Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads Vulnerability / Mobile SecurityApple on Monday backported fixes for a high-severity security flaw... 2026-10-27 13:59:9 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com exploited 2026 security xs spotlight

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens Vulnerability / Mobile SecurityMicrosoft has fixed a flaw in its Authenticator app for Android tha... 2026-10-27 12:9:50 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com microsoft 2026 enclave broker

Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key Cryptocurrency / Data BreachAn attacker who gained access to Keystone's website obtained the key t... 2026-10-27 11:46:0 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com keystone counterfeit shipping attacker genuine

AI-Generated Fake Login Pages Are Making Account Takeovers Easier Identity Security / Artificial IntelligenceFake login pages are nothing new, but generative AI is... 2026-10-27 11:32:46 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com phishing attackers security fraudulent

Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Opera... 2026-10-27 11:32:31 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com software security flashhole malicious korean

Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers A criminal using the Amadey malware can no longer access or steal data from 180,000 infected comput... 2026-10-27 09:33:6 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com amadey asd buyer criminal australia