The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition Identity Security / Artificial IntelligenceAs enterprises race to deploy autonomous AI agents to a... 2026-10-9 11:30:0 | 阅读: 25 | 收藏 | The Hacker News - thehackernews.com security maturity paradox horizon autonomous

GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone wo... 2026-10-9 09:3:24 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com gobalance dread searchlight hugbunter attacker

Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own Vulnerability / Mobile SecurityThree research teams broke into Google's Pixel 10 on October 8 at... 2026-10-9 08:26:17 | 阅读: 17 | 收藏 | The Hacker News - thehackernews.com zdi contest collision prize ikotas

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments Vulnerability / Network SecurityCitrix has released patches for yet another critical security flaw... 2026-10-9 08:11:33 | 阅读: 17 | 收藏 | The Hacker News - thehackernews.com netscaler adc fips citrix inclusive

FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions The U.S. Federal Bureau of Investigation (FBI) and Department of Justice (DoJ) have announced the d... 2026-10-9 06:39:29 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com victim malicious taiwanese typhoon

FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails Hackers tied to a Chinese cybersecurity company stole email from government organizations, law enfo... 2026-10-8 18:32:21 | 阅读: 28 | 收藏 | The Hacker News - thehackernews.com microsoft security exchange dates sanctioned

ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories The crooks have trust problems of their own. One ransomware affiliate decided to keep the profits fo... 2026-10-8 17:58:2 | 阅读: 20 | 收藏 | The Hacker News - thehackernews.com phishing analysis windows ransomware 2026

Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for m... 2026-10-8 15:45:56 | 阅读: 18 | 收藏 | The Hacker News - thehackernews.com metabase jpcert macnica attackers 2026

UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML The Russia-aligned threat actor known as UAC-0099 has been attributed to a previously undocumente... 2026-10-8 15:26:56 | 阅读: 19 | 收藏 | The Hacker News - thehackernews.com ukraine ashvein matchboil trendai loader

ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean fina... 2026-10-8 14:12:34 | 阅读: 17 | 收藏 | The Hacker News - thehackernews.com artex claude crowdstrike korean llm

Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to en... 2026-10-8 10:30:0 | 阅读: 22 | 收藏 | The Hacker News - thehackernews.com wazza phishing attackers security stage

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases Browser Security / MalwareCybersecurity researchers have discovered a cluster of 16 malicious Mo... 2026-10-8 09:46:32 | 阅读: 24 | 收藏 | The Hacker News - thehackernews.com chrome browserweb malicious phrases webtools

U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks Cybercrime / Cyber EspionageThe U.S. State Department is offering up to $10 million for informat... 2026-10-8 07:42:4 | 阅读: 24 | 收藏 | The Hacker News - thehackernews.com xu microsoft hafnium shanghai justice

MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and... 2026-10-8 07:41:44 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com pinhasi ransomware paying

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm Artificial Intelligence / Cloud SecurityThe npm package known as "tensorlake," a TypeScript softwa... 2026-10-8 05:46:20 | 阅读: 21 | 收藏 | The Hacker News - thehackernews.com github shai hulud repository tensorlake

Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTP... 2026-10-7 18:48:17 | 阅读: 22 | 收藏 | The Hacker News - thehackernews.com gh youtube cas revoked ct

Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaig... 2026-10-7 17:43:20 | 阅读: 21 | 收藏 | The Hacker News - thehackernews.com payload portuguese 2026 malicious overlord

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances Vulnerability / Network SecuritySonicWall has released hotfixes for four flaws in its SMA1000 ap... 2026-10-7 16:17:44 | 阅读: 22 | 收藏 | The Hacker News - thehackernews.com 2026 appliance attacker ssrf sma1000

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely Vulnerability / Artificial IntelligenceA critical vulnerability in LMCache, open-source software t... 2026-10-7 15:34:53 | 阅读: 22 | 收藏 | The Hacker News - thehackernews.com lmcache network jfrog vllm

PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet Cybersecurity researchers are calling attention to a new malware family that has been observed targ... 2026-10-7 15:33:51 | 阅读: 33 | 收藏 | The Hacker News - thehackernews.com lumen c2 llm expand github