{ "month": "2026-09", "item_count": 199, "items": [ { "title": "Russian state hackers use new RedFlick technique to push malware", "link": "https://bleepingcomputer.com/news/security/russian-state-hackers-use-new-redflick-technique-to-push-malware", "canonical_url": "https://bleepingcomputer.com/news/security/russian-state-hackers-use-new-redflick-technique-to-push-malware", "date": "2026-09-30T20:34:01Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets", "link": "https://thehackernews.com/2026/09/attackers-exploit-zimbra-flaw-to-deploy.html", "canonical_url": "https://thehackernews.com/2026/09/attackers-exploit-zimbra-flaw-to-deploy.html", "date": "2026-09-30T16:46:29Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks", "link": "https://thehackernews.com/2026/09/attackers-abuse-msp360-to-deploy.html", "canonical_url": "https://thehackernews.com/2026/09/attackers-abuse-msp360-to-deploy.html", "date": "2026-09-30T16:32:59Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS", "link": "https://bleepingcomputer.com/news/security/cisa-warns-of-critical-pre-auth-rce-flaw-in-mikrotik-routeros", "canonical_url": "https://bleepingcomputer.com/news/security/cisa-warns-of-critical-pre-auth-rce-flaw-in-mikrotik-routeros", "date": "2026-09-30T15:49:29Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net", "link": "https://darkreading.com/threat-intelligence/russia-star-blizzard-apt-ditches-clickfix-widen-phishing-net", "canonical_url": "https://darkreading.com/threat-intelligence/russia-star-blizzard-apt-ditches-clickfix-widen-phishing-net", "date": "2026-09-30T15:02:25Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ { "name": "Star Blizzard", "url": "/apt1033", "matched_alias": "star blizzard" }, { "name": "Callisto", "url": "/callisto", "matched_alias": "star blizzard" } ] }, { "title": "Cisco warns of new SD-WAN zero-day exploited in attacks", "link": "https://bleepingcomputer.com/news/security/cisco-warns-of-new-sd-wan-authentication-bypass-zero-day-exploited-in-attacks", "canonical_url": "https://bleepingcomputer.com/news/security/cisco-warns-of-new-sd-wan-authentication-bypass-zero-day-exploited-in-attacks", "date": "2026-09-30T14:46:40Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Bitget hacked via zero-day in third-party security products", "link": "https://bleepingcomputer.com/news/security/bitget-hacked-via-zero-day-in-third-party-security-products", "canonical_url": "https://bleepingcomputer.com/news/security/bitget-hacked-via-zero-day-in-third-party-security-products", "date": "2026-09-30T11:11:46Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT", "link": "https://thehackernews.com/2026/09/attackers-exploit-netscaler-flaw-for.html", "canonical_url": "https://thehackernews.com/2026/09/attackers-exploit-netscaler-flaw-for.html", "date": "2026-09-30T08:24:35Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "South Africa Seeks Help After Cyberattack Targets Air Traffic Control", "link": "https://darkreading.com/cyberattacks-data-breaches/south-africa-help-cyberattack-air-traffic-control", "canonical_url": "https://darkreading.com/cyberattacks-data-breaches/south-africa-help-cyberattack-air-traffic-control", "date": "2026-09-30T07:00:00Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution", "link": "https://thehackernews.com/2026/09/citrix-netscaler-cve-2026-88772-exploit.html", "canonical_url": "https://thehackernews.com/2026/09/citrix-netscaler-cve-2026-88772-exploit.html", "date": "2026-09-30T05:30:30Z", "source": "The Hacker News", "cves": [ "CVE-2026-88772" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "Apple Zero-Day Vulnerability Weaponized in Targeted Attacks", "link": "https://darkreading.com/cyberattacks-data-breaches/apple-zero-day-vulnerability-weaponized-targeted-attacks", "canonical_url": "https://darkreading.com/cyberattacks-data-breaches/apple-zero-day-vulnerability-weaponized-targeted-attacks", "date": "2026-09-29T21:31:29Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Custom ChatGPTs push ClickFix attacks to deploy RAT malware", "link": "https://bleepingcomputer.com/news/security/custom-chatgpts-push-clickfix-attacks-to-deploy-rat-malware", "canonical_url": "https://bleepingcomputer.com/news/security/custom-chatgpts-push-clickfix-attacks-to-deploy-rat-malware", "date": "2026-09-29T20:59:39Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Dutch police arrest ShinyHunters hacker accused of planning two murders", "link": "https://techcrunch.com/2026/09/29/dutch-police-arrest-shinyhunters-hacker-accused-of-planning-two-murders", "canonical_url": "https://techcrunch.com/2026/09/29/dutch-police-arrest-shinyhunters-hacker-accused-of-planning-two-murders", "date": "2026-09-29T17:27:09Z", "source": "TechCrunch", "cves": [ ], "tags": [ ], "actors": [ { "name": "ShinyHunters", "url": "/shinyhunters", "matched_alias": "shinyhunters" } ] }, { "title": "Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor", "link": "https://thehackernews.com/2026/09/russias-star-blizzard-targets-100.html", "canonical_url": "https://thehackernews.com/2026/09/russias-star-blizzard-targets-100.html", "date": "2026-09-29T17:20:08Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ { "name": "Star Blizzard", "url": "/apt1033", "matched_alias": "star blizzard" }, { "name": "Callisto", "url": "/callisto", "matched_alias": "star blizzard" } ] }, { "title": "'NeedyMantis' Provides Long-Term Access to Compromised Networks", "link": "https://darkreading.com/threat-intelligence/needymantis-long-term-access-compromised-networks", "canonical_url": "https://darkreading.com/threat-intelligence/needymantis-long-term-access-compromised-networks", "date": "2026-09-29T15:12:39Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Apple patches CoreGraphics zero-day flaw exploited in attacks", "link": "https://bleepingcomputer.com/news/security/apple-patches-coregraphics-zero-day-flaw-exploited-in-attacks", "canonical_url": "https://bleepingcomputer.com/news/security/apple-patches-coregraphics-zero-day-flaw-exploited-in-attacks", "date": "2026-09-29T07:33:12Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts", "link": "https://darkreading.com/identity-access-management-security/carbonato-botnet-ai-agent-hacked-docker-hosts", "canonical_url": "https://darkreading.com/identity-access-management-security/carbonato-botnet-ai-agent-hacked-docker-hosts", "date": "2026-09-28T20:23:58Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Dutch police confirm arrest in ShinyHunters hacking investigation", "link": "https://bleepingcomputer.com/news/security/dutch-police-confirm-arrest-in-shinyhunters-hacking-investigation", "canonical_url": "https://bleepingcomputer.com/news/security/dutch-police-confirm-arrest-in-shinyhunters-hacking-investigation", "date": "2026-09-28T19:49:10Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ { "name": "ShinyHunters", "url": "/shinyhunters", "matched_alias": "shinyhunters" } ] }, { "title": "Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks", "link": "https://thehackernews.com/2026/09/hackers-use-needymantis-to-maintain.html", "canonical_url": "https://thehackernews.com/2026/09/hackers-use-needymantis-to-maintain.html", "date": "2026-09-28T18:35:42Z", "source": "The Hacker News", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims", "link": "https://thehackernews.com/2026/09/rathat-android-malware-console-uses.html", "canonical_url": "https://thehackernews.com/2026/09/rathat-android-malware-console-uses.html", "date": "2026-09-28T17:38:33Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions", "link": "https://darkreading.com/application-security/chrome-store-poper-blocker-spyware-downloaded-millions", "canonical_url": "https://darkreading.com/application-security/chrome-store-poper-blocker-spyware-downloaded-millions", "date": "2026-09-28T16:51:25Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation", "link": "https://krebsonsecurity.com/2026/09/dutch-police-arrest-reformed-hacker-in-shiny-hunters-investigation", "canonical_url": "https://krebsonsecurity.com/2026/09/dutch-police-arrest-reformed-hacker-in-shiny-hunters-investigation", "date": "2026-09-28T15:08:57Z", "source": "KrebsOnSecurity", "cves": [ ], "tags": [ ], "actors": [ { "name": "ShinyHunters", "url": "/shinyhunters", "matched_alias": "shinyhunters" } ] }, { "title": "Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent", "link": "https://thehackernews.com/2026/09/carbonato-botnet-compromises-docker.html", "canonical_url": "https://thehackernews.com/2026/09/carbonato-botnet-compromises-docker.html", "date": "2026-09-28T11:46:00Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources", "link": "https://thehackernews.com/2026/09/jadepuffer-linked-attackers-used.html", "canonical_url": "https://thehackernews.com/2026/09/jadepuffer-linked-attackers-used.html", "date": "2026-09-28T09:08:21Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ { "name": "JadePuffer", "url": "/jadepuffer", "matched_alias": "jadepuffer" } ] }, { "title": "CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally", "link": "https://thehackernews.com/2026/09/cisa-says-attackers-are-exploiting-two.html", "canonical_url": "https://thehackernews.com/2026/09/cisa-says-attackers-are-exploiting-two.html", "date": "2026-09-28T07:21:49Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA orders feds to patch exploited Citrix flaws by Wednesday", "link": "https://bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-exploited-citrix-flaws-by-wednesday", "canonical_url": "https://bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-exploited-citrix-flaws-by-wednesday", "date": "2026-09-28T06:24:19Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Citrix confirms two NetScaler RCE zero-days exploited in attacks", "link": "https://bleepingcomputer.com/news/security/citrix-admins-warned-to-shut-down-netscalers-over-2-exploited-zero-days", "canonical_url": "https://bleepingcomputer.com/news/security/citrix-admins-warned-to-shut-down-netscalers-over-2-exploited-zero-days", "date": "2026-09-27T16:02:37Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation", "link": "https://thehackernews.com/2026/09/warning-two-unpatched-citrix-netscaler.html", "canonical_url": "https://thehackernews.com/2026/09/warning-two-unpatched-citrix-netscaler.html", "date": "2026-09-27T07:47:57Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials", "link": "https://thehackernews.com/2026/09/lunex-stealer-abuses-amd-driver-to.html", "canonical_url": "https://thehackernews.com/2026/09/lunex-stealer-abuses-amd-driver-to.html", "date": "2026-09-26T18:22:52Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells", "link": "https://thehackernews.com/2026/09/attackers-bypass-wafs-to-exploit-oracle.html", "canonical_url": "https://thehackernews.com/2026/09/attackers-bypass-wafs-to-exploit-oracle.html", "date": "2026-09-26T11:46:40Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild", "link": "https://thehackernews.com/2026/09/sharepoint-rce-and-mikrotik-routeros.html", "canonical_url": "https://thehackernews.com/2026/09/sharepoint-rce-and-mikrotik-routeros.html", "date": "2026-09-26T08:49:53Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks", "link": "https://bleepingcomputer.com/news/security/cisa-warns-of-sharepoint-wso2-adobe-commerce-flaws-exploited-in-attacks", "canonical_url": "https://bleepingcomputer.com/news/security/cisa-warns-of-sharepoint-wso2-adobe-commerce-flaws-exploited-in-attacks", "date": "2026-09-25T17:24:20Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Appeals Court Lets the Pentagon Designate Anthropic a Supply-Chain Risk", "link": "https://wired.com/story/appeals-court-lets-the-pentagon-designate-anthropic-a-supply-chain-risk", "canonical_url": "https://wired.com/story/appeals-court-lets-the-pentagon-designate-anthropic-a-supply-chain-risk", "date": "2026-09-25T16:58:20Z", "source": "Wired", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware", "link": "https://thehackernews.com/2026/09/compromised-github-actions-came-back.html", "canonical_url": "https://thehackernews.com/2026/09/compromised-github-actions-came-back.html", "date": "2026-09-25T14:44:41Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence", "link": "https://thehackernews.com/2026/09/pamstealer-macos-malware-adds-live-c2.html", "canonical_url": "https://thehackernews.com/2026/09/pamstealer-macos-malware-adds-live-c2.html", "date": "2026-09-25T13:18:06Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise", "link": "https://thehackernews.com/2026/09/bitget-says-suspected-north-korean.html", "canonical_url": "https://thehackernews.com/2026/09/bitget-says-suspected-north-korean.html", "date": "2026-09-25T10:35:55Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers steal $351.6 million in Bitget crypto exchange hack", "link": "https://bleepingcomputer.com/news/security/hackers-steal-3516-million-in-bitget-crypto-exchange-hack", "canonical_url": "https://bleepingcomputer.com/news/security/hackers-steal-3516-million-in-bitget-crypto-exchange-hack", "date": "2026-09-25T08:33:44Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV", "link": "https://thehackernews.com/2026/09/wso2-and-adobe-commerce-flaws-exploited.html", "canonical_url": "https://thehackernews.com/2026/09/wso2-and-adobe-commerce-flaws-exploited.html", "date": "2026-09-25T04:46:34Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing", "link": "https://darkreading.com/application-security/salesbleed-exploits-salesforce-agents-slack-phishing", "canonical_url": "https://darkreading.com/application-security/salesbleed-exploits-salesforce-agents-slack-phishing", "date": "2026-09-24T21:04:03Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "MacSync malware uses public iCloud calendars to deliver new payloads", "link": "https://bleepingcomputer.com/news/security/macsync-malware-uses-public-icloud-calendars-to-deliver-new-payloads", "canonical_url": "https://bleepingcomputer.com/news/security/macsync-malware-uses-public-icloud-calendars-to-deliver-new-payloads", "date": "2026-09-24T20:53:35Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer", "link": "https://thehackernews.com/2026/09/hacked-ukrainian-sites-serve-fake.html", "canonical_url": "https://thehackernews.com/2026/09/hacked-ukrainian-sites-serve-fake.html", "date": "2026-09-24T14:29:06Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360", "link": "https://thehackernews.com/2026/09/17000-urls-reveal-how-clickfix-turns.html", "canonical_url": "https://thehackernews.com/2026/09/17000-urls-reveal-how-clickfix-turns.html", "date": "2026-09-24T09:14:21Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "New RemControl Android banking malware targets users in Europe and Canada", "link": "https://bleepingcomputer.com/news/security/new-remcontrol-android-banking-malware-targets-users-in-europe-and-canada", "canonical_url": "https://bleepingcomputer.com/news/security/new-remcontrol-android-banking-malware-targets-users-in-europe-and-canada", "date": "2026-09-23T21:25:13Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks", "link": "https://darkreading.com/application-security/gitlab-email-addresses-supply-chain-attacks", "canonical_url": "https://darkreading.com/application-security/gitlab-email-addresses-supply-chain-attacks", "date": "2026-09-23T20:53:38Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Check Point warns of hackers exploiting Security Gateway VPN RCE flaw", "link": "https://bleepingcomputer.com/news/security/check-point-warns-of-hackers-exploiting-security-gateway-vpn-rce-flaw", "canonical_url": "https://bleepingcomputer.com/news/security/check-point-warns-of-hackers-exploiting-security-gateway-vpn-rce-flaw", "date": "2026-09-23T19:53:54Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry", "link": "https://thehackernews.com/2026/09/attackers-use-malicious-terraform.html", "canonical_url": "https://thehackernews.com/2026/09/attackers-use-malicious-terraform.html", "date": "2026-09-23T18:06:30Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent", "link": "https://thehackernews.com/2026/09/545-hackers-tested-it-first-now-xranges.html", "canonical_url": "https://thehackernews.com/2026/09/545-hackers-tested-it-first-now-xranges.html", "date": "2026-09-23T11:47:19Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape", "link": "https://thehackernews.com/2026/09/exploit-released-for-unpatched-ubuntu.html", "canonical_url": "https://thehackernews.com/2026/09/exploit-released-for-unpatched-ubuntu.html", "date": "2026-09-23T11:12:18Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Ryuk ransomware member sentenced to 24 months in prison", "link": "https://bleepingcomputer.com/news/security/ryuk-ransomware-member-sentenced-to-24-months-in-prison", "canonical_url": "https://bleepingcomputer.com/news/security/ryuk-ransomware-member-sentenced-to-24-months-in-prison", "date": "2026-09-23T08:20:05Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "ransomware" ], "actors": [ { "name": "Ryuk ransomware", "url": "/ryuk-ransomware", "matched_alias": "ryuk ransomware" } ] }, { "title": "F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks", "link": "https://bleepingcomputer.com/news/security/f5-warns-of-big-ip-apm-remote-code-execution-zero-day-exploited-in-attacks", "canonical_url": "https://bleepingcomputer.com/news/security/f5-warns-of-big-ip-apm-remote-code-execution-zero-day-exploited-in-attacks", "date": "2026-09-23T07:17:23Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "An INC Ransomware Affiliate’s BYOVD Buffet", "link": "https://labs.beazley.security/articles/an-inc-ransomware-affiliates-byovd-buffet", "canonical_url": "https://labs.beazley.security/articles/an-inc-ransomware-affiliates-byovd-buffet", "date": "2026-09-23T07:00:00Z", "source": "Beazley Security Labs Articles", "cves": [ ], "tags": [ "ransomware" ], "actors": [ { "name": "INC Ransom", "url": "/apt1032", "matched_alias": "inc ransomware" } ] }, { "title": "ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants", "link": "https://thehackernews.com/2026/09/shinyhunters-claims-fbi-breach-says-it.html", "canonical_url": "https://thehackernews.com/2026/09/shinyhunters-claims-fbi-breach-says-it.html", "date": "2026-09-23T05:30:09Z", "source": "The Hacker News", "cves": [ ], "tags": [ "breach" ], "actors": [ { "name": "ShinyHunters", "url": "/shinyhunters", "matched_alias": "shinyhunters" } ] }, { "title": "ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach", "link": "https://bleepingcomputer.com/news/security/shinyhunters-claims-fbi-hack-data-theft-in-peoplesoft-zero-day-breach", "canonical_url": "https://bleepingcomputer.com/news/security/shinyhunters-claims-fbi-hack-data-theft-in-peoplesoft-zero-day-breach", "date": "2026-09-22T19:13:29Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "breach" ], "actors": [ { "name": "ShinyHunters", "url": "/shinyhunters", "matched_alias": "shinyhunters" } ] }, { "title": "Hacking group ShinyHunters claims it breached the FBI, stole agents’ and applicants’ data", "link": "https://techcrunch.com/2026/09/22/hacking-group-shinyhunters-claims-it-breached-the-fbi-stole-agents-and-applicants-data", "canonical_url": "https://techcrunch.com/2026/09/22/hacking-group-shinyhunters-claims-it-breached-the-fbi-stole-agents-and-applicants-data", "date": "2026-09-22T18:40:30Z", "source": "TechCrunch", "cves": [ ], "tags": [ "breach" ], "actors": [ { "name": "ShinyHunters", "url": "/shinyhunters", "matched_alias": "shinyhunters" } ] }, { "title": "Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks", "link": "https://thehackernews.com/2026/09/check-point-warns-of-management-server.html", "canonical_url": "https://thehackernews.com/2026/09/check-point-warns-of-management-server.html", "date": "2026-09-22T18:29:39Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates", "link": "https://thehackernews.com/2026/09/researcher-drops-bigdiskbuster-zero-day.html", "canonical_url": "https://thehackernews.com/2026/09/researcher-drops-bigdiskbuster-zero-day.html", "date": "2026-09-22T16:14:04Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "D-Link warns of max severity zero-day bug in DIR-822A routers", "link": "https://bleepingcomputer.com/news/security/d-link-warns-of-max-severity-zero-day-bug-in-dir-822a-routers", "canonical_url": "https://bleepingcomputer.com/news/security/d-link-warns-of-max-severity-zero-day-bug-in-dir-822a-routers", "date": "2026-09-22T12:48:06Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "New Windows Defender zero-day blocks Microsoft antivirus updates", "link": "https://bleepingcomputer.com/news/security/new-windows-defender-zero-day-blocks-microsoft-antivirus-updates", "canonical_url": "https://bleepingcomputer.com/news/security/new-windows-defender-zero-day-blocks-microsoft-antivirus-updates", "date": "2026-09-22T09:55:11Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing", "link": "https://thehackernews.com/2026/09/sidecopy-broadens-india-targeting-to.html", "canonical_url": "https://thehackernews.com/2026/09/sidecopy-broadens-india-targeting-to.html", "date": "2026-09-22T07:52:03Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ { "name": "SideCopy", "url": "/apt1008", "matched_alias": "sidecopy" } ] }, { "title": "One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor", "link": "https://thehackernews.com/2026/09/one-hidden-meta-muse-setting-could-let.html", "canonical_url": "https://thehackernews.com/2026/09/one-hidden-meta-muse-setting-could-let.html", "date": "2026-09-22T06:33:57Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session", "link": "https://thehackernews.com/2026/09/wordpress-comment2shell-flaw-can-turn.html", "canonical_url": "https://thehackernews.com/2026/09/wordpress-comment2shell-flaw-can-turn.html", "date": "2026-09-22T06:03:14Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "OpenAI forms math advisory group as its AI resolves more than 100 open problems", "link": "https://techcrunch.com/2026/09/21/openai-forms-math-advisory-group-as-its-ai-resolves-more-than-100-open-problems", "canonical_url": "https://techcrunch.com/2026/09/21/openai-forms-math-advisory-group-as-its-ai-resolves-more-than-100-open-problems", "date": "2026-09-21T20:15:58Z", "source": "TechCrunch", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA alerts of active exploitation of three Linux kernel flaws", "link": "https://bleepingcomputer.com/news/security/cisa-alerts-of-active-exploitation-of-three-linux-kernel-flaws", "canonical_url": "https://bleepingcomputer.com/news/security/cisa-alerts-of-active-exploitation-of-three-linux-kernel-flaws", "date": "2026-09-21T20:12:17Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "WordPress Click2Shell flaw lets hackers execute PHP on the server", "link": "https://bleepingcomputer.com/news/security/wordpress-click2shell-flaw-lets-hackers-execute-php-on-the-server", "canonical_url": "https://bleepingcomputer.com/news/security/wordpress-click2shell-flaw-lets-hackers-execute-php-on-the-server", "date": "2026-09-21T18:23:11Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure", "link": "https://thehackernews.com/2026/09/clickfix-lures-deploy-chainscript-rat.html", "canonical_url": "https://thehackernews.com/2026/09/clickfix-lures-deploy-chainscript-rat.html", "date": "2026-09-21T08:39:38Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors", "link": "https://thehackernews.com/2026/09/jade-sleet-linked-to-indian-it-provider.html", "canonical_url": "https://thehackernews.com/2026/09/jade-sleet-linked-to-indian-it-provider.html", "date": "2026-09-21T06:06:44Z", "source": "The Hacker News", "cves": [ ], "tags": [ "breach" ], "actors": [ { "name": "TraderTraitor", "url": "/tradertraitor", "matched_alias": "jade sleet" } ] }, { "title": "Researchers escape OpenAI Codex sandbox to run commands on host", "link": "https://bleepingcomputer.com/news/security/researchers-escape-openai-codex-sandbox-to-run-commands-on-host", "canonical_url": "https://bleepingcomputer.com/news/security/researchers-escape-openai-codex-sandbox-to-run-commands-on-host", "date": "2026-09-20T12:00:00Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "An undercover Google analyst infiltrated a notorious supply-chain hacking gang", "link": "https://arstechnica.com/security/2026/09/an-undercover-google-analyst-infiltrated-a-notorious-supply-chain-hacking-gang", "canonical_url": "https://arstechnica.com/security/2026/09/an-undercover-google-analyst-infiltrated-a-notorious-supply-chain-hacking-gang", "date": "2026-09-20T11:07:00Z", "source": "Ars Technica", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "North Korean WaterPlum hackers infected 30,000 devices worldwide", "link": "https://bleepingcomputer.com/news/security/north-korean-waterplum-hackers-infected-30-000-devices-worldwide", "canonical_url": "https://bleepingcomputer.com/news/security/north-korean-waterplum-hackers-infected-30-000-devices-worldwide", "date": "2026-09-19T14:05:15Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ { "name": "WageMole", "url": "/wagemole", "matched_alias": "waterplum" } ] }, { "title": "ShinyHunters hacks Clop leak site, threatens to extort ransomware gang", "link": "https://bleepingcomputer.com/news/security/shinyhunters-hacks-clop-leak-site-threatens-to-extort-ransomware-gang", "canonical_url": "https://bleepingcomputer.com/news/security/shinyhunters-hacks-clop-leak-site-threatens-to-extort-ransomware-gang", "date": "2026-09-19T13:48:32Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "ransomware" ], "actors": [ { "name": "ShinyHunters", "url": "/shinyhunters", "matched_alias": "shinyhunters" } ] }, { "title": "Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening", "link": "https://wired.com/story/kernel-panic-ai-vulnerability-explosion", "canonical_url": "https://wired.com/story/kernel-panic-ai-vulnerability-explosion", "date": "2026-09-19T11:00:00Z", "source": "Wired", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild", "link": "https://thehackernews.com/2026/09/critical-pre-auth-rce-in-orkes.html", "canonical_url": "https://thehackernews.com/2026/09/critical-pre-auth-rce-in-orkes.html", "date": "2026-09-19T08:18:54Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild", "link": "https://thehackernews.com/2026/09/cisa-flags-three-linux-kernel.html", "canonical_url": "https://thehackernews.com/2026/09/cisa-flags-three-linux-kernel.html", "date": "2026-09-19T06:24:10Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Cisco Zero-Day Highlights API Endpoint Authentication Issues", "link": "https://darkreading.com/vulnerabilities-threats/cisco-zero-day-api-endpoint-authentication-issues", "canonical_url": "https://darkreading.com/vulnerabilities-threats/cisco-zero-day-api-endpoint-authentication-issues", "date": "2026-09-18T19:26:47Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2", "link": "https://thehackernews.com/2026/09/transparent-tribe-deploys-new-rust.html", "canonical_url": "https://thehackernews.com/2026/09/transparent-tribe-deploys-new-rust.html", "date": "2026-09-18T15:24:16Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ { "name": "Transparent Tribe", "url": "/apt0134", "matched_alias": "transparent tribe" } ] }, { "title": "Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer", "link": "https://bleepingcomputer.com/news/security/fake-lastpass-authenticator-github-repos-push-new-rapuncel-infostealer", "canonical_url": "https://bleepingcomputer.com/news/security/fake-lastpass-authenticator-github-repos-push-new-rapuncel-infostealer", "date": "2026-09-18T15:19:06Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation", "link": "https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html", "canonical_url": "https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html", "date": "2026-09-18T12:47:04Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "New Check Point flaw lets hackers execute code with root privileges", "link": "https://bleepingcomputer.com/news/security/check-point-warns-critical-flaw-lets-hackers-execute-code-as-root", "canonical_url": "https://bleepingcomputer.com/news/security/check-point-warns-critical-flaw-lets-hackers-execute-code-as-root", "date": "2026-09-18T09:34:33Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer", "link": "https://thehackernews.com/2026/09/claimed-bug-bounty-hunter-likely-used.html", "canonical_url": "https://thehackernews.com/2026/09/claimed-bug-bounty-hunter-likely-used.html", "date": "2026-09-18T09:18:03Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall", "link": "https://thehackernews.com/2026/09/rathat-android-malware-abuses-adb-to.html", "canonical_url": "https://thehackernews.com/2026/09/rathat-android-malware-abuses-adb-to.html", "date": "2026-09-18T06:17:25Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "New RatHat Android malware uses AI to automate device control", "link": "https://bleepingcomputer.com/news/security/new-rathat-android-malware-uses-ai-to-automate-device-control", "canonical_url": "https://bleepingcomputer.com/news/security/new-rathat-android-malware-uses-ai-to-automate-device-control", "date": "2026-09-17T21:50:26Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA Ditches Weekly Vulnerability Roundups for Risk-Based Focus", "link": "https://darkreading.com/cyber-risk/cisa-ditches-weekly-vuln-roundups-risk-based-focus", "canonical_url": "https://darkreading.com/cyber-risk/cisa-ditches-weekly-vuln-roundups-risk-based-focus", "date": "2026-09-17T21:23:50Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "China's FamousSparrow APT Spies on US Politics in Latin America", "link": "https://darkreading.com/cyberattacks-data-breaches/china-famoussparrow-spies-latin-america", "canonical_url": "https://darkreading.com/cyberattacks-data-breaches/china-famoussparrow-spies-latin-america", "date": "2026-09-17T19:15:38Z", "source": "DarkReading", "cves": [ ], "tags": [ "apt" ], "actors": [ { "name": "Salt Typhoon", "url": "/apt1045", "matched_alias": "famoussparrow" }, { "name": "GhostEmperor", "url": "/ghostemperor", "matched_alias": "famoussparrow" } ] }, { "title": "Brevo supply-chain attack injected ClickFix scripts on customer sites", "link": "https://bleepingcomputer.com/news/security/brevo-supply-chain-attack-injected-clickfix-scripts-on-customer-sites", "canonical_url": "https://bleepingcomputer.com/news/security/brevo-supply-chain-attack-injected-clickfix-scripts-on-customer-sites", "date": "2026-09-17T17:11:34Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords", "link": "https://thehackernews.com/2026/09/iran-linked-handala-hack-tied-to.html", "canonical_url": "https://thehackernews.com/2026/09/iran-linked-handala-hack-tied-to.html", "date": "2026-09-17T14:03:13Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ { "name": "Handala", "url": "/handala", "matched_alias": "handala" } ] }, { "title": "Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone", "link": "https://thehackernews.com/2026/09/critical-unbound-dnssec-validator-flaw.html", "canonical_url": "https://thehackernews.com/2026/09/critical-unbound-dnssec-validator-flaw.html", "date": "2026-09-17T12:30:00Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "US takes down NightmareStresser DDoS-for-hire platform", "link": "https://bleepingcomputer.com/news/security/fbi-seizes-nightmarestresser-service-linked-to-thousands-of-ddos-attacks", "canonical_url": "https://bleepingcomputer.com/news/security/fbi-seizes-nightmarestresser-service-linked-to-thousands-of-ddos-attacks", "date": "2026-09-17T11:33:35Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America", "link": "https://thehackernews.com/2026/09/china-aligned-famoussparrow-deploys.html", "canonical_url": "https://thehackernews.com/2026/09/china-aligned-famoussparrow-deploys.html", "date": "2026-09-17T10:05:45Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ { "name": "Salt Typhoon", "url": "/apt1045", "matched_alias": "famoussparrow" }, { "name": "GhostEmperor", "url": "/ghostemperor", "matched_alias": "famoussparrow" } ] }, { "title": "Cisco warns of max severity ISE zero-day exploited in attacks", "link": "https://bleepingcomputer.com/news/security/cisco-warns-of-identity-service-engine-zero-day-exploited-in-attacks", "canonical_url": "https://bleepingcomputer.com/news/security/cisco-warns-of-identity-service-engine-zero-day-exploited-in-attacks", "date": "2026-09-17T07:20:54Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks", "link": "https://thehackernews.com/2026/09/cisco-warns-of-new-zero-day-ise-auth.html", "canonical_url": "https://thehackernews.com/2026/09/cisco-warns-of-new-zero-day-ise-auth.html", "date": "2026-09-17T06:39:40Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "U.S. Seizes NightmareStresser Domains Linked to Hundreds of Thousands of DDoS Attacks", "link": "https://thehackernews.com/2026/09/us-seizes-nightmarestresser-domains.html", "canonical_url": "https://thehackernews.com/2026/09/us-seizes-nightmarestresser-domains.html", "date": "2026-09-17T05:13:46Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Iranian hackers use CHOSEN BRICK Windows malware to spy on targets", "link": "https://bleepingcomputer.com/news/security/iranian-hackers-use-chosen-brick-windows-malware-to-spy-on-targets", "canonical_url": "https://bleepingcomputer.com/news/security/iranian-hackers-use-chosen-brick-windows-malware-to-spy-on-targets", "date": "2026-09-16T20:24:55Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Spain's data agency gets first report of AI-powered data breach", "link": "https://bleepingcomputer.com/news/security/spains-data-agency-gets-first-report-of-ai-powered-data-breach", "canonical_url": "https://bleepingcomputer.com/news/security/spains-data-agency-gets-first-report-of-ai-powered-data-breach", "date": "2026-09-16T17:26:41Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution", "link": "https://thehackernews.com/2026/09/attackers-exploit-issabel-framework.html", "canonical_url": "https://thehackernews.com/2026/09/attackers-exploit-issabel-framework.html", "date": "2026-09-16T15:50:59Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers", "link": "https://thehackernews.com/2026/09/three-threat-groups-target-russian.html", "canonical_url": "https://thehackernews.com/2026/09/three-threat-groups-target-russian.html", "date": "2026-09-16T15:27:49Z", "source": "The Hacker News", "cves": [ ], "tags": [ "ransomware" ], "actors": [ ] }, { "title": "Webinar: What happens in the first hours of a Google Workspace breach", "link": "https://bleepingcomputer.com/news/security/webinar-what-happens-in-the-first-hours-of-a-google-workspace-breach", "canonical_url": "https://bleepingcomputer.com/news/security/webinar-what-happens-in-the-first-hours-of-a-google-workspace-breach", "date": "2026-09-16T12:11:19Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Threat Intelligence Alone Won't Close the Exploitation Gap", "link": "https://thehackernews.com/2026/09/threat-intelligence-alone-wont-close.html", "canonical_url": "https://thehackernews.com/2026/09/threat-intelligence-alone-wont-close.html", "date": "2026-09-16T11:15:48Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks", "link": "https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "canonical_url": "https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "date": "2026-09-16T11:08:54Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Atomic macOS (AMOS) Stealer Activity", "link": "https://unit42.paloaltonetworks.com/atomic-macos-amos-stealer-activity", "canonical_url": "https://unit42.paloaltonetworks.com/atomic-macos-amos-stealer-activity", "date": "2026-09-16T10:00:06Z", "source": "Unit 42", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Google fixes actively exploited Android zero-day on Pixel devices", "link": "https://bleepingcomputer.com/news/security/google-fixes-actively-exploited-android-zero-day-on-pixel-devices", "canonical_url": "https://bleepingcomputer.com/news/security/google-fixes-actively-exploited-android-zero-day-on-pixel-devices", "date": "2026-09-16T07:00:19Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells", "link": "https://thehackernews.com/2026/09/attackers-exploit-woocommerce-wholesale.html", "canonical_url": "https://thehackernews.com/2026/09/attackers-exploit-woocommerce-wholesale.html", "date": "2026-09-16T05:48:28Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens", "link": "https://thehackernews.com/2026/09/kremlin-banking-malware-hijacks-chrome.html", "canonical_url": "https://thehackernews.com/2026/09/kremlin-banking-malware-hijacks-chrome.html", "date": "2026-09-15T18:54:14Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists", "link": "https://thehackernews.com/2026/09/iranian-hackers-use-telegram-controlled.html", "canonical_url": "https://thehackernews.com/2026/09/iranian-hackers-use-telegram-controlled.html", "date": "2026-09-15T16:29:51Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE", "link": "https://thehackernews.com/2026/09/china-linked-hackers-exploit-chrome.html", "canonical_url": "https://thehackernews.com/2026/09/china-linked-hackers-exploit-chrome.html", "date": "2026-09-15T05:31:05Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink", "link": "https://darkreading.com/cyberattacks-data-breaches/sandworm-chains-cisco-vulnerabilities-cyclops-blink", "canonical_url": "https://darkreading.com/cyberattacks-data-breaches/sandworm-chains-cisco-vulnerabilities-cyclops-blink", "date": "2026-09-14T21:37:28Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ { "name": "Sandworm", "url": "/sandworm", "matched_alias": "sandworm" }, { "name": "Sandworm Team", "url": "/apt0034", "matched_alias": "sandworm" } ] }, { "title": "Hackers hijack HBO Max Reddit account to push malware in ClickFix ads", "link": "https://bleepingcomputer.com/news/security/hackers-hijack-hbo-max-reddit-account-to-push-malware-in-clickfix-ads", "canonical_url": "https://bleepingcomputer.com/news/security/hackers-hijack-hbo-max-reddit-account-to-push-malware-in-clickfix-ads", "date": "2026-09-14T18:34:16Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "ClickFix attacks are tricking Mac and Windows users into hacking themselves", "link": "https://techcrunch.com/2026/09/14/clickfix-attacks-are-tricking-mac-and-windows-users-into-hacking-themselves", "canonical_url": "https://techcrunch.com/2026/09/14/clickfix-attacks-are-tricking-mac-and-windows-users-into-hacking-themselves", "date": "2026-09-14T18:08:43Z", "source": "TechCrunch", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials", "link": "https://thehackernews.com/2026/09/3bb-attacker-used-meshcentral-backdoor.html", "canonical_url": "https://thehackernews.com/2026/09/3bb-attacker-used-meshcentral-backdoor.html", "date": "2026-09-14T18:01:49Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries", "link": "https://thehackernews.com/2026/09/red-heron-exploits-gitea-rce-to.html", "canonical_url": "https://thehackernews.com/2026/09/red-heron-exploits-gitea-rce-to.html", "date": "2026-09-14T16:56:30Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Fake Voicemail Transcript Emails Target 7,800+ Organizations in Large-Scale Credential Phishing", "link": "https://blog.checkpoint.com/security/fake-voicemail-transcript-emails-target-7800-organizations-in-large-scale-credential-phishing", "canonical_url": "https://blog.checkpoint.com/security/fake-voicemail-transcript-emails-target-7800-organizations-in-large-scale-credential-phishing", "date": "2026-09-14T13:00:00Z", "source": "Check Point", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Revolut discloses data breach exposing financial info, passports", "link": "https://bleepingcomputer.com/news/security/revolut-discloses-data-breach-exposing-financial-info-passports", "canonical_url": "https://bleepingcomputer.com/news/security/revolut-discloses-data-breach-exposing-financial-info-passports", "date": "2026-09-14T08:48:24Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "CISA: Hackers now exploit max severity GitLab flaw in attacks", "link": "https://bleepingcomputer.com/news/security/cisa-hackers-now-exploit-max-severity-gitlab-flaw-in-attacks", "canonical_url": "https://bleepingcomputer.com/news/security/cisa-hackers-now-exploit-max-severity-gitlab-flaw-in-attacks", "date": "2026-09-14T07:06:27Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers exploit Tencent app flaw to deploy GrayRabbit malware", "link": "https://bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware", "canonical_url": "https://bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware", "date": "2026-09-13T14:26:32Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data", "link": "https://thehackernews.com/2026/09/attackers-use-passkey-phishing-to.html", "canonical_url": "https://thehackernews.com/2026/09/attackers-use-passkey-phishing-to.html", "date": "2026-09-13T10:11:48Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV", "link": "https://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html", "canonical_url": "https://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html", "date": "2026-09-12T15:54:45Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Revolut confirms customer data breach through fake government requests", "link": "https://techcrunch.com/2026/09/12/revolut-confirms-customer-data-breach-through-fake-government-requests", "canonical_url": "https://techcrunch.com/2026/09/12/revolut-confirms-customer-data-breach-through-fake-government-requests", "date": "2026-09-12T14:40:00Z", "source": "TechCrunch", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers", "link": "https://thehackernews.com/2026/09/openai-agents-linked-to-rubygems.html", "canonical_url": "https://thehackernews.com/2026/09/openai-agents-linked-to-rubygems.html", "date": "2026-09-12T09:07:56Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers abused Claude to extract secrets from 1.8M Android apps", "link": "https://bleepingcomputer.com/news/security/hackers-abused-claude-to-extract-secrets-from-18m-android-apps", "canonical_url": "https://bleepingcomputer.com/news/security/hackers-abused-claude-to-extract-secrets-from-18m-android-apps", "date": "2026-09-11T20:19:09Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Threat Actor Generates 1M Personalized Fraud Emails in 3 Days", "link": "https://darkreading.com/cyberattacks-data-breaches/1m-personalized-fraud-emails-3-days", "canonical_url": "https://darkreading.com/cyberattacks-data-breaches/1m-personalized-fraud-emails-3-days", "date": "2026-09-11T19:21:08Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Passkey-themed phishing attacks lead to Microsoft 365 data theft", "link": "https://bleepingcomputer.com/news/security/passkey-themed-phishing-attacks-lead-to-microsoft-365-data-theft", "canonical_url": "https://bleepingcomputer.com/news/security/passkey-themed-phishing-attacks-lead-to-microsoft-365-data-theft", "date": "2026-09-11T17:26:50Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection", "link": "https://thehackernews.com/2026/09/russian-state-sponsored-hackers-use.html", "canonical_url": "https://thehackernews.com/2026/09/russian-state-sponsored-hackers-use.html", "date": "2026-09-11T14:10:20Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Scammers target hundreds of thousands of crypto owners after Trezor confirms data breach of email provider", "link": "https://techcrunch.com/2026/09/11/scammers-target-hundreds-of-thousands-of-crypto-owners-after-trezor-confirms-data-breach-of-email-provider", "canonical_url": "https://techcrunch.com/2026/09/11/scammers-target-hundreds-of-thousands-of-crypto-owners-after-trezor-confirms-data-breach-of-email-provider", "date": "2026-09-11T13:32:54Z", "source": "TechCrunch", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor", "link": "https://thehackernews.com/2026/09/china-linked-unc3569-exploited-sogou.html", "canonical_url": "https://thehackernews.com/2026/09/china-linked-unc3569-exploited-sogou.html", "date": "2026-09-11T07:14:09Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ { "name": "UNC3569", "url": "/unc3569", "matched_alias": "unc3569" } ] }, { "title": "Conti ransomware gang member sentenced to 4 years in prison", "link": "https://bleepingcomputer.com/news/security/conti-ransomware-gang-member-sentenced-to-four-years-in-prison", "canonical_url": "https://bleepingcomputer.com/news/security/conti-ransomware-gang-member-sentenced-to-four-years-in-prison", "date": "2026-09-11T06:48:37Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "ransomware" ], "actors": [ { "name": "Conti", "url": "/conti", "matched_alias": "conti" } ] }, { "title": "Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware", "link": "https://thehackernews.com/2026/09/cisco-fmc-flaws-exploited-to-steal.html", "canonical_url": "https://thehackernews.com/2026/09/cisco-fmc-flaws-exploited-to-steal.html", "date": "2026-09-11T06:19:59Z", "source": "The Hacker News", "cves": [ ], "tags": [ "ransomware" ], "actors": [ { "name": "Qilin", "url": "/qilin", "matched_alias": "qilin ransomware" } ] }, { "title": "New Android malware encrypts files, steals data, and harasses victims", "link": "https://bleepingcomputer.com/news/security/new-android-malware-encrypts-files-steals-data-and-harasses-victims", "canonical_url": "https://bleepingcomputer.com/news/security/new-android-malware-encrypts-files-steals-data-and-harasses-victims", "date": "2026-09-10T21:40:43Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Voice Callers Exploit BYOD to Reach Microsoft 365, Corporate Data", "link": "https://darkreading.com/threat-intelligence/voice-callers-exploit-byod-microsoft-365-corporate-data", "canonical_url": "https://darkreading.com/threat-intelligence/voice-callers-exploit-byod-microsoft-365-corporate-data", "date": "2026-09-10T20:36:03Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Surfshark VPN says hackers breached internal testing, proxy servers", "link": "https://bleepingcomputer.com/news/security/surfshark-vpn-says-hackers-breached-internal-testing-proxy-servers", "canonical_url": "https://bleepingcomputer.com/news/security/surfshark-vpn-says-hackers-breached-internal-testing-proxy-servers", "date": "2026-09-10T19:15:07Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories", "link": "https://thehackernews.com/2026/09/threatsday-200-android-flaws-browser.html", "canonical_url": "https://thehackernews.com/2026/09/threatsday-200-android-flaws-browser.html", "date": "2026-09-10T17:47:38Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Nightmare-Eclipse Strikes Again With 'ShieldCrash' Windows Exploit", "link": "https://darkreading.com/vulnerabilities-threats/nightmare-eclipse-strikes-again-shieldcrash-windows-exploit", "canonical_url": "https://darkreading.com/vulnerabilities-threats/nightmare-eclipse-strikes-again-shieldcrash-windows-exploit", "date": "2026-09-10T15:29:12Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks", "link": "https://thehackernews.com/2026/09/gigabud-creates-android-work-profiles.html", "canonical_url": "https://thehackernews.com/2026/09/gigabud-creates-android-work-profiles.html", "date": "2026-09-10T11:33:43Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6", "link": "https://thehackernews.com/2026/09/anthropic-ai-models-breached-real.html", "canonical_url": "https://thehackernews.com/2026/09/anthropic-ai-models-breached-real.html", "date": "2026-09-10T07:04:01Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Trezor warns users of email provider breach, phishing attacks", "link": "https://bleepingcomputer.com/news/security/trezor-warns-users-of-email-provider-breach-phishing-attacks", "canonical_url": "https://bleepingcomputer.com/news/security/trezor-warns-users-of-email-provider-breach-phishing-attacks", "date": "2026-09-10T06:56:33Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Mythos Vulnerability Firehose Hits a Human Bottleneck", "link": "https://darkreading.com/application-security/mythos-vulnerability-firehose-hits-human-bottleneck", "canonical_url": "https://darkreading.com/application-security/mythos-vulnerability-firehose-hits-human-bottleneck", "date": "2026-09-09T21:19:55Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Four groups caught using the same Chrome and Windows exploit kit", "link": "https://arstechnica.com/information-technology/2026/09/4-groups-caught-using-the-same-chrome-and-windows-exploit-kit", "canonical_url": "https://arstechnica.com/information-technology/2026/09/4-groups-caught-using-the-same-chrome-and-windows-exploit-kit", "date": "2026-09-09T20:55:02Z", "source": "Ars Technica", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "August 2026 Cyber Threat Landscape: GenAI Data Exposure Emerges as a New Enterprise Risk as Attacks, Phishing, and Ransomware Accelerate", "link": "https://blog.checkpoint.com/security/august-2026-cyber-threat-landscape-genai-data-exposure-emerges-as-a-new-enterprise-risk-as-attacks-phishing-and-ransomware-accelerate", "canonical_url": "https://blog.checkpoint.com/security/august-2026-cyber-threat-landscape-genai-data-exposure-emerges-as-a-new-enterprise-risk-as-attacks-phishing-and-ransomware-accelerate", "date": "2026-09-09T18:09:36Z", "source": "Check Point", "cves": [ ], "tags": [ "ransomware" ], "actors": [ ] }, { "title": "Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week", "link": "https://thehackernews.com/2026/09/four-spy-groups-used-same-chrome-and.html", "canonical_url": "https://thehackernews.com/2026/09/four-spy-groups-used-same-chrome-and.html", "date": "2026-09-09T16:34:05Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Veradigm warns of patient data breach after ransomware gang claims attack", "link": "https://bleepingcomputer.com/news/security/veradigm-discloses-patient-data-breach-after-gentlemen-gang-claims-attack", "canonical_url": "https://bleepingcomputer.com/news/security/veradigm-discloses-patient-data-breach-after-gentlemen-gang-claims-attack", "date": "2026-09-09T15:31:23Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "ransomware", "breach" ], "actors": [ ] }, { "title": "Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA", "link": "https://thehackernews.com/2026/09/infostealer-logs-expose-replayable-ai.html", "canonical_url": "https://thehackernews.com/2026/09/infostealer-logs-expose-replayable-ai.html", "date": "2026-09-09T14:23:55Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans", "link": "https://thehackernews.com/2026/09/f5-big-ip-apm-malware-injects-php-web.html", "canonical_url": "https://thehackernews.com/2026/09/f5-big-ip-apm-malware-injects-php-web.html", "date": "2026-09-09T07:36:49Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "New Microsoft Defender 'ShieldCrash' zero-day grants SYSTEM access", "link": "https://bleepingcomputer.com/news/security/new-microsoft-defender-shieldcrash-zero-day-grants-system-access", "canonical_url": "https://bleepingcomputer.com/news/security/new-microsoft-defender-shieldcrash-zero-day-grants-system-access", "date": "2026-09-09T07:30:15Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed", "link": "https://thehackernews.com/2026/09/researcher-drops-new-microsoft-defender.html", "canonical_url": "https://thehackernews.com/2026/09/researcher-drops-new-microsoft-defender.html", "date": "2026-09-09T06:47:27Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Google warns of new Chrome zero-day bug exploited in attacks", "link": "https://bleepingcomputer.com/news/security/google-patches-seventh-chrome-zero-day-exploited-in-attacks-this-year", "canonical_url": "https://bleepingcomputer.com/news/security/google-patches-seventh-chrome-zero-day-exploited-in-attacks-this-year", "date": "2026-09-09T06:25:48Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Critical Remote Code Execution Vulnerabilities in Check Point Quantum Security Gateway and Security Management (CVE-2026-85102, CVE-2026-85103)", "link": "https://labs.beazley.security/advisories/BSL-A1203", "canonical_url": "https://labs.beazley.security/advisories/BSL-A1203", "date": "2026-09-09T05:00:00Z", "source": "Beazley Security Labs Advisories", "cves": [ "CVE-2026-85102", "CVE-2026-85103" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "N-able N-central Pre-Auth RCE Flaw Exploited in the Wild", "link": "https://thehackernews.com/2026/09/n-able-n-central-pre-auth-rce-flaw.html", "canonical_url": "https://thehackernews.com/2026/09/n-able-n-central-pre-auth-rce-flaw.html", "date": "2026-09-09T04:27:51Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit", "link": "https://bleepingcomputer.com/news/security/hackers-breach-f5-big-ip-apm-devices-to-deploy-linux-rootkit", "canonical_url": "https://bleepingcomputer.com/news/security/hackers-breach-f5-big-ip-apm-devices-to-deploy-linux-rootkit", "date": "2026-09-08T20:08:55Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "ShinyHunters hackers claim breach of Florida \"DAVID\" DMV database", "link": "https://bleepingcomputer.com/news/security/shinyhunters-hackers-claim-breach-of-florida-david-dmv-database", "canonical_url": "https://bleepingcomputer.com/news/security/shinyhunters-hackers-claim-breach-of-florida-david-dmv-database", "date": "2026-09-08T16:35:47Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "breach" ], "actors": [ { "name": "ShinyHunters", "url": "/shinyhunters", "matched_alias": "shinyhunters" } ] }, { "title": "SAP warns of maximum severity 'OVERPASS' kernel vulnerability", "link": "https://bleepingcomputer.com/news/security/sap-warns-of-maximum-severity-overpass-kernel-vulnerability", "canonical_url": "https://bleepingcomputer.com/news/security/sap-warns-of-maximum-severity-overpass-kernel-vulnerability", "date": "2026-09-08T14:55:20Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "A hacker stole $340M in a crypto heist, then returned most of it", "link": "https://techcrunch.com/2026/09/08/a-hacker-stole-340m-in-a-crypto-heist-then-returned-most-of-it", "canonical_url": "https://techcrunch.com/2026/09/08/a-hacker-stole-340m-in-a-crypto-heist-then-returned-most-of-it", "date": "2026-09-08T14:11:29Z", "source": "TechCrunch", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Webinar: The forgotten Google Workspace access that can lead to a breach", "link": "https://bleepingcomputer.com/news/security/webinar-the-forgotten-google-workspace-access-that-can-lead-to-a-breach", "canonical_url": "https://bleepingcomputer.com/news/security/webinar-the-forgotten-google-workspace-access-that-can-lead-to-a-breach", "date": "2026-09-08T12:40:48Z", "source": "BleepingComputer", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Cybercriminals Hack Brazilian Government Servers to Host Phishing Sites", "link": "https://darkreading.com/threat-intelligence/cybercriminals-hack-brazilian-government-servers-host-phishing-sites", "canonical_url": "https://darkreading.com/threat-intelligence/cybercriminals-hack-brazilian-government-servers-host-phishing-sites", "date": "2026-09-08T12:00:00Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell", "link": "https://thehackernews.com/2026/09/adobe-patches-magento-zero-day.html", "canonical_url": "https://thehackernews.com/2026/09/adobe-patches-magento-zero-day.html", "date": "2026-09-08T09:13:47Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Magento StyleSmuggler zero-day exploited to deploy Linux backdoor", "link": "https://bleepingcomputer.com/news/security/magento-stylesmuggler-zero-day-exploited-to-deploy-linux-backdoor", "canonical_url": "https://bleepingcomputer.com/news/security/magento-stylesmuggler-zero-day-exploited-to-deploy-linux-backdoor", "date": "2026-09-07T16:50:29Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks", "link": "https://thehackernews.com/2026/09/microsoft-365-attackers-use-help-desk.html", "canonical_url": "https://thehackernews.com/2026/09/microsoft-365-attackers-use-help-desk.html", "date": "2026-09-07T15:51:56Z", "source": "The Hacker News", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released", "link": "https://thehackernews.com/2026/09/telerik-ui-padding-oracle-bug-chained.html", "canonical_url": "https://thehackernews.com/2026/09/telerik-ui-padding-oracle-bug-chained.html", "date": "2026-09-07T11:20:14Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "ConnectWise warns of new ScreenConnect flaw without patch", "link": "https://bleepingcomputer.com/news/security/connectwise-warns-of-new-screenconnect-flaw-without-patch", "canonical_url": "https://bleepingcomputer.com/news/security/connectwise-warns-of-new-screenconnect-flaw-without-patch", "date": "2026-09-07T10:06:38Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw", "link": "https://thehackernews.com/2026/09/n-able-issues-fourth-n-central-hotfix.html", "canonical_url": "https://thehackernews.com/2026/09/n-able-issues-fourth-n-central-hotfix.html", "date": "2026-09-07T08:31:12Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Attackers conceal phishing lures using invisible Unicode characters", "link": "https://bleepingcomputer.com/news/security/attackers-conceal-phishing-lures-using-invisible-unicode-characters", "canonical_url": "https://bleepingcomputer.com/news/security/attackers-conceal-phishing-lures-using-invisible-unicode-characters", "date": "2026-09-06T14:23:46Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores", "link": "https://thehackernews.com/2026/09/unpatched-magento-and-adobe-commerce.html", "canonical_url": "https://thehackernews.com/2026/09/unpatched-magento-and-adobe-commerce.html", "date": "2026-09-05T20:14:47Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities", "link": "https://thehackernews.com/2026/09/attackers-exploit-papercut-flaws-to.html", "canonical_url": "https://thehackernews.com/2026/09/attackers-exploit-papercut-flaws-to.html", "date": "2026-09-05T07:31:53Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "OpenAI agents discussed ways to escape their sandbox on public wiki", "link": "https://arstechnica.com/security/2026/09/openai-agents-discussed-ways-to-escape-their-sandbox-on-public-wiki", "canonical_url": "https://arstechnica.com/security/2026/09/openai-agents-discussed-ways-to-escape-their-sandbox-on-public-wiki", "date": "2026-09-04T22:17:36Z", "source": "Ars Technica", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters", "link": "https://thehackernews.com/2026/09/phishing-campaign-sends-millions-of.html", "canonical_url": "https://thehackernews.com/2026/09/phishing-campaign-sends-millions-of.html", "date": "2026-09-04T15:57:15Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic", "link": "https://thehackernews.com/2026/09/new-ted-backdoor-hides-inside-victims.html", "canonical_url": "https://thehackernews.com/2026/09/new-ted-backdoor-hides-inside-victims.html", "date": "2026-09-04T14:51:13Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges", "link": "https://bleepingcomputer.com/news/security/new-crowdstrike-falconflank-zero-day-grants-system-privileges", "canonical_url": "https://bleepingcomputer.com/news/security/new-crowdstrike-falconflank-zero-day-grants-system-privileges", "date": "2026-09-04T13:22:01Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "AI Is Ending the Era of Hidden Vulnerabilities — Are Vendors Ready?", "link": "https://darkreading.com/vulnerabilities-threats/ai-ending-era-hidden-vulnerabilities-are-vendors-ready", "canonical_url": "https://darkreading.com/vulnerabilities-threats/ai-ending-era-hidden-vulnerabilities-are-vendors-ready", "date": "2026-09-04T13:00:00Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors", "link": "https://rapid7.com/blog/post/tr-dprk-apts-ted-backdoor-curlrat-target-south-korean-media-automotive-sectors", "canonical_url": "https://rapid7.com/blog/post/tr-dprk-apts-ted-backdoor-curlrat-target-south-korean-media-automotive-sectors", "date": "2026-09-04T12:00:00Z", "source": "Rapid7", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws", "link": "https://thehackernews.com/2026/09/over-440000-exploit-attempts-target.html", "canonical_url": "https://thehackernews.com/2026/09/over-440000-exploit-attempts-target.html", "date": "2026-09-04T08:48:45Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests", "link": "https://thehackernews.com/2026/09/gpt-6-astra-scores-100-on-exploitbench.html", "canonical_url": "https://thehackernews.com/2026/09/gpt-6-astra-scores-100-on-exploitbench.html", "date": "2026-09-04T06:47:52Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak models", "link": "https://blog.cloudflare.com/vulnerability-discovery-remediation", "canonical_url": "https://blog.cloudflare.com/vulnerability-discovery-remediation", "date": "2026-09-03T21:03:02Z", "source": "Cloudflare", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "What We Missed: Did ShinyHunters 'Breach' ReliaQuest?", "link": "https://darkreading.com/cybersecurity-operations/what-we-missed-did-shinyhunters-breach-reliaquest", "canonical_url": "https://darkreading.com/cybersecurity-operations/what-we-missed-did-shinyhunters-breach-reliaquest", "date": "2026-09-03T19:42:39Z", "source": "DarkReading", "cves": [ ], "tags": [ "breach" ], "actors": [ { "name": "ShinyHunters", "url": "/shinyhunters", "matched_alias": "shinyhunters" } ] }, { "title": "ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories", "link": "https://thehackernews.com/2026/09/threatsday-ceo-phishing-kits-5k-dropbox.html", "canonical_url": "https://thehackernews.com/2026/09/threatsday-ceo-phishing-kits-5k-dropbox.html", "date": "2026-09-03T18:02:47Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory", "link": "https://thehackernews.com/2026/09/brazetsu-malware-turns-compromised.html", "canonical_url": "https://thehackernews.com/2026/09/brazetsu-malware-turns-compromised.html", "date": "2026-09-03T15:26:47Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data", "link": "https://thehackernews.com/2026/09/thomson-reuters-court-software-breach.html", "canonical_url": "https://thehackernews.com/2026/09/thomson-reuters-court-software-breach.html", "date": "2026-09-03T14:39:05Z", "source": "The Hacker News", "cves": [ ], "tags": [ "breach" ], "actors": [ ] }, { "title": "Your Employee’s Password Appeared in an Infostealer Log. Now What?", "link": "https://bleepingcomputer.com/news/security/your-employees-password-appeared-in-an-infostealer-log-now-what", "canonical_url": "https://bleepingcomputer.com/news/security/your-employees-password-appeared-in-an-infostealer-log-now-what", "date": "2026-09-03T13:50:59Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Plex warns users to patch security vulnerabilities immediately", "link": "https://bleepingcomputer.com/news/security/plex-warns-users-to-patch-security-vulnerabilities-immediately", "canonical_url": "https://bleepingcomputer.com/news/security/plex-warns-users-to-patch-security-vulnerabilities-immediately", "date": "2026-09-03T11:02:22Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone", "link": "https://thehackernews.com/2026/09/pegasus-zero-click-spyware-exploit.html", "canonical_url": "https://thehackernews.com/2026/09/pegasus-zero-click-spyware-exploit.html", "date": "2026-09-03T08:43:17Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon", "link": "https://thehackernews.com/2026/09/researcher-releases-falconflank-poc.html", "canonical_url": "https://thehackernews.com/2026/09/researcher-releases-falconflank-poc.html", "date": "2026-09-03T06:26:59Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners", "link": "https://thehackernews.com/2026/09/cisa-adds-seven-exploited-flaws-as.html", "canonical_url": "https://thehackernews.com/2026/09/cisa-adds-seven-exploited-flaws-as.html", "date": "2026-09-03T05:19:04Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "AI's Vulnerability Surge May Be More Manageable Than First Feared", "link": "https://darkreading.com/application-security/ai-vulnerability-surge-manageable-than-first-feared", "canonical_url": "https://darkreading.com/application-security/ai-vulnerability-surge-manageable-than-first-feared", "date": "2026-09-02T21:14:06Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE", "link": "https://darkreading.com/vulnerabilities-threats/sonicwall-sma-1000-zero-days-unauthenticated-rce", "canonical_url": "https://darkreading.com/vulnerabilities-threats/sonicwall-sma-1000-zero-days-unauthenticated-rce", "date": "2026-09-02T20:43:59Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild", "link": "https://rapid7.com/blog/post/etr-critical-sonicwall-sma1000-vulnerabilities-cve-2026-83548-cve-2026-83549-exploited-in-the-wild", "canonical_url": "https://rapid7.com/blog/post/etr-critical-sonicwall-sma1000-vulnerabilities-cve-2026-83548-cve-2026-83549-exploited-in-the-wild", "date": "2026-09-02T16:58:45Z", "source": "Rapid7", "cves": [ "CVE-2026-83548", "CVE-2026-83549" ], "tags": [ "cve" ], "actors": [ ] }, { "title": "Threat Gang 'Springs' Vishing Attacks on Microsoft Teams Users", "link": "https://darkreading.com/cyberattacks-data-breaches/threat-gang-springs-vishing-attacks-microsoft-teams-users", "canonical_url": "https://darkreading.com/cyberattacks-data-breaches/threat-gang-springs-vishing-attacks-microsoft-teams-users", "date": "2026-09-02T16:51:21Z", "source": "DarkReading", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Hackers exploit critical JFrog Artifactory flaw to forge admin tokens", "link": "https://bleepingcomputer.com/news/security/hackers-exploit-critical-jfrog-artifactory-flaw-to-forge-admin-tokens", "canonical_url": "https://bleepingcomputer.com/news/security/hackers-exploit-critical-jfrog-artifactory-flaw-to-forge-admin-tokens", "date": "2026-09-02T15:47:08Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control", "link": "https://thehackernews.com/2026/09/meta-ads-push-streamrat-android-trojan.html", "canonical_url": "https://thehackernews.com/2026/09/meta-ads-push-streamrat-android-trojan.html", "date": "2026-09-02T12:22:02Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain", "link": "https://thehackernews.com/2026/09/attackers-exploit-two-sonicwall-sma.html", "canonical_url": "https://thehackernews.com/2026/09/attackers-exploit-two-sonicwall-sma.html", "date": "2026-09-02T10:53:49Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends", "link": "https://thehackernews.com/2026/09/geonetwork-fixes-unauthenticated-rce.html", "canonical_url": "https://thehackernews.com/2026/09/geonetwork-fixes-unauthenticated-rce.html", "date": "2026-09-02T09:18:02Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands", "link": "https://thehackernews.com/2026/09/extradited-russian-hacker-faces-charges.html", "canonical_url": "https://thehackernews.com/2026/09/extradited-russian-hacker-faces-charges.html", "date": "2026-09-02T09:10:23Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "US charges Russian for infecting 80,000 freelancers with malware", "link": "https://bleepingcomputer.com/news/security/us-charges-russian-for-infecting-80-000-freelancers-with-malware", "canonical_url": "https://bleepingcomputer.com/news/security/us-charges-russian-for-infecting-80-000-freelancers-with-malware", "date": "2026-09-02T09:06:48Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Sality botnet infrastructure dismantled in joint global takedown", "link": "https://bleepingcomputer.com/news/security/sality-botnet-infrastructure-dismantled-in-joint-global-takedown", "canonical_url": "https://bleepingcomputer.com/news/security/sality-botnet-infrastructure-dismantled-in-joint-global-takedown", "date": "2026-09-02T08:00:43Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ { "name": "SALTY SPIDER", "url": "/salty-spider", "matched_alias": "sality" } ] }, { "title": "Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another", "link": "https://thehackernews.com/2026/09/researchers-use-claude-to-port-pre-auth.html", "canonical_url": "https://thehackernews.com/2026/09/researchers-use-claude-to-port-pre-auth.html", "date": "2026-09-02T07:47:13Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads", "link": "https://thehackernews.com/2026/09/authorities-turn-salitys-p2p-network.html", "canonical_url": "https://thehackernews.com/2026/09/authorities-turn-salitys-p2p-network.html", "date": "2026-09-02T06:56:30Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ { "name": "SALTY SPIDER", "url": "/salty-spider", "matched_alias": "sality" } ] }, { "title": "SonicWall warns of actively exploited SMA1000 zero-day flaws", "link": "https://bleepingcomputer.com/news/security/sonicwall-warns-of-actively-exploited-sma1000-zero-day-flaws", "canonical_url": "https://bleepingcomputer.com/news/security/sonicwall-warns-of-actively-exploited-sma1000-zero-day-flaws", "date": "2026-09-02T06:39:29Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Stronger Security Drives Ransomware Groups to Recruit From Within", "link": "https://darkreading.com/cyber-risk/stronger-security-drives-ransomware-groups-to-recruit-from-within", "canonical_url": "https://darkreading.com/cyber-risk/stronger-security-drives-ransomware-groups-to-recruit-from-within", "date": "2026-09-01T21:03:19Z", "source": "DarkReading", "cves": [ ], "tags": [ "ransomware" ], "actors": [ ] }, { "title": "Hackers abuse Faronics Deploy admin tool to install ScreenConnect", "link": "https://bleepingcomputer.com/news/security/hackers-abuse-faronics-deploy-admin-tool-to-install-screenconnect", "canonical_url": "https://bleepingcomputer.com/news/security/hackers-abuse-faronics-deploy-admin-tool-to-install-screenconnect", "date": "2026-09-01T20:53:23Z", "source": "BleepingComputer", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure", "link": "https://thehackernews.com/2026/09/attackers-exploit-critical-jfrog.html", "canonical_url": "https://thehackernews.com/2026/09/attackers-exploit-critical-jfrog.html", "date": "2026-09-01T17:53:11Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests", "link": "https://thehackernews.com/2026/09/iranian-hackers-pose-as-recruiters-to.html", "canonical_url": "https://thehackernews.com/2026/09/iranian-hackers-pose-as-recruiters-to.html", "date": "2026-09-01T13:08:58Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones", "link": "https://thehackernews.com/2026/09/threat-actors-dont-want-better-attacks.html", "canonical_url": "https://thehackernews.com/2026/09/threat-actors-dont-want-better-attacks.html", "date": "2026-09-01T11:30:00Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ ] }, { "title": "Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis", "link": "https://thehackernews.com/2026/09/russia-aligned-uac-0099-plants-nuclear.html", "canonical_url": "https://thehackernews.com/2026/09/russia-aligned-uac-0099-plants-nuclear.html", "date": "2026-09-01T08:26:24Z", "source": "The Hacker News", "cves": [ ], "tags": [ ], "actors": [ { "name": "UAC-0099", "url": "/uac-0099", "matched_alias": "uac-0099" } ] }, { "title": "Critical Vulnerabilities in SonicWall SMA1000 Series Appliances Under Active Exploitation (CVE-2026-83548, CVE-2026-83549)", "link": "https://labs.beazley.security/advisories/BSL-A1201", "canonical_url": "https://labs.beazley.security/advisories/BSL-A1201", "date": "2026-09-01T07:00:00Z", "source": "Beazley Security Labs Advisories", "cves": [ "CVE-2026-83548", "CVE-2026-83549" ], "tags": [ "cve" ], "actors": [ ] } ] }