SEI/CERT: VU#885548: Denial-of-service vulnerability in HTTP/2 servers via stalled flow-co (13 August 2026)
TheHackerNews: Attackers Exploit SharePoint Authentication Bypass After Public PoC Release (13 August 2026)
TheHackerNews: Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor (12 August 2026)
SEI/CERT: VU#431093: TCG TPM 2.0 reference code found vulnerable to information leakage an (12 August 2026)
TheHackerNews: 737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If (12 August 2026)
TheHackerNews: OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Mod (12 August 2026)
TheHackerNews: Enterprise Defenses Recovered at the Edge and Collapsed Inside (12 August 2026)
TheHackerNews: Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws (12 August 2026)
TheHackerNews: Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Ac (12 August 2026)
TheHackerNews: Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organ (12 August 2026)
TheHackerNews: SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitra (12 August 2026)
TheHackerNews: ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM (12 August 2026)
TheHackerNews: Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS (12 August 2026)
sysdig: Defaulting on tech debt: When the bill comes due, AI is the collector (12 August 2026)
TheHackerNews: Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Activ (11 August 2026)
TheHackerNews: Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Br (11 August 2026)
TheHackerNews: Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attend (11 August 2026)
TheHackerNews: Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run (11 August 2026)
SEI/CERT: VU#305509: OPeNDAP Hyrax is vulnerable to SSRF and Credential Disclosure (11 August 2026)
TheHackerNews: Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthen (11 August 2026)
TheHackerNews: DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Ha (11 August 2026)
TheHackerNews: OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Developme (11 August 2026)
TheHackerNews: A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellula (11 August 2026)
TheHackerNews: Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands i (11 August 2026)
TheHackerNews: Researchers Built a Fake Crypto Startup and Hired Three Suspected North Kor (11 August 2026)
TheHackerNews: Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11 (11 August 2026)
TheHackerNews: Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfil (11 August 2026)
TheHackerNews: Gunra Ransomware Exploits Fortinet FortiOS, FortiProxy Flaws to Breach Netw (11 August 2026)
TheHackerNews: Hackers Breach Polish Power Plant Controls via Private Cellular Network and (11 August 2026)
TheHackerNews: BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins (11 August 2026)
sysdig: Vulnerability response in the AI-discovery era (11 August 2026)
TheHackerNews: Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Devel (10 August 2026)
TheHackerNews: China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-cen (10 August 2026)
TheHackerNews: ⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, (10 August 2026)
SEI/CERT: VU#614868: Opencart ecommerce platform contains directory traversal vulnerabilit (10 August 2026)
TheHackerNews: Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Deve (10 August 2026)
TheHackerNews: New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resi (10 August 2026)
TheHackerNews: TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCo (10 August 2026)
TheHackerNews: Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credent (10 August 2026)
TheHackerNews: OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to (10 August 2026)
TheHackerNews: Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Atta (8 August 2026)
TheHackerNews: New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens (8 August 2026)
TheHackerNews: Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authenticat (8 August 2026)
TheHackerNews: N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Per (8 August 2026)
TheHackerNews: Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Atte (8 August 2026)
TheHackerNews: Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infosteale (7 August 2026)
TheHackerNews: ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets (7 August 2026)
TheHackerNews: UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data (7 August 2026)
SEI/CERT: VU#987105: The nothings stb TrueType library, up to version 1.26, contains a hea (7 August 2026)
TheHackerNews: New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP (7 August 2026)
TheHackerNews: Attackers Exploit SharePoint Authentication Bypass After Public PoC Release (13 August 2026)
TheHackerNews: Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor (12 August 2026)
SEI/CERT: VU#431093: TCG TPM 2.0 reference code found vulnerable to information leakage an (12 August 2026)
TheHackerNews: 737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If (12 August 2026)
TheHackerNews: OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Mod (12 August 2026)
TheHackerNews: Enterprise Defenses Recovered at the Edge and Collapsed Inside (12 August 2026)
TheHackerNews: Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws (12 August 2026)
TheHackerNews: Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Ac (12 August 2026)
TheHackerNews: Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organ (12 August 2026)
TheHackerNews: SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitra (12 August 2026)
TheHackerNews: ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM (12 August 2026)
TheHackerNews: Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS (12 August 2026)
sysdig: Defaulting on tech debt: When the bill comes due, AI is the collector (12 August 2026)
TheHackerNews: Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Activ (11 August 2026)
TheHackerNews: Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Br (11 August 2026)
TheHackerNews: Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attend (11 August 2026)
TheHackerNews: Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run (11 August 2026)
SEI/CERT: VU#305509: OPeNDAP Hyrax is vulnerable to SSRF and Credential Disclosure (11 August 2026)
TheHackerNews: Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthen (11 August 2026)
TheHackerNews: DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Ha (11 August 2026)
TheHackerNews: OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Developme (11 August 2026)
TheHackerNews: A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellula (11 August 2026)
TheHackerNews: Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands i (11 August 2026)
TheHackerNews: Researchers Built a Fake Crypto Startup and Hired Three Suspected North Kor (11 August 2026)
TheHackerNews: Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11 (11 August 2026)
TheHackerNews: Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfil (11 August 2026)
TheHackerNews: Gunra Ransomware Exploits Fortinet FortiOS, FortiProxy Flaws to Breach Netw (11 August 2026)
TheHackerNews: Hackers Breach Polish Power Plant Controls via Private Cellular Network and (11 August 2026)
TheHackerNews: BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins (11 August 2026)
sysdig: Vulnerability response in the AI-discovery era (11 August 2026)
TheHackerNews: Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Devel (10 August 2026)
TheHackerNews: China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-cen (10 August 2026)
TheHackerNews: ⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, (10 August 2026)
SEI/CERT: VU#614868: Opencart ecommerce platform contains directory traversal vulnerabilit (10 August 2026)
TheHackerNews: Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Deve (10 August 2026)
TheHackerNews: New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resi (10 August 2026)
TheHackerNews: TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCo (10 August 2026)
TheHackerNews: Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credent (10 August 2026)
TheHackerNews: OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to (10 August 2026)
TheHackerNews: Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Atta (8 August 2026)
TheHackerNews: New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens (8 August 2026)
TheHackerNews: Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authenticat (8 August 2026)
TheHackerNews: N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Per (8 August 2026)
TheHackerNews: Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Atte (8 August 2026)
TheHackerNews: Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infosteale (7 August 2026)
TheHackerNews: ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets (7 August 2026)
TheHackerNews: UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data (7 August 2026)
SEI/CERT: VU#987105: The nothings stb TrueType library, up to version 1.26, contains a hea (7 August 2026)
TheHackerNews: New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP (7 August 2026)