New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt b... 2026-7-2 07:24:23 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com sekoia skytext 2026 pocs trojan

SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation Vulnerability / Threat IntelligenceThe U.S. Cybersecurity and Infrastructure Security Agency (CISA... 2026-7-2 05:46:45 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com microsoft ransomware network 2026 security

Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters Kubernetes / Server SecurityArgo CD, a widely used tool for deploying software to Kubernetes, has... 2026-7-1 19:40:6 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com argo network kubernetes synacktiv helm

19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges A teenager accused of belonging to the hacking group Scattered Spider has been extradited from Finl... 2026-7-1 19:28:7 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com scattered stokes court spider desk

SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT Unknown threat actors are leveraging the ScreenConnect remote access tool as a way to deploy and ex... 2026-7-1 17:53:6 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com powershell microsoft attackers asyncrat

VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer Cybersecurity researchers have flagged a new multi-stage malware delivery attack chain that uses so... 2026-7-1 17:18:50 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com loader powershell payload stage securonix

Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures A Brazilian banking trojan called Ousaban is going after Windows users who bank in Spain and Port... 2026-7-1 15:26:55 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com ousaban spain portugal windows screening

Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic Artificial Intelligence / VulnerabilityAdobe has released patches for multiple maximum-severity se... 2026-7-1 15:25:46 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com 2026 security coldfusion premise

Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands AI Coding / VulnerabilityTwo flaws in Cursor, an AI code editor, could let a single, ordinary-look... 2026-7-1 14:42:54 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com cato 2026 mcp duneslide attacker

Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts Vulnerability / Network SecurityA recently disclosed critical security flaw impacting Progress Kem... 2026-7-1 13:56:18 | 阅读: 2 | 收藏 | The Hacker News - thehackernews.com injection loadmaster 2026 attacker 8037

AI-Generated Browser Ransomware Abuses Chromium API on Windows and Android Cybersecurity researchers have flagged a new malware artifact generated using DeepSeek that constru... 2026-7-1 12:59:19 | 阅读: 2 | 收藏 | The Hacker News - thehackernews.com malicious deepseek ransomware python novel

2026 Cybersecurity Assessment: The Gap Between Awareness and Resilience Organizations have never had greater awareness of cyber risk. Yet turning that awareness into opera... 2026-7-1 11:30:0 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com respondents resilience security

Microsoft Accelerates Post-Quantum Cryptography Shift to 2029 Quantum Computing / EncryptionMicrosoft on Tuesday said it's accelerating its quantum safe secur... 2026-7-1 10:41:36 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com pqc microsoft agility sooner newest

Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware Large language models keep inventing web addresses that do not exist. Attackers have started buyi... 2026-7-1 07:20:51 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com attacker phantom malicious phishing invent

Anthropic Restores Claude Fable 5 After U.S. Lifts Jailbreak-Linked Export Controls Anthropic is putting Claude Fable 5 back online worldwide. On June 30, the U.S. Commerce Department... 2026-7-1 06:46:17 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com anthropic claude jailbreak fable mythos

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts Password Security / Cloud SecurityCybersecurity researchers have warned of a "massive, ongoing, au... 2026-7-1 05:46:3 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com ropc huntress logins microsoft enforcing

Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office... 2026-7-1 05:32:12 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com clickfix windows pals clipboard powershell

Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service Vulnerability / Enterprise SecurityCitrix on Tuesday released security updates to address multiple... 2026-7-1 03:54:22 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com netscaler 2026 adc memory citrix

Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data Artificial Intelligence / Supply Chain SecurityNew Microsoft research shows how attackers can hija... 2026-6-30 17:46:7 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com microsoft mcp poisoned agents security

RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes... 2026-6-30 17:45:25 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com rustduck routers xlab remote newer