Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election Spyware / Mobile SecurityThe iPhone of Vladan Đokić, rector of the University of Belgrade and a p... 2026-10-20 12:59:44 | 阅读: 31 | 收藏 | The Hacker News - thehackernews.com spyware serbia Đokić citizen serbian

WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators WhatsApp's help pages carried hidden instructions for its support chatbot that told it not to reco... 2026-10-20 11:41:6 | 阅读: 36 | 收藏 | The Hacker News - thehackernews.com chatbot redact wired sat cite

What Security Teams Can Do To Tame Wild Code A sales manager builds an AI-assisted workflow to route leads. It connects to customer records, sum... 2026-10-20 11:33:4 | 阅读: 29 | 收藏 | The Hacker News - thehackernews.com security software approval shouldn approved

Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns Encryption / Software SecurityGo 1.27.3 and Go 1.26.10, released on October 20, make Go's certif... 2026-10-20 11:32:59 | 阅读: 26 | 收藏 | The Hacker News - thehackernews.com emudhra emsign em mozilla eight

Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader The Russia-linked state-sponsored threat actor tracked as APT28 (aka BlueDelta, Fancy Bear, and For... 2026-10-20 11:6:25 | 阅读: 34 | 收藏 | The Hacker News - thehackernews.com 2026 hookedge ukrainian ukraine loader

ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident Cloud Security / Incident ResponseConnectWise on Monday said it has taken remediation measures,... 2026-10-20 10:56:8 | 阅读: 34 | 收藏 | The Hacker News - thehackernews.com cloud connectwise backup tenants security

Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware An attacker used a contributor's GitHub account to replace the download archives on five existing... 2026-10-20 08:21:29 | 阅读: 21 | 收藏 | The Hacker News - thehackernews.com ovhcloud github swapped monday glassworm

ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan Vulnerability / Endpoint SecuritySiemens has addressed a DLL sideloading vulnerability impacting S... 2026-10-20 07:11:45 | 阅读: 32 | 收藏 | The Hacker News - thehackernews.com siemens malicious sideloading clickfix software

Ex-OpenAI Engineer Detained in Spy Device Case as Saudi Royal Contacts Emerge Cyber Espionage / Data SecurityA U.S. court on Monday granted the U.S. government's request to d... 2026-10-20 05:53:16 | 阅读: 39 | 收藏 | The Hacker News - thehackernews.com defendant saudi openai 2026 alfozan

Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware Artificial Intelligence / CybercrimeCybersecurity researchers have disclosed details of a ClickFix... 2026-10-20 04:5:58 | 阅读: 27 | 收藏 | The Hacker News - thehackernews.com romulus clickfix loader powershell legion

Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor Vulnerability / Web SecurityThreat actors have begun to exploit a chain of vulnerabilities in Pl... 2026-10-19 17:32:13 | 阅读: 24 | 收藏 | The Hacker News - thehackernews.com 2026 plex attacker plex2shell

Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were down... 2026-10-19 16:28:47 | 阅读: 22 | 收藏 | The Hacker News - thehackernews.com wordpress php wp activated security

⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More The worst problems don't always come with a warning. Sometimes they arrive through a service every... 2026-10-19 14:14:7 | 阅读: 60 | 收藏 | The Hacker News - thehackernews.com 2026 security agents remote phishing

GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicio... 2026-10-19 13:5:45 | 阅读: 22 | 收藏 | The Hacker News - thehackernews.com github malicious workflows stage

From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow: a recor... 2026-10-19 11:50:0 | 阅读: 26 | 收藏 | The Hacker News - thehackernews.com agents governance intake operational agentforce

Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and... 2026-10-19 10:6:40 | 阅读: 33 | 收藏 | The Hacker News - thehackernews.com apexacc windows security apex stealer

Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers A flaw in Broadcom's Wi-Fi setup software lets an attacker within radio range run code as root on... 2026-10-19 06:29:44 | 阅读: 28 | 收藏 | The Hacker News - thehackernews.com kaiser broadcom routers network wps

OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys Data Breach / Artificial IntelligenceAn intruder reached a legacy system at OpenCode on the nigh... 2026-10-19 06:7:8 | 阅读: 23 | 收藏 | The Hacker News - thehackernews.com opencode anthropic openai revoke

ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it conti... 2026-10-18 08:23:2 | 阅读: 54 | 收藏 | The Hacker News - thehackernews.com connectwise cloud tenants microsoft identities

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon Cybersecurity researchers have discovered a malicious npm package that's part of a recently discl... 2026-10-17 11:11:56 | 阅读: 29 | 收藏 | The Hacker News - thehackernews.com 2026 imgdecode runner runhelper windows