Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown thr... 2026-10-17 06:16:46 | 阅读: 42 | 收藏 | The Hacker News - thehackernews.com backup connectwise microsoft cloud tenants

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a rough... 2026-10-16 17:48:45 | 阅读: 22 | 收藏 | The Hacker News - thehackernews.com openbsd memory overflow calif

Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update se... 2026-10-16 16:43:39 | 阅读: 18 | 收藏 | The Hacker News - thehackernews.com aomei gtig attacker windows software

UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing Phishing / Artificial IntelligenceCybersecurity researchers have disclosed details of an advanced... 2026-10-16 16:16:44 | 阅读: 23 | 收藏 | The Hacker News - thehackernews.com phishing taiwan qr victim

OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract Artificial Intelligence / Web SecurityOpenAI has disclosed seven new incidents in which its artifi... 2026-10-16 14:3:4 | 阅读: 21 | 收藏 | The Hacker News - thehackernews.com 2026 openai network funds

AI Decision Models and Their Impact on AI SOC Platforms In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe A... 2026-10-16 11:30:0 | 阅读: 28 | 收藏 | The Hacker News - thehackernews.com memory verdict calibrated probability

China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) e... 2026-10-16 06:55:55 | 阅读: 35 | 收藏 | The Hacker News - thehackernews.com remote appliance beyondtrust 2026 castle

CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing AI agents being tested online reached the live systems of Indian organizations and read business re... 2026-10-16 06:53:9 | 阅读: 29 | 收藏 | The Hacker News - thehackernews.com agents attackers cloud anthropic client

PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS... 2026-10-16 04:59:36 | 阅读: 34 | 收藏 | The Hacker News - thehackernews.com network fortios attackers memory firewalls

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read me... 2026-10-15 20:24:36 | 阅读: 43 | 收藏 | The Hacker News - thehackernews.com vercel cloud microvm machine memory

ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an... 2026-10-15 18:49:33 | 阅读: 20 | 收藏 | The Hacker News - thehackernews.com security 2026 remote privileges memory

Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al J... 2026-10-15 16:1:57 | 阅读: 20 | 收藏 | The Hacker News - thehackernews.com spyware candiru citizen jazeera network

Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks Cyber Espionage / MalwareThe threat actor known as Silent Lynx has been attributed to a fresh set... 2026-10-15 16:0:26 | 阅读: 24 | 收藏 | The Hacker News - thehackernews.com 6275 uat saiga 2026 windows

Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate... 2026-10-15 14:11:36 | 阅读: 31 | 收藏 | The Hacker News - thehackernews.com tds hotejka affiliate roi777 infoblox

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them pr... 2026-10-15 12:58:5 | 阅读: 25 | 收藏 | The Hacker News - thehackernews.com 2026 aio client attacker overflow

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowin... 2026-10-15 12:28:13 | 阅读: 24 | 收藏 | The Hacker News - thehackernews.com sharp librsvg typed attacker optimizer

Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules Vulnerability / Web SecurityDrupal core has a critical flaw in its Field UI module that could let... 2026-10-15 12:7:20 | 阅读: 44 | 收藏 | The Hacker News - thehackernews.com drupal security 2026 pantheon callable

Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and... 2026-10-15 11:46:59 | 阅读: 30 | 收藏 | The Hacker News - thehackernews.com mssps tier mssp malicious

Why AI Confidence Is Not Validation AI is already part of digital forensics and incident response work, with or without a policy in pla... 2026-10-15 11:4:35 | 阅读: 31 | 收藏 | The Hacker News - thehackernews.com examiner acquisition matters gap

India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1 Telecom Security / PrivacyThe Indian government has directed telecom service providers (TSPs) in... 2026-10-15 10:42:16 | 阅读: 31 | 收藏 | The Hacker News - thehackernews.com originating database telecom circular ministry