GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories Supply Chain Attack / Cloud SecurityThe credential-theft campaign known as GhostAction has ramped... 2026-10-15 08:45:10 | 阅读: 30 | 收藏 | The Hacker News - thehackernews.com payload github security malicious ghostaction

Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previ... 2026-10-15 07:7:5 | 阅读: 54 | 收藏 | The Hacker News - thehackernews.com langflow mcp 2026 injection previdian

AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches Vulnerability / CryptojackingSingapore-based Ahsay Backup has released security updates to address... 2026-10-15 06:43:8 | 阅读: 39 | 收藏 | The Hacker News - thehackernews.com ahsaycbs hotfix 2026 security

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation Vulnerability / Network SecurityPalo Alto Networks on Wednesday issued security updates for a high... 2026-10-15 06:17:58 | 阅读: 39 | 收藏 | The Hacker News - thehackernews.com pan 2026 palo security alto

Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no... 2026-10-14 18:38:56 | 阅读: 24 | 收藏 | The Hacker News - thehackernews.com appliance 2026 security 5525 tac

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server,... 2026-10-14 17:38:31 | 阅读: 24 | 收藏 | The Hacker News - thehackernews.com php nextcloud collabora 303

Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of... 2026-10-14 17:9:15 | 阅读: 27 | 收藏 | The Hacker News - thehackernews.com phishing microsoft kits yam iron

U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud The U.S. Department of Justice (DoJ) on Tuesday charged 14 people and seized about 187 computers as... 2026-10-14 16:34:31 | 阅读: 30 | 收藏 | The Hacker News - thehackernews.com north itws dandong identities

CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to... 2026-10-14 12:30:42 | 阅读: 234 | 收藏 | The Hacker News - thehackernews.com 2026 ivanti appliance remote dscgi

curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the c... 2026-10-14 12:13:36 | 阅读: 20 | 收藏 | The Hacker News - thehackernews.com stenberg memory client reporter anthropic

How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access... 2026-10-14 11:50:0 | 阅读: 23 | 收藏 | The Hacker News - thehackernews.com drill deepfake security cfo executives

Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days Vulnerability / Browser SecurityA team at security firm XBOW chained three then-unknown Google Chr... 2026-10-14 11:19:2 | 阅读: 21 | 收藏 | The Hacker News - thehackernews.com chrome xbow 152 7977 2026

Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that... 2026-10-14 11:8:22 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com hirudo security payload

Vghost：AI 发现的 Linux vhost 漏洞导致提权及 Guest 逃逸至 Host A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and beco... 2026-10-14 07:46:57 | 阅读: 18 | 收藏 | 玄武实验室每日安全 - thehackernews.com vhost memory machine kernels vring

Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave Vulnerability / VirtualizationSecurity researchers ran their own code inside a protected part of W... 2026-10-14 05:52:28 | 阅读: 32 | 收藏 | The Hacker News - thehackernews.com enclave microsoft windows doyensec attacker

Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,41... 2026-10-14 04:34:43 | 阅读: 42 | 收藏 | The Hacker News - thehackernews.com attacker microsoft 2026 security

OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room A Saudi National and employee of OpenAI has been arrested for allegedly planting a hidden recording... 2026-10-14 01:59:25 | 阅读: 46 | 收藏 | The Hacker News - thehackernews.com alfozan openai recording 2026 allegedly

Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets Artificial Intelligence / IoT SecuritySmall artificial intelligence (AI) models may be months away... 2026-10-13 18:20:57 | 阅读: 28 | 收藏 | The Hacker News - thehackernews.com worm anthropic weights replicators boxes

Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another A flaw in Docker Hub, the registry where container images are published and downloaded, let one us... 2026-10-13 18:3:18 | 阅读: 34 | 收藏 | The Hacker News - thehackernews.com transferred conversion pushed repository pushes

Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far Vulnerability / Enterprise SecurityAn attacker chained three zero-day flaws in Ivanti Connect Secu... 2026-10-13 17:33:11 | 阅读: 35 | 收藏 | The Hacker News - thehackernews.com ivanti volexity attacker 2026 appliance