Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases Vulnerability / Software SecurityGitLab released fixes on October 21 for a flaw that lets an att... 2026-10-21 18:57:34 | 阅读: 23 | 收藏 | The Hacker News - thehackernews.com gitlab 2026 downtime attacker internal0

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor Malware / Artificial IntelligenceThe popular LiteLLM Python package has been compromised as part o... 2026-10-21 18:1:57 | 阅读: 29 | 收藏 | The Hacker News - thehackernews.com litellm github abi3 cp310 whl

OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So AI Security / Enterprise SecurityOpenAI has revealed that two artificial intelligence (AI) agents... 2026-10-21 16:33:47 | 阅读: 27 | 收藏 | The Hacker News - thehackernews.com monitoring agents security microsoft

PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge PHP has released emergency updates that fix two critical flaws in the language itself, letting an a... 2026-10-21 14:0:0 | 阅读: 24 | 收藏 | The Hacker News - thehackernews.com php 2026 memory security 109618

Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands Google on Tuesday said it's rolling out improved safeguards in its Chrome browser to secure users... 2026-10-21 13:15:9 | 阅读: 33 | 收藏 | The Hacker News - thehackernews.com chrome malicious clickfix webkit enhanced

China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors Cyber Espionage / MalwareCybersecurity researchers have disclosed details of a previously undocume... 2026-10-21 12:5:0 | 阅读: 45 | 收藏 | The Hacker News - thehackernews.com malicious attacker sandboxie sideloading sophos

Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports Generative AI has changed what a malicious email looks like. Messages that once gave themselves aw... 2026-10-21 11:53:34 | 阅读: 38 | 收藏 | The Hacker News - thehackernews.com proofpoint analysis attackers mailbox tier

PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't You cannot fully block the two critical PHP flaws called PHP2Shell before today's fix, and the one... 2026-10-21 10:36:53 | 阅读: 25 | 收藏 | The Hacker News - thehackernews.com php security gmo flatt workaround

The Harness Is the Hard Part of Agentic Pentesting AI Penetration Testing / Web SecurityAn AppSec team can point an AI agent running on a general-pur... 2026-10-21 10:32:40 | 阅读: 33 | 收藏 | The Hacker News - thehackernews.com pentera harness security contributed

Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections Attackers took control of more than 300 Tor exit relays in early October and used them to redirect... 2026-10-21 10:30:27 | 阅读: 27 | 收藏 | The Hacker News - thehackernews.com relays ssh ebury zimmer exits

Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites Unknown threat actors breached TeamUpdraft's website and potentially gained unauthorized access to... 2026-10-21 09:1:12 | 阅读: 34 | 收藏 | The Hacker News - thehackernews.com wordpress teamupdraft updraftplus 2026

U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases Artificial Intelligence / National SecurityU.S. federal civilian agencies must remove DeepSeek pro... 2026-10-21 08:4:17 | 阅读: 29 | 收藏 | The Hacker News - thehackernews.com deepseek security fascsa dhs acquisition

State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web State Bank of India has identified 3,897 customer records containing personal information in a set... 2026-10-21 07:44:22 | 阅读: 37 | 收藏 | The Hacker News - thehackernews.com filing sbi 897 security 375

CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilit... 2026-10-21 07:26:49 | 阅读: 33 | 收藏 | The Hacker News - thehackernews.com 2026 plex security exploited

Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion A Belarus-aligned hacktivist group spent nearly two years within the network of a Russian healthca... 2026-10-21 06:5:15 | 阅读: 31 | 收藏 | The Hacker News - thehackernews.com solar vasilek windows victim c2

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert Vulnerability / Web SecurityPHP will ship an out-of-cycle security release at 14:00 UTC today, Oct... 2026-10-21 04:57:50 | 阅读: 34 | 收藏 | The Hacker News - thehackernews.com php security watchtowr 2026 facing

Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromi... 2026-10-20 17:9:53 | 阅读: 20 | 收藏 | The Hacker News - thehackernews.com chrome emsign mozilla eight g3

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution Vulnerability / Enterprise SecurityCybersecurity researchers have released a proof-of-concept (PoC... 2026-10-20 15:38:52 | 阅读: 25 | 收藏 | The Hacker News - thehackernews.com attacker fortisiem horizon3 grpc preceded

Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA Vulnerability / Network SecurityPalo Alto Networks has disclosed that it's continuing to observe... 2026-10-20 15:32:27 | 阅读: 31 | 收藏 | The Hacker News - thehackernews.com 2026 security network ransomware 0257

Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites A Chinese-speaking criminal pointed autonomous AI agents at company websites and let them break in... 2026-10-20 14:7:17 | 阅读: 21 | 收藏 | The Hacker News - thehackernews.com norforge agents reuters panels cairn