Google Warns Three AMD Turin CPU Flaws Could Leak Data Across VM ProcessesThe Hacker News · 11/12/2026
PTC Patches Critical Windchill and FlexPLM Flaw (CVE-2026-126325) Enabling Remote Code ExecutionThe Hacker News · 11/12/2026
Attackers Exploit 4,837 Hijacked GitHub Accounts to Deploy CI Secret Stealer Across 1,806+ RepositoriesThe Hacker News · 11/12/2026
Critical Apache HTTP/2 Flaw (CVE-2026-119618) Enables Unauthenticated Remote Code ExecutionThe Hacker News · 11/12/2026
Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available PatchesThe Hacker News · 11/11/2026
Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive ClonesThe Hacker News · 11/10/2026
Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix ConfirmedThe Hacker News · 11/10/2026
Hackers Exploit Barracuda Email Security Gateway Flaws to Gain Root AccessBleeping Computer · 11/10/2026
SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code ExecutionThe Hacker News / Bleeping Computer · 11/10/2026
France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail SitesThe Hacker News / Bleeping Computer · 11/10/2026
N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC ExploitsThe Hacker News · 11/10/2026
Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start CarsThe Hacker News · 11/9/2026
U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory LossesThe Hacker News · 11/9/2026
CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible ExploitationThe Hacker News · 11/9/2026
Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without LoginThe Hacker News · 11/6/2026
OpenSSH Emergency Fix: Authentication Bypass on Alpine Linux via Oversized PasswordThe Hacker News · 11/5/2026
OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour RunThe Hacker News · 11/5/2026
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as RootThe Hacker News · 11/4/2026
Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User InteractionThe Hacker News · 11/4/2026
Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command ExecutionThe Hacker News · 11/4/2026
Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for TestingThe Hacker News · 11/3/2026
New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull FoodThe Hacker News · 11/3/2026
Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command BackdoorsThe Hacker News · 11/3/2026
Google Disrupts 1.3 Million-Device XCPE Android Malware Botnet, Bans TV Box MakerKrebsOnSecurity · 11/3/2026
Critical Langflow Flaws Allow Unauthenticated RCE on AI Workflow PlatformsThe Hacker News · 11/2/2026
CVSS 10.0 LXD and MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without Private KeyThe Hacker News · 11/1/2026
Attackers Chain Three Ivanti Connect Secure Flaws for Unauthenticated Root AccessThe Hacker News · 10/31/2026
Malicious Claude Code Extension on Cursor Marketplace Deploys SSH BackdoorsBleeping Computer · 10/30/2026
Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH BackdoorThe Hacker News · 10/30/2026
GitLab RCE Vulnerability (CVE-2026-97229 CVSS 10.0) Now Actively Exploited in the WildThe Hacker News · 10/30/2026
Linux Kernel TCP Flaw (CVE-2026-98432) with 9.8 CVSS Exploited via AI-Generated Exploit CodeThe Hacker News · 10/29/2026
PHP2Shell Exploitation and Privilege Escalation Attacks Chain Linux Kernel FlawBleeping Computer / The Hacker News · 10/29/2026
Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash FirewallsThe Hacker News · 10/29/2026
Cisco SD-WAN Vulnerability Exploited to Deploy KeyDrift Encryption-Key-Stealing MalwareThe Hacker News · 10/29/2026
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation CampaignsThe Hacker News · 10/28/2026
Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security PatchThe Hacker News · 10/28/2026
Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting ServersThe Hacker News · 10/28/2026
GoAhead Embedded Web Server TLS Flaws Allow Revoked Client Certificates and Session DecryptionThe Hacker News · 10/27/2026
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used SoftwareThe Hacker News · 10/24/2026
CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloudThe Hacker News · 10/24/2026
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing RevocationsThe Hacker News · 10/23/2026
Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli DataThe Hacker News · 10/23/2026
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in AttacksThe Hacker News · 10/22/2026
Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel FixesThe Hacker News · 10/22/2026
LiteLLM Supply Chain Compromise: Malicious Python Package Delivers Credential StealerThe Hacker News · 10/22/2026