OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc ServersThe Hacker News · 9/12/2026
Claude Used to Automate Exploitation and Data Theft Across Multiple VictimsBleepingComputer · 9/11/2026
Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant BackdoorsThe Hacker News · 9/11/2026
Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin RansomwareThe Hacker News · 9/11/2026
Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCEThe Hacker News · 9/10/2026
CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch DeadlineThe Hacker News · 9/10/2026
DeepSeek Harness Flaw Lets AI Agents Disable Their Own File Sandbox Without ApprovalThe Hacker News · 9/9/2026
F5 BIG-IP APM Malware Injects PHP Web Shell Into Memory, Evading Disk ScansThe Hacker News · 9/9/2026
Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-DaysKrebsOnSecurity · 9/8/2026
FreeIPA Flaw Chain Enables Anonymous Clients to Create Reusable Administrator CredentialsThe Hacker News · 9/8/2026
Attackers Exploit MikroTik RouterOS Flaws to Hijack RoutersBleepingComputer / The Hacker News · 9/7/2026
N-able Patches Maximum-Severity N-central RMM Flaw Amid Active ExploitationThe Hacker News · 9/7/2026
N-able Patches Max Severity N-central Flaw Amid Ongoing AttacksBleepingComputer / The Hacker News · 9/7/2026
Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without AuthenticationThe Hacker News · 9/6/2026
Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as RootThe Hacker News · 9/3/2026
BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root AccessThe Hacker News · 9/2/2026
Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack ChainThe Hacker News · 9/2/2026
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to AnotherThe Hacker News · 9/2/2026
Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without CredentialsThe Hacker News · 9/2/2026
Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After DisclosureThe Hacker News · 9/1/2026
Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding TestsThe Hacker News · 9/1/2026
Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 ActivityThe Hacker News · 9/1/2026
Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security LogsThe Hacker News · 8/31/2026
Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over BluetoothThe Hacker News · 8/28/2026
China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root AccessThe Hacker News · 8/28/2026
OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging FaceThe Hacker News · 8/27/2026
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCEThe Hacker News · 8/27/2026
Alleged TeamPCP Hackers Arrested in Australia; Supply Chain Attack Leader IdentifiedKrebsOnSecurity / The Hacker News · 8/27/2026
GPUThor Rowhammer Attack Defeats NVIDIA ECC Protection for Root AccessThe Hacker News / BleepingComputer · 8/26/2026
CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected NothingThe Hacker News · 8/26/2026
Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like PayloadThe Hacker News · 8/26/2026
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2The Hacker News · 8/21/2026
Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy BotnetThe Hacker News · 8/21/2026
GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of DisclosureThe Hacker News · 8/21/2026
Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million DownloadsThe Hacker News · 8/20/2026
AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical InfrastructureThe Hacker News · 8/20/2026
Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy BackdoorThe Hacker News · 8/12/2026
Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT DevicesThe Hacker News · 8/11/2026
Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut TurbineThe Hacker News · 8/11/2026
Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow SecretsThe Hacker News · 8/7/2026