hACkErS.NG | Site-Wide Activity

admin wrote a new post

Sat, 22 Aug 2026 08:40:25 +0000

14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to stealthilyRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:24 +0000

Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at BootCheck Point Research has disclosed a technique that uses Microsoft Defender’s own legitimately signed boot-time remediation driver to perform arbitrary kernel-levelRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:24 +0000

Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy BotnetCybersecurity researchers have flagged a new malware family that’s specifically designed to infect Android-based vehicle head unit firmware developed byRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:24 +0000

Wazuh and AI For Enhanced SOC WorkflowsArtificial Intelligence (AI) has become one of this decade’s defining technologies. From healthcare and finance to manufacturing and education, organizationsRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:24 +0000

Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0Cisco has published another round of security updates for Crosswork platforms and Secure Workload Software as part of a continued comprehensive internal securityRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:23 +0000

GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of DisclosureA newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr. The vulnerability in questionRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:23 +0000

Microsoft Patches Severe Entra ID Flaw (CVSS 10.0) Allowing Remote Code ExecutionUpdate: The story was updated after publication to note that the vulnerability has not been exploited. Although the security bulletin originally marked theRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:23 +0000

Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million DownloadsThe Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer account published releases that addedRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:22 +0000

Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack AccountsThree distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to single out individuals working inRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:22 +0000

ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit, and MoreA lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned against defenses. Legitimate apps hRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:22 +0000

AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical InfrastructureThe U.S. government on Wednesday warned of an “active threat” targeting critical infrastructure organizations in the country using artificial intelligenceRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:21 +0000

New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat DataAdversa AI has disclosed an attack technique that it says can cause xAI’s Grok chatbot to send a user’s name, approximate location, subscription tier, and theRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:21 +0000

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCECybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub,Read More

admin wrote a new post

Sat, 22 Aug 2026 08:40:21 +0000

Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA ServersCitrix has released updates to address two security flaws impacting NetScaler ADC and NetScaler Gateway deployments, including a critical-severity authenticationRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:21 +0000

Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code ExecutionA now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation in the wild, according to the Polish Computer Emergency ResponseRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:20 +0000

Zombie Card Attack Can Revive Expired Visa Cards for Contactless PaymentsResearchers at the University of Massachusetts Amherst have demonstrated an attack that revives expired Visa contactless credit cards for real in-store purchases byRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:20 +0000

Why "Shady AI" is Security's Next Big Governance ProblemIn March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to employees who weren’t authorized to acRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:20 +0000

CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS AmplificationCybersecurity researchers have disclosed two denial-of-service (DoS) attacks that exploit how major content delivery networks (CDNs) convert client-facing HTTP/3Read More

admin wrote a new post

Sat, 22 Aug 2026 08:40:19 +0000

Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected DevicesA new Android threat codenamed Manic has been observed actively targeting Ukrainian banks, government and identity services, and messaging applications, as well asRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:18 +0000

NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft CommandsSecurity researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL’s open-source AMMOS Instrument Toolkit,Read More

admin wrote a new post

Sat, 22 Aug 2026 08:40:18 +0000

ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device FraudCybersecurity researchers have shed light on an updated version of ToxicPanda (aka TgToxic) that comes with “significant enhancements,” including a set of 167 remoteRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:18 +0000

40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet SecretsA set of 40 Mozilla Firefox extensions has been found to engage in cryptocurrency wallet theft by masquerading as OKX, Rabby Wallet, TronLink, and other Web3Read More

admin wrote a new post

Sat, 22 Aug 2026 08:40:18 +0000

Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute CodeCybersecurity researchers have disclosed details of a critical flaw in the Elementor Pro WordPress plugin that, if successfully exploited, could lead to remote codeRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:17 +0000

Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/SecondCybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker iRead More

admin wrote a new post

Sat, 22 Aug 2026 08:40:17 +0000

OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI BehaviorOpenAI on Tuesday revealed that it paused reinforcement learning (RL) training for its latest artificial intelligence (AI) models for two weeks while it shored upRead More

admin wrote a new post

Wed, 12 Aug 2026 12:04:43 +0000

Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic FlawsAdobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Classic that, if successfully exploited,Read More

admin wrote a new post

Wed, 12 Aug 2026 12:04:43 +0000

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote AccessThreat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. TheRead More

admin wrote a new post

Wed, 12 Aug 2026 12:04:42 +0000

Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ OrganizationsTwo malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of harvesting cloud keys, SSH keys, KubernetesRead More

admin wrote a new post

Wed, 12 Aug 2026 12:04:42 +0000

SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary CodeSAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution. TheRead More

admin wrote a new post

Wed, 12 Aug 2026 12:04:42 +0000

ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM AccessThe security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has released a proof-of-concept (PoC) for aRead More

admin wrote a new post

Wed, 12 Aug 2026 12:04:42 +0000

Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoSCisco has warned that a new vulnerability impacting Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software hasRead More

admin wrote a new post

Wed, 12 Aug 2026 00:04:39 +0000

Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active AttackMicrosoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows kernelRead More

admin wrote a new post

Wed, 12 Aug 2026 00:04:39 +0000

Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate BrowsingCybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things (IoT) botnet that comes with significant improvements toRead More

admin wrote a new post

Wed, 12 Aug 2026 00:04:39 +0000

Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's ClientAnyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter’s. TheRead More

admin wrote a new post

Wed, 12 Aug 2026 00:04:39 +0000

Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run CommandsThe Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orchestrated by Russian nation-state threatRead More

admin wrote a new post

Wed, 12 Aug 2026 00:04:38 +0000

Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCESecurity researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the workRead More

admin wrote a new post

Wed, 12 Aug 2026 00:04:38 +0000

DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to DisruptThe ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communications and data leak operations in a bid toRead More

admin wrote a new post

Wed, 12 Aug 2026 00:04:38 +0000

OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit DevelopmentOpenAI on Monday unveiled a new cybersecurity-focused model called GPT‑5.6‑Cyber that it said is focused on vulnerability research, penetration testing, and incRead More

admin wrote a new post

Wed, 12 Aug 2026 00:04:37 +0000

A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT DevicesA malicious SIM card can order the device it sits in to run commands of the attacker’s choosing. On the cellular modules built into electric-vehicle chargers,Read More

admin wrote a new post

Wed, 12 Aug 2026 00:04:37 +0000

Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private RepoMozilla has scrapped the cryptographic key behind Firefox and Thunderbird downloads for Linux after an unencrypted copy of it was committed by mistake to one of theRead More

admin wrote a new post

Wed, 12 Aug 2026 00:04:37 +0000

Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT WorkersSecurity researchers invented a cryptocurrency startup, advertised developer jobs, and hired three people they believe were North Korean operatives. Every virtualRead More

admin wrote a new post

Wed, 12 Aug 2026 00:04:37 +0000

Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11Windows Plug and Play can be abused to fetch signed vendor software for an emulated USB device and execute privileged installation components that researchersRead More

admin wrote a new post

Wed, 12 Aug 2026 00:04:36 +0000

Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate SecretsA malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys, environment secrets, source code, and customer data without everRead More

admin wrote a new post

Wed, 12 Aug 2026 00:04:36 +0000

Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach NetworksCybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attacks targeting critical infrastructure sectors and organizationsRead More

admin wrote a new post

Wed, 12 Aug 2026 00:04:36 +0000

Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut TurbineAttackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in over the private cellular networkRead More

admin wrote a new post

Wed, 12 Aug 2026 00:04:36 +0000

BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress AdminsCybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the content management systems (CMS)Read More

admin wrote a new post

Wed, 12 Aug 2026 00:04:35 +0000

Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed DevelopmentAI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabilities, manage dependencies, prioritize fixes,Read More

admin wrote a new post

Wed, 12 Aug 2026 00:04:35 +0000

China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central FlawMicrosoft has disclosed that Storm-1175, a financially motivated threat actor linked to China, has deployed a previously undocumented ransomware strain calledRead More

admin wrote a new post

Wed, 12 Aug 2026 00:04:35 +0000

⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router BackdoorsA lot of security problems still begin with someone doing a completely normal thing. Cloning a repo. Answering a call. Leaving a box exposed. Trusting theRead More

admin wrote a new post

Wed, 12 Aug 2026 00:04:34 +0000

Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware DevelopmentNorth Korea’s state hackers are no longer content to type prompts into public chatbots. One of the country’s main espionage groups has begun running artificialRead More