hACkErS.NG | Site-Wide Activity

admin wrote a new post

Wed, 07 Oct 2026 12:04:25 +0000

Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 FlawsAnthropic on Tuesday said it’s expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models withRead More

admin wrote a new post

Wed, 07 Oct 2026 12:04:24 +0000

100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealerThe Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have been injected with malicious JavaScript toRead More

admin wrote a new post

Wed, 07 Oct 2026 00:04:33 +0000

Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA CodesCybersecurity researchers have disclosed details of a “human-operated phishing platform” that impersonates advertising products for artificial intelligence (AI)Read More

admin wrote a new post

Wed, 07 Oct 2026 00:04:32 +0000

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and TaiwanLinux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly legitimateRead More

admin wrote a new post

Wed, 07 Oct 2026 00:04:32 +0000

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro WarningsA malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker’s code as soon as the file is opened, security researchers have shown. There is noRead More

admin wrote a new post

Wed, 07 Oct 2026 00:04:31 +0000

Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as ProxiesThe Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on its platforms, including unsuccessfulRead More

admin wrote a new post

Wed, 07 Oct 2026 00:04:31 +0000

Welcome to the Jungle: What We Found Inside 15,465 Public MCP ServersIn 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocolRead More

admin wrote a new post

Wed, 07 Oct 2026 00:04:31 +0000

Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated ReportsGoogle has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in effect since October 1, meansRead More

admin wrote a new post

Wed, 07 Oct 2026 00:04:30 +0000

Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 ProductsA critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in eachRead More

admin wrote a new post

Wed, 07 Oct 2026 00:04:29 +0000

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters BreachThe U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personalRead More

admin wrote a new post

Wed, 07 Oct 2026 00:04:29 +0000

Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company AccountUnauthorized parties have gained access to the names, addresses, and personal identification numbers of about 8.8 million people, living and dead, in Denmark’sRead More

admin wrote a new post

Wed, 07 Oct 2026 00:04:29 +0000

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run LimitsA new type of ClickFix attack is using compromised websites to trick users into executing a malicious payload cached in a web browser’s cache. “Instead ofRead More

admin wrote a new post

Wed, 07 Oct 2026 00:04:29 +0000

Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' MailboxesMicrosoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privilegesRead More

admin wrote a new post

Wed, 07 Oct 2026 00:04:28 +0000

⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware ArrestsA blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramatic, which is partly the problem. This week’s threats keep fRead More

admin wrote a new post

Wed, 07 Oct 2026 00:04:27 +0000

The Credential Layer Is Expanding Faster Than Security Teams Can See ItEvery modern enterprise depends on credentials. This is how humans, systems, and now AI, all connect to data, services, and each other securely. GitGuardian helpsRead More

admin wrote a new post

Wed, 07 Oct 2026 00:04:27 +0000

Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit (SDK) to deploy aRead More

admin wrote a new post

Wed, 07 Oct 2026 00:04:27 +0000

Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data AccessApple has announced that it’s taking steps to tighten controls around a macOS setting called Full Disk Access (FDA) due to security risks posed by artificialRead More

admin wrote a new post

Wed, 07 Oct 2026 00:04:27 +0000

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCEA critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in questionRead More

admin wrote a new post

Wed, 07 Oct 2026 00:04:26 +0000

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments OfflineCitrix has released security updates for a high-severity security flaw in NetScaler ADC and NetScaler Gateway that has been exploited as part of targeted zero-dayRead More

admin wrote a new post

Sun, 04 Oct 2026 12:04:21 +0000

ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group MembersA suspected member of the ShinyHunters digital extortion group, who goes by the online alias “Rey,” has been allegedly detained by authorities in Jordan, ReutersRead More

admin wrote a new post

Sun, 04 Oct 2026 12:04:21 +0000

China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM PhishingA new China-nexus cyber espionage group known as TA419 has been attributed to multiple credential phishing campaigns targeting artificial intelligence (AI) expertsRead More

admin wrote a new post

Sun, 04 Oct 2026 00:00:13 +0000

MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked AcademicsThe U.K.’s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intelligence gathering efforts on behalf ofRead More

admin wrote a new post

Sun, 04 Oct 2026 00:00:12 +0000

Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy RansomwareThe suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacksRead More

admin wrote a new post

Sat, 03 Oct 2026 12:04:23 +0000

The State of Cybersecurity in 2026: Key Segments, Insights, and InnovationsFeaturing: Cybersecurity is being reshaped by the expansion of cloud infrastructure, AI, distributed systems, and increasingly complex digital environments. AsRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:35 +0000

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted ServersA critical flaw in GitLab’s AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab saidRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:34 +0000

Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage CampaignGovernment and policy organizations across Asia have become the target of a new campaign orchestrated by a China-nexus threat actor. The activity, which hasRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:34 +0000

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes NodesDell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that could be exploited by bad actors to takeRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:34 +0000

OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information MishandlingOpenAI has parted ways with three members of its safety team after they leaked private information in violation of company policies, The Wall Street JournalRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:34 +0000

Why CISOs Struggle to Answer the Board's Three Hardest Questions, and How to Fix the ReportThe quarterly board meeting is two weeks out. The security team is pulling exports from the identity provider, the cloud posture tool, the vulnerability scanner, theRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:33 +0000

Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility ToolsGoogle has announced a new security measure that limits access to Android’s accessibility services to verified applications classified as Accessibility Tools whenRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:33 +0000

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File WritesThe U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known ExploitedRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:33 +0000

Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and ServersPolice in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused of stealing data fromRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:32 +0000

ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More StoriesThis week, the useful words are boring ones: inspect, cache, compile, store, trust. Each sounds harmless. Each can become an attack path when a system does a littleRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:32 +0000

WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared MemoryCybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payloadRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:32 +0000

How Financial Services Companies Can Modernize Their Software Supply ChainEvery security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities.Read More

admin wrote a new post

Sat, 03 Oct 2026 00:04:32 +0000

OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI AssociatesOpenAI on Wednesday said it identified and disrupted a coordinated distillation campaign that was designed to illicitly extract protected reasoning from itsRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:31 +0000

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEVThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical authentication bypass flaw impacting Cisco Catalyst SD-WAN Manager toRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:31 +0000

Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free VersionGoogle on Wednesday announced its latest frontier artificial intelligence (AI) model, Gemini 4 Argon, that it said is being rolled out to a set of trusted cyberRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:31 +0000

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery PathSecurity researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in attacks againstRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:30 +0000

Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency TheftCryptocurrency exchange Bitget on Wednesday confirmed that attackers who stole $387.5 million last week exploited a zero-day flaw in third-party security products,Read More

admin wrote a new post

Sat, 03 Oct 2026 00:04:30 +0000

MetaMask Security Incident Prompts Exit of Affected Ethereum ValidatorsMetaMask on Thursday said it’s responding to what it described as an “ongoing security incident” impacting part of its infrastructure. “We are actively addressingRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:30 +0000

Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLsThreat actors have been observed exploiting a critical pre-authentication command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway to drop webRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:30 +0000

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication SecretsThreat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findingsRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:29 +0000

Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing AttacksMicrosoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management (RMM) software under the guise of meetingRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:29 +0000

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN ManagerAttackers are exploiting a new critical zero-day flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said inRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:29 +0000

Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix LuresThreat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employRead More

admin wrote a new post

Sat, 03 Oct 2026 00:04:28 +0000

Know Your Enemy: Browser-Based Attack Techniques in 2026Given that the browser is where business apps are accessed and used, it makes sense that attacks are happening there too. Most breaches today begin in a browserRead More

admin wrote a new post

Wed, 30 Sep 2026 12:04:28 +0000

AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHubAI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositories, security company GlowRead More

admin wrote a new post

Wed, 30 Sep 2026 12:04:28 +0000

US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote AccessANY.RUN researchers traced a US-focused CSuite phishing campaign across 351 sandbox analyses, with 51% of submissions coming from the United States. Technology,Read More

admin wrote a new post

Wed, 30 Sep 2026 12:04:28 +0000

Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOTUnknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations inRead More