software, data or commands that use a bug or vulnerability to compromise a computer system
Youth activists held cost-of-living protests in Italy, where police arrested more than 70 people for identification in the city of Milan ... Show more
PwnEscape: Critical vulnerability in Linux kernel allows VM escape: The flaw lies in the networking aspect of Linux and, according to the discoverers ...
heise.de/news/PwnEscape-Kritische-Luecke-in-Linux-Kernel-erlaubt-VM-Ausbruch-11492131.html
Wccftech Oct 13
Byepervisor Reborn Cracks the PS5 Hypervisor on Firmware 13.60, but Developers Warn It’s Not Useful to Regular Users Yet
wccftech.com/byepervisor-reborn-cracks-ps5-hypervisor-13-60-not-useful-regular-users-yet/
Hackers exploit SiteGuard WAF flaw to run commands as admins: Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets ...
bleepingcomputer.com/news/security/hackers-exploit-siteguard-waf-flaw-to-run-commands-as-system-root/
CyberNews Oct 09
Hackers can exploit the Telegram Desktop vulnerability to hijack accounts and exfiltrate user files with just a single click.
Full article: cnews.link
US deportations to African countries unlawful and exploit suffering - HRW: More than 500 migrants have been expelled from the US to African countries, HRW says ...
bbc.com/news/articles/c9p8gn55433jo
Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers: Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447 ...
bleepingcomputer.com/news/security/hackers-exploit-collabora-rce-flaw-to-backdoor-nextcloud-servers/
Critical BlockStrap flaw lets hackers run code on Magento servers: Researchers warn that hackers could soon exploit a maximum-severity vulnerability ...
bleepingcomputer.com/news/security/critical-blockstrap-flaw-lets-hackers-run-code-on-magento-servers/
Google warns suspected China-linked hackers could exploit BeyondTrust flaw: Google warned on Thursday that organizations should prepare for "potential widespread ...
reuters.com/technology/google-warns-suspected-china-linked-hackers-could-exploit-beyondtrust-flaw-2026-10-15/
Prompt Injection: Why Hackers No Longer Need Code to Steal Your Data: By tricking AI chatbots into ignoring their own rules, attackers are bypassing enterprise ...
uk.pcmag.com/ai/167638/prompt-injection-why-hackers-no-longer-need-code-to-steal-your-data
sabcnews.com Oct 08
IMMIGRATION | Employment and Labour Minister Nomakhosazana Meth says government is cracking down on businesses that exploit foreign nationals and prioritising ... Show more
Hackers exploit 32 zero-days on first day of Pwn2Own Ireland: On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung ...
bleepingcomputer.com/news/security/hackers-exploit-32-zero-days-on-first-day-of-pwn2own-ireland/
AI agent attack on hundreds of shops: 600,000 credit card details stolen: An attacker has targeted hundreds of online shops with AI agents, stealing data from ...
heise.de/news/Angriff-mit-KI-Agenten-auf-hunderte-Shops-600-000-Kreditkartendaten-geklaut-11464492.html
Attention NetScaler admins: Zero-day vulnerability causes crashes and code execution
heise.de/news/Netscaler-Admins-aufgepasst-Zero-Day-verursacht-Crashes-und-Codeausfuehrung-11474971.html
Cisco warns of critical flaws allowing Nexus switch takeover: Cisco released security advisories for five critical vulnerabilities in its NX-OS data center ...
bleepingcomputer.com/news/security/cisco-warns-of-critical-flaws-allowing-nexus-switch-takeover/
Galaxy S26 hacked six times: How dangerous is that?: Security researchers successfully attacked Samsung's Galaxy S26 six times over two days at Pwn2Own ...
pcgameshardware.de/Galaxy-S-Serie-Smartphone-239714/News/samsung-galaxy-s26-pwn2own-sechsmal-geknackt-1556195/
Hackers exploit critical Atlassian flaw after public PoC release: A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families ...
bleepingcomputer.com/news/security/hackers-exploit-critical-atlassian-flaw-after-public-poc-release/
Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland: On the second day of Pwn2Own Ireland 2026, security researchers collected $232 ...
bleepingcomputer.com/news/security/samsung-galaxy-s26-hacked-three-more-times-at-pwn2own-ireland/
PoeLLM malware infects exposed AI servers in cryptomining attacks: A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn ...
bleepingcomputer.com/news/security/poellm-malware-infects-exposed-ai-servers-in-cryptomining-attacks/
Urgent Update: Citrix warns of critical vulnerability in NetScaler - | Golem.de: The vulnerability allows remote code execution. NetScaler ADP and NetScaler ...
golem.de/news/dringendes-update-citrix-warnt-vor-kritischer-luecke-in-netscaler-2610-213995.html
Microsoft to block Entra ID script injection attacks starting October: Microsoft has reminded customers that the Entra ID authentication system will get better ...
bleepingcomputer.com/news/security/microsoft-to-block-entra-id-script-injection-attacks-starting-october/
A new PS5 jailbreak works on almost every firmware version, and it already runs the latest games
techspot.com/news/114037-new-ps5-jailbreak-works-almost-every-firmware-version.html
dlvr.it Oct 01
AI agents hacked the hackers, stealing email addresses from security research org
theregister.com/security/2026/10/01/ai-agents-hacked-the-hackers-stealing-email-addresses-from-security-research-org/5300652
Kiteworks patches max severity code injection vulnerability: Secure file-sharing software company Kiteworks has released security updates to address 126 ...
bleepingcomputer.com/news/security/kiteworks-patches-max-severity-email-protection-gateway-code-injection-vulnerability/
OpenAI revealed how its AI agents actually escaped a locked-down research environment with zero internet access.
OpenAI agents split malicious code across 900 ... Show more
New Spectre v2 attack variant leaks Linux root password hash in minutes: A new Branch Target Reuse (BTR) attack has been devised that can recover root password ...
bleepingcomputer.com/news/security/new-spectre-v2-attack-variant-leaks-linux-root-password-hash-in-minutes/
Hackers now exploit critical Roundcube flaw in code injection attacks: A high-severity Roundcube Webmail vulnerability patched in May is now being actively ...
bleepingcomputer.com/news/security/critical-roundcube-flaw-now-actively-exploited-in-code-injection-attacks/
New Windows Defender zero-day blocks Microsoft antivirus updates: Over the weekend, security researcher Abdelhamid Naceri (also known as Nightmare Eclipse) ...
bleepingcomputer.com/news/security/new-windows-defender-zero-day-blocks-microsoft-antivirus-updates/
Chinese hackers exploit WordPress, Zyxel flaws to steal govt data: A Chinese-speaking threat actor has been exploiting vulnerabilities in ZyXEL GS1900 Smart ...
bleepingcomputer.com/news/security/chinese-hackers-exploit-multiple-technologies-to-steal-govt-data/
Meta patches Muse exploit that let attackers control the AI agent: Meta has issued a patch for its Muse macOS app following the discovery of a zero-day ...
theverge.com/tech/998679/meta-muse-patch-zero-day-exploit-ai-agent
D-Link warns of max severity zero-day bug in DIR-822A routers: D-Link warned customers of a maximum-severity vulnerability (CVE-2026-86296) with public ...
bleepingcomputer.com/news/security/d-link-warns-of-max-severity-zero-day-bug-in-dir-822a-routers/
InfraTrust report warns network management systems under attack: Attackers are increasingly targeting the management systems used to control enterprise ...
bleepingcomputer.com/news/security/infratrust-report-warns-network-management-systems-under-attack/
Zero-day exploit keeps Microsoft Defender outdated: A new zero-day exploit prevents Microsoft Defender from updating its protection data ...
winfuture.de/news,161467.html
WordPress Click2Shell flaw lets hackers execute PHP on the server: Technical details and a proof-of-concept exploit have been published for a new WordPress ...
bleepingcomputer.com/news/security/wordpress-click2shell-flaw-lets-hackers-execute-php-on-the-server/
PS5 Linux on its way out? Developer quits after exploit: Andy Nguyen is withdrawing from the PS5 scene and stopping his work on PS5 Linux ...
pcgameshardware.de/Playstation-5-Konsolen-265878/News/PS5-Linux-Entwickler-Exploit-Hypervisor-PS5-Pro-1554065/
Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days: Today is Microsoft's September 2026 Patch Tuesday, with security updates released for a ...
bleepingcomputer.com/news/microsoft/microsoft-september-2026-patch-tuesday-fixes-966-flaws-2-zero-days/
Critical ScreenConnect flaw now actively exploited in attacks: Attackers now exploit a critical-severity ConnectWise ScreenConnect vulnerability in the wild ...
bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-critical-screenconnect-flaw/
Acronis warns of actively exploited flaw in its cPanel backup plugin: Acronis disclosed a high-severity Linux local privilege escalation vulnerability in its ...
bleepingcomputer.com/news/security/acronis-warns-of-actively-exploited-flaw-in-its-cpanel-backup-plugin/
Google Doubles Chrome Update Velocity With New 2-Week Patch Schedule: Google launches Chrome 153, marking the official shift to a two-week major release schedule ...
hothardware.com/news/google-doubles-chrome-update-velocity-2-week-patch-schedule
Hackers exploit Tencent app flaw to deploy GrayRabbit malware: Threat actors linked to a China-aligned espionage group are exploiting a critical vulnerability ...
bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/
Hackers exploit new MikroTik RouterOS flaws to hijack routers: Hackers are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers to ...
bleepingcomputer.com/news/security/hackers-exploit-new-mikrotik-routeros-flaws-to-hijack-routers/
New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws: Multiple cyber-espionage groups deployed an exploit kit dubbed "BlueMoon" ...
bleepingcomputer.com/news/security/new-bluemoon-kit-exploited-windows-and-chrome-zero-day-flaws/
dlvr.it Sep 09
WeChat worm could pwn a friend before they even answered the call: Calif says AI helped turn a VoIP memory bug into cross-platform RCE before Tencent shut it ...
theregister.com/security/2026/09/09/wechat-worm-could-pwn-a-friend-before-they-even-answered-the-call/5295234
dlvr.it Sep 10
Novel Blue Moon kit targeting Chrome and Windows reflects new reality of AI-driven exploits
theregister.com/research/2026/09/09/novel-blue-moon-kit-targeting-chrome-and-windows-reflects-new-reality-of-ai-driven-exploits/5295399
Microsoft Defender: Fresh Zero-Day Exploit Bypasses Latest Patch: Just one day after Microsoft's September Patch Tuesday, a new zero-day vulnerability in ...
winfuture.de/news,161185.html
dlvr.it Sep 03
Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC: A shared security 'Nightmare'
theregister.com/security/2026/09/03/prolific-microsoft-0-day-hunter-drops-crowdstrike-falcon-exploit-poc/5294318
WordPress backup plugin flaw exposes millions of sites to takeover attacks: An SQL injection vulnerability in the All-in-One WP Migration and Backup plugin for ...
bleepingcomputer.com/news/security/wordpress-backup-plugin-flaw-exposes-millions-of-sites-to-takeover-attacks/
eff.org Aug 30
Seven Steps To Digital Security: Digital security is as much of a mindset as it is a toolkit, and there are concepts to consider regardless of whether you're ...
ssd.eff.org/module/seven-steps-digital-security
Hackers exploit Sangoma Switchvox flaw to deploy reverse shells: Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability ...
bleepingcomputer.com/news/security/hackers-exploit-sangoma-switchvox-flaw-to-deploy-reverse-shells/
Hackers exploit critical JFrog Artifactory flaw to forge admin tokens: A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is ...
bleepingcomputer.com/news/security/hackers-exploit-critical-jfrog-artifactory-flaw-to-forge-admin-tokens/
OpenAI launches GPT-6 Astra to cybersecurity partners first: The model is the first OpenAI has rated "Critical" under its Preparedness Framework ...
dlvr.it/TVJvG3
HPE patches critical ArubaOS-CX remote code execution flaw: Hewlett Packard Enterprise (HPE) has patched a critical vulnerability in the ArubaOS-CX network ...
bleepingcomputer.com/news/security/hpe-patches-critical-arubaos-cx-remote-code-execution-flaw/
Ubiquiti patches three max severity security vulnerabilities: Ubiquiti has released security patches for three new maximum-severity vulnerabilities that threat ...
bleepingcomputer.com/news/security/ubiquiti-patches-three-max-severity-security-vulnerabilities/
dlvr.it Aug 20
Grok chat duped into swallowing injected instructions: A spoonful of encryption helps the malware go down
theregister.com/ai-and-ml/2026/08/20/grok-chat-duped-into-swallowing-injected-instructions/5290019
ServiceNow warns of three max severity security vulnerabilities: ServiceNow released security patches for three new maximum-severity AI Platform vulnerabilities ...
bleepingcomputer.com/news/security/servicenow-warns-of-three-max-severity-security-vulnerabilities/
Truist raised its CrowdStrike $CRWD price target to $300 (up from $245) on surging cybersecurity demand triggered by AI threat risks!
KEY ... Show more
Cronos blockchain restarts after $74 million Tectonic exploit: The Cronos blockchain network has resumed trading activity after a price-manipulation attack on ...
bleepingcomputer.com/news/security/cronos-blockchain-restarts-after-74-million-tectonic-exploit/
Over 8,300 Gitea servers vulnerable to code execution attacks: Over 8,300 Internet-exposed Gitea instances are still unpatched against a critical security flaw ...
bleepingcomputer.com/news/security/over-8-300-gitea-servers-vulnerable-to-code-execution-attacks/
Hackers target Microsoft SharePoint RCE chain with PoC exploit: Attackers are now targeting a chain of two Microsoft SharePoint vulnerabilities that can allow ...
bleepingcomputer.com/news/security/hackers-target-microsoft-sharepoint-rce-chain-with-poc-exploit/
dlvr.it Aug 25
You could've applied all 1,449 Oracle patches and still been hit by this attack: Attackers now ready to exploit how things work, rather than just break them ...
theregister.com/security/2026/08/25/you-couldve-applied-all-1449-oracle-patches-and-still-been-hit-by-this-attack/5292335
Hackers now exploit critical Gitea flaw in code injection attacks: Attackers are now exploiting a critical-severity vulnerability in the Gitea self-hosted Git ...
bleepingcomputer.com/news/security/hackers-now-exploit-critical-gitea-flaw-in-code-injection-attacks/
dlvr.it Aug 12
Microsoft-vendetta hacker has a new zero day that gives system privileges on fully patched Windows
theregister.com/security/2026/08/12/microsoft-vendetta-hacker-has-a-new-zero-day-that-gives-system-privileges-on-fully-patched-windows/5286889
The new wave of catastrophising about AI and cyber-security is exaggerated, claims Ciaran Martin in a guest essay. Malicious hackers are not using advanced AI ... Show more
Hackers target WordPress sites in miniOrange auth bypass attacks: Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the ...
bleepingcomputer.com/news/security/hackers-target-wordpress-sites-in-miniorange-auth-bypass-attacks/
Critical Zimbra RCE flaw now actively exploited in attacks: CERT Polska, the Polish Computer Emergency Response Team (CERT), warned that attackers have begun ...
bleepingcomputer.com/news/security/critical-zimbra-rce-flaw-now-actively-exploited-in-attacks/
US warns of AI-powered attacks on Siemens PLCs in critical infrastructure: U.S. cybersecurity agencies warn that threat actors are using AI-generated scripts to ...
bleepingcomputer.com/news/security/us-warns-of-ai-powered-attacks-on-siemens-plcs-in-critical-infrastructure/
