All News
The Hacker News
The Hacker News
August 25, 2026
Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows
Mirage2FA targets Microsoft 365, with 48% of targeted emails potentially compromised and 9,000+ potential session-theft events.
The Hacker News
August 25, 2026
E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands
SOCRadar details E4del and PINHOLE RAT campaigns using FTP banners as dead drop resolvers to fetch commands and C2 details.
The Hacker News
August 25, 2026
Frontier AI: Vulnerability Management's Systemic Revolution
Frontier AI models push vulnerability programs beyond CVSS, EPSS, and KEV toward exposure management and faster, automated patching.
The Hacker News
August 25, 2026
Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access
Attackers are scanning for two miniOrange SAML flaws, including CVE-2026-15981, that can bypass login and grant WordPress admin access.
The Hacker News
August 25, 2026
Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data
CISA adds actively exploited CVE-2026-21962 to KEV; the Oracle flaw can expose or alter critical data via unauthenticated HTTP access.
The Hacker News
August 24, 2026
Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt
ActiveState surveys 300 security and engineering leaders on AI coding, open-source remediation debt, governance, and business risk.
The Hacker News
August 24, 2026
Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning
Weedhack spreads through fake Minecraft client sites and SEO poisoning, with McAfee blocking more than 6,300 attempts to reach malicious URL...
The Hacker News
August 24, 2026
⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
AI-powered PLC attacks, GitLab exploits, npm backdoors, cloud leaks, auth abuse, and payment fraud lead this week’s cybersecurity recap.
The Hacker News
August 24, 2026
WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords
WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader uses Teams phishing to steal Windows login credentials.- 1
- 2
Showing 9 results of 59 — Page 2