Search: “Trusted Computing Group”

144 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 296 Malware 240 Vulnerability 219 Exploit / PoC 144 Data breach 98 Policy & legal 97 Threat actor 92 Phishing & fraud 77 Industry 68 Research 18 AI industry 13 AI tools & infra 13 Advisory 12 AI safety & security 10

SeverityAll critical 644 high 369 medium 193 low 142 info 63

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

Weekly recap: suspected China-nexus APT exploited VMware vCenter CVE-2026-59310, Lazarus used Windows zero-day CVE-2026-68820, and macOS flaw dropped Monero miners.

The week's top stories included a suspected China-nexus APT exploiting VMware vCenter CVE-2026-59310 (CVSS 9.8), a directory-traversal flaw enabling arbitrary code execution, with backdoors, reverse SSH and Babuk-derived ransomware deployed, per QUIRSO. NCSC-NL reported active exploitation of macOS Screen Sharing flaw CVE-2026-65400 (CVSS 9.8) to install Monero miners on systems with port 5900 exposed. Lazarus Group exploited Windows zero-day CVE-2026-68820 (CVSS 7.0) in Operation Dream Job, delivering ForestTiger and Troy backdoors to defense and aerospace targets. GeoServer patched a critical SQL injection flaw exploited within hours of disclosure, and Jamf analyzed the new Amnesia Stealer for macOS with live browser control.

The Hacker NewsAug 17, 17:57 UTC · Aug 17, 2026Exploit / PoC in the wildCVE-2026-59310 CVE-2026-65400 CVE-2026-688201

Quantum computer threat spurring quiet overhaul of internet security

CyberScoopMay 1, 20:51 UTC · May 1, 2025Exploit / PoC in the wild

Anthropic Releases Claude Fable 5, Its Most Powerful AI Yet, With Cyber Safeguards

The Hacker NewsJun 10, 07:37 UTC · Jun 10, 2026Exploit / PoC CVE-2026-47471

Outcomes for 2010 and Predictions for 2011

Kaspersky SecurelistDec 13, 17:38 UTC · Dec 13, 2010Exploit / PoC

Jolted by Meltdown and Spectre, Intel aims to accelerate patching process

CyberScoopMay 3, 14:31 UTC · May 3, 2019Exploit / PoC

⚡ Weekly Recap: Fortinet Exploited, China's AI Hacks, PhaaS Empire Falls & More

The Hacker NewsNov 17, 12:37 UTC · Nov 17, 2025Exploit / PoC in the wildCVE-2025-64446 CVE-2025-64740 CVE-2025-64741+24 CVEs

What the Hugging Face breach reveals about defense in the age of agentic AI

CyberScoopJul 31, 10:00 UTC · Jul 31, 2026Exploit / PoC1

Why automotive cybersecurity needs to go beyond IT

CyberScoopOct 28, 00:37 UTC · Oct 28, 2017Exploit / PoC in the wild

Cybersecurity jobs available right now: October 23, 2024

Help Net SecurityDec 16, 08:58 UTC · Dec 16, 2024Exploit / PoC

BGP hijack infecting networks caused by a comedy of errors that’s not funny at all

Attackers BGP-hijacked Softaculous IP space via Hetzner routing lapses to push malicious Virtualizor updates to hosting servers.

Unknown attackers hijacked the 162.55.80.0/24 prefix used by Softaculous' Virtualizor update service by abusing lax routing security at hosting provider Hetzner Online, announcing the range through AS6204, AS62390, and AS24940 with a forged but RPKI-valid origin. The hijack pulsed intermittently over roughly 33 hours, delivering modified update packages to Virtualizor servers, which lacked cryptographic code signing for updates. Softaculous says only a small number of servers were likely affected but cannot produce a definitive list, urging administrators to treat every Virtualizor server as in scope for checks.