Search: “cli”

36 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 200 Exploit / PoC 95 Malware 91 AI tools & infra 45 Industry 36 Data breach 32 Ransomware 32 Tools 28 AI safety & security 26 Policy & legal 23 Threat actor 22 Model release 19 AI industry 11 Phishing & fraud 8

SeverityAll critical 241 high 164 medium 119 low 72 info 93

ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories

A weekly bulletin aggregating short security updates, including the City-Forum data-theft campaign, a ShipMonk breach, a Cursor CLI flaw, and GhostJacking AI attacks.

The Hacker News ThreatsDay Bulletin bundles roughly 20 short updates across cloud services, AI tools, malware, breaches, and scams. Highlights include the City-Forum campaign pulling data from unauthenticated guest access in Salesforce Experience Cloud and ServiceNow Service Portals since March 2025, and a ShipMonk breach exposing Trezor customer order data for orders in seven countries between May 10 and August 8, 2026. Other items cover a patched Cursor CLI flaw that let cloned repositories run commands before the workspace-trust prompt, Okta's analysis of the Work Panel vishing console used by actors like UNC6671, and GhostJacking AI agent hijacking via a patched Claude Desktop sandbox escape. Meta also launched an on-device WhatsApp Scam Alert machine learning model that keeps message content on the device.

The Hacker NewsAug 18, 16:30 UTC · 28d agoIndustry

Microsoft Store updated with a new CLI, analytics, and Web Installer improvements

Help Net SecurityFeb 12, 00:00 UTC · Feb 12, 2026Industry

How to find container-based threats in host

Kaspersky SecurelistJun 3, 10:00 UTC · Jun 3, 2025Industry

One keypress is all it takes to compromise four AI coding tools

Help Net SecurityJul 9, 05:48 UTC · Jul 9, 2026Industry1

What MITRE ATT&CK techniques to detect first?

Kaspersky SecurelistJul 9, 13:00 UTC · Jul 9, 2024Industry

XebiaLabs’ new “DevOps as Code” features break down barriers for Dev teams

Help Net SecurityDec 18, 00:00 UTC · Dec 18, 2018Industry

Agent Beacon: Open-source telemetry layer for AI agents

Help Net SecurityJun 22, 00:00 UTC · Jun 22, 2026Industry1

Whispr: Open-source multi-vault secret injection tool

Help Net SecurityApr 17, 12:36 UTC · Apr 17, 2026Industry

NCSC Releases Post-Quantum Cryptography Timeline

Schneier on SecurityMar 21, 16:02 UTC · Mar 21, 2025Industry

Delinea DevOps Secrets Vault enhancements reduce the risk of compromised credentials

Help Net SecuritySep 28, 00:00 UTC · Sep 28, 2022Industry

DevSpace 6: Client-only developer tool for cloud-native development with Kubernetes

Help Net SecurityAug 24, 00:00 UTC · Aug 24, 2022Industry

How to automate configuration review

Help Net SecurityNov 23, 07:38 UTC · Nov 23, 2021Industry

Zyxel launches hybrid layer 2 switches featuring tri-mode management capability

Help Net SecurityJul 9, 00:00 UTC · Jul 9, 2020Industry

WordPress Security Plugins: How to Choose the Right One

Sucuri's guide breaks WordPress security plugins into hardening, malware scanning, integrity monitoring, and filtering types, and explains how to evaluate and layer them.

The Sucuri guide explains that WordPress security plugins bundle five capabilities - hardening, malware detection, integrity monitoring, activity logging, and application-level filtering - and that plugins run only after WordPress loads, unlike server-level firewalls. It lists leading causes of compromise: outdated plugins and themes, weak or reused credentials, nulled premium software, insecure configuration, and shared-hosting cross-contamination. It concludes with evaluation criteria and a post-installation security checklist for owners without dedicated security teams.