Search: “session hijacking”

219 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 223 Vulnerability 220 Ransomware 111 Exploit / PoC 91 Phishing & fraud 76 Data breach 65 Threat actor 65 AI safety & security 16 Policy & legal 16 Industry 12 Research 5 Advisory 3 Tools 2 Model release 2

SeverityAll critical 333 high 267 medium 257 low 34 info 16

Session Hijacking 2.0 — The Latest Way That Attackers are Bypassing MFA

The Hacker NewsSep 30, 12:50 UTC · Sep 30, 2024Vulnerability

30

in(Secure) messaging apps — How side-channel attacks can compromise privacy in WhatsApp, Telegram, and Signal

Cisco TalosDec 10, 16:51 UTC · Dec 10, 2018Vulnerability

42

OWASP Top 10 for .NET developers part 9: Insufficient Transport Layer Protection

Troy HuntNov 28, 00:00 UTC · Nov 28, 2011Vulnerability

30

Flaw in WordPress Live Chat Plugin allows to steal and hijack sessions

Security AffairsJun 11, 19:53 UTC · Jun 11, 2019Vulnerability CVE-2019-12498

60

AWS Patches Critical 'FlowFixation' Bug in Airflow Service to Prevent Session Hijacking

The Hacker NewsMar 22, 13:45 UTC · Mar 22, 2024Vulnerability

55

TeleGrab

Cisco TalosMay 16, 17:17 UTC · May 16, 2018Vulnerability

30

Citrix warns admins to patch NetScaler CVE-2023

Security AffairsOct 25, 09:56 UTC · Oct 25, 2023Vulnerability in the wildCVE-2023-4966

60

The latest high-severity Citrix vulnerability under attack isn’t easy to fix

Ars Technica · SecurityOct 19, 21:56 UTC · Oct 19, 2023Vulnerability in the wildCVE-2023-4966

60

Threat actors have been exploiting CVE-2023-4966 in Citrix NetScaler ADC/Gateway devices since August

Security AffairsOct 18, 13:56 UTC · Oct 18, 2023Vulnerability in the wildCVE-2023-4966 CVE-2023-3519

60

VMware pushes admins to uninstall vulnerable, deprecated vSphere plugin (CVE-2024-22245, CVE-2024-22250)

Help Net SecurityFeb 25, 16:34 UTC · Feb 25, 2024Vulnerability CVE-2024-22245 CVE-2024-222501

35

Magento fixed security flaws that allow complete site takeover

Security AffairsJul 4, 13:50 UTC · Jul 4, 2019Vulnerability

42

Fortinet warns about Critical flaw in Wireless LAN Manager FortiWLM

Security AffairsDec 19, 13:53 UTC · Dec 19, 2024Vulnerability CVE-2023-34990 CVE-2023-48782

60

VMware fixes several flaws in its ESXi, Workstation, Fusion and NSX-T

Security AffairsOct 22, 07:26 UTC · Oct 22, 2020Vulnerability CVE-2020-3992 CVE-2020-3993 CVE-2020-3994

60

Critical n8n Flaw CVE-2026-25049 Enables System Command Execution via Malicious Workflows

The Hacker NewsFeb 6, 09:39 UTC · Feb 6, 2026Vulnerability CVE-2026-25049 CVE-2025-68613 CVE-2026-21893+10 CVEs1

60

How A Bug Hunter Forced Apple to Completely Remove A Newly Launched Feature

The Hacker NewsJan 20, 18:36 UTC · Jan 20, 2017Vulnerability

30

The browser is eating your security stack

Help Net SecurityNov 13, 00:00 UTC · Nov 13, 2025Vulnerability

42

CitrixBleed 2 Vulnerability Exploited

Infosecurity MagazineJun 27, 10:15 UTC · Jun 27, 2025Vulnerability in the wildCVE-2025-5777 CVE-2025-5349 CVE-2023-4966+1 CVEs

60

The Hidden Dangers of Public Wi

The Hacker NewsAug 24, 12:22 UTC · Aug 24, 2023Vulnerability

30

Bugs in Avast AntiTrack expose users to cyber attacks

Security AffairsAug 23, 22:53 UTC · Aug 23, 2022Vulnerability CVE-2020-8987

35

‘Citrix Bleed’ vulnerability targeted by nation

The RecordNov 21, 19:18 UTC · Nov 21, 2023Vulnerability in the wildCVE-2023-4966 CVE-2023-4911

60

Unpatched ScreenConnect servers open to attack (CVE-2026-3564)

Help Net SecurityMar 20, 00:00 UTC · Mar 20, 2026Vulnerability in the wildCVE-2026-3564

60

CitrixBleed 2 might be actively exploited (CVE-2025-5777)

Help Net SecurityJun 30, 00:00 UTC · Jun 30, 2025Vulnerability in the wildCVE-2025-5777 CVE-2025-6543 CVE-2025-5349+1 CVEs

60

Citrix Releases Emergency Patches for Actively Exploited CVE-2025

The Hacker NewsJul 1, 13:29 UTC · Jul 1, 2025Vulnerability in the wildCVE-2025-6543 CVE-2025-5777 CVE-2023-4966

60

OpenSSH bugs allows Man-in-the

Security AffairsFeb 19, 12:10 UTC · Feb 19, 2025Vulnerability CVE-2025-26465 CVE-2025-26466 CVE-2024-6409+1 CVEs

60

Top 5 Web App Vulnerabilities and How to Find Them

The Hacker NewsDec 19, 10:43 UTC · Dec 19, 2022Vulnerability

55

ThreatsDay Bulletin: AI Prompt RCE, Claude 0-Click, RenEngine Loader, Auto 0

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2026Vulnerability CVE-2026-20841

47

Fortinet Warns of Severe SQLi Vulnerability in FortiClientEMS Software

The Hacker NewsMar 22, 03:02 UTC · Mar 22, 2024Vulnerability in the wildCVE-2023-48788 CVE-2023-42789 CVE-2023-427901

60

How the SolarWinds Hackers Bypassed Duo's Multi-Factor Authentication

Schneier on SecurityDec 15, 00:00 UTC · Dec 15, 2020Vulnerability

30

VMware Alert: Uninstall EAP Now - Critical Flaw Puts Active Directory at Risk

The Hacker NewsFeb 22, 02:28 UTC · Feb 22, 2024Vulnerability CVE-2024-22245 CVE-2024-22250 CVE-2024-21726

60

Patch your Asus RT wireless routers now to avoid ugly surprises

Security AffairsMay 11, 15:09 UTC · May 11, 2017Vulnerability CVE-2017-5891 CVE-2017-6547 CVE-2017-6549+1 CVEs

47

NVIDIA shader out-of-bounds and eleven LevelOne router vulnerabilities

Cisco TalosOct 31, 15:29 UTC · Oct 31, 2024Vulnerability CVE-2024-0121 CVE-2024-0117 CVE-2024-0118+14 CVEs

47

Cymatic announces first year customer milestones

Help Net SecurityJan 23, 13:45 UTC · Jan 23, 2024Vulnerability

30

SaaS Breaches Start with Tokens

The Hacker NewsJul 9, 15:37 UTC · Jul 9, 2026Vulnerability1

42

CymaticONE + VADR's new features allow customers to protect their web properties from persistent attacks

Help Net SecurityOct 22, 00:00 UTC · Oct 22, 2020Vulnerability

30

Workshops

Troy HuntMar 29, 04:44 UTC · Mar 29, 2016Vulnerability

30

Why workforce identity is still a vulnerability, and what to do about it

Help Net SecurityMar 4, 00:00 UTC · Mar 4, 2026Vulnerability

30

High-Severity Flaw in Open WebUI Affects AI Connections

Infosecurity MagazineJan 6, 15:30 UTC · Jan 6, 2026Vulnerability CVE-2025-64496

47

5 Threats That Reshaped Web Security This Year [2025]

The Hacker NewsDec 4, 11:30 UTC · Dec 4, 2025Vulnerability CVE-2025-54135 CVE-2025-53109 CVE-2025-55284

60

Chinese DeepSeek-R1 AI Generates Insecure Code When Prompts Mention Tibet or Uyghurs

The Hacker NewsNov 24, 11:08 UTC · Nov 24, 2025Vulnerability

55

New AI-Targeted Cloaking Attack Tricks AI Crawlers Into Citing Fake Info as Verified Facts

The Hacker NewsOct 29, 14:57 UTC · Oct 29, 2025Vulnerability

42