Hacker Runs Hermes AI Agent Unattended for PostThe Hacker News·Jul 24, 10:15 UTC · Jul 24, 2026VulnerabilityCVE-2026-31431CVE-2026-43284CVE-2026-43500+2 CVEs35
How Threat Actors Are Rizzing Up Your AI for ProfitRecorded Future·Jul 20, 00:00 UTC · Jul 20, 2026Threat actor160
11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure BootThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026VulnerabilityCVE-2026-8863CVE-2026-1079747
Threat actor impersonated hundreds of brands on GitHub to push infostealer malwareHelp Net Security·Jul 15, 00:00 UTC · Jul 15, 2026Malware30
20+ Hijacked Government Websites Became an Attack ChannelThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Vulnerability42
GitHub 'Verified' Commits Can Be Rewritten Into New Hashes Without Breaking SignaturesThe Hacker News·Jul 8, 11:51 UTC · Jul 8, 2026Advisory130
RustDuck: The Botnet That's Still Small but Engineering Like It Plans to GrowSecurity Affairs·Jul 1, 10:25 UTC · Jul 1, 2026Malware in the wildCVE-2025-29635CVE-2017-17215CVE-2024-1781+1 CVEs160
Phantom Squatting Uses AI-Hallucinated Domains for Phishing and MalwareThe Hacker News·Jul 1, 07:20 UTC · Jul 1, 2026Malware30
OAuth marketplace apps keep access after publishers vanishHelp Net Security·Jul 1, 03:09 UTC · Jul 1, 2026Vulnerability142
Microsoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js ImplantThe Hacker News·Jun 26, 09:27 UTC · Jun 26, 2026Threat actor57
Surviving the Mythos Era: Richard Bejtlich on the Case for NDRThe Hacker News·Jun 25, 11:17 UTC · Jun 25, 2026Vulnerability55
China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber ReconnaissanceThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026MalwareCVE-2023-20118CVE-2022-32548CVE-2023-24738+2 CVEs60
Survey: 94% of Incidents Involve Anonymized Infrastructure. Teams Are Still ReactiveThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026Threat actor57
Free Apps Are Turning Smart TVs Into WebThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026Data breach45
U.S. CISA adds Ivanti Sentry flaw to its Known Exploited Vulnerabilities catalog and urges patching by June 14Security Affairs·Jun 14, 13:16 UTC · Jun 14, 2026Exploit / PoC in the wildCVE-2026-1052060
CVE-2026-10520 Exploited: Ivanti Sentry Gateways Compromised Shortly After Patch ReleaseSecurity Affairs·Jun 12, 18:42 UTC · Jun 12, 2026Vulnerability in the wildCVE-2026-10520CVE-2026-1340CVE-2026-160360
JDY Botnet Evolves After KV Takedown, Targets Military NetworksSecurity Affairs·Jun 11, 07:46 UTC · Jun 11, 2026MalwareCVE-2026-3561635
Miasma Worm Compromises 73 Microsoft GitHub RepositoriesSecurity Affairs·Jun 9, 16:08 UTC · Jun 9, 2026Malware142
Meta Blocks NSO Group's New WhatsApp Phishing Attack, Files Contempt OrderThe Hacker News·Jun 9, 05:52 UTC · Jun 9, 2026Phishing & fraud30
EtherRAT Distribution Spoofing Administrative Tools via GitHub FacadesThe Hacker News·Jun 7, 15:47 UTC · Jun 7, 2026Malware155
Autonomous AI-driven worm can reason its way through corporate networksHelp Net Security·Jun 3, 00:00 UTC · Jun 3, 2026Exploit / PoC in the wild60
Thieves unlock stolen iPhones using cheap tools sold on TelegramHelp Net Security·May 15, 00:00 UTC · May 15, 2026Vulnerability42
Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major DistributionsThe Hacker News·May 15, 00:00 UTC · May 15, 2026Exploit / PoC in the wildCVE-2026-31431CVE-2022-27666CVE-2026-43284+1 CVEs60
Reviewing the trends in ransomware attacks in 2026Kaspersky Securelist·May 12, 07:00 UTC · May 12, 2026Ransomware60
Dirty Frag: A new Linux privilege escalation vulnerability is already in the wildSecurity Affairs·May 8, 11:19 UTC · May 8, 2026VulnerabilityCVE-2022-2766635
Roblox chat moderation gets bypassed by leet speak and code wordsHelp Net Security·May 8, 00:00 UTC · May 8, 2026Policy & legal30
Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 CountriesThe Hacker News·May 5, 07:46 UTC · May 5, 2026Threat actor45
Week in review: High-severity LPE vulnerability in the Linux kernel, cPanel 0-day exploited for monthsHelp Net Security·May 3, 00:00 UTC · May 3, 2026Vulnerability in the wildCVE-2026-32202CVE-2026-21510CVE-2026-21513+3 CVEs260
FIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security PatchesThe Hacker News·Apr 25, 08:20 UTC · Apr 25, 2026VulnerabilityCVE-2025-20333CVE-2025-2036260
A dozen allied agencies say China is building covert hacker networks out of everyday routersCyberScoop·Apr 23, 16:13 UTC · Apr 23, 2026Exploit / PoC in the wild60
How attackers poison AI tools and defensesHelp Net Security·Apr 23, 13:51 UTC · Apr 23, 2026Malware55
Phishing is old, but AI just gave it new lifeHelp Net Security·Apr 23, 13:51 UTC · Apr 23, 2026Phishing & fraud55
AI is driving a new kind of phishing at scaleHelp Net Security·Apr 23, 13:29 UTC · Apr 23, 2026Phishing & fraud30
Push Security adds malicious browser extension detection to block threats in employee browsersHelp Net Security·Apr 15, 10:15 UTC · Apr 15, 2026Malware30
Masjesu Botnet Emerges as DDoS-for-Hire Service Targeting Global IoT DevicesThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Malware55
MagentoCore group hacks 7,339 stores and countingSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Malware42
New Perseus Android Banking Malware Monitors Notes Apps to Extract Sensitive DataThe Hacker News·Mar 19, 12:47 UTC · Mar 19, 2026Malware30
Authorities Disrupt SocksEscort Proxy Botnet Exploiting 369,000 IPs Across 163 CountriesThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2026Malware55