UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware Russian state-sponsored threat actors have been observed leveraging the infamous ClickFix strategy... 2026-7-19 13:30:55 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com clickfix captcha apk stealer powershell

SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access Vulnerability / Network SecurityA previously undocumented threat actor has been attributed to the... 2026-7-19 13:18:56 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com 2026 appliance sma appliances

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code Vulnerability / Web SecurityAn anonymous HTTP request can run code on a WordPress site. The bug is... 2026-7-17 21:20:10 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com wordpress wp anonymous searchlight php

OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests Eleven bytes will make an unpatched OpenSSL server set aside up to 131 KB of memory for a message t... 2026-7-17 20:20:53 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com memory okta hollowbyte changelog attacker

Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT Software Supply Chain / MalwareCybersecurity researchers have discovered a cluster of seven malici... 2026-7-17 18:54:51 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com vite blockchain payload malicious tron

New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's... 2026-7-17 17:12:23 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com mcp xlab nadmesh cloud comfyui

GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft Cybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat act... 2026-7-17 16:39:16 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com digicert gh0st expel 2026 security

Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images Social Engineering / MalwareNorth Korean threat actors linked to the Contagious Interview campaig... 2026-7-17 13:48:56 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com ottercookie stealer trojan remote contagious

E.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants The European Commission on Thursday ordered Google to give rival AI assistants the same reach into... 2026-7-17 11:44:41 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com commission draft 2027 parties assistants

The Race to Field Military Autonomy Is On, Can Trusted Information Infrastructure Keep Pace? Military forces are under increasing pressure to field autonomous capabilities faster than ever bef... 2026-7-17 11:30:0 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com autonomous mission everfox investment operational

Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man Armenia has held a Russian tourist named Aleksandr Ermakov in a detention center since June 28, on... 2026-7-17 10:53:31 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com ermakov aleksandr him australia izvestia

ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files ACR Stealer, an infostealer in circulation since 2024, is walking out of enterprise networks with s... 2026-7-17 08:56:39 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com microsoft stealer acr powershell claude

New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage Cyber Espionage / Threat IntelligenceCybersecurity researchers have discovered a previously undocu... 2026-7-17 08:46:45 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com remote goserpent proxy c2

CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV 2026-7-17 06:42:23 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com

Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack Owen Flowers, 18, and Thalha Jubair, 20, were each sentenced to five and a half years at Woolwich C... 2026-7-16 17:9:25 | 阅读: 18 | 收藏 | The Hacker News - thehackernews.com tfl nca cps flowers jubair

ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories A lot of this week’s trouble starts with something that looks close enough.A familiar repo. A useful... 2026-7-16 15:41:15 | 阅读: 22 | 收藏 | The Hacker News - thehackernews.com security windows network software stealer

n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer Vulnerability / Web Securityn8n, the workflow automation platform, handed out the wrong accounts a... 2026-7-16 13:33:25 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com n8n exchange 2026 59208 issuers

New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands Cybersecurity researchers have called attention to a new modular malware called TELEPUZ that's been... 2026-7-16 12:50:13 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com telepuz c2 clickfix extracting malicious

New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password ClickLock Stealer, a new macOS infostealer, answers a victim's refusal by killing their apps on a... 2026-7-16 12:33:42 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com ib victim machine leaves stealer

20+ Hijacked Government Websites Became an Attack Channel Malware / Endpoint SecurityMore than 20 Brazilian government websites were hijacked and turned int... 2026-7-16 11:58:0 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com police security themed lure