Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions Vulnerability / Email SecurityZimbra is urging customers to apply updates to address a critical se... 2026-7-11 06:45:55 | 阅读: 27 | 收藏 | The Hacker News - thehackernews.com zimbra exploited malicious security client

Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages Software Supply Chain / MalwareUnknown threat actors compromised the Injective Labs SDK project's... 2026-7-10 17:29:28 | 阅读: 24 | 收藏 | The Hacker News - thehackernews.com malicious repository github mnemonic

URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat Enterprise Security / Security IncidentProgress Software has told ShareFile customers to shut down... 2026-7-10 16:30:0 | 阅读: 22 | 收藏 | The Hacker News - thehackernews.com sharefile security exploited cloud citrix

Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot Researchers at firmware security firm Binarly have found six new flaws in U-Boot, the small program... 2026-7-10 15:57:14 | 阅读: 20 | 收藏 | The Hacker News - thehackernews.com 2026 brly binarly attacker bootloader

Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be Patched Researchers at Ledger's Donjon security team have shown that a precisely timed laser pulse, aimed a... 2026-7-10 14:51:49 | 阅读: 22 | 收藏 | The Hacker News - thehackernews.com tangem chip donjon laser trezor

Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws AI Security / VulnerabilityDetails have emerged about three now-patched security flaws in the Open... 2026-7-10 14:19:50 | 阅读: 24 | 收藏 | The Hacker News - thehackernews.com openclaw ghsa security m3mc 575v

New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic Malware / Enterprise SecurityThe China-linked cybercrime group known as Silver Fox has been attrib... 2026-7-10 13:15:23 | 阅读: 25 | 收藏 | The Hacker News - thehackernews.com qianxin trojan modbeacon counterfeit c2

Unpatched XRING Flaw in XQUIC Lets Remote Clients Crash HTTP/3 Servers Vulnerability / Server SecurityA single wrong variable on one line in XQUIC, Alibaba's QUIC and HT... 2026-7-10 11:47:43 | 阅读: 25 | 收藏 | The Hacker News - thehackernews.com qpack foxio xquic alibaba xring

From 17,000 to 1.1 Million Assets: How Lumen Technologies Rebuilt Exposure Management at Scale Most enterprises assume their asset inventory is close enough to accurate. The evidence suggests ot... 2026-7-10 11:39:40 | 阅读: 27 | 收藏 | The Hacker News - thehackernews.com asset lumen exposure krahn axonius

Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites A cybercrime crew left one of its own servers wide open on the internet for three weeks, and it exp... 2026-7-10 11:30:2 | 阅读: 30 | 收藏 | The Hacker News - thehackernews.com 2026 crew joomla socradar wordpress

Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking Researchers ran 281 of the most popular free VPN apps on the Google Play Store through a new testin... 2026-7-10 10:56:23 | 阅读: 22 | 收藏 | The Hacker News - thehackernews.com tunnel network security mvpnalyzer flagged

Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access Enterprise Security / AuthenticationA threat actor has been targeting organizations spanning multi... 2026-7-10 10:30:20 | 阅读: 21 | 收藏 | The Hacker News - thehackernews.com passkey phishing microsoft victim okta

Attackers Exploit 'Ill Bloom' Vulnerability to Drain $3.1 Million From Cryptocurrency Wallets Security firm Coinspect has disclosed a crypto wallet flaw it calls Ill Bloom, and attackers are al... 2026-7-10 09:0:5 | 阅读: 18 | 收藏 | The Hacker News - thehackernews.com phrase coinspect wallets funds phrases

Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat Attacks Cybercrime / Law EnforcementA 41-year-old former ransomware negotiator has been sentenced to nearl... 2026-7-10 08:10:12 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com martino ransomware blackcat martin

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs Developer Security / Supply Chain SecurityDatadog Security Labs is warning of "several overlapping... 2026-7-9 18:38:49 | 阅读: 28 | 收藏 | The Hacker News - thehackernews.com github security enumerating datadog pats

New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware Microsoft has taken apart a destructive Windows backdoor it calls GigaWiper. What stands out is h... 2026-7-9 18:8:7 | 阅读: 24 | 收藏 | The Hacker News - thehackernews.com microsoft gigawiper windows ransomware wiper

npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk Supply Chain Security / DevSecOpsGitHub has officially announced the release of npm version 12 wit... 2026-7-9 16:49:2 | 阅读: 22 | 收藏 | The Hacker News - thehackernews.com publishing gats bypass pnpm github

ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories Most security mess starts as admin work. A link gets clicked. A tool gets trusted. A bucket name get... 2026-7-9 15:9:28 | 阅读: 15 | 收藏 | The Hacker News - thehackernews.com remote attacker ransomware security phishing

AI Attacks Move in Minutes. Join This Webinar on Building a Defense That Keeps Up AI has changed how fast attacks move. Work that once took an attacker days now takes minutes. Using... 2026-7-9 12:26:58 | 阅读: 16 | 收藏 | The Hacker News - thehackernews.com attackers network attacker mythos clears

Summer of Clearinghouses Everyone seems to have announced a clearinghouse over the past few weeks. We did too. Ours is calle... 2026-7-9 11:0:0 | 阅读: 26 | 收藏 | The Hacker News - thehackernews.com upstream embargo