Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls
The logistics sector has become the target of a new malicious cyber campaign that distributes an Android spyware codenamed Corp MDM. According to Have I…
Category: TheHackerNews
This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker’s server, Cisco…
A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You
Swati KhandelwalSep 23, 2026DevOps Security / Supply Chain The private email address GitLab gives you for filing issues by email is a credential. Anyone who…
Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry
Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the first time threat actors are using the centralized…
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key
Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers without a password, SSH key, or completed authentication. The…
New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control
Swati KhandelwalSep 23, 2026Vulnerability / Web Security A flaw in cPanel’s CalDAV and CardDAV service lets anyone with a cPanel hosting account run code as…
Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input
Swati KhandelwalSep 23, 2026Vulnerability / Web Security A new security vulnerability in Next.js could allow attackers to run code on a server via ImageResponse, the…
WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers
Swati KhandelwalSep 22, 2026Vulnerability / Web Security WordPress has fixed a critical flaw in its core software that lets an attacker with no account make…
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
Swati KhandelwalSep 22, 2026Network Security / Vulnerability Attackers exploited a previously unknown flaw in Check Point’s Security Management Server in a handful of targeted attacks…
Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises
Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligence (AI) “at every step of the…
DORA Year Two: Can Your SOC Actually See the Attack?
When the Digital Operational Resilience Act (DORA) became enforceable across the European Union in January 2025, it triggered an administrative sprint. Financial entities spent the…
One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor
Malware already running on a Mac can quietly take over Meta’s Muse assistant and use the broad access its owner granted the app, security researcher…