Skip to content
September 2026 Page 33

September 2026

Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords

Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords

The Iran-linked “hacktivist” persona known as Handala Hack has been attributed to a Telegram-based surveillance backdoor called HEAVYGRAM and a Delphi-based utility known as CRUDEEXCLUDE. “HEAVYGRAM offers builtin commands supporting remote command execution, system, network… 

Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone

Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone

Swati KhandelwalSep 17, 2026Vulnerability / DNS Security Every release of the Unbound DNS resolver before 1.26.1 has a critical heap overflow in its DNSSEC validator, maintainer NLnet Labs said in an advisory on Wednesday. An attacker who… 

Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar

Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar

The Hacker NewsSep 17, 2026Security Operations / Artificial Intelligence A new CVE drops. Your scanner finds it. The severity score looks ugly. But that still does not answer the question that matters: Can it actually…