[email protected] (The Hacker News)

Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack

Ravie LakshmananOct 23, 2026Malware / Cyber Espionage The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics company last year. According to…

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Swati KhandelwalOct 23, 2026Vulnerability / Web Security Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it…

Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances

AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security firm V12 said on October 22. The cause was…

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data

Swati KhandelwalOct 23, 2026Vulnerability / Web Security Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their “Node2Shell” proof of concept ran code…

PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware

Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be harder…

Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

Swati KhandelwalOct 22, 2026Vulnerability / Enterprise Security Attackers are exploiting a zero-day SQL injection flaw in Arista’s VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22. The flaw…

eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable

eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private keys of eight of its intermediate CA…

AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More

« Previous
1
…
4
5
6
7
8
…
541
Next »