Skip to content
[email protected] (The Hacker News) Page 62

[email protected] (The Hacker News)

Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code

Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code

Ravie LakshmananAug 20, 2026Vulnerability / Web Security Cybersecurity researchers have disclosed details of a critical flaw in the Elementor Pro WordPress plugin that, if successfully exploited, could lead to remote code execution. The vulnerability, tracked… 

Read More »Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code
Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

Swati KhandelwalAug 19, 2026Cloud Security / Vulnerability Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in the production environment at up… 

Read More »Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second
OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior

OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior

OpenAI on Tuesday revealed that it paused reinforcement learning (RL) training for its latest artificial intelligence (AI) models for two weeks while it shored up additional defenses and increased the scope of its monitoring to… 

Read More »OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior
SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs

SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs

A previously unreported cyber espionage operation dubbed SilkParasite has been observed targeting government bodies in Central Asia. The intrusion set makes use of seven remote access tool (RAT) families, five of which have never been… 

Read More »SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs
Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P

Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P

Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised more than 14,530 Dahua devices between June 17 and July 22, 2026, using credential attacks, two authentication-bypass flaws, and a peer-to-peer… 

Read More »Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P
StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data

StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data

Cybersecurity researchers have flagged a global cybercrime operation that abuses thousands of hacked WordPress websites as infrastructure to disseminate malware, commandeer infected hosts, store stolen documents, screenshots, and activity logs created to track the status… 

Read More »StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data
Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

Ravie LakshmananAug 19, 2026Vulnerability / Ransomware The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, stating they are being exploited in the wild.… 

Read More »Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation
Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure

Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure

Microsoft Defender Experts have linked more than 30 web domains to MacSync Stealer, a macOS-focused information stealer, after correlating recurring endpoint and network behaviors across changing infrastructure, tracing the malware from payload retrieval through data… 

Read More »Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure
Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data

Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data

A JavaServer Pages (JSP) web shell deployed following the exploitation of a critical security flaw in PTC Windchill and FlexPLM servers is specifically designed for the enterprise Product Lifecycle Management (PLM) software, according to new… 

Read More »Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data