Iranian APT Intrusion Masquerades as Chaos Ransomware Attack
Likely perpetrated by MuddyWater, the attack combined social engineering, persistence, credential harvesting, and data t
#news
共收录 3885 条相关情报。
← 返回所有主题MuddyWater Uses Microsoft Teams to Steal Credentials in False Flag Ransomware Attack
The Iranian state-sponsored hacking group known as MuddyWater (aka Mango Sandstorm, Seedworm, and Static Kitten) has bee
Webinar: Why network incidents escalate and how to fix response gaps
Most network incidents don't escalate due to a lack of alerts; they escalate when response breaks down. This webinar exp
The Hacker News Launches 'Cybersecurity Stars Awards 2026' — Submissions Now Open
For nearly 20 years, we at The Hacker News have mostly told scary stories about cyberspace — big hacks, broken systems,
Romanian Man Extradited to US for Role in Hacking Scheme 17 Years Ago
Gavril Sandu, 53, was indicted in 2017, but was arrested and extradited to the United States only in 2026. The post Roma
Your AI Agents Are Already Inside the Perimeter. Do You Know What They're Doing?
Analysts recently confirmed what identity security teams have quietly feared: AI agents are being deployed faster than e
CISA Launches ‘CI Fortify’ to Prepare Critical Infrastructure for Geopolitical Cyber Conflict
Agency issued guidance and calls on operators to build resilient OT environments capable of surviving extended isolation
Sophisticated Quasar Linux RAT Targets Software Developers
The persistent, evasive implant provides remote access, surveillance, and credential exfiltration capabilities. The post
Palo Alto Networks warns of firewall RCE zero-day exploited in attacks
2026年5月6日，Palo Alto Networks发布紧急警告，称其PAN-OS防火墙的User-ID认证门户中存在一个关键远程代码执行（RCE）零日漏洞，且已被攻击者积极利用。该漏洞影响运行PAN-OS的部分版本，具体编号尚未分配。
Google's Android Apps Get Public Verification to Stop Supply Chain Attacks
Google has announced expanded Binary Transparency for Android as a way to safeguard the ecosystem from supply chain atta
Windows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPs
Cybersecurity researchers have disclosed details of an intrusion that involved the use of a CloudZ remote access tool (R
Government, Scientific Entities Hit via Daemon Tools Supply Chain Attack
While trojanized Daemon Tools versions were installed worldwide, a sophisticated backdoor was dropped only on a dozen sy
Oracle Debuts Monthly Critical Security Patch Updates
Containing fixes for critical-severity vulnerabilities, the monthly rollouts will focus on addressing priority issues fa
Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution
CVE-2026-0300
Palo Alto Networks has released an advisory warning that a critical buffer overflow vulnerability in its PAN-OS software
Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls
CVE-2026-0300
Palo Alto Networks 计划修复一个被野外利用的零日漏洞 CVE-2026-0300，该漏洞影响 PAN-OS 软件中的 Captive Portal 服务，涉及 PA 和 VM 系列防火墙。根据 SecurityWeek 报
New stealthy Quasar Linux malware targets software developers
A previously undocumented Linux implant named Quasar Linux (QLNX) is targeting developers' systems with a mix of rootkit
Instructure hacker claims data theft from 8,800 schools, universities
The hacker behind a breach at education technology giant Instructure claims to have stolen 280 million data records for
DAEMON Tools trojanized in supply-chain attack to deploy backdoor
Hackers trojanized installers for the DAEMON Tools software and since April 8, delivered a backdoor to thousands of syst
Student hacked Taiwan high-speed rail to trigger emergency brakes
A 23-year-old university student in Taiwan was arrested for interfering with the TETRA communication system used by the
Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE
CVE-2026-23918
The Apache Software Foundation (ASF) has released security updates to address several security vulnerabilities in the HT