SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers
SafePal has disclosed that an authorization flaw in an order-tracking plug-in exposed the names, email addresses, shipping addresses, phone numbers,...
Hacking
Category Added in a WPeMatico Campaign
CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE
Ravie LakshmananAug 18, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical...
Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
Swati KhandelwalAug 17, 2026Vulnerability / DevOps GitLab has released security updates to address a critical vulnerability impacting its Community Edition...
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
Swati KhandelwalAug 17, 2026Vulnerability / Artificial Intelligence Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in...
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
Ravie LakshmananAug 17, 2026Vulnerability / Website Security A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin...
Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic
Cybersecurity researchers have traced the continued evolution of the Cavern (aka Cav3rn) command-and-control (C2) framework used by Iranian nation-state hackers...
⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More
Ravie LakshmananAug 17, 2026Cybersecurity / Hacking The expensive attacks are not always the clever ones. This week had plenty of...
How MCP Servers Can Expose Enterprise Secrets
The Hacker NewsAug 17, 2026AI Security / Identity Security MCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned...
Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access
Swati KhandelwalAug 17, 2026Vulnerability / Mobile Security Security researchers at SSD Secure Disclosure have published a two-stage exploit chain that...
Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies
Ravie LakshmananAug 17, 2026Malware / Botnet Cybersecurity researchers have flagged a previously undocumented Linux botnet family dubbed Evooo1Bot that derives...
Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware
Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus...
SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch
Ravie LakshmananAug 15, 2026Vulnerability / Cloud Security A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts....
Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner
A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency...
Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware
Threat actors are acquiring expired domains to inherit website traffic and reputation to redirect victims to scams and malware on...
Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
Ravie LakshmananAug 13, 2026Vulnerability / Enterprise Security Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following...
