Threat Intelligence Alone Won’t Close the Exploitation Gap
The Hacker NewsSep 16, 2026Threat Intelligence / Security Validation A leaked credential shows up in a criminal marketplace, or a...
Hacking
Category Added in a WPeMatico Campaign
Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks
Ravie LakshmananSep 16, 2026Vulnerability / Linux Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel...
Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells
Ravie LakshmananSep 16, 2026Vulnerability / Web Security Threat actors are exploiting a critical security flaw in WooCommerce Wholesale Lead Capture,...
Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens
Ravie LakshmananSep 16, 2026Vulnerability / API Security A critical security flaw in WSO2 API Manager has come under active exploitation...
KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens
Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN. Elastic...
Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists
Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say...
BambooToken Malware Uses MQTT to Control Windows and Linux Systems
Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (MQTT) protocol as a...
.jpg "Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds")
Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds
Ravie LakshmananSep 15, 2026Vulnerability / Malware With artificial intelligence (AI) shrinking the window between vulnerability discovery and exploitation and lowering...
Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point
Introduction Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this...
LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server
Swati KhandelwalSep 15, 2026Vulnerability / Web Security A critical vulnerability in LiteSpeed Web Server Enterprise could let a low-privilege website...
Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution
Ravie LakshmananSep 15, 2026Vulnerability / Network Security Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco...
China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE
A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patched security flaws in Google Chrome...
New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing
Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD confidential computing...
Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries
Ravie LakshmananSep 14, 2026Cyber Espionage / Vulnerability A suspected Chinese threat actor tracked as Red Heron has been attributed to...
WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution
Ravie LakshmananSep 14, 2026Web Security / Vulnerability WordPress has announced it's launching an automated security review for every release of...
