Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in which a repository's own Git configuration...
Hacking
Category Added in a WPeMatico Campaign
Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages
A Chinese-speaking cybercrime cluster known as Gambling Goblin has been observed installing malicious Apache modules on compromised web servers run...
BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access
Swati KhandelwalSep 02, 2026Network Security / Supply Chain Attack Virtualizor said hackers used a Border Gateway Protocol (BGP) hijack to...
Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control
The Hacker NewsSep 02, 2026Malvertising / Mobile Security Cybersecurity researchers have disclosed details of a new Android banking trojan called...
Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain
Ravie LakshmananSep 02, 2026Vulnerability / Network Security SonicWall has released security updates to address two security flaws impacting its Secure...
GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
Swati KhandelwalSep 02, 2026Vulnerability / Web Security Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution...
Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands
Swati KhandelwalSep 02, 2026Malware / Cybercrime The U.S. Department of Justice (DoJ) has charged a Russian national, extradited from Cyprus...
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another
Forescout Research - Vedere Labs said it used Anthropic's Claude to port a working pre-authentication remote code execution (RCE) exploit...
Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials
Ravie LakshmananSep 02, 2026Vulnerability / Network Security Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise...
Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
Ravie LakshmananSep 01, 2026Vulnerability / Supply Chain Attack Threat actors are exploiting a newly patched critical security flaw impacting JFrog...
Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems
Ravie LakshmananSep 01, 2026Cybercrime / Malware Brazilian financial services, retail, and e-commerce organizations have become the target of a financially...
13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds
Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript...
Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests
The Iranian Nimbus Manticore hacking group has been attributed to two previously undocumented malware families that highlight the continued evolution...
Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones
The most common way into a company last year was to ask. A web page tells the visitor to prove...
Attackers Steal METR API Key and Consume AI Credits Worth About $600,000
Ravie LakshmananSep 01, 2026Cyber Attack / Artificial Intelligence METR (short for Model Evaluation and Threat Research and pronounced "Meter"), a...
