Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root on September 18, 2026 Posted by The Hacker News
New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution on September 18, 2026 Posted by The Hacker News
Posted in Hacking news 16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets on August 18, 2026 The Hacker News
Posted in Hacking news One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025 on August 18, 2026 The Hacker News
Posted in Hacking news SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers on August 18, 2026 The Hacker News
Posted in Hacking news CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE on August 17, 2026 The Hacker News
Posted in Hacking news Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects on August 17, 2026 The Hacker News
Posted in Hacking news Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection on August 17, 2026 The Hacker News
Posted in Hacking news Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads on August 17, 2026 The Hacker News
Posted in Hacking news Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic on August 17, 2026 The Hacker News
Posted in Hacking news ⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More on August 17, 2026 The Hacker News
Posted in Hacking news How MCP Servers Can Expose Enterprise Secrets on August 17, 2026 The Hacker News