WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage on September 18, 2026 Posted by The Hacker News
Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer on September 18, 2026 Posted by The Hacker News
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall on September 17, 2026 Posted by The Hacker News
HTTP QUERY Method: The Grey Zone Between GET And POST., (Fri, Sep 18th) on September 17, 2026 Posted by SANS Internet Storm Center, InfoCON: green
Posted in Hacking news Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds on September 15, 2026 The Hacker News
Posted in Hacking news Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point on September 15, 2026 The Hacker News
Posted in Hacking news Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers on September 15, 2026 The Hacker News
Posted in Hacking news LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server on September 14, 2026 The Hacker News
Posted in Hacking news Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution on September 14, 2026 The Hacker News
Posted in Hacking news China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE on September 14, 2026 The Hacker News
Posted in Hacking news 3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials on September 14, 2026 The Hacker News
Posted in Hacking news Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports on September 14, 2026 The Hacker News
Posted in Hacking news New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing on September 14, 2026September 14, 2026 The Hacker News
Posted in Hacking news Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries on September 14, 2026 The Hacker News