#thehackernews
LightNews LightNews
campuscodi.risky.biz
"This article about AI allucinations written by thehackernews, is literally written with AI lol... We need to do something to stop this phenomenon"

LOL 🤣🤣🤣🤣🤣

old.reddit.com/r/cybersecur...
May 17, 2026 at 11:00 AM
cyzoio.bsky.social
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
Source: The Hacker News
Read: https://thehackernews.com/2026/09/sharepoint-rce-and-mikrotik-routeros.html
#Cyzo #CyberSecurity #TheHackerNews
September 26, 2026 at 6:20 PM
cyzoio.bsky.social
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
Source: The Hacker News
Read: https://thehackernews.com/2026/09/warning-two-unpatched-citrix-netscaler.html
#Cyzo #CyberSecurity #TheHackerNews
September 27, 2026 at 8:20 AM
cyzoio.bsky.social
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells
Source: The Hacker News
Read: https://thehackernews.com/2026/09/attackers-bypass-wafs-to-exploit-oracle.html
#Cyzo #CyberSecurity #TheHackerNews
September 27, 2026 at 4:23 AM
cyzoio.bsky.social
Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link
Source: The Hacker News
Read: https://thehackernews.com/2026/09/elementor-csrf-flaw-lets-attackers-take.html
#Cyzo #CyberSecurity #TheHackerNews
September 26, 2026 at 2:20 PM
cyzoio.bsky.social
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
Source: The Hacker News
Read: https://thehackernews.com/2026/09/lunex-stealer-abuses-amd-driver-to.html
#Cyzo #CyberSecurity #TheHackerNews
September 26, 2026 at 10:20 PM
kotosecurity.bsky.social
WordPress CVE-2026-87902 (CVSS 9.2) is also being actively exploited: unauthenticated RCE via page-template resolution. Previdian recorded 68 attempts since Sept 23. Upgrade ASAP. Source: TheHackerNews. #InfoSec
September 25, 2026 at 9:00 PM
kotosecurity.bsky.social
WordPress CVE-2026-87902 (CVSS 9.2) is also being actively exploited: unauthenticated RCE via page-template resolution. Previdian recorded 68 attempts since Sept 23. Upgrade ASAP. Source: TheHackerNews. #InfoSec
September 25, 2026 at 6:00 PM
cyzoio.bsky.social
Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack
Source: The Hacker News
Read: https://thehackernews.com/2026/09/kiteworks-urges-customers-to-shut-down.html
#Cyzo #CyberSecurity #TheHackerNews
September 26, 2026 at 6:20 PM
masq31.tech.lgbt.ap.brid.gy
RE: https://social.tchncs.de/@thehackernews/117316288650032942

OOPS NOT ME UPDATING MY SITE ON A TUESDAY
social.tchncs.de
September 23, 2026 at 1:35 AM
kotosecurity.bsky.social
BREAKING: F5 BIG-IP APM zero-day CVE-2026-94127 (CVSS 9.8) actively exploited, unauthenticated RCE on OAuth auth servers. CISA added to KEV Sept 22. Hotfixes available. Source: TheHackerNews. #CyberSecurity
September 25, 2026 at 9:00 PM
kotosecurity.bsky.social
WordPress CVE-2026-87902 (CVSS 9.2) is also being actively exploited: unauthenticated RCE via page-template resolution. Previdian recorded 68 attempts since Sept 23. Upgrade ASAP. Source: TheHackerNews. #InfoSec
September 25, 2026 at 2:00 PM
kotosecurity.bsky.social
BREAKING: ShinyHunters claims FBI breach via alleged Oracle PeopleSoft zero-day, stealing 2TB-3TB of data (employees, job applicants). FBI investigating. Source: BleepingComputer, TheHackerNews. #CyberSecurity #InfoSec
September 24, 2026 at 9:00 PM
kotosecurity.bsky.social
BREAKING: F5 BIG-IP APM zero-day CVE-2026-94127 (CVSS 9.8) actively exploited, unauthenticated RCE on OAuth auth servers. CISA added to KEV Sept 22. Hotfixes available. Source: TheHackerNews. #CyberSecurity
September 25, 2026 at 6:00 PM
kotosecurity.bsky.social
BREAKING: ShinyHunters claims FBI breach via alleged Oracle PeopleSoft zero-day, stealing 2TB-3TB of data (employees, job applicants). FBI investigating. Source: BleepingComputer, TheHackerNews. #CyberSecurity #InfoSec
September 24, 2026 at 2:38 PM
kotosecurity.bsky.social
BREAKING: ShinyHunters claims FBI breach via alleged Oracle PeopleSoft zero-day, stealing 2TB-3TB of data (employees, job applicants). FBI investigating. Source: BleepingComputer, TheHackerNews. #CyberSecurity #InfoSec
September 24, 2026 at 2:37 PM
kotosecurity.bsky.social
BREAKING: F5 BIG-IP APM zero-day CVE-2026-94127 (CVSS 9.8) actively exploited, unauthenticated RCE on OAuth auth servers. CISA added to KEV Sept 22. Hotfixes available. Source: TheHackerNews. #CyberSecurity
September 25, 2026 at 2:00 PM
kotosecurity.bsky.social
BREAKING: ShinyHunters claims FBI breach via alleged Oracle PeopleSoft zero-day, stealing 2TB-3TB of data (employees, job applicants). FBI investigating. Source: BleepingComputer, TheHackerNews. #CyberSecurity #InfoSec
September 24, 2026 at 4:06 AM
mattjay.com
Threat actor claimed to be a "reach out manager" for Medusa - a Ransomware-as-a-Service operation believed to operate from Russia/CIS region.

Group has hit 300+ victims in past 4 years per US cyber authorities.

(img: TheHackerNews)
September 29, 2025 at 1:51 PM
lirantal.com
oh hah, the RCE security vulnerability article for Anthropic MCP SDK from thehackernews (thehackernews.com/2026/04/anth...) drops a mention to one of my earlier CVEs

what a fun random moment :D
April 22, 2026 at 6:00 PM
kitafox.bsky.social
Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure（WordPressのCVE-2026-87902、公開から数時間で攻撃者が悪用） #TheHackerNews (Sep 24)

thehackernews.com/2026/09/atta...
Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure
Attackers are exploiting WordPress CVE-2026-87902 to include pearcmd.php and write PHP files when specific theme and server conditions are met.
thehackernews.com
September 25, 2026 at 7:30 AM
canadianry.bsky.social
ANALYSIS TIME - TheHackerNews Presents:

Hacktivist Group Twelve Targets Vatnik Entities with Destructive Cyber Attacks (Could they be #Ukrainian? 🤣)

thehackernews.com/2024/09/hack...
Hacktivist Group Twelve Targets Russian Entities with Destructive Cyber Attacks
Twelve hacktivist group targets Russian entities with destructive cyber attacks, using public tools for maximum damage without financial gain.
thehackernews.com
September 22, 2024 at 9:47 PM
siliconshecky.siliconshecky.com
Oh boy this could ve fun.

AAKL - Microsoft disclosed this new vulnerability yesterday, if you missed it.

The Hacker News: Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data Without User Interaction thehackernews.com/2025/06/zero... @thehackernews #Microsoft #AI #cybersecurity #infosec
Security Update Guide - Microsoft Security Response Center
msrc.microsoft.com
June 12, 2025 at 3:10 PM
kitafox.bsky.social
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks（Check Point管理サーバーのゼロデイ、標的型攻撃で悪用を確認） #TheHackerNews (Sep 22)

thehackernews.com/2026/09/chec...
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
Check Point fixed a Security Management Server flaw exploited in targeted July attacks that can run scripts without login.
thehackernews.com
September 24, 2026 at 2:37 AM
kitafox.bsky.social
Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content（1,700超のリポジトリが参照するプレースホルダードメイン、悪意あるコンテンツ配信に悪用） #TheHackerNews （Sep 24）

thehackernews.com/2026/09/plac...
Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content
third-party[.]com, a widely used documentation placeholder, serves Windows users a ClickFix lure that plants a PowerShell command.
thehackernews.com
September 25, 2026 at 1:47 AM