Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents Swati KhandelwalSep 18, 2026Vulnerability / Artificial Intelligence A flaw…
An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It. The Hacker NewsSep 18, 2026Web Security / Compliance In July…
WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage Ravie LakshmananSep 18, 2026Malware / Web Security Cybersecurity researchers have…
Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer Ravie LakshmananSep 18, 2026Malware / Cybercrime A financially motivated threat…
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall Ravie LakshmananSep 18, 2026Mobile Security / Malware Cybersecurity researchers have flagged…
Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root Swati KhandelwalSep 17, 2026Vulnerability / Enterprise Security A critical vulnerability…
Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files Swati KhandelwalSep 17, 2026Vulnerability / Artificial Intelligence Malicious…
Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords Ravie LakshmananSep 17, 2026Cyber Espionage / Malware The Iran-linked "hacktivist"…
Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone Swati KhandelwalSep 17, 2026Vulnerability / DNS Security Every release…
CISO's Expert Guide to Agentic Pentesting for Websites The Hacker NewsSep 17, 2026Application Security / AI Agent Attackers now weaponize new vulnerabilities…