Black Lotus Labs | Breaking Cybersecurity News | The Hacker News

108 Malicious Chrome Extensions Steal Google and Telegram Data, Affecting 20,000 Users

Mirax Android RAT Turns Devices into SOCKS5 Proxies, Reaching 220,000 via Meta Ads

New PHP Composer Flaws Enable Arbitrary Command Execution — Patches Released

OpenAI Launches GPT-5.4-Cyber with Expanded Access for Security Teams

Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities

Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover

n8n Webhooks Abused Since October 2025 to Deliver Malware via Phishing Emails

Cisco Patches Four Critical Identity Services, Webex Flaws Enabling Code Execution

Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation

Three Microsoft Defender Zero-Days Actively Exploited; Two Still Unpatched

Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply Chain

Vercel Breach Tied to Context AI Hack Exposes Limited Customer Credentials

Why Security Leaders Are Layering Email Defense on Top of Secure Email Gateways

Why Threat Intelligence Is the Missing Link in CTEM Prioritization and Validation

The Hidden Security Risks of Shadow AI in Enterprises

Your MTTD Looks Great. Your Post-Alert Gap Doesn't