Citizen Lab | Breaking Cybersecurity News | The Hacker News

OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

Claude Used to Automate Exploitation and Data Theft Across Multiple Victims

Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors

PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws

Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware

ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories

Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE

Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval

Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans

Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another Account

WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls

Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks

When the Whole Company Adopts AI: What It Does to Your SOC

Your Critical Vulnerabilities Might Not Be Your Biggest Risk

What It Took to Reach 1 Billion Build Manifests

US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries

Why Are So Many Security Professionals Keeping Breaches Quiet?

The Economics of Dwell Time and Why AI Native SIEM Changes the Equation