ESET | Breaking Cybersecurity News | The Hacker News

New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit

Open-Source Android AI Agents Could Let Invisible Screen Text Run Code on Host PCs

Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC

AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code

Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs

Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents

OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark

Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data

Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers

Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files

ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable