Threatsday Bulletin | Breaking Cybersecurity News | The Hacker News

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw

Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic

Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day

ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories

Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root

Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data

Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone

Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon

Fake Software Installers Disable Windows Update and Weaken Microsoft Defender

Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control

Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another