decryption | Breaking Cybersecurity News | The Hacker News

⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats

Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent

RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims

Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions

Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation

New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses

French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks

Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution

OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs

Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path

WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory

ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories

Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members

How Financial Services Companies Can Modernize Their Software Supply Chain

US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access

Zero Trust for AI Agents Starts With Fixing Zero Visibility