mint+security+breach | Breaking Cybersecurity News | The Hacker News

Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars

PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE

New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs

FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls

SilentAir Hijacks Asian Telecom Networks to Intercept SMS 2FA Codes and Spy on Taiwanese Users

Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files

ThreatsDay: 59 Linux Kernel Bugs, Falcon Spyware, GSocket Backdoors + 17 More Stories

New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access

Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass

Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry

Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs

New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access

Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover

Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' Data

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets

Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords

Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches

SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users

Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access

Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed

SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution

Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026

⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More