tech+companies | Breaking Cybersecurity News | The Hacker News

Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline

Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide

TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them

Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen

ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls

China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces

PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network

Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers

Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits

CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets

GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw

Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations

Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them Moving

The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers

Wazuh and AI for Enhanced SOC Workflows

American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed

AI-Generated Fake Login Pages Are Making Account Takeovers Easier