The Hacker News (2 hours ago)
Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, according to Previdian.
Read the full story on The Hacker News.
Eeeeeeeeeeeeeep. Thankfully there’s already a fix out.
No, you’re not getting SpaceX shares - it’s a trick to hand over your Microsoft 365 account credentials.
QNAP urges users to update Plex Media Server to the latest version available in the QNAP App Center, as hackers are exploiting the Plex2Shell vulnerability chain.
URL-level blocking arrives at no extra cost for subscribers on all paid plans
Some WordPress sites can still be attacked while they install the fix for an actively exploited flaw, according to Umut Bayram, the Picus Security researcher who found it.
Chainalysis shut down multiple services to contain the attack and forced all users to change their passwords.
OpenAI on Thursday unveiled GPT‑6 Cyber, which it described as a major step forward in security research that brings together stronger cybersecurity capabilities with a step-change improvement in model alignment.
A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not through Windows updates. The fixed build, 11.2609.401.0, was the newest Paint build in all ten countries The Hacker News checked today.
A browser extension that can run scripts on claude.ai could make Claude Desktop run code on a person’s computer, researchers at Forever Security, an endpoint security company, showed in a test.
An update on Athena, and some unsolicited predictions on what’s coming next On Saturday, Dario Amodei published We Must Pace the Frontier. I agree with him. Go read it if you haven’t.
69 active sources
24 Turkish · 45 English
All sources
