The Hacker News (2 hours ago)
Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn’t. There’s a strange mix of clever tricks and careless mistakes.
Read the full story on The Hacker News.
The company says an unnamed third-party provider was compromised. Trading has resumed, and Polymarket says affected traders will be made whole.
A cleanup script deletes the malware’s own files, making the intrusion harder for the PC’s owner to detect. NordVPN’s Threat Intelligence team discovered malicious repositories posing as the KyttyPS5 and AnyPS5 emulators.
Wired has the story of a superuser cheating scandal.
“We are still going to keep the data, but we will provide the decryption key for the hospital sector only.”
A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Controllers, to deploy a custom malware framework called KeyDrift.
The leaked records include names, phone numbers, job titles, and assignments of thousands of ICE, CBP, and other DHS employees.
A flaw in the Linux kernel’s TCP code, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux (RHEL), and other Linux distributions. The kernel’s own CVE team rates it 9.8 out of 10 on the CVSS scale.
Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a campaign dubbed Yoba.
Google on Wednesday took the wraps off Gemini 4 Carbon, its latest frontier model with state-of-the-art cybersecurity and long-horizon capabilities.
Security teams have spent years trying to detect threats faster. AI is changing the harder part: how much time defenders have left to act.
71 active sources
26 Turkish · 45 English
All sources
