Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine IoT Security / Cyber EspionageAt least one Russian intelligence service is systematically hijackin... 2026-7-20 12:13:39 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com cameras censys military exploited ukraine

Mythos Didn't Break Your Security Program. Your Exposure Window Could. The industry spent the initial months after Anthropic's April 7 Mythos reveal focused on volume. Ho... 2026-7-20 11:30:0 | 阅读: 2 | 收藏 | The Hacker News - thehackernews.com exposure security mythos proactive

New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction Vulnerability / Endpoint SecurityOpening a crafted XZ archive in 7-Zip could let an attacker run c... 2026-7-20 09:10:56 | 阅读: 3 | 收藏 | The Hacker News - thehackernews.com xz zdi attacker 2026 overflow

Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs A solo Russian-speaking threat actor known as "bandcampro" outsourced a chunk of their operations t... 2026-7-20 09:7:11 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com gemini skill bandcampro migration assisted

World's Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent AI Security / VulnerabilityIn an ironic twist, open-source artificial intelligence (AI) platform H... 2026-7-20 05:27:26 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com attacker hugging guardrails clusters autonomous

SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines Cybersecurity researchers have flagged a new software supply chain attack codenamed SleeperGem targ... 2026-7-20 05:15:39 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com rubygems malicious fastlane testlab firebase

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger... 2026-7-19 20:42:49 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com shaw 2026 captures 42533 overflow

UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware Russian state-sponsored threat actors have been observed leveraging the infamous ClickFix strategy... 2026-7-19 13:30:55 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com clickfix captcha apk stealer powershell

SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access Vulnerability / Network SecurityA previously undocumented threat actor has been attributed to the... 2026-7-19 13:18:56 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com 2026 appliance sma appliances

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code Vulnerability / Web SecurityAn anonymous HTTP request can run code on a WordPress site. The bug is... 2026-7-17 21:20:10 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com wordpress wp anonymous searchlight php

OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests Eleven bytes will make an unpatched OpenSSL server set aside up to 131 KB of memory for a message t... 2026-7-17 20:20:53 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com memory okta hollowbyte changelog attacker

Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT Software Supply Chain / MalwareCybersecurity researchers have discovered a cluster of seven malici... 2026-7-17 18:54:51 | 阅读: 7 | 收藏 | The Hacker News - thehackernews.com vite blockchain payload malicious tron

New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's... 2026-7-17 17:12:23 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com mcp xlab nadmesh cloud comfyui

GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft Cybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat act... 2026-7-17 16:39:16 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com digicert gh0st expel 2026 security

Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images Social Engineering / MalwareNorth Korean threat actors linked to the Contagious Interview campaig... 2026-7-17 13:48:56 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com ottercookie stealer trojan remote contagious

E.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants The European Commission on Thursday ordered Google to give rival AI assistants the same reach into... 2026-7-17 11:44:41 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com commission draft 2027 parties assistants

The Race to Field Military Autonomy Is On, Can Trusted Information Infrastructure Keep Pace? Military forces are under increasing pressure to field autonomous capabilities faster than ever bef... 2026-7-17 11:30:0 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com autonomous mission everfox investment operational

Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man Armenia has held a Russian tourist named Aleksandr Ermakov in a detention center since June 28, on... 2026-7-17 10:53:31 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com ermakov aleksandr him australia izvestia

ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files ACR Stealer, an infostealer in circulation since 2024, is walking out of enterprise networks with s... 2026-7-17 08:56:39 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com microsoft stealer acr powershell claude

New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage Cyber Espionage / Threat IntelligenceCybersecurity researchers have discovered a previously undocu... 2026-7-17 08:46:45 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com remote goserpent proxy c2