Cybersecurity
News
Palo Alto VPN Flaw Exploited to Bypass Authentication
Palo Alto Networks has confirmed active exploitation of a critical VPN vulnerability, CVE-2026-0257, allowing unauthorized access.The vulnerability, which affects PAN-OS software, enables attackers to...
News
Critical Splunk Vulnerability Allows Unauthenticated RCE
Splunk has patched a critical vulnerability, CVE-2026-20253, rated 9.8 on the CVSS scale, allowing unauthenticated file operations and potential remote code execution.The flaw exists...
News
US Orders Anthropic to Disable AI Models Citing Security
Anthropic disabled its most advanced AI models, Claude Fable 5 and Mythos 5, for all users after a U.S. government order.The directive cited national...
News
Google Sues Chinese Hackers Over Gemini AI Phishing
Google has filed a lawsuit to dismantle a Chinese cybercrime network using its Gemini AI for phishing scams.The "Outsider" service sent over 2.5 million...
News
Agentjacking Attack Tricks AI Coding Assistants
Researchers at Tenet Security have uncovered a new attack class called "Agentjacking" that tricks AI coding agents into executing malicious code.The exploit uses a...
News
ShinyHunters Exploit Oracle Zero-Day, Hit Universities
The ShinyHunters cybercrime group exploited a critical zero-day flaw in Oracle PeopleSoft to steal data from enterprise systems.The vulnerability, CVE-2026-35273, allows unauthenticated remote code...
News
GreatXML Bypass Exposes Windows BitLocker Security
A new Windows BitLocker encryption bypass tool named GreatXML has been released by security researcher Chaotic Eclipse.The vulnerability can be triggered if a user...
News
Cybersecurity Stars Awards 2026 Winners Announced
The Hacker News unveiled the winners of the 2026 Cybersecurity Stars Awards.Victors were judged on innovation, impact, and technical excellence, not brand popularity.Awards span...
Latest news
DeepSeek developing AI agent requiring less human input
DeepSeek has revealed a design for AI coding assistants that reduces the need for human intervention.The company aims to...
Critical LXD, MicroCloud flaw allows client impersonation
Canonical disclosed a critical flaw in LXD and MicroCloud that allows complete authentication bypass, carrying a maximum CVSS score...
Polymarket hit by $2.6M hack via compromised DebugBear script
Malicious code on Polymarket's site, loaded via a compromised DebugBear script, drained funds from signed-in traders on October 29.Hackers...
