https://hackwatch.io/alert/shinyhunters-bypass-waf-rules-to-resume-oracle-peoplesoft-attacks HackWatch en 2026-09-26T13:36:11Z Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells https://hackwatch.io/alert/old-school-credit-card-scams-are-far-from-dead HackWatch en 2026-09-26T12:00:00Z Old-School Credit Card Scams Are Far From Dead https://hackwatch.io/alert/kiteworks-warns-users-to-take-systems-offline-amid-suspected-zero-day-threat HackWatch en 2026-09-26T07:45:21Z Kiteworks Warns Users to Take Systems Offline Amid Suspected Zero-Day Threat https://hackwatch.io/alert/openais-ai-agents-tried-hacking-4-websites-without-being-prompted HackWatch en 2026-09-26T04:36:57Z OpenAI’s AI Agents Tried Hacking 4 Websites Without Being Prompted https://hackwatch.io/alert/16-year-old-researcher-finds-microsoft-auth-vulnerability-that-exposes-17-3-trillion-store HackWatch en 2026-09-26T03:55:43Z 16-Year-Old Researcher Finds Microsoft Auth Vulnerability that Exposes 17.3 Trillion Stored Record https://hackwatch.io/alert/bbc-technology-technology-health-environment-ai-4 HackWatch en 2026-09-25T23:17:28Z BBC Technology | Technology, Health, Environment, AI https://hackwatch.io/alert/rydox-marketplace-operator-pleads-guilty-to-identity-theft-and-money-laundering HackWatch en 2026-09-25T22:52:08Z Rydox marketplace operator pleads guilty to identity theft and money laundering https://hackwatch.io/alert/new-carbonato-botnet-uses-ai-framework-to-target-insecure-docker-daemons HackWatch en 2026-09-25T22:09:40Z New Carbonato botnet uses AI framework to target insecure Docker daemons https://hackwatch.io/alert/elementor-plugin-vulnerability-allows-admin-account-creation HackWatch en 2026-09-25T22:04:40Z Elementor plugin vulnerability allows admin account creation https://hackwatch.io/alert/kiteworks-urges-6-hour-server-shutdown-over-potential-zero-day-attacks HackWatch en 2026-09-25T21:41:07Z Kiteworks urges 6-hour server shutdown over potential zero-day attacks https://hackwatch.io/alert/shinyhunters-hacked-clop-leak-site-using-grav-cms-path-traversal-flaw HackWatch en 2026-09-25T20:57:55Z ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw https://hackwatch.io/alert/gemini-hacked-three-companies-the-ai-isn-t-the-part-that-should-scare-you HackWatch en 2026-09-25T19:20:36Z Gemini hacked three companies. The AI isn't the part that should scare you https://hackwatch.io/alert/elementor-wordpress-flaw-lets-attackers-create-admin-accounts HackWatch en 2026-09-25T18:13:33Z Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link https://hackwatch.io/alert/red-heron-exploits-critical-gitea-flaw-to-steal-repositories-and-deploy-linux-rootkit HackWatch en 2026-09-25T18:02:16Z Red Heron Exploits Critical Gitea Flaw to Steal Repositories and Deploy Linux Rootkit https://hackwatch.io/alert/attackers-target-unpatched-roundcube-servers-with-cve-2026-48842 HackWatch en 2026-09-25T17:54:48Z Attackers Target Unpatched Roundcube Servers With CVE-2026-48842 https://hackwatch.io/alert/ai-tools-help-hacker-break-in-for-25-per-target HackWatch en 2026-09-25T17:38:42Z AI tools help hacker break in for $25 per target https://hackwatch.io/alert/cisa-warns-of-sharepoint-wso2-adobe-commerce-flaws-exploited-in-attacks HackWatch en 2026-09-25T17:24:20Z SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild https://hackwatch.io/alert/staying-ahead-of-the-ransomware-industry-new-cyber-risk-reported-by-securitymagazine-com HackWatch en 2026-09-25T16:00:00Z Staying Ahead of the Ransomware Industry: new cyber risk reported by securitymagazine.com https://hackwatch.io/alert/why-ransomware-is-so-dangerous-for-healthcare-new-cyber-risk-reported-by-scmagazine-com HackWatch en 2026-09-25T15:42:14Z Why ransomware is so dangerous for healthcare: new cyber risk reported by scmagazine.com https://hackwatch.io/alert/storm-3168-agentic-driven-cloud-attacks-using-compromised-service-principals HackWatch en 2026-09-25T15:35:08Z Storm-3168 Hackers Abuse Compromised Service Principals to Destroy Azure Cloud Resources https://hackwatch.io/alert/how-to-prove-ransomware-recovery-works-clean-room-restoration-and-recovery-assurance HackWatch en 2026-09-25T15:05:09Z How to prove ransomware recovery works: clean-room restoration and recovery assurance https://hackwatch.io/alert/new-russian-infostealer-targeting-ukrainian-users HackWatch en 2026-09-25T15:00:00Z New Russian Infostealer Targeting Ukrainian Users https://hackwatch.io/alert/with-the-rise-of-ai-agents-soc-2-should-adapt-or-risk-irrelevance HackWatch en 2026-09-25T14:51:10Z With the Rise of AI Agents, SOC 2 Should Adapt or Risk Irrelevance https://hackwatch.io/alert/stopping-it-worker-scams-requires-revamped-hr-process HackWatch en 2026-09-25T14:46:13Z Stopping IT Worker Scams Requires Revamped HR Process https://hackwatch.io/alert/compromised-github-actions-came-back-online-and-resumed-executing-mini-shai-hulud-malware HackWatch en 2026-09-25T14:44:41Z Compromised GitHub Actions re-enabled, posing supply chain risks https://hackwatch.io/alert/researchers-found-a-botnet-that-uses-an-ai-agent-to-operate-inside-compromised-servers HackWatch en 2026-09-25T14:17:54Z Researchers Found a Botnet That Uses an AI Agent to Operate Inside Compromised Servers https://hackwatch.io/alert/sauron-loader-malware-uses-dll-side-loading-and-in-memory-decryption-to-evade-detection HackWatch en 2026-09-25T13:47:28Z Kothamine malware uses Tailscale’s tailcat to evade network detection https://hackwatch.io/alert/zero-click-vulnerabilities-in-salesforce-agentforce-expose-wider-ai-agent-risk HackWatch en 2026-09-25T13:30:00Z Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk https://hackwatch.io/alert/14-year-old-linux-kernel-vulnerability-enables-root-access-and-docker-escape HackWatch en 2026-09-25T12:48:13Z 14-Year-Old Linux Kernel Vulnerability Enables Root Access and Docker Escape https://hackwatch.io/alert/google-chrome-154-fixes-108-security-flaws-11-are-rated-critical HackWatch en 2026-09-25T12:30:09Z Google Chrome 154 Fixes 108 Security Flaws: 11 Are Rated Critical https://hackwatch.io/alert/critical-servicenow-vulnerabilities-let-attackers-bypass-authorization-update-now HackWatch en 2026-09-25T12:18:09Z Critical ServiceNow Vulnerabilities Let Attackers Bypass Authorization – Update Now! https://hackwatch.io/alert/attackers-are-turning-everyday-business-emails-into-malware-delivery-machines HackWatch en 2026-09-25T12:01:17Z Attackers Are Turning Everyday Business Emails Into Malware Delivery Machines https://hackwatch.io/alert/rydox-marketplace-admin-pleads-guilty-faces-22-years-in-prison HackWatch en 2026-09-25T11:35:14Z Rydox marketplace admin pleads guilty, faces 22 years in prison https://hackwatch.io/alert/on-anthropics-ai-misuse-report-new-cyber-risk-reported-by-schneier-com HackWatch en 2026-09-25T11:07:22Z On Anthropic’s AI Misuse Report: new cyber risk reported by schneier.com https://hackwatch.io/alert/party-invite-phishing-scams-are-the-new-missed-connections HackWatch en 2026-09-25T11:00:00Z Party Invite Phishing Scams Are the New Missed Connections https://hackwatch.io/alert/servicenow-security-flaws-allow-attackers-to-execute-sql-and-modify-instance-data HackWatch en 2026-09-25T10:58:04Z ServiceNow Security Flaws Allow Attackers to Execute SQL and Modify Instance Data https://hackwatch.io/alert/bitget-says-suspected-north-korean-hackers-stole-351-6m-after-backend-compromise HackWatch en 2026-09-25T10:35:55Z Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise https://hackwatch.io/alert/cisa-flags-wso2-security-flaw-under-active-exploitation HackWatch en 2026-09-25T10:14:50Z CISA Flags WSO2 Security Flaw Under Active Exploitation https://hackwatch.io/alert/roundcube-pre-auth-sql-injection-flaw-actively-exploited-in-the-wild HackWatch en 2026-09-25T10:14:02Z Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild https://hackwatch.io/alert/microsoft-finds-ransomware-group-using-same-attack-blueprint-across-multiple-malware-famil HackWatch en 2026-09-25T10:11:25Z Microsoft Finds Ransomware Group Using Same Attack Blueprint Across Multiple Malware Families https://hackwatch.io/alert/microsoft-password-reset-portal-could-reveal-users-and-mfa-protection-details HackWatch en 2026-09-25T09:53:32Z Microsoft Password Reset Portal Could Reveal Users and MFA Protection Details https://hackwatch.io/alert/wordpress-flaw-under-active-attack-hackers-target-cve-2026-87902-for-code-execution HackWatch en 2026-09-25T09:51:07Z WordPress Flaw Under Active Attack: Hackers Target CVE-2026-87902 for Code Execution https://hackwatch.io/alert/remcontrol-banking-trojan-gives-attackers-remote-control-of-android-devices HackWatch en 2026-09-25T09:30:00Z RemControl Banking Trojan Gives Attackers Remote Control of Android Devices https://hackwatch.io/alert/macsync-info-stealing-malware-hides-malicious-commands-in-an-icloud-calendar HackWatch en 2026-09-25T09:22:45Z MacSync info-stealing malware hides malicious commands in an iCloud calendar https://hackwatch.io/alert/researchers-identify-aliexpress-phishing-domains-before-registration HackWatch en 2026-09-25T08:30:00Z Researchers Identify AliExpress Phishing Domains Before Registration https://hackwatch.io/alert/salesforce-agentforce-flaw-enables-0-click-data-exfiltration-via-prompt-injection HackWatch en 2026-09-25T07:47:45Z Salesforce Indirect Prompt Injection Vulnerability Enables 0-click Data Exfiltration https://hackwatch.io/alert/sudo-vulnerability-lets-attackers-bypass-time-based-authorization-controls HackWatch en 2026-09-25T07:26:40Z Sudo Security Vulnerability Lets Attackers Escalate Privileges https://hackwatch.io/alert/roundcube-webmail-vulnerability-in-attackers-crosshairs HackWatch en 2026-09-25T06:57:40Z Roundcube Webmail Vulnerability in Attackers’ Crosshairs https://hackwatch.io/alert/duelbits-confirms-7-million-hot-wallet-hack-forcing-systems-offline HackWatch en 2026-09-25T05:41:52Z Duelbits Confirms $7 Million Hot-Wallet Hack, forcing Systems offline https://hackwatch.io/alert/hackers-exploited-ethereum-bridge-contract-to-drain-full-balance-from-payy-network HackWatch en 2026-09-25T05:18:27Z Hackers Exploited Ethereum Bridge Contract to Drain Full Balance from Payy Network https://hackwatch.io/alert/bbc-technology-technology-health-environment-ai-3 HackWatch en 2026-09-25T05:17:35Z BBC Technology | Technology, Health, Environment, AI https://hackwatch.io/alert/only-26-of-detected-cisa-known-exploited-vulnerabilities-were-fully-remediated HackWatch en 2026-09-25T04:46:34Z CISA Adds One Known Exploited Vulnerability to Catalog https://hackwatch.io/alert/bitget-hot-wallet-hacked-attackers-stole-351-6-million-from-hot-wallets HackWatch en 2026-09-25T03:34:38Z Bitget Hot Wallet Hacked – Attackers Stole $351.6 Million From Hot Wallets https://hackwatch.io/alert/cloudflare-containers-vulnerability-could-leak-data-between-customer-workloads HackWatch en 2026-09-25T03:13:12Z Cloudflare Containers Vulnerability Could Leak Data Between Customer Workloads https://hackwatch.io/alert/security-news-hkcert-new-cyber-risk-reported-by-hkcert-org-2 HackWatch en 2026-09-25T02:00:26Z Security News | HKCERT: new cyber risk reported by hkcert.org https://hackwatch.io/alert/new-ransomware-group-n0n-escalates-threats-by-targeting-backups HackWatch en 2026-09-25T00:22:44Z New ransomware group n0n escalates threats by targeting backups https://hackwatch.io/alert/using-threat-intelligence-to-stop-ransomware-attacks HackWatch en 2026-09-25T00:00:00Z Using Threat Intelligence to Stop Ransomware Attacks https://hackwatch.io/alert/scammers-impersonating-police-and-government-officials-have-stolen-1-6-billion HackWatch en 2026-09-24T23:50:26Z Scammers impersonating police and government officials have stolen $1.6 billion https://hackwatch.io/alert/f5-patches-critical-zero-day-flaw-exploited-in-big-ip-apm HackWatch en 2026-09-24T23:45:26Z F5 patches critical zero-day flaw exploited in BIG-IP APM https://hackwatch.io/alert/new-windows-botnet-offers-ai-credit-draining-and-other-attack-methods HackWatch en 2026-09-24T23:13:08Z New Windows botnet offers AI credit draining and other attack methods https://hackwatch.io/alert/botnet-carbonato-ataca-docker-e-instala-agente-de-ia-hermes HackWatch en 2026-09-24T23:01:30Z Botnet Carbonato ataca Docker e instala agente de IA Hermes https://hackwatch.io/alert/sectoprat-returns-hiding-inside-a-legitimate-application HackWatch en 2026-09-24T20:32:50Z SectopRAT Returns, Hiding Inside a Legitimate Application https://hackwatch.io/alert/wordpress-patches-a-critical-severity-security-vulnerability HackWatch en 2026-09-24T20:26:22Z WordPress patches a critical severity security vulnerability https://hackwatch.io/alert/new-macsync-malware-turns-macos-apps-into-tools-for-crypto-and-password-theft HackWatch en 2026-09-24T20:10:48Z TWEAKOS Malware Turns Telegram Into a Stealer, C2 Platform and Stolen Account Marketplace https://hackwatch.io/alert/falha-no-wordpress-escala-para-comprometimentos-ativos HackWatch en 2026-09-24T20:08:58Z Falha no WordPress escala para comprometimentos ativos https://hackwatch.io/alert/i-think-i-found-an-ai-agent-worth-the-risk-new-cyber-risk-reported-by-wired-com HackWatch en 2026-09-24T19:36:35Z I Think I Found an AI Agent Worth the Risk: new cyber risk reported by wired.com https://hackwatch.io/alert/critical-9-8-jetbrains-teamcity-rce-exploited-by-ransomware-says-cisa HackWatch en 2026-09-24T19:25:35Z Critical 9.8 JetBrains TeamCity RCE exploited by ransomware, says CISA https://hackwatch.io/alert/cyber-recovery-plans-lag-behind-ai-ransomware-threats HackWatch en 2026-09-24T18:20:56Z Cyber recovery plans lag behind AI, ransomware threats https://hackwatch.io/alert/cisa-adds-two-known-exploited-vulnerabilities-to-catalog HackWatch en 2026-09-24T18:16:27Z CISA Adds Two Known Exploited Vulnerabilities to Catalog https://hackwatch.io/alert/burger-king-russia-customer-data-leaked-online-after-2024-breach HackWatch en 2026-09-24T17:53:42Z Burger King Russia customer data leaked online after 2024 breach https://hackwatch.io/alert/threatsday-ai-search-poisoning-ai-coding-tool-leaking-repos-one-click-code-execution-and-1 HackWatch en 2026-09-24T17:52:43Z Zero-click flaw enables remote code execution in four mainstream AI coding agents: report https://hackwatch.io/alert/exposed-gitlab-project-email-addresses-let-attackers-push-code HackWatch en 2026-09-24T17:47:44Z Private GitLab email addresses exposed in public documentation https://hackwatch.io/alert/new-trustsink-attack-steals-passwords-via-rogue-mfa-provider HackWatch en 2026-09-24T16:44:06Z New TrustSink attack steals passwords via rogue MFA provider https://hackwatch.io/alert/beyond-the-ransomware-tracking-storm-2570s-consistent-tradecraft-across-deployments HackWatch en 2026-09-24T16:00:00Z Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments https://hackwatch.io/alert/eufy-omni-c20-omni-x10-pro-new-cyber-risk-reported-by-cisa-gov HackWatch en 2026-09-24T15:16:09Z Eufy Omni C20, Omni X10 Pro: new cyber risk reported by cisa.gov