https://hackwatch.io/alert/volexity-spots-another-china-aligned-threat-group-exploiting-chrome-and-microsoft-defects HackWatch en 2026-09-22T18:47:07Z Volexity spots another China-aligned threat group exploiting Chrome and Microsoft defects https://hackwatch.io/alert/new-closedquorum-windows-malware-uses-ai-for-attack-decisions HackWatch en 2026-09-22T18:04:39Z New ClosedQuorum Windows malware uses AI for attack decisions https://hackwatch.io/alert/bigcommerce-data-stolen-via-ribon-apps-hack-new-cyber-risk-reported-by-securityweek-com HackWatch en 2026-09-22T17:58:00Z BigCommerce Data Stolen via Ribon Apps Hack: new cyber risk reported by securityweek.com https://hackwatch.io/alert/shai-hulud-attack-nips-cyber-firm-crowdsec-s-github-data HackWatch en 2026-09-22T17:32:49Z Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data https://hackwatch.io/alert/rathat-android-malware-uses-ai-to-target-banking-credentials-in-real-time HackWatch en 2026-09-22T17:02:05Z RatHat Android Malware Uses AI to Target Banking Credentials in Real Time https://hackwatch.io/alert/gemini-ai-autonomously-hacked-3-companies-google-confirms HackWatch en 2026-09-22T17:00:00Z Gemini AI Autonomously Hacked 3 Companies, Google Confirms https://hackwatch.io/alert/scaling-soc-capabilities-how-threat-intelligence-cuts-triage-time-and-burnout HackWatch en 2026-09-22T16:46:05Z Scaling SOC Capabilities: How Threat Intelligence Cuts Triage Time and Burnout https://hackwatch.io/alert/critical-bifrost-ai-gateway-flaw-lets-attackers-run-commands-without-credentials HackWatch en 2026-09-22T16:41:12Z Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials https://hackwatch.io/alert/check-point-warns-of-management-server-zero-day-exploited-in-attacks HackWatch en 2026-09-22T16:32:47Z Check Point Management Server 0-Day Vulnerability Actively Exploited in Attacks https://hackwatch.io/alert/researcher-drops-bigdiskbuster-zero-day-poc-that-blocks-microsoft-defender-updates HackWatch en 2026-09-22T16:14:04Z Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates https://hackwatch.io/alert/moviereaper-malware-uses-the-odyssey-torrents-to-infect-users-worldwide HackWatch en 2026-09-22T15:44:09Z MovieReaper Malware Uses The Odyssey Torrents to Infect Users Worldwide https://hackwatch.io/alert/ferramentas-de-acesso-remoto-porta-de-entrada-para-ataques HackWatch en 2026-09-22T15:42:55Z Ferramentas de acesso remoto: porta de entrada para ataques https://hackwatch.io/alert/cairn-a-new-tool-to-track-ai-malware-that-operates-without-human-control HackWatch en 2026-09-22T15:27:12Z CAIRN – A New Tool to Track AI Malware That Operates Without Human Control https://hackwatch.io/alert/microsoft-and-partners-disrupt-eviltokens-a-comprehensive-cybercrime-service-for-financial HackWatch en 2026-09-22T15:00:00Z Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises https://hackwatch.io/alert/unmasking-eviltokens-getting-to-the-root-of-device-code-phishing HackWatch en 2026-09-22T15:00:00Z Unmasking EvilTokens: Getting to the root of device code phishing https://hackwatch.io/alert/z-ai-disables-coding-assistant-feature-after-flaw-exposed-enterprise-code-upload-risk HackWatch en 2026-09-22T14:56:08Z Z.ai disables coding assistant feature after flaw exposed enterprise code upload risk https://hackwatch.io/alert/payload-il-ransomware-che-trasforma-active-directory-in-strumento-dattacco HackWatch en 2026-09-22T14:15:36Z PAYLOAD, il ransomware che trasforma Active Directory in strumento d’attacco https://hackwatch.io/alert/autonomous-ai-agents-hack-retailers-for-25-and-steal-600000-credit-cards HackWatch en 2026-09-22T14:00:00Z Autonomous AI Agents Hack Retailers for $25 and Steal 600,000 Credit Cards https://hackwatch.io/alert/researchers-uncover-malware-that-uses-ai-to-choose-its-next-move HackWatch en 2026-09-22T13:56:55Z Researchers uncover malware that uses AI to choose its next move https://hackwatch.io/alert/nightmare-eclipse-drops-new-microsoft-defender-exploit-after-revealing-identity HackWatch en 2026-09-22T13:26:51Z Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity https://hackwatch.io/alert/webinar-tomorrow-inside-real-world-google-workspace-breaches HackWatch en 2026-09-22T12:57:07Z Webinar tomorrow: Inside real-world Google Workspace breaches https://hackwatch.io/alert/d-link-warns-of-max-severity-zero-day-bug-in-dir-822a-routers HackWatch en 2026-09-22T12:48:06Z D-Link warns of max severity zero-day bug in DIR-822A routers https://hackwatch.io/alert/amazon-blocks-metas-muse-ai-agent-from-shopping-on-amazon-com-over-bot-access HackWatch en 2026-09-22T12:08:57Z Amazon Blocks Meta’s Muse AI Agent From Shopping on Amazon.com Over Bot Access https://hackwatch.io/alert/the-latest-deepfake-numbers-give-cisos-plenty-to-worry-about HackWatch en 2026-09-22T12:05:36Z The latest deepfake numbers give CISOs plenty to worry about https://hackwatch.io/alert/the-next-intellectual-property-thief-may-sound-like-your-ceo HackWatch en 2026-09-22T12:00:05Z The next intellectual property thief may sound like your CEO https://hackwatch.io/alert/recent-zyxel-switch-vulnerability-exploited-by-chinese-hackers HackWatch en 2026-09-22T11:55:20Z Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers https://hackwatch.io/alert/new-linux-kernel-flaw-gives-arm64-kvm-guests-read-write-access-to-host-memory HackWatch en 2026-09-22T11:38:40Z New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory https://hackwatch.io/alert/new-cvss-10-0-velocloud-orchestrator-flaw-actively-exploited-in-certificate-based-setups HackWatch en 2026-09-22T11:22:39Z New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups https://hackwatch.io/alert/sharepoint-flaw-initially-listed-as-spoofing-by-microsoft-enables-authenticated-rce HackWatch en 2026-09-22T11:17:41Z SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE https://hackwatch.io/alert/bambootoken-linux-backdoor-uses-mqtt-c2-to-execute-shell-commands-and-exfiltrate-files HackWatch en 2026-09-22T11:17:04Z New TASK#STOMP Backdoor Uses PowerShell to Steal Documents and Wi-Fi Passwords https://hackwatch.io/alert/linux-kvm-arm64-vulnerability-lets-attackers-escape-virtual-machines-and-gain-host-access HackWatch en 2026-09-22T11:10:07Z Linux KVM/arm64 Vulnerability Lets Attackers Escape Virtual Machines and Gain Host Access https://hackwatch.io/alert/attacker-compromised-nearly-1000-zyxel-switches-since-august-cve-2026-7273 HackWatch en 2026-09-22T10:42:54Z Attacker compromised nearly 1000 Zyxel switches since August (CVE-2026-7273) https://hackwatch.io/alert/wordpress-patches-click2shell-vulnerability-new-cyber-risk-reported-by-securityweek-com HackWatch en 2026-09-22T10:22:27Z WordPress Patches ‘Click2Shell’ Vulnerability: new cyber risk reported by securityweek.com https://hackwatch.io/alert/introducing-cairn-frontier-tracking-for-ai-integrated-malware HackWatch en 2026-09-22T10:00:25Z Introducing CAIRN: Frontier tracking for AI-integrated malware https://hackwatch.io/alert/a-new-tool-found-malware-thats-guided-by-an-ai-hive-mind-no-humans-in-sight HackWatch en 2026-09-22T10:00:00Z A New Tool Found Malware That’s Guided by an AI Hive Mind—No Humans in Sight https://hackwatch.io/alert/new-windows-defender-zero-day-blocks-microsoft-antivirus-updates HackWatch en 2026-09-22T09:55:11Z New Windows Defender zero-day blocks Microsoft antivirus updates https://hackwatch.io/alert/windows-com-flaw-lets-attackers-gain-system-privileges-with-a-malicious-dll HackWatch en 2026-09-22T09:45:30Z Critical MaxKB AI Agent Flaw Lets Prompt Injection Execute System Commands https://hackwatch.io/alert/hackers-abuse-stolen-bigcommerce-app-key-to-steal-master-of-malt-customer-data HackWatch en 2026-09-22T09:11:59Z Hackers Abuse Stolen BigCommerce App Key to Steal Master of Malt Customer Data https://hackwatch.io/alert/chinese-apt-clones-legitimate-websites-to-deliver-chrome-and-windows-zero-day-exploits HackWatch en 2026-09-22T09:01:14Z Hackers Clone Legitimate Websites to Silently Trigger Chrome and Windows Zero-Day Exploits https://hackwatch.io/alert/the-cyber-ai-parity-window-now-has-a-deadline-new-cyber-risk-reported-by-csoonline-com HackWatch en 2026-09-22T09:00:00Z The cyber AI parity window now has a deadline: new cyber risk reported by csoonline.com https://hackwatch.io/alert/d-link-router-hit-by-cvss-10-0-flaw-exploitable-remotely-without-authentication HackWatch en 2026-09-22T08:58:31Z D-Link Router Hit by CVSS 10.0 Flaw Exploitable Remotely Without Authentication https://hackwatch.io/alert/scammers-use-genuine-google-sign-ins-to-sell-costly-unverified-ai-subscriptions HackWatch en 2026-09-22T08:54:30Z Scammers use genuine Google sign-ins to sell costly, unverified AI subscriptions https://hackwatch.io/alert/vidar-malware-rewrites-its-obfuscation-with-every-build-to-make-detection-harder HackWatch en 2026-09-22T08:40:13Z Vidar Malware Rewrites Its Obfuscation With Every Build to Make Detection Harder https://hackwatch.io/alert/top-10-best-identity-threat-detection-response-itdr-tools-in-2026-ranked-scored HackWatch en 2026-09-22T07:59:29Z Top 10 Best Customer Identity & Access Management (CIAM) Solutions in 2026 [Ranked & Scored] https://hackwatch.io/alert/sidecopy-broadens-india-targeting-to-academia-with-reverserat-spear-phishing HackWatch en 2026-09-22T07:52:03Z SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing https://hackwatch.io/alert/cisa-warns-of-zyxel-gs1900-switches-flaw-actively-exploited-in-attacks HackWatch en 2026-09-22T07:42:44Z CISA orders feds to patch Zyxel flaw exploited for data theft https://hackwatch.io/alert/zte-smartlife-flaws-let-attackers-hijack-accounts-by-resetting-passwords-without-verificat HackWatch en 2026-09-22T07:39:59Z ZTE SmartLife Flaws Let Attackers Hijack Accounts by Resetting Passwords Without Verification https://hackwatch.io/alert/hackers-exploit-wordpress-cve-2026-63030-and-cve-2026-60137-to-steal-government-data HackWatch en 2026-09-22T06:40:37Z Hackers Exploit WordPress Flaws to Steal 18,566 Government Records and Plaintext Passwords https://hackwatch.io/alert/microsoft-to-disable-sms-as-primary-entra-id-sign-in-method-in-2027 HackWatch en 2026-09-22T06:31:19Z Microsoft to Disable SMS as Primary Entra ID Sign-In Method in 2027 https://hackwatch.io/alert/wordpress-comment2shell-flaw-can-turn-anonymous-comment-xss-into-rce-via-admin-session HackWatch en 2026-09-22T06:03:14Z WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session https://hackwatch.io/alert/vidar-uses-custom-bytecode-interpreter-and-arx-stream-ciphers-for-per-build-string-obfusca HackWatch en 2026-09-22T05:46:53Z Linux BambooToken Malware Uses MQTT C2 for Remote Shell Access and File Exfiltration https://hackwatch.io/alert/zyxel-and-veeam-flaws-under-active-exploitation-with-command-and-system-access HackWatch en 2026-09-22T05:31:59Z Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access https://hackwatch.io/alert/hackers-impersonate-it-help-desk-on-microsoft-teams-to-steal-windows-passwords HackWatch en 2026-09-22T04:46:11Z Hackers Impersonate IT Help Desk on Microsoft Teams to Steal Windows Passwords https://hackwatch.io/alert/cybersecurity-jobs-available-right-now-september-22-2026 HackWatch en 2026-09-22T04:00:23Z Cybersecurity jobs available right now: September 22, 2026 https://hackwatch.io/alert/metas-muse-ai-agent-0-day-vulnerability-allows-attackers-to-hijack-the-tool-and-inject-mal HackWatch en 2026-09-22T03:13:18Z One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor https://hackwatch.io/alert/more-budget-more-breaches-the-roi-problem-asia-pacific-can-no-longer-ignore HackWatch en 2026-09-22T01:00:00Z More budget, more breaches: The ROI problem Asia Pacific can no longer ignore https://hackwatch.io/alert/transparent-tribe-targets-india-afghanistan-with-new-malware-in-operation-rapidrust HackWatch en 2026-09-21T23:40:34Z Transparent Tribe targets India, Afghanistan with new malware in Operation RapidRust https://hackwatch.io/alert/shinyhunters-defaces-clop-ransomware-data-leak-site-claims-data-theft HackWatch en 2026-09-21T23:35:34Z ShinyHunters เจาะและเปลี่ยนหน้า Leak Site ของ Clop Ransomware บน Dark Web https://hackwatch.io/alert/google-had-undercover-analyst-inside-teampcp-hacking-group HackWatch en 2026-09-21T23:25:34Z Google had undercover analyst inside TeamPCP hacking group https://hackwatch.io/alert/21st-september-threat-intelligence-report-new-cyber-risk-reported-by-research-checkpoint-c HackWatch en 2026-09-21T23:13:07Z 21st September – Threat Intelligence Report: new cyber risk reported by research.checkpoint.com https://hackwatch.io/alert/openplc-runtime-v3-new-cyber-risk-reported-by-cisa-gov HackWatch en 2026-09-21T23:04:43Z OpenPLC Runtime v3: new cyber risk reported by cisa.gov https://hackwatch.io/alert/lwip-lightweight-ip-new-cyber-risk-reported-by-cisa-gov HackWatch en 2026-09-21T22:17:11Z lwIP (Lightweight IP): new cyber risk reported by cisa.gov https://hackwatch.io/alert/bigcommerce-alerts-merchants-of-data-breach-linked-to-ribon-apps HackWatch en 2026-09-21T21:18:49Z BigCommerce alerts merchants of data breach linked to Ribon apps https://hackwatch.io/alert/cisa-alerts-of-active-exploitation-of-three-linux-kernel-flaws HackWatch en 2026-09-21T20:12:17Z CISA adds Linux kernel flaws to exploited vulnerabilities catalog https://hackwatch.io/alert/wordpress-click2shell-flaw-lets-hackers-execute-php-on-the-server HackWatch en 2026-09-21T18:23:11Z WordPress Click2Shell flaw lets hackers execute PHP on the server https://hackwatch.io/alert/cisa-adds-one-known-exploited-vulnerability-to-catalog-2 HackWatch en 2026-09-21T18:11:39Z CISA Adds One Known Exploited Vulnerability to Catalog https://hackwatch.io/alert/windows-exploitation-techniques-dangling-com-object-registrations HackWatch en 2026-09-21T17:42:43Z Windows Exploitation Techniques: Dangling COM Object Registrations https://hackwatch.io/alert/iran-linked-handala-hack-group-utilizes-heavygram-and-crudeexclude-malware HackWatch en 2026-09-21T17:37:43Z Iran-linked Handala Hack group utilizes HEAVYGRAM and CRUDEEXCLUDE malware https://hackwatch.io/alert/phantomraven-malware-distributed-via-npm-package-registry HackWatch en 2026-09-21T17:32:43Z PhantomRaven malware distributed via npm package registry https://hackwatch.io/alert/google-fined-eur403-million-for-gdpr-violations-over-users-location-data HackWatch en 2026-09-21T17:19:53Z Google Fined €403 Million for GDPR Violations Over Location Data Processing https://hackwatch.io/alert/after-spending-billions-openai-still-has-gaps-in-its-cybersecurity HackWatch en 2026-09-21T16:24:03Z After spending billions, OpenAI still has gaps in its cybersecurity https://hackwatch.io/alert/hackers-compromise-65-github-repositories-and-poison-npm-package-with-hidden-backdoor HackWatch en 2026-09-21T16:19:59Z GHAPPIER Supply Chain Attack Compromises 65 GitHub Repositories and Poisons npm Package https://hackwatch.io/alert/fake-lastpass-installers-push-kernel-level-edr-killer-rapuncel-stealer HackWatch en 2026-09-21T15:46:58Z Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer https://hackwatch.io/alert/new-npm-malware-finds-a-way-around-install-script-defenses HackWatch en 2026-09-21T14:27:49Z New npm malware finds a way around install script defenses https://hackwatch.io/alert/weekly-recap-cisco-0-day-ai-agent-rce-clickfix-attacks-clickfix-surge-and-browser-hijacks HackWatch en 2026-09-21T14:24:13Z ⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks https://hackwatch.io/alert/microsoft-investigating-teams-calling-issue-blocking-users-from-making-or-receiving-calls HackWatch en 2026-09-21T14:18:59Z Microsoft Investigating Teams Calling Issue Blocking Users From Making or Receiving Calls https://hackwatch.io/alert/the-task-stomp-windows-backdoor-takes-wi-fi-passwords-screenshots-and-business-files HackWatch en 2026-09-21T14:00:18Z The TASK#STOMP Windows backdoor takes Wi-Fi passwords, screenshots, and business files https://hackwatch.io/alert/microsoft-reminds-admins-to-migrate-entra-id-users-to-passkeys HackWatch en 2026-09-21T13:16:20Z Microsoft reminds admins to migrate Entra ID users to passkeys https://hackwatch.io/alert/leaky-tls-certificate-exposes-north-koreas-hangro-vpn-infrastructure-across-two-countries HackWatch en 2026-09-21T12:57:10Z Leaky TLS Certificate Exposes North Korea’s Hangro VPN Infrastructure Across Two Countries https://hackwatch.io/alert/10-malicious-npm-packages-linked-to-runtime-malware-campaign-with-millions-of-downloads HackWatch en 2026-09-21T12:49:50Z 10 Malicious npm Packages Linked to Runtime Malware Campaign With Millions of Downloads https://hackwatch.io/alert/china-linked-famoussparrow-deploys-sparrowocky-backdoor-in-latin-america HackWatch en 2026-09-21T12:38:12Z China-Linked FamousSparrow Deploys SparroWocky Backdoor in Latin America https://hackwatch.io/alert/shinyhunters-claim-hack-of-rival-ransomware-gang-clop HackWatch en 2026-09-21T12:30:00Z ShinyHunters Claim Hack of Rival Ransomware Gang Clop https://hackwatch.io/alert/north-koreas-job-interview-scam-runs-both-ways HackWatch en 2026-09-21T12:27:05Z North Korea’s job interview scam runs both ways https://hackwatch.io/alert/vulnerability-summary-for-the-week-of-september-14-2026 HackWatch en 2026-09-21T11:58:01Z Vulnerability Summary for the Week of September 14, 2026 https://hackwatch.io/alert/payload-ransomware-abuses-active-directory-group-policy-to-disrupt-entire-windows-domain HackWatch en 2026-09-21T11:54:18Z PAYLOAD Ransomware Hijacks Active Directory GPO to Disrupt Entire Windows Domain Without Encryptio https://hackwatch.io/alert/new-rapuncel-infostealer-abuses-microsoft-signed-driver-to-disable-145-security-tools HackWatch en 2026-09-21T11:36:46Z Hackers Use Microsoft-Signed Driver to Disable 145 Security Tools and Steal Passwords https://hackwatch.io/alert/claude-opus-5-helps-researchers-weaponize-heif-image-flaw-into-remote-code-execution HackWatch en 2026-09-21T11:34:03Z Claude Opus 5 Helps Researchers Weaponize HEIF Image Flaw Into Remote Code Execution https://hackwatch.io/alert/crowdsec-confirms-source-code-stolen-in-supply-chain-attack HackWatch en 2026-09-21T10:55:46Z CrowdSec Confirms Source Code Stolen in Supply Chain Attack https://hackwatch.io/alert/scammers-impersonate-cops-use-arrest-threats-to-extort-victims HackWatch en 2026-09-21T10:53:24Z Scammers impersonate cops, use arrest threats to extort victims https://hackwatch.io/alert/group-policy-hijacked-payload-ransomware-weaponizes-active-directory-gpo HackWatch en 2026-09-21T10:00:40Z Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO https://hackwatch.io/alert/organizations-warned-of-3-exploited-linux-kernel-vulnerabilities HackWatch en 2026-09-21T09:31:12Z Organizations Warned of 3 Exploited Linux Kernel Vulnerabilities https://hackwatch.io/alert/msnightmare-has-released-a-windows-defender-update-dos-vulnerability-called-bigdiskbuster HackWatch en 2026-09-21T09:12:39Z BigDiskBuster Windows Defender DoS Vulnerability Blocks Platform and Signature Updates https://hackwatch.io/alert/hackers-abuse-microsoft-teams-to-pose-as-it-support-and-steal-employee-passwords HackWatch en 2026-09-21T09:09:24Z Hackers Abuse Microsoft Teams to Pose as IT Support and Steal Employee Passwords https://hackwatch.io/alert/revoking-the-token-didnt-kill-the-backdoor-new-cyber-risk-reported-by-csoonline-com HackWatch en 2026-09-21T09:00:00Z Revoking the token didn’t kill the backdoor: new cyber risk reported by csoonline.com https://hackwatch.io/alert/more-cves-than-ever-the-same-old-ones-keep-getting-exploited HackWatch en 2026-09-21T09:00:00Z More CVEs than ever. The same old ones keep getting exploited https://hackwatch.io/alert/revolut-customers-targeted-with-new-wave-of-phishing-attacks HackWatch en 2026-09-21T09:00:00Z Revolut Customers Targeted with New Wave of Phishing Attacks https://hackwatch.io/alert/hackers-weaponize-terraform-lock-files-to-infect-devops-engineers-with-macos-backdoors HackWatch en 2026-09-21T08:53:58Z North Korean TraderTraitor Hackers Use Fake Terraform Job Tests to Deploy macOS Backdoors https://hackwatch.io/alert/clickfix-lures-deploy-chainscript-rat-using-polygon-to-rotate-c2-infrastructure HackWatch en 2026-09-21T08:39:38Z ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure https://hackwatch.io/alert/heif-heist-image-flaws-let-attackers-gain-rce-across-meta-slack-and-github-enterprise HackWatch en 2026-09-21T08:17:05Z HEIF Heist Image Flaws Let Attackers Gain RCE Across Meta, Slack and GitHub Enterprise https://hackwatch.io/alert/openai-codex-sandbox-flaws-let-malicious-repositories-execute-commands-on-host-systems HackWatch en 2026-09-21T08:08:23Z OpenAI Codex Sandbox Flaws Let Malicious Repositories Execute Commands on Host Systems https://hackwatch.io/alert/top-10-best-identity-governance-administration-iga-tools-in-2026 HackWatch en 2026-09-21T08:07:16Z Top 10 Best Identity Governance & Administration (IGA) Tools in 2026 https://hackwatch.io/alert/hackers-hide-xmrig-miner-in-windows-registry-png-and-wav-files-to-evade-detection HackWatch en 2026-09-21T07:52:49Z Hackers Hide XMRig Miner in Windows Registry, PNG and WAV Files to Evade Detection https://hackwatch.io/alert/check-point-reveals-ai-models-breached-their-own-containment HackWatch en 2026-09-21T07:22:49Z Check Point Reveals AI Models Breached Their Own Containment https://hackwatch.io/alert/google-confirms-gemini-ai-breached-three-firms HackWatch en 2026-09-21T07:20:46Z Google Confirms Gemini AI Breached Three Firms https://hackwatch.io/alert/new-remus-infostealer-steals-openai-and-anthropic-api-tokens-passwords-and-crypto-wallets HackWatch en 2026-09-21T07:19:52Z Remus Infostealer Removes Syscall Hooks to Evade EDR and Steal Sensitive Credentials https://hackwatch.io/alert/exim-mail-server-hit-by-4-security-flaws-enabling-smtp-smuggling-and-heap-corruption HackWatch en 2026-09-21T06:48:53Z Exim Mail Server 4.100.1 Fixes 4 Security Flaws Including SMTP Smuggling and Heap Corruption https://hackwatch.io/alert/rathat-android-trojan-uses-ai-for-automation-new-cyber-risk-reported-by-securityweek-com HackWatch en 2026-09-21T05:51:05Z RatHat Android Trojan Uses AI for Automation: new cyber risk reported by securityweek.com https://hackwatch.io/alert/hackers-abuse-critical-cpanel-authentication-bypass-to-compromise-hosting-servers HackWatch en 2026-09-21T05:06:37Z Hackers Exploit cPanel CVE-2026-41940 Auth Bypass to Deploy Mirai Malware https://hackwatch.io/alert/gopass-open-source-command-line-password-manager-for-teams HackWatch en 2026-09-21T05:00:32Z Gopass: Open-source command-line password manager for teams https://hackwatch.io/alert/click2shell-wordpress-flaw-lets-hackers-execute-php-code-and-take-over-websites HackWatch en 2026-09-21T04:54:06Z Click2Shell WordPress Flaw Lets Hackers Execute PHP Code and Take Over Websites https://hackwatch.io/alert/weekly-cybersecurity-newsletter-bulletin-cisco-and-android-0-day-bragjack-attack-claude-op HackWatch en 2026-09-21T02:32:05Z Weekly Cybersecurity Newsletter Bulletin – Cisco and Android 0-Day, BragJack Attack, Claude Opus 5 https://hackwatch.io/alert/ransomware-group-alleges-attack-and-exfiltration-of-data-linked-to-major-payment-provider HackWatch en 2026-09-21T02:01:23Z Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors