https://hackwatch.io/alert/bigcommerce-alerts-merchants-of-data-breach-linked-to-ribon-apps HackWatch en 2026-09-21T21:18:49Z BigCommerce alerts merchants of data breach linked to Ribon apps https://hackwatch.io/alert/cisa-alerts-of-active-exploitation-of-three-linux-kernel-flaws HackWatch en 2026-09-21T20:12:17Z CISA alerts of active exploitation of three Linux kernel flaws https://hackwatch.io/alert/wordpress-click2shell-flaw-lets-hackers-execute-php-on-the-server HackWatch en 2026-09-21T18:23:11Z WordPress Click2Shell flaw lets hackers execute PHP on the server https://hackwatch.io/alert/cisa-adds-one-known-exploited-vulnerability-to-catalog-2 HackWatch en 2026-09-21T18:11:39Z CISA Adds One Known Exploited Vulnerability to Catalog https://hackwatch.io/alert/windows-exploitation-techniques-dangling-com-object-registrations HackWatch en 2026-09-21T17:42:43Z Windows Exploitation Techniques: Dangling COM Object Registrations https://hackwatch.io/alert/iran-linked-handala-hack-group-utilizes-heavygram-and-crudeexclude-malware HackWatch en 2026-09-21T17:37:43Z Iran-linked Handala Hack group utilizes HEAVYGRAM and CRUDEEXCLUDE malware https://hackwatch.io/alert/phantomraven-malware-distributed-via-npm-package-registry HackWatch en 2026-09-21T17:32:43Z PhantomRaven malware distributed via npm package registry https://hackwatch.io/alert/google-fined-eur403-million-for-gdpr-violations-over-users-location-data HackWatch en 2026-09-21T17:19:53Z Google Fined €403 Million for GDPR Violations Over Users’ Location Data https://hackwatch.io/alert/after-spending-billions-openai-still-has-gaps-in-its-cybersecurity HackWatch en 2026-09-21T16:24:03Z After spending billions, OpenAI still has gaps in its cybersecurity https://hackwatch.io/alert/aws-automatically-quarantines-exposed-iam-keys-within-10-seconds-of-github-leak HackWatch en 2026-09-21T16:19:59Z AWS Automatically Quarantines Exposed IAM Keys Within 10 Seconds of GitHub Leak https://hackwatch.io/alert/fake-lastpass-installers-push-kernel-level-edr-killer-rapuncel-stealer HackWatch en 2026-09-21T15:46:58Z Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer https://hackwatch.io/alert/new-npm-malware-finds-a-way-around-install-script-defenses HackWatch en 2026-09-21T14:27:49Z New npm malware finds a way around install script defenses https://hackwatch.io/alert/weekly-recap-cisco-0-day-ai-agent-rce-clickfix-attacks-clickfix-surge-and-browser-hijacks HackWatch en 2026-09-21T14:24:13Z ⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks https://hackwatch.io/alert/microsoft-investigating-teams-calling-issue-blocking-users-from-making-or-receiving-calls HackWatch en 2026-09-21T14:18:59Z Microsoft Investigating Teams Calling Issue Blocking Users From Making or Receiving Calls https://hackwatch.io/alert/the-task-stomp-windows-backdoor-takes-wi-fi-passwords-screenshots-and-business-files HackWatch en 2026-09-21T14:00:18Z The TASK#STOMP Windows backdoor takes Wi-Fi passwords, screenshots, and business files https://hackwatch.io/alert/microsoft-reminds-admins-to-migrate-entra-id-users-to-passkeys HackWatch en 2026-09-21T13:16:20Z Microsoft reminds admins to migrate Entra ID users to passkeys https://hackwatch.io/alert/leaky-tls-certificate-exposes-north-koreas-hangro-vpn-infrastructure-across-two-countries HackWatch en 2026-09-21T12:57:10Z Leaky TLS Certificate Exposes North Korea’s Hangro VPN Infrastructure Across Two Countries https://hackwatch.io/alert/10-malicious-npm-packages-linked-to-runtime-malware-campaign-with-millions-of-downloads HackWatch en 2026-09-21T12:49:50Z 10 Malicious npm Packages Linked to Runtime Malware Campaign With Millions of Downloads https://hackwatch.io/alert/shinyhunters-claim-hack-of-rival-ransomware-gang-clop HackWatch en 2026-09-21T12:30:00Z ShinyHunters Claim Hack of Rival Ransomware Gang Clop https://hackwatch.io/alert/north-koreas-job-interview-scam-runs-both-ways HackWatch en 2026-09-21T12:27:05Z North Korea’s job interview scam runs both ways https://hackwatch.io/alert/vulnerability-summary-for-the-week-of-september-14-2026 HackWatch en 2026-09-21T11:58:01Z Vulnerability Summary for the Week of September 14, 2026 https://hackwatch.io/alert/payload-ransomware-abuses-active-directory-group-policy-to-disrupt-entire-windows-domain HackWatch en 2026-09-21T11:54:18Z PAYLOAD Ransomware Hijacks Active Directory GPO to Disrupt Entire Windows Domain Without Encryptio https://hackwatch.io/alert/new-rapuncel-infostealer-abuses-microsoft-signed-driver-to-disable-145-security-tools HackWatch en 2026-09-21T11:36:46Z Hackers Use Microsoft-Signed Driver to Disable 145 Security Tools and Steal Passwords https://hackwatch.io/alert/claude-opus-5-helps-researchers-weaponize-heif-image-flaw-into-remote-code-execution HackWatch en 2026-09-21T11:34:03Z Claude Opus 5 Helps Researchers Weaponize HEIF Image Flaw Into Remote Code Execution https://hackwatch.io/alert/crowdsec-confirms-source-code-stolen-in-supply-chain-attack HackWatch en 2026-09-21T10:55:46Z CrowdSec Confirms Source Code Stolen in Supply Chain Attack https://hackwatch.io/alert/scammers-impersonate-cops-use-arrest-threats-to-extort-victims HackWatch en 2026-09-21T10:53:24Z Scammers impersonate cops, use arrest threats to extort victims https://hackwatch.io/alert/group-policy-hijacked-payload-ransomware-weaponizes-active-directory-gpo HackWatch en 2026-09-21T10:00:40Z Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO https://hackwatch.io/alert/organizations-warned-of-3-exploited-linux-kernel-vulnerabilities HackWatch en 2026-09-21T09:31:12Z Organizations Warned of 3 Exploited Linux Kernel Vulnerabilities https://hackwatch.io/alert/msnightmare-has-released-a-windows-defender-update-dos-vulnerability-called-bigdiskbuster HackWatch en 2026-09-21T09:12:39Z BigDiskBuster Windows Defender DoS Vulnerability Blocks Platform and Signature Updates https://hackwatch.io/alert/hackers-abuse-microsoft-teams-to-pose-as-it-support-and-steal-employee-passwords HackWatch en 2026-09-21T09:09:24Z Hackers Abuse Microsoft Teams to Pose as IT Support and Steal Employee Passwords https://hackwatch.io/alert/revoking-the-token-didnt-kill-the-backdoor-new-cyber-risk-reported-by-csoonline-com HackWatch en 2026-09-21T09:00:00Z Revoking the token didn’t kill the backdoor: new cyber risk reported by csoonline.com https://hackwatch.io/alert/revolut-customers-targeted-with-new-wave-of-phishing-attacks HackWatch en 2026-09-21T09:00:00Z Revolut Customers Targeted with New Wave of Phishing Attacks https://hackwatch.io/alert/more-cves-than-ever-the-same-old-ones-keep-getting-exploited HackWatch en 2026-09-21T09:00:00Z More CVEs than ever. The same old ones keep getting exploited https://hackwatch.io/alert/hackers-weaponize-terraform-lock-files-to-infect-devops-engineers-with-macos-backdoors HackWatch en 2026-09-21T08:53:58Z North Korean TraderTraitor Hackers Use Fake Terraform Job Tests to Deploy macOS Backdoors https://hackwatch.io/alert/clickfix-lures-deploy-chainscript-rat-using-polygon-to-rotate-c2-infrastructure HackWatch en 2026-09-21T08:39:38Z ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure https://hackwatch.io/alert/heif-heist-image-flaws-let-attackers-gain-rce-across-meta-slack-and-github-enterprise HackWatch en 2026-09-21T08:17:05Z HEIF Heist Image Flaws Let Attackers Gain RCE Across Meta, Slack and GitHub Enterprise https://hackwatch.io/alert/openai-codex-sandbox-flaws-let-malicious-repositories-execute-commands-on-host-systems HackWatch en 2026-09-21T08:08:23Z OpenAI Codex Sandbox Flaws Let Malicious Repositories Execute Commands on Host Systems https://hackwatch.io/alert/top-10-best-identity-governance-administration-iga-tools-in-2026 HackWatch en 2026-09-21T08:07:16Z Top 10 Best Identity Governance & Administration (IGA) Tools in 2026 https://hackwatch.io/alert/hackers-hide-xmrig-miner-in-windows-registry-png-and-wav-files-to-evade-detection HackWatch en 2026-09-21T07:52:49Z Hackers Hide XMRig Miner in Windows Registry, PNG and WAV Files to Evade Detection https://hackwatch.io/alert/google-confirms-gemini-ai-breached-three-firms HackWatch en 2026-09-21T07:20:46Z Google Confirms Gemini AI Breached Three Firms https://hackwatch.io/alert/new-remus-infostealer-steals-openai-and-anthropic-api-tokens-passwords-and-crypto-wallets HackWatch en 2026-09-21T07:19:52Z Remus Infostealer Removes Syscall Hooks to Evade EDR and Steal Sensitive Credentials https://hackwatch.io/alert/exim-mail-server-hit-by-4-security-flaws-enabling-smtp-smuggling-and-heap-corruption HackWatch en 2026-09-21T06:48:53Z Exim Mail Server 4.100.1 Fixes 4 Security Flaws Including SMTP Smuggling and Heap Corruption https://hackwatch.io/alert/rathat-android-trojan-uses-ai-for-automation-new-cyber-risk-reported-by-securityweek-com HackWatch en 2026-09-21T05:51:05Z RatHat Android Trojan Uses AI for Automation: new cyber risk reported by securityweek.com https://hackwatch.io/alert/hackers-abuse-critical-cpanel-authentication-bypass-to-compromise-hosting-servers HackWatch en 2026-09-21T05:06:37Z Hackers Exploit cPanel CVE-2026-41940 Auth Bypass to Deploy Mirai Malware https://hackwatch.io/alert/gopass-open-source-command-line-password-manager-for-teams HackWatch en 2026-09-21T05:00:32Z Gopass: Open-source command-line password manager for teams https://hackwatch.io/alert/click2shell-wordpress-flaw-lets-hackers-execute-php-code-and-take-over-websites HackWatch en 2026-09-21T04:54:06Z Click2Shell WordPress Flaw Lets Hackers Execute PHP Code and Take Over Websites https://hackwatch.io/alert/weekly-cybersecurity-newsletter-bulletin-cisco-and-android-0-day-bragjack-attack-claude-op HackWatch en 2026-09-21T02:32:05Z Weekly Cybersecurity Newsletter Bulletin – Cisco and Android 0-Day, BragJack Attack, Claude Opus 5 https://hackwatch.io/alert/ransomware-group-alleges-attack-and-exfiltration-of-data-linked-to-major-payment-provider HackWatch en 2026-09-21T02:01:23Z Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors https://hackwatch.io/alert/malicious-npm-packages-evade-install-script-defenses-at-runtime HackWatch en 2026-09-20T14:11:21Z Malicious npm packages evade install-script defenses at runtime https://hackwatch.io/alert/week-in-review-cisco-patches-exploited-email-gateway-0-day-revolut-breach HackWatch en 2026-09-20T08:00:21Z Week in review: Cisco patches exploited email gateway 0-day, Revolut breach https://hackwatch.io/alert/when-ransomware-targets-ai-models-defending-the-ai-ml-recovery-chain HackWatch en 2026-09-20T04:42:15Z When Ransomware Targets AI Models: Defending the AI/ML Recovery Chain