https://hackwatch.io/alert/sectoprat-returns-hiding-inside-a-legitimate-application HackWatch en 2026-09-24T20:32:50Z SectopRAT Returns, Hiding Inside a Legitimate Application https://hackwatch.io/alert/wordpress-patches-a-critical-severity-security-vulnerability HackWatch en 2026-09-24T20:26:22Z WordPress patches a critical severity security vulnerability https://hackwatch.io/alert/new-carbonato-malware-uses-ai-agents-to-hijack-exposed-docker-hosts HackWatch en 2026-09-24T20:10:48Z MacSync malware uses public iCloud calendars to deliver new payloads https://hackwatch.io/alert/falha-no-wordpress-escala-para-comprometimentos-ativos HackWatch en 2026-09-24T20:08:58Z Falha no WordPress escala para comprometimentos ativos https://hackwatch.io/alert/i-think-i-found-an-ai-agent-worth-the-risk-new-cyber-risk-reported-by-wired-com HackWatch en 2026-09-24T19:36:35Z I Think I Found an AI Agent Worth the Risk: new cyber risk reported by wired.com https://hackwatch.io/alert/critical-9-8-jetbrains-teamcity-rce-exploited-by-ransomware-says-cisa HackWatch en 2026-09-24T19:25:35Z Critical 9.8 JetBrains TeamCity RCE exploited by ransomware, says CISA https://hackwatch.io/alert/cyber-recovery-plans-lag-behind-ai-ransomware-threats HackWatch en 2026-09-24T18:20:56Z Cyber recovery plans lag behind AI, ransomware threats https://hackwatch.io/alert/cisa-adds-two-known-exploited-vulnerabilities-to-catalog HackWatch en 2026-09-24T18:16:27Z CISA Adds Two Known Exploited Vulnerabilities to Catalog https://hackwatch.io/alert/burger-king-russia-customer-data-leaked-online-after-2024-breach HackWatch en 2026-09-24T17:53:42Z Burger King Russia customer data leaked online after 2024 breach https://hackwatch.io/alert/threatsday-ai-search-poisoning-ai-coding-tool-leaking-repos-one-click-code-execution-and-1 HackWatch en 2026-09-24T17:52:43Z ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 Mor https://hackwatch.io/alert/exposed-gitlab-project-email-addresses-let-attackers-push-code HackWatch en 2026-09-24T17:47:44Z Exposed GitLab project email addresses let attackers push code https://hackwatch.io/alert/new-trustsink-attack-steals-passwords-via-rogue-mfa-provider HackWatch en 2026-09-24T16:44:06Z New TrustSink attack steals passwords via rogue MFA provider https://hackwatch.io/alert/beyond-the-ransomware-tracking-storm-2570s-consistent-tradecraft-across-deployments HackWatch en 2026-09-24T16:00:00Z Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments https://hackwatch.io/alert/eufy-omni-c20-omni-x10-pro-new-cyber-risk-reported-by-cisa-gov HackWatch en 2026-09-24T15:16:09Z Eufy Omni C20, Omni X10 Pro: new cyber risk reported by cisa.gov https://hackwatch.io/alert/wiz-uses-ai-to-find-vulnerabilities-in-railroads-hospitals-and-other-critical-infrastructu HackWatch en 2026-09-24T15:11:00Z Wiz uses AI to find vulnerabilities in railroads, hospitals and other critical infrastructure https://hackwatch.io/alert/emerging-ransomware-gang-uses-backup-destruction-threats-to-pressure-victims HackWatch en 2026-09-24T15:00:00Z Emerging Ransomware Gang Uses Backup Destruction Threats to Pressure Victims https://hackwatch.io/alert/botslab-g980h-dashcams-new-cyber-risk-reported-by-cisa-gov HackWatch en 2026-09-24T14:45:03Z Botslab G980H Dashcams: new cyber risk reported by cisa.gov https://hackwatch.io/alert/3-cyber-threats-that-defined-the-summer-of-2026 HackWatch en 2026-09-24T14:44:12Z 3 Cyber Threats That Defined the Summer of 2026 https://hackwatch.io/alert/bbc-technology-technology-health-environment-ai-2 HackWatch en 2026-09-24T14:43:45Z BBC Technology | Technology, Health, Environment, AI https://hackwatch.io/alert/android-malware-gebruikt-vaker-vpn-voor-blokkeren-van-google-play-protect HackWatch en 2026-09-24T14:15:00Z 'Android-malware gebruikt vaker vpn voor blokkeren van Google Play Protect' https://hackwatch.io/alert/fake-pdf-files-hide-konni-malware-campaign-targeting-ukraine-organizations HackWatch en 2026-09-24T13:39:18Z Fake PDF Files Hide Konni Malware Campaign Targeting Ukraine Organizations https://hackwatch.io/alert/on-prem-velocloud-orchestrator-under-attack-only-some-versions-patched HackWatch en 2026-09-24T13:35:04Z On-prem VeloCloud Orchestrator under attack, only some versions patched https://hackwatch.io/alert/fortiguard-labs-threat-research-new-cyber-risk-reported-by-fortinet-com-2 HackWatch en 2026-09-24T13:23:27Z FortiGuard Labs Threat Research: new cyber risk reported by fortinet.com https://hackwatch.io/alert/verdachte-achter-ransomware-aanvallen-moet-12-miljoen-dollar-betalen HackWatch en 2026-09-24T13:12:00Z Verdachte achter ransomware-aanvallen moet 1,2 miljoen dollar betalen https://hackwatch.io/alert/ai-powered-campaign-targets-hundreds-of-online-retailers HackWatch en 2026-09-24T12:48:14Z AI-Powered Campaign Targets Hundreds of Online Retailers https://hackwatch.io/alert/secrets-sprawl-is-an-identity-problem-that-ai-just-made-impossible-to-ignore HackWatch en 2026-09-24T11:00:00Z Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore https://hackwatch.io/alert/cisa-ransomware-gangs-now-exploiting-critical-teamcity-flaw HackWatch en 2026-09-24T10:42:37Z CISA: Ransomware gangs now exploiting critical TeamCity flaw https://hackwatch.io/alert/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted HackWatch en 2026-09-24T10:40:40Z SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted https://hackwatch.io/alert/how-tax-policy-can-stop-threat-actors-from-breaching-us-water-systems HackWatch en 2026-09-24T10:00:00Z How tax policy can stop threat actors from breaching US water systems https://hackwatch.io/alert/astrana-health-data-breach-impacts-private-confidential-information HackWatch en 2026-09-24T09:56:04Z Astrana Health Data Breach Impacts Private, Confidential Information https://hackwatch.io/alert/operation-conflict-compass-deploys-velvetcake-powershell-malware-through-malicious-lnk-fil HackWatch en 2026-09-24T09:34:36Z Operation Conflict Compass Deploys VelvetCake PowerShell Malware Through Malicious LNK Files https://hackwatch.io/alert/17000-urls-reveal-how-clickfix-turns-trusted-websites-into-malware-traps-report-by-ctm360 HackWatch en 2026-09-24T09:14:21Z 17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360 https://hackwatch.io/alert/aviation-solved-the-vigilance-problem-ai-just-gave-security-a-worse-one HackWatch en 2026-09-24T09:00:00Z Aviation solved the vigilance problem. AI just gave security a worse one https://hackwatch.io/alert/us-court-sentences-armenian-man-to-prison-for-ryuk-ransomware-attacks HackWatch en 2026-09-24T08:38:29Z US Court Sentences Armenian Man to Prison for Ryuk Ransomware Attacks https://hackwatch.io/alert/new-windows-malware-built-to-survive-takedowns-with-a-hidden-p2p-command-network HackWatch en 2026-09-24T08:36:41Z AvisLoader Windows Malware That Learned to Survive Even After Its Servers Are Taken Down https://hackwatch.io/alert/58-hardware-vulnerabilities-a-guide-to-the-threats HackWatch en 2026-09-24T08:25:00Z 58 hardware vulnerabilities: A guide to the threats https://hackwatch.io/alert/gnome-50-5-security-fixes-patch-a-gvfs-cve-and-epiphany-code-injection HackWatch en 2026-09-24T08:17:04Z GNOME 50.5 security fixes patch a gvfs CVE and Epiphany code injection https://hackwatch.io/alert/apples-new-ios-27-feature-looks-for-signs-youre-being-scammed HackWatch en 2026-09-24T08:02:31Z Apple’s new iOS 27 feature looks for signs you’re being scammed https://hackwatch.io/alert/openai-agent-hacked-australian-government-medicare-portal-in-worlds-first-rogue-ai-breach HackWatch en 2026-09-24T08:01:49Z OpenAI agent breached Medicare statistics site, then took months to report it https://hackwatch.io/alert/roundcube-webmail-sql-injection-vulnerability-exploited-in-the-wild HackWatch en 2026-09-24T07:37:03Z Roundcube Webmail Flaw Lets Attackers Trigger SQL Injection Without Authentication https://hackwatch.io/alert/critical-wordpress-vulnerability-exploited-immediately-after-disclosure HackWatch en 2026-09-24T07:12:26Z Critical WordPress Vulnerability Exploited Immediately After Disclosure https://hackwatch.io/alert/cpanel-permissions-flaw-allows-local-users-to-read-other-accounts-calendar-data HackWatch en 2026-09-24T07:08:28Z cPanel Permissions Flaw Allows Local Users to Read Other Accounts’ Calendar Data https://hackwatch.io/alert/new-galago-ransomware-operation-emerges-with-links-to-panzer-extortion-group HackWatch en 2026-09-24T06:06:25Z New Galago Ransomware Operation Emerges With Links to Panzer Group https://hackwatch.io/alert/attackers-exploit-wordpress-cve-2026-87902-within-hours-of-disclosure HackWatch en 2026-09-24T05:36:18Z Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure https://hackwatch.io/alert/fake-firefox-extension-hijacks-google-accounts-without-stealing-passwords-first HackWatch en 2026-09-24T05:15:38Z Fake Firefox Extension Hijacks Google Accounts Without Stealing Passwords First https://hackwatch.io/alert/bbc-technology-technology-health-environment-ai HackWatch en 2026-09-24T04:20:59Z BBC Technology | Technology, Health, Environment, AI https://hackwatch.io/alert/apache-tomcat-update-fixes-websocket-and-http-2-flaws-affecting-server-security HackWatch en 2026-09-24T04:04:20Z Apache Tomcat Update Fixes WebSocket and HTTP/2 Flaws Affecting Server Security https://hackwatch.io/alert/europes-technology-backbone-is-becoming-a-cyber-target HackWatch en 2026-09-24T04:00:02Z Europe’s technology backbone is becoming a cyber target https://hackwatch.io/alert/check-point-hacked-the-security-software-protecting-your-network-has-become-a-prime-attack HackWatch en 2026-09-24T02:05:30Z Check Point hacked: The security software protecting your network has become a prime attack target https://hackwatch.io/alert/ransomware-group-payload-weaponizes-microsoft-active-directory-for-disruption HackWatch en 2026-09-24T00:07:27Z Ransomware group PAYLOAD weaponizes Microsoft Active Directory for disruption https://hackwatch.io/alert/d-link-warns-of-critical-vulnerabilities-in-legacy-dir-822a-routers-with-public-exploit-co HackWatch en 2026-09-24T00:02:26Z D-Link warns of critical vulnerabilities in legacy DIR-822A routers with public exploit code https://hackwatch.io/alert/zte-smartlife-platform-vulnerabilities-allow-account-takeover HackWatch en 2026-09-23T22:57:23Z ZTE SmartLife platform vulnerabilities allow account takeover https://hackwatch.io/alert/new-remcontrol-android-banking-malware-targets-users-in-europe-and-canada HackWatch en 2026-09-23T21:25:13Z New Android Banking Trojan Uses AI-Built Overlays to Steal Users’ Banking PINs https://hackwatch.io/alert/f5-fixes-actively-exploited-zero-day-flaw-in-big-ip-apm HackWatch en 2026-09-23T20:44:25Z F5 fixes actively exploited zero-day flaw in BIG-IP APM https://hackwatch.io/alert/how-device-code-phishing-gives-scammers-access-to-your-account HackWatch en 2026-09-23T18:59:38Z How device code phishing gives scammers access to your account https://hackwatch.io/alert/hackers-now-exploit-critical-roundcube-flaw-in-code-injection-attacks HackWatch en 2026-09-23T18:31:22Z Hackers now exploit critical Roundcube flaw in code injection attacks https://hackwatch.io/alert/fbi-probes-cyberattack-tied-to-third-party-jobs-portal HackWatch en 2026-09-23T18:28:00Z FBI probes cyberattack tied to third-party jobs portal https://hackwatch.io/alert/attackers-use-malicious-terraform-providers-to-deliver-go-malware-via-hashicorp-registry HackWatch en 2026-09-23T18:06:30Z Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry https://hackwatch.io/alert/open-source-ai-agents-breach-27-companies-steal-600000-credit-card-records HackWatch en 2026-09-23T17:19:17Z Open-Source AI Agents Breach 27 Companies, Steal 600,000 Credit Card Records https://hackwatch.io/alert/mikrotrick-chain-let-attackers-take-over-mikrotik-routers-without-a-password-or-ssh-key HackWatch en 2026-09-23T16:06:41Z MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key https://hackwatch.io/alert/email-makes-up-nearly-1-in-3-mssp-analyses-how-tier-1-can-triage-phishing-faster HackWatch en 2026-09-23T15:58:30Z Email Makes Up Nearly 1 in 3 MSSP Analyses: How Tier 1 Can Triage Phishing Faster https://hackwatch.io/alert/gitlab-email-feature-vulnerability-lets-attackers-push-code-into-private-repositories HackWatch en 2026-09-23T15:40:39Z A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You https://hackwatch.io/alert/the-visibility-gap-in-phishing-detection-where-sandboxing-makes-a-difference HackWatch en 2026-09-23T15:40:01Z The Visibility Gap in Phishing Detection: Where Sandboxing Makes a Difference https://hackwatch.io/alert/new-cpanel-vulnerability-allows-attackers-to-access-other-users-accounts HackWatch en 2026-09-23T15:18:34Z New Cpanel Vulnerability Allows Attackers to Access Other Users’ Accounts https://hackwatch.io/alert/hundreds-of-leaked-github-app-keys-still-authenticate HackWatch en 2026-09-23T15:00:00Z GitHub App keys can still enable takeovers long after they are forgotten https://hackwatch.io/alert/infratrust-report-warns-network-management-systems-under-attack HackWatch en 2026-09-23T14:35:26Z InfraTrust report warns network management systems under attack https://hackwatch.io/alert/ryuk-ransomware-operator-sentenced-for-deploying-malware-and-extorting-victim-networks HackWatch en 2026-09-23T14:28:35Z Ryuk ransomware operator sentenced to 2 years in prison https://hackwatch.io/alert/aws-lambda-flaw-lets-attackers-bypass-iam-permissions-and-access-cloud-services HackWatch en 2026-09-23T14:23:53Z AWS Lambda Flaw Lets Attackers Bypass IAM Permissions and Access Cloud Services https://hackwatch.io/alert/this-windows-malware-is-built-to-let-up-to-four-ai-models-vote-on-its-next-move HackWatch en 2026-09-23T14:17:58Z This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move https://hackwatch.io/alert/cofense-measures-employee-readiness-against-real-world-phishing-threats HackWatch en 2026-09-23T14:01:12Z Cofense measures employee readiness against real-world phishing threats https://hackwatch.io/alert/windows-botnet-x47-c-offers-ai-api-draining-18-attack-methods HackWatch en 2026-09-23T14:00:00Z Windows Botnet x47.c Offers AI API Draining, 18 Attack Methods https://hackwatch.io/alert/darkme-rat-trades-zero-days-for-plain-phishing-emails HackWatch en 2026-09-23T13:24:17Z DarkMe RAT trades zero-days for plain phishing emails https://hackwatch.io/alert/metas-muse-ai-assistant-rolled-out-with-a-serious-security-flaw HackWatch en 2026-09-23T12:54:58Z Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw https://hackwatch.io/alert/fake-claude-max-giveaway-hides-a-google-account-phishing-trap HackWatch en 2026-09-23T12:45:00Z Fake Claude Max giveaway tricks users into handing over their Google account credentials https://hackwatch.io/alert/fake-crypto-wallet-app-spreads-pamstealer-malware-to-steal-mac-passwords HackWatch en 2026-09-23T12:44:40Z Fake Crypto Wallet App Delivers PamStealer Malware That Hijacks Mac Credentials https://hackwatch.io/alert/exvicy-clickfix-malware-as-a-service-copies-errtraffic-to-hijack-wordpress-sites HackWatch en 2026-09-23T12:29:44Z Exvicy ClickFix Malware-as-a-Service Copies ErrTraffic to Hijack WordPress Sites https://hackwatch.io/alert/ransomware-attacks-reach-record-high-for-2026-new-cyber-risk-reported-by-infosecurity-maga HackWatch en 2026-09-23T12:00:00Z Ransomware Attacks Reach Record High for 2026: new cyber risk reported by infosecurity-magazine.com https://hackwatch.io/alert/adobe-patches-critical-flaws-in-connect-aem-forms HackWatch en 2026-09-23T11:40:59Z Adobe Patches Critical Flaws in Connect, AEM Forms https://hackwatch.io/alert/cybercriminals-abandon-domains-but-keep-the-hosting-networks-behind-malware-campaigns HackWatch en 2026-09-23T11:40:52Z The Domains Keep Disappearing, but the Malware Infrastructure Behind Them Never Moves https://hackwatch.io/alert/cloudflare-joins-global-operation-to-take-down-eviltokens HackWatch en 2026-09-23T11:26:06Z Cloudflare Joins Global Operation to Take Down EvilTokens https://hackwatch.io/alert/exploit-released-for-unpatched-ubuntu-linux-flaw-enabling-host-root-container-escape HackWatch en 2026-09-23T11:12:18Z Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape https://hackwatch.io/alert/the-malware-hiding-in-developer-tools-that-turned-terraform-providers-into-attack-paths HackWatch en 2026-09-23T09:22:31Z The Phishing Kit That Turned Microsoft’s Login Flow Into an AI-Powered Fraud Machine https://hackwatch.io/alert/wordpress-7-1-2-fixes-critical-unauthenticated-path-traversal-vulnerability-cve-2026-87902 HackWatch en 2026-09-23T09:01:45Z WordPress 7.1.2 fixes critical unauthenticated path traversal vulnerability (CVE-2026-87902) https://hackwatch.io/alert/chatgpt-computer-history-feature-creates-new-data-theft-risk-for-macos-infostealers HackWatch en 2026-09-23T08:52:18Z ChatGPT Computer History Feature Creates New Data Theft Risk for macOS Infostealers https://hackwatch.io/alert/microsoft-disrupts-eviltokens-phishing-service-that-gave-criminals-access-to-12000-inboxes HackWatch en 2026-09-23T08:34:15Z Microsoft Disrupts AI-Powered EvilTokens Service Linked to 12,000 Hacked Inboxes https://hackwatch.io/alert/arista-patches-actively-exploited-velocloud-orchestrator-zero-day HackWatch en 2026-09-23T08:33:06Z Arista patches actively exploited VeloCloud Orchestrator zero-day https://hackwatch.io/alert/chinese-hackers-exploit-chrome-windows-zero-day-chain-to-deploy-cleangulp-malware HackWatch en 2026-09-23T08:29:24Z Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware https://hackwatch.io/alert/ryuk-ransomware-member-sentenced-to-24-months-in-prison HackWatch en 2026-09-23T08:20:05Z Ryuk ransomware member sentenced to 24 months in prison https://hackwatch.io/alert/microsoft-etuue-nch-ngohw-cve-2026-65660-ain-sharepoint-aacchnmaaaipsuukaarrankhmaasangbne HackWatch en 2026-09-23T08:02:00Z Microsoft เตือนช่องโหว่ CVE-2026-65660 ใน SharePoint อาจนำไปสู่การรันคำสั่งบนเซิร์ฟเวอร์ https://hackwatch.io/alert/critical-next-js-flaw-enables-rce-attacks-via-weaponized-svg-file HackWatch en 2026-09-23T07:53:01Z Critical NEXT.JS Flaw Enables RCE Attacks Via Weaponized SVG File https://hackwatch.io/alert/chrome-patches-108-vulnerabilities-including-crticial-flaws-that-enable-code-execution-att HackWatch en 2026-09-23T07:46:37Z Chrome 154 Patches 108 Vulnerabilities: new cyber risk reported by securityweek.com https://hackwatch.io/alert/cisco-talos-launches-cairn-tool-to-hunt-and-track-ai-integrated-malware HackWatch en 2026-09-23T07:39:43Z Cisco Talos Launches CAIRN Tool to Hunt and Track AI-Integrated Malware https://hackwatch.io/alert/ai-powered-threats-exploit-digital-trust-through-autonomous-breach-techniques HackWatch en 2026-09-23T07:31:46Z AI-Driven Cyberattacks Enter New Phase With Autonomous Fraud and Digital Trust Abuse https://hackwatch.io/alert/this-malware-doesnt-wait-for-hackers-it-asks-ai-models-what-to-do-next HackWatch en 2026-09-23T07:20:40Z This Malware Doesn’t Wait for Hackers—It Asks AI Models What to Do Next https://hackwatch.io/alert/weekly-cybersecurity-newsletter-top-50-biggest-cybersecurity-stories-of-the-week HackWatch en 2026-09-23T07:10:26Z Weekly Cybersecurity Newsletter – Top 50 Biggest Cybersecurity Stories of the Week https://hackwatch.io/alert/hpe-networking-analytics-engine-flaws-let-attackers-gain-root-access HackWatch en 2026-09-23T07:05:59Z SolarWinds Observability Flaws Let Unauthenticated Attackers Execute Remote Code https://hackwatch.io/alert/fake-tv-streaming-ads-deliver-streamrat-malware-for-remote-android-device-hijacking HackWatch en 2026-09-23T06:47:11Z A Fake Streaming App Turned Android Phones Into Remote-Controlled Devices https://hackwatch.io/alert/china-aligned-famoussparrow-targets-governments-with-new-backdoor HackWatch en 2026-09-23T05:38:09Z China-aligned FamousSparrow Targets Governments with New Backdoor https://hackwatch.io/alert/prismor-open-source-runtime-control-plane-for-ai-agents HackWatch en 2026-09-23T05:30:31Z Prismor: Open-source runtime control plane for AI agents https://hackwatch.io/alert/product-showcase-scamwise-checks-the-red-flags-before-you-take-the-bait HackWatch en 2026-09-23T05:00:48Z Product showcase: Scamwise checks the red flags before you take the bait https://hackwatch.io/alert/hackers-exploiting-f5-big-ip-oauth-server-0-day-flaw-to-gain-remote-code-execution HackWatch en 2026-09-23T03:24:27Z Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input https://hackwatch.io/alert/ai-malware-just-removed-the-human-from-the-attack-loop HackWatch en 2026-09-23T00:39:51Z AI malware just removed the human from the attack loop https://hackwatch.io/alert/bigcommerce-merchants-impacted-by-third-party-app-data-breach HackWatch en 2026-09-22T23:24:58Z BigCommerce merchants impacted by third-party app data breach https://hackwatch.io/alert/new-exvicy-malware-as-a-service-framework-copies-rival-s-code HackWatch en 2026-09-22T22:57:39Z New Exvicy malware-as-a-service framework copies rival's code https://hackwatch.io/alert/task-stomp-campaign-uses-powershell-backdoor-for-data-theft HackWatch en 2026-09-22T22:52:39Z Stealthy WordPress Malware Uses Must-Use Plugin and Ethereum EtherHiding for Persistent Backdoor A