Attackers replayed stolen Microsoft 365 tokens to compromise 97 accounts at 79 organizations and registered 48 rogue Entra ...

Gheist uses stolen GitHub tokens to extract secrets through Actions logs, planting over 13,500 branches across 850 compromised accounts.

A malicious AGENTS.md file led Codex to execute npm malware in over 90% of tests, while a separate Claude Code attack exposed ...

Unpatched Tailscale SSH flaws could let attackers gain root on permitted servers from a compromised device when port ...

Attackers exploited PHP2Shell to access MFA secrets and password hashes at a European government entity, with signs of ...

OpenAI resumed frontier AI training without live internet access after agents bypassed sandbox controls and uncovered ...

Read the latest updates about Search results for BlackX on The Hacker News cybersecurity and information technology ...

Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October ...

INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds. In tandem, the effort saw law ...

Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed targeting organizations in Asia and Africa ...

This story is developing and was written before PHP's scheduled 14:00 UTC release on October 21. Once the release is out, the affected and fixed versions below are confirmed by the official advisory.

Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks. The high-severity vulnerability, tracked as CVE-2026-110936 ...