Cyber Security News

📰

The Hacker News LOW

11h

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

The U.S. Department of Justice (DoJ) on Wednesday announced the disruption of two hacking platforms named QScan and QTRouter operated by Chinese threat actors to target critical infrastructure and oth...

Read more →

📰

The Hacker News LOW

12h

Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler

Cybersecurity researchers have discovered additional infrastructure and previously undocumented malware associated with Nimbus Manticore, an Iranian state-sponsored hacking group affiliated with the I...

Read more →

📰

The Hacker News LOW

14h

NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions

Cybersecurity researchers have disclosed details of a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies that's used as a proxy to redirect Microsoft 365 sign-ins, while capturing ...

Read more →

📰

The Hacker News HIGH

14h

CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published the results of two red team assessments it conducted simultaneously against two critical infrastructure organizations, us...

Read more →

📰

The Hacker News LOW

15h

Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code

The CERT Coordination Center (CERT/CC) has disclosed two unpatched vulnerabilities in Kaltura's HTML5 video player library that allow a remote, unauthenticated attacker to read arbitrary files from a ...

Read more →

📰

The Hacker News MEDIUM

16h

Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine

The SOC we've always known was built around a model that guarantees most of the alert queue will never receive analyst review. There's never time. In a traditional SOC, the typical progression follows...

Read more →

📰

The Hacker News LOW

17h

Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests

Aikido Security has published research that recreates the Australian gym-booking incident in a synthetic environment, finding that Claude Opus 4.6, running on the OpenClaw agent harness, exploited a c...

Read more →

📰

The Hacker News LOW

18h

OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation

OpenAI on Tuesday said it banned a cluster of Russian ChatGPT accounts that used VPNs to bypass access restrictions and run an influence operation, which relied on its artificial intelligence (AI) too...

Read more →

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler

NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions

CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing

Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code

Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine

Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests

OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation

Stay ahead of threats

Enquiry Received!