Cybersecurity
ThreatsDay: Gogs 10.0 RCE, n8n Flaw, $10M Reward
Cybersecurity researchers rarely get a slow week, and the latest ThreatsDay roundup from The Hacker News proves it again. This edition bundles together a remote code execution (RCE) flaw in the self-h...
OpenAI Warns New AI Models Pose High Cyberattack Risk
OpenAI has warned that its advancing artificial intelligence models are increasingly capable of automating critical phases of real-world cyberattacks. The company's disclosure signals a shift in how A...
CISA Adds 4 KEV Flaws as VMware, Siemens Attacks Surge
A single week in cybersecurity rarely delivers this much at once. The Cybersecurity and Infrastructure Security Agency (CISA) added four new entries to its Known Exploited Vulnerabilities catalog, Chi...
SentinelOne Flags 4 Agentic AI Cyberattack Incidents
Security researchers at SentinelOne have documented four separate incidents in which agentic AI systems, tools built to plan and execute multi-step tasks with minimal human oversight, were connected t...
ShieldBreak Zero-Day: No Patch, CISA Gives Agencies 14 Days
A newly disclosed vulnerability in Microsoft Defender is putting security teams on a tight clock, and there is currently no official patch. The flaw, tracked as CVE-2026-69414 and nicknamed ShieldBrea...
Fake CAPTCHA Malware Kills 145 Security Processes
Most people have clicked through a CAPTCHA without a second thought. That routine trust is exactly what a new malware campaign is exploiting. Security researchers have identified fake CAPTCHA pages de...
OpenClaw Attack Shows AI Agents Can Push Malware to Users
A newly documented supply-chain campaign targeting OpenClaw, an autonomous AI agent platform, has revealed a troubling new twist on an old problem. Instead of tricking a human directly with a phishing...
Lazarus Group's Windows Zero-Day Hits Defense Workers
North Korea's state-sponsored Lazarus Group has revived its long-running "Operation Dream Job" campaign, and this time the group has added a serious upgrade: a Windows zero-day vulnerability tracked a...
Download More RAM Bug Exposes Windows Privilege Escalation
At the 2026 USENIX Security Symposium in Baltimore, researchers from the University of Birmingham and Durham University presented findings on a set of three Windows vulnerabilities that can bypass bui...
Pegasus Spyware Extortion Emails: Real Threat or Scam?
If you've received an email claiming that Pegasus spyware has infected your phone or computer, you're not alone. These messages typically arrive out of nowhere, often addressing you by name or even ap...