Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

September 18, 2026

The Iran-linked "hacktivist" persona known as Handala Hack has been attributed to a Telegram-based surveillance backdoor called HEAVYGRAM and a...

Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone

Swati KhandelwalSep 17, 2026Vulnerability / DNS Security Every release of the Unbound DNS resolver before 1.26.1 has a critical heap...

Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar

The Hacker NewsSep 17, 2026Security Operations / Artificial Intelligence A new CVE drops. Your scanner finds it. The severity score...

CISO’s Expert Guide to Agentic Pentesting for Websites

Attackers now weaponize new vulnerabilities in about five days (Mandiant, part of Google Cloud). The median organization takes 43 days...

China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America

Ravie LakshmananSep 17, 2026Malware / Cyber Espionage The China-aligned state-sponsored threat actor known as FamousSparrow has been observed deploying a...

OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads

Ravie LakshmananSep 17, 2026Artificial Intelligence / Vulnerability OpenAI on Wednesday disclosed six new instances of "unexpected or concerning model behavior"...

BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS

The Internet Systems Consortium (ISC) has released BIND 9.20.29 and 9.21.26 to fix fourteen security flaws it disclosed on 16 September in BIND 9,...

Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records

A security breach at Gyazo, Helpfeel's image-sharing service, exposed about 23.62 million user records, including email addresses and password hashes,...

Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks