WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage

Ravie LakshmananSep 18, 2026Malware / Cybercrime A financially motivated threat actor has been linked to the development and distribution of...

RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall

Ravie LakshmananSep 18, 2026Mobile Security / Malware Cybersecurity researchers have flagged a new Android malware called RatHat that's assessed to...

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

A critical vulnerability in Check Point's Security Management and Log Servers could allow an attacker without login credentials to run...

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories

Ravie LakshmananSep 17, 2026Hacking News / Cybersecurity News Attackers keep finding new keys. The funny part is that defenders keep...

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Swati KhandelwalSep 17, 2026Vulnerability / Artificial Intelligence Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape...

Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords

The Iran-linked "hacktivist" persona known as Handala Hack has been attributed to a Telegram-based surveillance backdoor called HEAVYGRAM and a...

Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone

September 17, 2026

Swati KhandelwalSep 17, 2026Vulnerability / DNS Security Every release of the Unbound DNS resolver before 1.26.1 has a critical heap...

Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar

September 17, 2026

The Hacker NewsSep 17, 2026Security Operations / Artificial Intelligence A new CVE drops. Your scanner finds it. The severity score...

CISO’s Expert Guide to Agentic Pentesting for Websites

September 17, 2026