Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can&#8217;t Install Fix

N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services and abuse legitimate authentication...

Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation

Ravie LakshmananSep 16, 2026Vulnerability / Mobile Security Google has disclosed that a high-severity security flaw in its Pixel Cellular Modem...

Threat Intelligence Alone Won’t Close the Exploitation Gap

The Hacker NewsSep 16, 2026Threat Intelligence / Security Validation A leaked credential shows up in a criminal marketplace, or a...

Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks

Ravie LakshmananSep 16, 2026Vulnerability / Linux Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel...

Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells

Ravie LakshmananSep 16, 2026Vulnerability / Web Security Threat actors are exploiting a critical security flaw in WooCommerce Wholesale Lead Capture,...

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

Ravie LakshmananSep 16, 2026Vulnerability / API Security A critical security flaw in WSO2 API Manager has come under active exploitation...

KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens

September 15, 2026

Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN. Elastic...

Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists

September 15, 2026

Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say...

BambooToken Malware Uses MQTT to Control Windows and Linux Systems

September 15, 2026