The Hacker NewsAug 17, 2026AI Security / Identity Security MCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned...

Swati KhandelwalAug 17, 2026Vulnerability / Mobile Security Security researchers at SSD Secure Disclosure have published a two-stage exploit chain that...

Ravie LakshmananAug 17, 2026Malware / Botnet Cybersecurity researchers have flagged a previously undocumented Linux botnet family dubbed Evooo1Bot that derives...

Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus...

Ravie LakshmananAug 15, 2026Vulnerability / Cloud Security A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts....

A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency...

Threat actors are acquiring expired domains to inherit website traffic and reputation to redirect victims to scams and malware on...

IAM compliance is the practice of demonstrating that identity and access controls are not only documented but actually enforced across...

The threat actor known as HoneyMyte (aka Mustang Panda) has been observed deploying an updated version of the CoolClient backdoor with...

Cybersecurity researchers have detailed a post-exploitation technique that enables the Chrome DevTools Protocol (CDP) inside a running Google Chrome or Microsoft Edge...