U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in Crypto

Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple...

Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA

Cybercriminals are hijacking artificial intelligence (AI) user accounts via information stealer logs to create "stolen keys" that grant illicit access...

Webinar: Learn How to Answer “Are We Exposed?” Faster After a New CVE

The Hacker NewsSep 09, 2026Security Operations / Artificial Intelligenc A major vulnerability is disclosed. The alert lands immediately. Then comes...

DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval

A flaw in DeepSeek Harness, DeepSeek's open-source tool for running AI coding agents on a developer's machine, let a sandboxed...

Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets

Swati KhandelwalSep 09, 2026Vulnerability / Cryptocurrency Bitcoin wallet company Alby has warned of a critical flaw in Alby Hub that could have...

U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok

U.S. cybersecurity and intelligence agencies have accused China-based artificial intelligence (AI) companies of conducting "systematic extraction" of proprietary functionalities and...

Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

Ravie LakshmananSep 09, 2026Vulnerability / Browser Security Google on Thursday released updates to patch 230 security vulnerabilities, including one that...

New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

Swati KhandelwalSep 09, 2026Vulnerability / Web Security cPanel has patched a flaw that it says lets a single hosting account...

F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans