Noticias de Ciberseguridad
The Hacker News Most trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.com
- NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework
en 27 de julio de 2026NVIDIA and 36 other organizations have formed the Open Secure AI Alliance to develop and share open technologies, techniques, and tools for securing software […]
- Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption
en 27 de julio de 2026Dysphoria, an Internet of Things (IoT) botnet line tracked by CNCERT and XLab, has adopted blockchain-based name services and infected-device relays after a […]
- Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw
en 27 de julio de 2026Public exploit details released on July 27 show how an unauthenticated request can reach PHP's eval() function inside vBulletin and execute code on an […]
- ⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More
en 27 de julio de 2026Monday starts with the usual promise that everything is under control. Then the logs wake up. This week, trusted tools crossed lines, old flaws found new […]
- n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
en 27 de julio de 2026n8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow editor execute operating-system commands on the server […]
- Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update
en 27 de julio de 2026Cybersecurity researchers have flagged a Microsoft Teams-themed phishing campaign that employs "secure document" lures to deliver legitimate remote monitoring […]
- Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware
en 27 de julio de 2026The China-linked cybercrime group behind the use of income tax-related phishing lures targeting Indian taxpayers, tax professionals, and corporate finance […]
- TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments
en 27 de julio de 2026Cybersecurity researchers have flagged fresh malicious cyber activity by a threat actor with ties to East Asia targeting government entities in the Middle […]
- GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption
en 27 de julio de 2026GitHub has announced a new cooldown mechanism in Dependabot, allowing the tool to wait at least three days after a release is published before opening a pull […]
- Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable
en 25 de julio de 2026A malvertising operation dubbed SourTrade is making victims' browsers build the final Windows executable themselves, using a legitimate Bun runtime as its base […]
- Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available
en 25 de julio de 2026Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In affected Spring Boot […]
- Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git
en 25 de julio de 2026Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six weeks earlier, on June 10. It runs […]
- CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking
en 25 de julio de 2026For years, phishing campaigns targeting financial institutions followed the same playbook. Victims were tricked into entering usernames and passwords, […]
- Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE
en 25 de julio de 2026Threat actors linked to the Cl0p (aka Chubby Scorpius, FIN11, Graceful Spider, and Lace Tempest) ransomware campaign are exploiting flaws in internet-exposed […]
- DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts
en 25 de julio de 2026The operators of the DevMan ransomware-as-a-service (RaaS) scheme are maintaining a dedicated web platform that offers affiliates the ability to build […]
