News

The Hacker News2h
SonicWall Confirms Active Exploitation of Flaws Affecting Multiple Appliance Models
SonicWall confirms wild exploitation of CVE-2023-44221 and CVE-2024-38475 in SMA100 devices, risking file access and session ...
The Hacker News16h
Researchers Demonstrate How MCP Prompt Injection Can Be Used for Both Attack and Defense
Prompt injection flaws in Anthropic’s MCP and Google’s A2A protocols enable covert data exfiltration and AI manipulation.
The Hacker News18h
Nebulous Mantis Targets NATO-Linked Entities with Multi-Stage Malware Attacks
RomCom RAT uses bulletproof hosting and encrypted C2 for stealth; PRODAFT links it to Russian-speaking APT Nebulous Mantis.
The Hacker News19h
RansomHub Went Dark April 1; Affiliates Fled to Qilin, DragonForce Claimed Control
RansomHub's sudden offline status triggered affiliate migration to Qilin and cartel shifts, signaling major RaaS disruption.
The Hacker News22h
Customer Account Takeovers: The Multi-Billion Dollar Problem You Don't Know About
The report found a median account takeover exposure rate of 1.4% among platforms ranging from 5 million to 300 million users.
The Hacker News22h
Indian Court Orders Action to Block Proton Mail Over AI Deepfake Abuse Allegations
Indian court orders blocking of Proton Mail citing AI deepfakes and explicit emails, triggering national privacy concerns.
The Hacker News21h
Chinese Hackers Abuse IPv6 SLAAC for AitM Attacks via Spellbinder Lateral Movement Tool
Another noteworthy tool in TheWizards' arsenal is DarkNights, which is also called DarkNimbus by Trend Micro and has been ...
The Hacker News1d
Meta Launches LlamaFirewall Framework to Stop AI Jailbreaks, Injections, and Insecure Code
Meta debuts LlamaFirewall with PromptGuard 2 and CyberSecEval 4 to defend AI from injection attacks and insecure code threats ...
The Hacker News1d
New Reports Uncover Jailbreaks, Unsafe Code, and Data Theft Risks in Leading AI Systems
Multiple AI jailbreaks and tool poisoning flaws expose GenAI systems like GPT-4.1 and MCP to critical security risks.
The Hacker News1d
SentinelOne Uncovers Chinese Espionage Campaign Targeting Its Infrastructure and Clients
SentinelOne uncovers China-linked PurpleHaze attacks and North Korean infiltration attempts amid rising EDR testing abuses.
The Hacker News1d
Malware Attack Targets World Uyghur Congress Leaders via Trojanized UyghurEdit++ Tool
Custom malware hidden in UyghurEdit++ targeted WUC leaders since May 2024, exposing Uyghur diaspora surveillance links to ...
The Hacker News1d
WhatsApp Launches Private Processing to Enable AI Features While Protecting Message Privacy
WhatsApp launches Private Processing using CVM and OHTTP, ensuring AI-driven message privacy and auditable security.