Eight eMudhra CA keys were compromised, prompting browser blocks and software fixes. Chrome found no rogue certificates in CT ...

Go 1.27.3 and 1.26.10 block eight CA public keys, rejecting certificate chains that use them after applications are rebuilt.

APT28 targeted two NATO states with HOOKEDGE and a new reflective loader, stealing credentials and establishing an SSH tunnel ...

Siemens patched a DLL sideloading flaw in Software Center exploited in ClickFix attacks to execute malicious code through a ...

ConnectWise suspended Cloud Backup after unauthorized access to application identities; Huntress observed app backdoors in ...

Citizen Lab confirmed Pegasus on a Serbian university rector's iPhone and flagged likely spyware targeting of a prosecutor ...

Attackers replaced OVHcloud CLI downloads across five GitHub releases with secret-stealing builds for up to 94 minutes on ...

ROMULUS uses ClickFix lures and PowerShell scripts to deliver malware, including Legion Loader, across infrastructure ...

Researchers release a PoC for critical FortiSIEM flaw CVE-2026-106173, showing how unauthenticated attackers can achieve ...

Qilin and INC ransomware actors continue exploiting a patched Palo Alto Networks flaw to gain network access, bypass MFA, and ...

A U.S. court detained an ex-OpenAI engineer accused of planting a recording device as prosecutors revealed his contacts with ...

Explore the latest news, real-world incidents, expert analysis, and trends in hash+registered+Venture — only on The Hacker ...