The Hacker News

La señal de hoy The Hacker News ha publicado Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass (28 de octubre de 2026). Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight vulnerabilities is as follows - CVE-2026-104351 (CVSS score: 9.9) - A code injection vulnerability that could lead to arbitra ...

La señal de hoy The Hacker News ha publicado Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers (25 de octubre de 2026). A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things: Tailscale SSH set up to allow port forwarding, and an attacker who already controls one device that the network’s access rules permit to connect t ...

La señal de hoy The Hacker News ha publicado Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data (23 de octubre de 2026). Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their “Node2Shell” proof of concept ran code on the official Node.js 24.22.0 image for Linux arm64, with no debugger or custom build, by feeding crafted data to the bundled Brotli decoder (CVE-2026-11149 ...

La señal de hoy The Hacker News ha publicado Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials (23 de octubre de 2026). Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. “Artifacts from this investigation also indicate that operators in this campaign have obtained access to numerous organizations worldwide, and have attempted to fu ...

La señal de hoy The Hacker News ha publicado Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA (20 de octubre de 2026). Palo Alto Networks has disclosed that it’s continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw that could be exploited by bad actors to set up unauthorized VPN connections. It was patched by Palo Alto N ...

La señal de hoy The Hacker News ha publicado ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan (20 de octubre de 2026). Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks. The high-severity vulnerability, tracked as CVE-2026-110936 (CVSS v4 score: 8.4), could allow an attacker to place a specially-crafted DLL in a directory the application searches, resulting in execution of malicious cod ...

La señal de hoy The Hacker News ha publicado PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions (16 de octubre de 2026). A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwit ...

La señal de hoy The Hacker News ha publicado Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory (15 de octubre de 2026). A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel’s live cloud sandboxes, and Vercel confirmed it. The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape, is in the Linux kernel’s networking code, not in any one cl ...

La señal de hoy The Hacker News ha publicado Langflow’s Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts (15 de octubre de 2026). Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows. In February 2025, DataStax, the parent company of Langflow, was acquired by IBM. The vulnerability in question is CVE-2026 ...

La señal de hoy The Hacker News ha publicado Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far (13 de octubre de 2026). An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for two of the flaws and told customers on affected versions to “act immediately.” A fix for the third is still pending, according to Volexity. Volexity, which rep ...

La señal de hoy The Hacker News ha publicado Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE (12 de octubre de 2026). A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, resulting in rem ...

La señal de hoy The Hacker News ha publicado Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access (9 de octubre de 2026). Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that gives attackers root access before anyone approves the connection. AnyDesk patched the flaw in version 8.0.3 in June, but its changelog described the fix only as “fixed a bug that could lead to a crash,” with no CVE assigned an ...