The Hacker News

Today’s signal The Hacker News recently reported Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account. Published context: August 24, 2026. Red Hat and the Keycloak project have released patches to address a critical security flaw in the open-source identity and access management server that could allow an unauthenticated remote attacker to take over any user account by forcing a password reset. The vulnerability, assigned the CVE identifier CVE-2026-18963, is rated 9.1 on the CVSS scoring syste ...

Today’s signal The Hacker News recently reported Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt. Published context: August 24, 2026. If your developers are using AI coding tools, you are probably already seeing the upside: faster development, more code, and less time spent on routine work. The harder part is what comes after. AI can also introduce open-source packages at a pace your security team was never built to handle. More dependencies mean more vulnerabilities to review, more remedi ...

Today’s signal The Hacker News recently reported Why “Shady AI” is Security’s Next Big Governance Problem. Published context: August 20, 2026. In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to employees who weren’t authorized to access it. The incident began when a Meta employee posted a technical question on an internal forum. An engineer used an approved AI agent to analyze it, but the agent posted its response publicly w ...

Today’s signal The Hacker News recently reported Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE. Published context: August 20, 2026. Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that could allow attackers to escape the confines of the isolated environment. The vulnerability (“GHSA-864f-rcv7-6rh4”), which has yet to be assigned a CVE identifier, impacts all versions of the ...

Today’s signal The Hacker News recently reported GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure. Published context: August 21, 2026. A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-19478 (CVSS score: 9.4), a case of code injection that allows an unauthenticated attacker to modify or delete publicly accessible GitLab projects and rewrite their data under certain ...

Today’s signal The Hacker News recently reported Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code. Published context: August 20, 2026. Cybersecurity researchers have disclosed details of a critical flaw in the Elementor Pro WordPress plugin that, if successfully exploited, could lead to remote code execution. The vulnerability, tracked as CVE-2026-32475, carries a CVSS score of 9.0 out of 10.0. It has been described as a case of unrestricted upload of a file with a dangerous type. “The flaw ...

Today’s signal The Hacker News recently reported Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner. Published context: August 15, 2026. A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, the Netherlands National Cyber Security Centre (NCSC-NL) has warned. The vulnerability in question is CVE-2026-65400 (CVSS score: 9.8), a critical authentication issue impacting the Screen Sharing component that could allow an atta ...

Today’s signal The Hacker News recently reported Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware. Published context: August 17, 2026. Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus advanced persistent threat (APT). The attacks involve the exploitation of CVE-2026-59310 (CVSS score: 9.8), a severe directory-traversal vulnerability in the VMware vCenter server that could be weaponized by a mali ...

Today’s signal The Hacker News recently reported Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations. Published context: August 12, 2026. Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of harvesting cloud keys, SSH keys, Kubernetes tokens, database passwords, and other secrets from systems that installed them. Threat intelligence firm CloudSEK now says a dataset it obtained, built from roughly 434,000 files the attackers captu ...

Today’s signal The Hacker News recently reported Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access. Published context: August 12, 2026. Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCenter server that a malicious actor with network access can exploit to execute arbitrar ...

Today’s signal The Hacker News recently reported Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws. Published context: August 12, 2026. Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Classic that, if successfully exploited, could result in arbitrary code execution and privilege escalation. The most severe of the flaws are listed below - CVE-2026-48362 (CVSS score: 10.0) - An operating system command injection vulne ...

Today’s signal The Hacker News recently reported Attackers Exploit SharePoint Authentication Bypass After Public PoC Release. Published context: August 13, 2026. Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code. The vulnerability in question is CVE-2026-55040 (CVSS score: 9.1), which refers to a critical security feature bypass that stems from weak authentication. It was patched by Microsoft as part of its July 2026 Patch T ...