New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
WordPress 6.9.5 and 7.0.2 patch wp2shell, a pre-auth core RCE that lets anonymous attackers run code on default installs, even with no plugins.
The Hacker News
@the-hacker-news
Publisher
108
Posts
Posts by The Hacker News
OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests
OpenSSL fixed HollowByte after 11-byte TLS requests could strand memory on glibc systems, but shipped no CVE, advisory, or changelog note.
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT
Seven malicious npm packages target Vite developers, using blockchain-based C2 to deliver a RAT for credential theft, file exfiltration, persistence.
New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens
NadMesh scans exposed AI services for AWS keys, Kubernetes tokens, model access, and MCP tools while Docker and Jenkins lead observed exploit traffic.
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft
Expel links CylindricalCanine to DigiCert's April 2026 breach, where stolen certificates were used to sign Zhong Stealer and 60 were revoked.
Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images
North Korean hackers hide a four-stage OtterCookie payload in SVG files inside fake coding tests to steal browser data and crypto wallets.
E.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants
EU orders Google to open 11 Android 18 features to rival AI assistants by August 2027, while sharing anonymized Search data under DMA rules.
The Race to Field Military Autonomy Is On, Can Trusted Information Infrastructure Keep Pace?
Autonomous defense systems need trusted infrastructure to move telemetry, command data, and AI outputs across platforms, classifications, and allies.
Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man
Armenia holds Aleksandr Yuryevich Ermakov on a U.S. REvil extradition request, while his lawyers say Washington is seeking a different namesake.
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files
ACR Stealer campaigns use ClickFix lures, JPEG steganography, and WebDAV to steal browser tokens, passwords, PDFs, and synced Microsoft 365 files.
New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage
New GoSerpent malware targets Southeast Asian government and diplomatic entities, deploying SOCKS5 proxies, credential dumpers, and data theft tools.
CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV
CISA says SharePoint CVE-2026-58644 was exploited before Microsoft patched it, affecting all supported on-premises versions and enabling RCE.
Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack
Two TfL hackers get 5.5 years each for the £29 million 2024 attack, which disabled 148 systems, exposed customer data, and disrupted travel services.
ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories
This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, actively exploited flaws.
n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer
n8n fixed CVE-2026-59208, a JWT matching flaw that could log users into another issuer’s account on affected multi-issuer Enterprise setups.
New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands
New TELEPUZ malware spreads through ClickFix, then steals browser cookies, logs keystrokes, runs commands, and installs itself as a Windows service.
New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password
ClickLock Stealer kills macOS apps every 210 milliseconds until victims enter a password, then steals browser credentials, cookies, wallets, and Keych
20+ Hijacked Government Websites Became an Attack Channel
PhantomEnigma uses more than 20 hijacked Brazilian government sites and compromised mailboxes to deliver a modular Node.js backdoor and payloads.
New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands
Agent data injection forges trusted fields across six AI models, redirecting web and coding agents while bypassing prompt injection defenses.
Daxin Resurfaces in Taiwan Alongside Stupig Pre-Login SYSTEM Backdoor
Daxin resurfaces at a Taiwan manufacturer alongside Stupig, a new backdoor that runs SYSTEM commands before sign-in through Windows' logon process.
AI Can Find Bugs, But Human Knowledge Still Proves Them
AI speeds offensive testing, but unproven findings increase triage noise unless teams verify reachability, impact, and deployed context.
Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide
Shark AWS IoT policy flaw could let one certificate send root commands to other vacuums in the same region, exposing cameras, maps, and Wi-Fi password
OpenAI’s GPT-Red Automates Prompt Injection Testing to Harden GPT-5.6 Sol
OpenAI says GPT-Red automates prompt injection testing and helped GPT-5.6 Sol record sixfold fewer direct injection failures than GPT-5.5 in benchmark
Zoom Patches Critical Windows Flaw That Could Enable Account Takeover
Zoom fixes CVE-2026-53412, a 9.8-rated Windows flaw that could enable account takeover via network access, plus three privilege escalation bugs.
TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development
TuxBot v3 Evolution contains raw LLM reasoning, 1,496 Telnet credentials, and exploits for over 30 IoT device families in a modular DDoS botnet.
OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps
OkoBot injects recovery phrase lures into Ledger and Trezor apps, targeting hundreds of Windows users across more than 25 countries.
Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws
Mozilla fixes two critical Firefox flaws with public exploit code as Google, Adobe, and Broadcom patch Chrome, ColdFusion, and VMware security bugs.
SASE Has An AI Blind Spot. Inspecting Packets Is No Longer Enough.
Modern SASE shifts enforcement to browsers and endpoints as AI workflows, TLS 1.3, and HTTP/3 expose cloud proxy limits across enterprise traffic.
Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday
LegacyHive is a PoC for a Windows ProfSvc privilege escalation flaw that works after the July 2026 update, but the public build needs extra credential
New Webinar: Closing the Approval Gap in AI-Era Ad Tech
Approved marketing tags can load unvetted fourth-party scripts with access to forms, checkout fields, and customer data after the initial review.
Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution
Cursor runs a repo-root git.exe when a Windows project opens, enabling code execution as the user. Seven months later, no patch or advisory exists.
Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware
Four compromised AsyncAPI npm packages load a multi-stage botnet from IPFS after attackers abuse GitHub Actions, despite valid provenance attestations
Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands
SonicWall says attackers are exploiting two SMA 1000 zero-days, including a code injection flaw that could enable administrator command execution.
Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack
Microsoft fixes a record 622 CVEs, including two exploited SharePoint and AD FS zero-days, while a Kerberos RC4 change could break service account log
SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data
SAP patches three critical flaws, including a 9.9 NetWeaver ABAP memory bug and default OAuth credentials that may expose Commerce Cloud data.
Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads
Claude for Chrome v1.0.80 still accepts forged clicks from other extensions, triggering Gmail, Docs, and Calendar tasks silently in hands-off mode.
LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts
LabubaRAT poses as NVIDIA software, profiles security tools, and uses HTTPS, WebView2, or DNS tunneling to maintain remote access on Windows hosts.
RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata
Two RabbitMQ flaws can expose OAuth secrets or queue metadata, with one potentially enabling full broker takeover in affected configurations.
11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot
Eleven old Microsoft-signed UEFI shims could let admin-level attackers bypass Secure Boot and run code before the operating system loads
Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks
Researchers found built-in privacy leaks in 85 browser wallets that can link addresses, survive logout, and expose users across unrelated sites.
How Pentera Turns AI Security Workflows into Validation Engines
Pentera’s MCP Server gives AI assistants access to validated attack paths, helping teams prioritize exploitable risks and verify remediation.
OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials
OAuth client ID spoofing lets attackers test Entra accounts and stolen passwords without successful sign-ins, leaving application names blank in logs.
Grok Build Uploads Entire Git Repositories to xAI Storage, Not Just Files It Reads
Grok Build uploaded tracked Git repositories and full commit history to xAI storage by default, including unread files and unredacted .env secrets.
U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support
U.S. sanctions First VPN and two operators over ransomware support as the U.K. and E.U. target 24 Russian cyber actors and the FBI warns on FSB router
148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet
JFrog finds 148 npm proxy packages turned student browsers into a DDoS botnet, while a mutable loader lets operators re-arm it without updates.
Microsoft Maps Year-Long ShinyHunters-Linked Salesforce Data Theft Across Three Paths
Microsoft maps three Salesforce intrusion paths that abuse OAuth apps, vendor tokens, and guest access while ordinary sign-in monitoring stays quiet.
CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks
CrashStealer uses a notarized macOS dropper to pass Gatekeeper, then steals browser, wallet, password manager, file, and keychain data.
Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found
Google and Microsoft pulled ModHeader after researchers found a dormant collector built to encrypt and upload up to 1,000 visited domains.
⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More
From a rushed ShareFile shutdown to poisoned npm packages and AI assistants tricked into installing malware, here's every threat you need to know this
New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email
A single crafted email can plant a false, lasting memory in AI agents like OpenClaw, hide it from the user, and slip past the defenses built to catch
Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft
Forg365 targets Microsoft 365 with device code and AitM phishing, then uses stolen tokens for persistent browser sessions and mailbox access.
Meta Files Patent for AI That Can Listen All Day and Track How You're Feeling
Meta filed a patent for an AI that reads your mood from your voice, eyes, and phone and keeps a timestamped log of it.
Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots
Research on 25 million enterprise alerts finds 98% can be resolved autonomously, leaving less than 2% of SOC cases for human analyst review.
Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory
A likely AI-generated PowerShell script mapped Active Directory after an attacker gained RDP access to a Windows Server with compromised credentials.
Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365
An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture sessions.
iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days
CISA adds exploited iCagenda and Balbooa Forms flaws to KEV after reported zero-day attacks enabled PHP uploads and remote code execution on sites.
Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install
Malicious jscrambler 8.14.0 runs hidden binaries during npm install on Windows, macOS, and Linux, with no fix available as of July 11, 2026.
Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns
Suspected China- and India-aligned actors targeted Pakistani police systems with PlugX, ShadowPad, Remcos, and Cobalt Strike from 2024 to 2026.
Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions
Zimbra fixes a critical stored XSS flaw in its Classic Web Client that could let crafted emails run malicious scripts when opened. Update to 10.1.19.
URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat
Progress ordered ShareFile customers to shut down their Storage Zone Controllers while it investigates a credible external security threat.
Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages
Unknown attackers compromised Injective Labs' GitHub repo to publish npm package 1.20.21, which steals wallet private keys and seed phrases.
Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot
Six U-Boot flaws include four that can crash devices and two that could run code before signature checks; no fixed stable release exists.
Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be Patched
Ledger researchers used laser fault injection to reset Tangem wallet passwords, but the invasive attack needs physical access and a $250,000 lab.
Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws
A researcher says three patched OpenClaw flaws could enable credential theft, privilege escalation, and host code execution via WhatsApp.
New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic
China-linked Silver Fox deploys the Rust-based MODBEACON RAT through fake software installers, targeting technology, education, and state-owned firms.
Unpatched XRING Flaw in XQUIC Lets Remote Clients Crash HTTP/3 Servers
FoxIO disclosed XRING, an unpatched XQUIC flaw that lets unauthenticated clients crash HTTP/3 servers with 260 bytes of legal QPACK traffic.
From 17,000 to 1.1 Million Assets: How Lumen Technologies Rebuilt Exposure Management at Scale
Lumen used Axonius to reconcile 40-plus systems, uncover 60 times more devices, and rebuild exposure management around trusted asset data.
Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites
An open WP-SHELLSTORM server exposed tools, logs, and target lists naming 1.4 million sites, with researchers validating 25,195 compromises.
Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking
Researchers tested 281 free Android VPN apps and found DNS leaks, plaintext traffic, weak tunnels, and flaws across apps with 2.4B installs.
Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access
O-UNC-066 uses vishing and a live phishing kit to trick Microsoft 365 users into enrolling attacker-controlled Entra passkeys for account access.
Attackers Exploit 'Ill Bloom' Vulnerability to Drain Over $5 Million From Cryptocurrency Wallets
Coinspect confirms over $5M stolen via the Ill Bloom flaw. Weak seed generation left older mobile and browser-extension wallets exposed.
Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat Attacks
Former ransomware negotiator Angelo Martino gets 70 months for giving victim negotiation data to BlackCat operators and aiding extortion.
Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs
GitHub ghost accounts and exposed PATs scrape corporate orgs through the API, with select cases cloning private repos.
New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware
Microsoft details GigaWiper, a Windows backdoor that bundles disk wiping, fake ransomware, and remote control into one destructive tool.
npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk
GitHub releases npm 12 with install scripts off by default and begins phasing out 2FA bypass tokens for sensitive npm actions.
ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories
ThreatsDay Bulletin covers fraud arrests, supply-chain attacks, phishing, cloud hijacking, ransomware, Windows flaws, and AI-driven data exfiltration.
AI Attacks Move in Minutes. Join This Webinar on Building a Defense That Keeps Up
AI-powered attacks move faster than human runbooks. Zscaler shows how Zero Trust can cut reach and lateral movement.
Summer of Clearinghouses
Chainguard argues AI-driven vulnerability discovery is shifting open source disclosure from hand coordination to automated orchestration.
GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses
GodDamn ransomware, tied by Symantec to Hyadina's Beast lineage, uses AnyDesk, PsExec, and PoisonX to move and evade defenses.
Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges
Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against cyberattacks and software vulnerabilities.
Meta's New AI Image Tool Lets Others Use Your Public Instagram Photos in AI Images
Meta Muse Image lets users tag public Instagram accounts to generate AI images, with public posts and reels reusable by default unless disabled.
Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It
AI Now’s Friendly Fire PoC shows Claude Code and Codex running README-planted payloads on hosts when autonomous command approval is enabled.
GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents
Wiz says GhostApproval abuses symlinks so AI coding agents write to SSH keys or shell startup files while showing benign paths.
Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes
Infoblox says Lurking Lizard has used fake installers, mobile apps, and lookalike domains to recruit devices into a proxy botnet.
AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers
Sophos says Claude Code, Cursor, and Codex triggered Windows endpoint rules for credential access, LOLBin downloads, and persistence.
New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware
Researchers show HalluSquatting can make AI coding agents fetch fake repositories or skills and run attacker-supplied code.
Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS
Ubiquiti fixes seven critical UniFi flaws across Connect, Talk, Access, Protect, and OS, with no evidence of exploitation in the wild found.
New Ghost Phishing Wave Is Breaking Traditional Email Security
EvilTokens uses AES-GCM encrypted HTML and Microsoft Device Code Phishing to hide Microsoft 365 account takeover pages until browser render.
SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users
SCMBANKER watches banking windows, captures screenshots, hijacks CLABE and card numbers, and can deploy Remote Utilities for hands-on access.
GitHub 'Verified' Commits Can Be Rewritten Into New Hashes Without Breaking Signatures
Research shows signed Git commits can be re-encoded into fresh GitHub Verified hashes without changing files or breaking signatures.
The Verification Step Is the New ATO Battleground in 2026
Passkeys reduce stolen-password value, shifting ATO toward recovery, re-verification, magic links, and AI-driven identity fraud in 2026.
GitHub Copilot Refuses Harmful Requests in Chat, Then Writes Them in Code
GitHub Copilot Refuses Harmful Requests in Chat, Then Writes Them in Code | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against cyberattacks and software vulnerabilities.
China-Linked UAT-7810 Expands ORB Network With New LONGLEASH Malware
Cisco Talos says UAT-7810 is refining LONGLEASH, DOGLEASH, and JARLEASH to expand the LapDogs ORB network.
15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros
GhostLock (CVE-2026-43499), a 15-year-old use-after-free in Linux's futex code, gives any local user root.
CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV
CISA added four exploited flaws to KEV, covering Adobe ColdFusion, Joomla page builders, and Langflow ahead of July 10 fixes.
RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service
Zimperium found RedWing, a rented Android kit that steals banking logins, lifts one-time codes, and forwards calls to defeat phone-based 2FA.
Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots
Google fixed Rogue Agent, a Dialogflow CX Code Blocks flaw that could let one writable agent affect every chatbot in a Cloud project.
DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts
Talos details ARToken, a PhaaS panel tied to EvilTokens that supports device code phishing, BEC workflows, SharePoint theft, and PRT persistence.
Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data
The issue affects GitHub Agentic Workflows setups that read public input, hold private repo access, and can post output publicly.
Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker
Federal complaint says a Windows GDID tied Peter Stokes to a May 2025 jewelry retailer hack that stole 77GB and drew an $8M ransom demand.
Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants
Writer patched WriteOut after Sand Security found sandbox previews could forward session cookies into attacker-controlled agents.
What Changes When Your Software Supply Chain Includes AI Writing Your Code?
AI agents, prompts, and MCP tools now shape software builds, forcing teams to track provenance beyond packages and generated code alone.
Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities
Proofpoint says UNK_MassTraction exploited patched Roundcube flaws to target U.S. and Canadian university mail servers.
CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware
CVE-2026-11405 affects five Tenda firmware builds and can bypass password checks through an undocumented admin login path in /bin/httpd.
BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA
BeyondTrust fixed four RS and PRA flaws, including two pre-auth bugs that could bypass appliance access controls under specific configurations.
Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations
Cavern agents were observed in the wild using DLL sideloading, NativeAOT modules, AppDomain unloading, and low VirusTotal detection rates.
16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems
Januscape abuses KVM shadow MMU page reuse to panic x86 hosts, with Kim reporting a controlled full escape exploit behind the unreleased path.
Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure
CVE-2026-20896 lets reachable Gitea Docker containers trust spoofed X-WEBAUTH-USER headers when reverse proxy auth is enabled.