/
countries_code:US × latest_source_host:thehackernews.com × criticity:high × limpar

Resultados

6 casos · pág. 1/1

thehackernews.com · high

Ex-OpenAI engineer detained over covert recording device in executive conference room; Saudi royal contacts alleged

A U.S. court on Monday granted the government's request to detain Abdulrahman Alfozan, a 35-year-old Saudi national and former OpenAI engineer, accused of planting a concealed audio recorder in an executive conference room at the company's San Francisco office. A prosecution filing says he was in frequent WhatsApp contact in 2025-2026 wit…

thehackernews.com · high

Citizen Lab links Candiru zero-click spyware infections at Al Jazeera to malicious ads served via Discover-Tech

Citizen Lab reported that Israeli mercenary spyware vendor Candiru infected devices at Al Jazeera through targeted online ads that needed no user interaction. It calls this the first public technical confirmation of mercenary spyware reaching real devices via ad delivery. At least 45 Al Jazeera devices were targeted in 2024 and 2025, and …

thehackernews.com · high

Eight eMudhra intermediate CA private keys compromised; browsers, Go and trust stores ship emergency blocks

Mozilla and the Chrome Root Program confirmed on October 20 that the private keys of eight eMudhra intermediate CA certificates (emSign brand) are compromised. Anyone holding these keys could issue certificates for any website that a browser would accept. A researcher credited as "Wayne" reported the compromise on October 17, and Chrome a…

thehackernews.com · high

Go 1.27.3/1.26.10 emergency release blocks eight eMudhra intermediate CA keys over undisclosed security concerns

On October 20, the Go team released Go 1.27.3 and Go 1.26.10 on its URGENT track. The certificate verifier now rejects any chain passing through one of eight intermediate CA keys, citing unspecified "specific security concerns around their operation." A commenter on the Go issue matched the SHA-256 key hashes to intermediates of the India…

thehackernews.com · high

Chinese-speaking actor uses autonomous Cairn AI agents to attack 1,200+ websites and breach 100+ companies, incl. Deere and SharkNinja

A Chinese-speaking operator used the open-source AI agent framework Cairn to run autonomous attacks against more than 1,200 sites, reaching websites of over 100 companies, including Deere, SharkNinja and Cummins. Researcher Snorre Fagerland of NorForge found the operation around 2 October 2026 by scanning for about two dozen exposed Cairn…

thehackernews.com · high

UNC7017 tampers with AOMEI Backupper update servers in short windows to deliver CROSSROAD and SHINYROAD backdoors

Between May and July 2026, attackers tracked by Google Threat Intelligence Group (GTIG) as UNC7017 altered files on AOMEI's own update servers for windows of 5 to 10 minutes. Any copy of AOMEI Backupper that checked for updates during a window downloaded and ran a backdoor. GTIG, Mandiant and ManageEngine's Threat Analysis Lab disclosed t…