/
victim_sectors:technology × latest_source_host:thehackernews.com × criticity:critical × limpar

Resultados

3 casos · pág. 1/1

thehackernews.com · critical

Rank Math PRO update channel compromised to deliver self-restoring backdoor in version 3.0.123 (CVE-2026-111862)

Rank Math disclosed that copies of Rank Math PRO, the paid WordPress SEO plugin, downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16, 2026 contained malware. Any site that installed and activated an affected copy should be treated as compromised. The malware can recreate its hid…

thehackernews.com · critical

Qilin and Settra exploit PAN-OS CVE-2026-0257; ThreatsDay roundup of new RATs, stealers, WordPress backdoor and Meta GitHub breach

Qilin and Settra ransomware groups are actively exploiting CVE-2026-0257, an authentication bypass in PAN-OS GlobalProtect and Prisma Access disclosed in May 2026, according to ReliaQuest. Because access arrives through the victim's own VPN, it can resemble legitimate remote work and go unnoticed until credential theft, lateral movement, …

thehackernews.com · exploit público critical

Weekly Recap: BeyondTrust 0-day by Armory Castle, Ledger supply-chain implants, French refrigeration attacks, ConnectWise breach

This weekly recap covers several concurrent incidents. ConnectWise disabled seven application identities and suspended Cloud Backup after unknown actors abused them to compromise Microsoft 365 tenants. China-nexus Armory Castle (UNC5221 / Warp Panda) exploited BeyondTrust Remote Support flaw CVE-2026-102764 (CVSS 9.3) as a zero-day in lat…