GhostAction Strikes Again: 1,900 GitHub Accounts Breached in New Attack Wave
PremiumGhostAction campaign compromised ~1,900 GitHub accounts and attempted to extract secrets from thousands of repositories' CI.
§Source · The Hacker News
The Hacker News
Every dispatch we have aggregated from The Hacker News.
All dispatchesToday
Security Experts Use AI to Develop Chrome Exploit in Record Time
PremiumResearchers used a public GPT-5.6 model to craft a full-chain Chrome exploit in six days, leading Google to patch three bugs.
AI Agent Uncovers Critical OTP Bypass Vulnerability in Major Insurer's Website
PremiumAn AI pentesting agent autonomously discovered a critical OTP routing bypass in a live insurer site, enabling account takeover.
Next.js Releases Urgent Update to Address Critical Security Vulnerabilities
PremiumNext.js emergency update fixes two critical unauthenticated RCEs in React Server Components and librsvg/Sharp SVG processing.
Drupal Addresses Critical Security Vulnerability in Field UI Module
PremiumDrupal Field UI core flaw enables unauthenticated remote code execution via contributed modules; patches released for Drupal 10/11.
Zero-Click Spyware Targets Al Jazeera Through Online Ads
PremiumCitizen Lab links powerful zero-click spyware infections at Al Jazeera and others to targeted online ads needing no user interaction.
Microsoft Sets New Record with Patch Tuesday, Addressing Over 1,400 Vulnerabilities
PremiumMicrosoft released fixes for 1,413 vulnerabilities including an actively exploited Windows Shell zero-day; prioritize high-severity updates.
Cisco Addresses Critical Vulnerability in Secure Email Gateway
PremiumCritical Cisco Secure Email Gateway zero-day allows unauthenticated email to write files and execute root commands; patches available.
Wednesday, October 14
Critical Vulnerabilities in LG Smart TVs Allow Root Access via Local Network
Chained webOS vulnerabilities let local-network attackers gain root access on affected LG Smart TV models without owner interaction or PIN.
Malicious Firmware Found in Low-Cost Android Devices Raises Security Concerns
Preinstalled firmware malware on MediaTek phones enables covert app installation, ad fraud, and conversion into residential proxies (Midnight Mimosa).
Critical Security Flaw in SAP's Cloud SDK for Python Exposes OAuth2 Credentials
SAP Cloud SDK Python SSRF (CVSS 10) can leak OAuth2 client credentials from multi-tenant apps to attacker-controlled servers.
CyberXero Exploits AI to Breach Ukrainian Records
CyberXero combined commodity tools with Anthropic Claude Code to orchestrate an automated campaign stealing 628,000+ Ukrainian records from WordPress and e-commerce sites.
GitLab Addresses Critical Security Flaw with Urgent Patches
GitLab released patches for a CVSS 10.0 unauthenticated RCE in CE/EE that allowed arbitrary server code execution.
Cyberattack on Danfoss Controllers Disrupts French Supermarkets
Attackers manipulated Danfoss controllers to spoil food at hundreds of French supermarkets, causing operational and supply losses.
Monday, October 12
Massive Credential Theft Campaign Compromises GitHub Repositories
PremiumMalicious GitHub Actions workflows pushed via compromised maintainer accounts stole CI/CD secrets and credentials across hundreds of repos.
P7 DarkSword iOS Exploit Kit Targets Crypto Wallets with Enhanced Capabilities
PremiumNew P7 DarkSword iOS exploit kit variant steals keychain and crypto wallets, adds two-way C2 and remote commands on devices.
FBI and DoJ Disrupt China-Linked Cyber Threats Targeting Critical Infrastructure
PremiumUS agencies seized domains and disrupted tools tied to Integrity Technology Group and Flax Typhoon used against critical infrastructure.
Critical Vulnerability in AnyDesk Linux Could Allow Remote Access
PremiumA pre-auth AnyDesk Linux vulnerability gives root access; proof-of-concept exploit published, update to 8.0.3 recommended.
Friday, October 9
Malicious Firefox Extensions Exploit Wallet Vulnerabilities to Steal Crypto
PremiumCluster of 16 malicious Firefox extensions intercept wallet import flows to steal cryptocurrency recovery phrases and private keys.
U.S. Seeks Information on Chinese National Charged in Major Cyber Attacks
PremiumUS State Department offers up to $10M for information locating Zhang Yu, charged over the 2021 Hafnium Exchange Server attacks.
Get these articles delivered to your inbox.
Subscribe free