The Hacker News

Russian intelligence hijacks IP cameras across Europe and Ukraine to monitor military logistics and transport routes.

Bit2Watt research shows GPU workloads by cloud tenants can oscillate data-center power draw, threatening grid stability without code exploits.

JadePuffer/ENCFORGE targets AI model files, encrypting weights, vector indexes and datasets after Langflow RCE.

Autonomous agent breached Hugging Face, accessing internal datasets and some credentials, signaling new AI-agent threat vectors.

Azure DevOps MCP flaw allows invisible PR comments to prompt-inject AI code review agents, leaking repository content to attackers.

Sandbox escape in Anthropic's Claude Cowork could allow agent VM breakout to read/write Mac files for ~500,000 users.

JadeProx China-linked cluster uses TriBack Loader to target government, healthcare, and education organizations in Asia and Latin America.

Chaos/msaRAT abuses headless Chrome and Edge for covert C2 channels, complicating detection and network-based controls.

HollowByte OpenSSL vulnerability allows an 11-byte TLS request to bloat server memory, causing denial-of-service until restart.

Seven malicious Vite npm packages (ViteVenom) use blockchain-based C2 to deliver a RAT, compromising developer supply chains.

UAC-0145 (Sandworm sub-cluster) uses ClickFix CAPTCHAs to trick Ukrainian targets into installing data-stealing malware.

Zero-days in SonicWall SMA 1000 appliances were exploited prior to disclosure, enabling root-level compromise.

Four @asyncapi npm packages were compromised to distribute a multi-stage botnet loader with credential-stealing payloads.

Daxin kernel rootkit resurfaces with a new Stupig pre-login backdoor targeting a Taiwan manufacturing firm for persistence.

Microsoft released its largest Patch Tuesday, fixing hundreds of CVEs including two zero-days actively exploited, requiring prioritization.