Mohit Kumar

‼️ A critical flaw in Canonical's LXD and MicroCloud (CVE-2026-112816, CVSS 10.0) lets attackers impersonate trusted clients without their private keys. Requires HTTPS API access and a trusted client's public certificate. → Cluster and VM access → Host root access if the impersonated client is privileged Details ↓ thehackernews.com/2026/11/cr…

‼️ FBI confirms North Korea's TraderTraitor hackers were behind the record $6.43 billion Binance crypto heist. $2.85 billion in stolen assets has been frozen as investigators track the laundering of funds through Ethereum. Full story: thehackernews.com/2026/11/fb…

🚨 New NetamLoader malware targets a government-only Windows 10 build in Asia. The attack abuses legitimate Patch My PC components, hijacks .NET execution, bypasses AMSI, and loads encrypted payloads. Kaspersky identified one victim. The attackers remain unknown. How the attack works - thehackernews.com/2026/11/ne…

🚨 $2.7 MILLION stolen from Polymarket traders in under an hour. The attackers didn't need to steal private keys. They hijacked a third-party DebugBear script and abused signed-in sessions to drain funds and trading positions. 726 wallets affected. $3.9M in refunds. Here's how it happened: thehackernews.com/2026/11/ha…

🚨 UPDATE: Cursor confirms two versions of Anthropic's Claude Code extension were affected by the SSH backdoor attack: v2.1.312 and v2.1.313 for Windows and macOS. thehackernews.com/2026/10/of…

🚨 Blockchain analysis firm Chainalysis confirms a data breach involving offensive agentic techniques. An attacker gained access to internal systems and tools, exposing customer names, email addresses, user IDs, and organization roles. Full story: thehackernews.com/2026/10/ch…

🚨 8,226 DDoS attacks every hour. Cloudflare blocked 18.2 million network-layer DDoS attacks in Q3 2026, up 38% from Q2. Short-burst attacks surged 208%, while DNS amplification jumped 215%. Who's being targeted ↓ thehackernews.com/2026/10/cl…

🚨 OpenAI fixed a ChatGPT flaw that allowed malicious shared links to execute attacker code in users' logged-in sessions and steal private chat content. Researchers demonstrated the attack. Here's how → thehackernews.com/2026/10/a-…

‼️ New TeamViewer vulnerability (CVE-2026-111585) flips the script... the machine you connect to can attack YOUR computer. No click needed beyond accepting the session. Researcher got code running on a stock Windows viewer — default settings, defenses on. Here's how the attack works ↓ thehackernews.com/2026/10/te…

‼️ Anthropic's official Claude Code extension was distributed with an SSH backdoor via Cursor's marketplace. A trojanized update (v2.1.313) targeted up to 5,000 users, according to Cursor. How attackers pushed it under the legitimate extension's identity remains unclear. Read: thehackernews.com/2026/10/of…

‼️ Polymarket halted trading after users reported unauthorized sales and fund withdrawals. Researchers found code in a 3rd-party script designed to sell users' positions and move funds. Polymarket confirmed it. Details ↓ status.polymarket.com/cmvtus…

🚨 UPDATE: North Korea's TraderTraitor group is behind the $6.3 billion Binance hack, according to a high-confidence attribution by TRM Labs. The attackers reportedly prepared 50 signed authorizations before draining a Binance hot wallet. About $2.7 billion in assets has been frozen, but billions remain under attacker control. Full details ↓ thehackernews.com/2026/10/bi…

🚨 CISA adds two actively exploited Cisco and GitLab flaws to its KEV catalog. • GitLab: CVSS 10.0 RCE flaw targeted in an attempted attack on Alpine Linux • Cisco: Firewall flaw can trigger device reloads and DoS Federal agencies must patch by November 1. Details ↓ thehackernews.com/2026/10/ci…

⚡ AI-powered attacks are moving faster. Is your security team ready? More alerts ≠ better security. Join our expert webinar to learn how to: → Spot real attack paths → Cut through security noise → Detect and respond faster Build practical AI threat readiness. Register FREE ⬇ thehackernews.com/2026/08/le…

>> 40,000+ secrets exposed. >> 42 GitHub repos hijacked. >> AI bots hunting credentials. >> Token theft without extra permissions. >> 68GB of government data stolen. And that's just the start. This week's #ThreatsDay Bulletin covers 30 new cybersecurity stories worth your attention. Full roundup - thehackernews.com/2026/10/th…

‼️ ALERT - Hackers exploited a critical Cisco SD-WAN flaw (CVSS 10.0) to plant "KeyDrift" malware designed to steal encryption keys protecting traffic between sites. The malware also provides backdoor access, with infrastructure links to a network used by Volt Typhoon. Full details ↓ thehackernews.com/2026/10/ha…

‼️ Linux kernel TCP flaw rated 9.8 CVSS. Anthropic demonstrated an exploit that runs commands as root on servers using MPTCP. Ubuntu and RHEL still lack fixes, while Debian, Oracle and others have released patches for some versions. Details: thehackernews.com/2026/10/li…

🚨 Palo Alto Networks confirms active attacks exploiting PHP2Shell flaws in internet-exposed PAN-OS management interfaces. The flaws allow unauthenticated remote code execution. Multiple PAN-OS versions are affected, with some fixes still pending. Read ↓ thehackernews.com/2026/10/at…

🚨 Volt Typhoon used a covert network of hijacked devices in 4 confirmed zero-day exploitation campaigns. Dubbed "Silent Train," it concealed attacks on enterprise management systems and supported strategic access to U.S. networks. Read: thehackernews.com/2026/10/vo…

‼️ Tailscale finally issued patches for SSH flaws that could turn one hacked device into root access on other servers. The Tailworm research demonstrated rapid lateral movement across policy-permitted devices, without stolen passwords or user interaction. ⚠️ Headscale remains UNPATCHED. Read - thehackernews.com/2026/10/ta…