Endigest

About
Privacy
Terms
Contact
RSS

The Hacker News Articles | Endigest

The Hacker News Articles

The Hacker News

31 min read

Security•2026-05-14

Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Access

Cisco released updates for CVE-2026-20182, a critical authentication bypass vulnerability (CVSS 10.0) in Catalyst SD-WAN Controller that is actively being exploited.

The Hacker News

11 min read

Security•2026-05-14

Stealer Backdoor Found in 3 Node-IPC Versions Targeting Developer Secrets

This article describes malicious backdoor malware found in three npm package node-ipc versions (9.1.6, 9.2.3, 12.0.1).

The Hacker News

21 min read

Security•2026-05-14

ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories

This week's cybersecurity bulletin covers multiple critical vulnerabilities and active attack campaigns threatening organizations.

The Hacker News

21 min read

Security•2026-05-14

Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike

Ghostwriter and threat groups conduct coordinated cyber operations across Eastern Europe targeting governments and military organizations.

The Hacker News

11 min read

Security•2026-05-14

PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure

Threat actors are actively exploiting a critical authentication bypass vulnerability in PraisonAI within hours of disclosure.

The Hacker News

11 min read

Security•2026-05-14

How AI Hallucinations Are Creating Real Security Risks

AI hallucinations are generating confident but inaccurate outputs that pose serious security risks in cybersecurity operations.

The Hacker News

11 min read

Security•2026-05-14

Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation

A cybersecurity researcher disclosed two new Windows zero-days: YellowKey (BitLocker bypass) and GreenPlasma (CTFMON privilege escalation).

The Hacker News

11 min read

Security•2026-05-14

New Fragnesia Linux Kernel LPE Grants Root Access via Page Cache Corruption

A new Linux kernel vulnerability called Fragnesia (CVE-2026-46300) allows unprivileged local attackers to gain root access through page cache corruption.

The Hacker News

11 min read

Security•2026-05-14

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

A critical 18-year-old heap buffer overflow in NGINX's rewrite module (CVE-2026-42945) enables unauthenticated remote code execution.

The Hacker News

11 min read

AI•2026-05-13

Microsoft's MDASH AI System Finds 16 Windows Flaws Fixed in Patch Tuesday

MDASH is a multi-model AI agentic system designed to autonomously discover, validate, and prove exploitable vulnerabilities in complex codebases like Windows.

The Hacker News

01 min read

Security•2026-05-13

Azerbaijani Energy Firm Hit by Repeated Microsoft Exchange Exploitation

A China-affiliated hacking group conducted a sustained multi-wave cyberattack against an Azerbaijani oil and gas company from December 2025 to February 2026, repeatedly exploiting the same Microsoft Exchange vulnerability.

The Hacker News

01 min read

Security•2026-05-13

[Webinar] Why Your AppSec Tools Miss the "Lethal Path" (and How to Fix It)

This webinar addresses how AppSec tools fail to detect sophisticated "Lethal Chain" attacks that connect multiple small vulnerabilities into direct paths to sensitive data.