The Hacker News documents a new class of attack: malicious .git configurations that, when read by AI coding agents, execute attacking code. The tools meant to secure become vectors.
Sep 3, 2026 9 2
The pro-Russian group UAC-0099 has found an original workaround against automated analysis by LLM: embedding prompts about nuclear weapons in its malware. The AI tools trigger their filters and refuse to analyze it—a reversed jailbreak that turns AI safeguards against defenders.
Sep 2, 2026 14 3
Cyberattacks have targeted pacemakers and exfiltrated millions of patient records in August 2026. The healthcare sector joins water and energy on the list of critical infrastructures regularly targeted.
Sep 1, 2026 12 3
Aurora ransomware operators integrate Cursor AI into their attack chain to generate and adapt their payloads across 10 targets. A deliberate operational decision—not an accident.
Sep 1, 2026 15 3
GoCaracal, a new RAT malware, stores its command-and-control addresses in an Ethereum smart contract. Following the 7 fake Vite npm packages from August 2026, the blockchain C2 technique confirms its scaling across multiple malware families.
Aug 28, 2026 18 3
The FBI has just seized the QTFY infrastructure, an arsenal of offensive tools attributed to actors linked to Chinese intelligence, used to target networks of NASA, the Department of Energy, and the U.S. Senate. A major dismantling that reveals the extent of the attack surface of critical U.S. infrastructures.
Aug 27, 2026 5 2
The CISA releases the results of its SILENTSHIELD exercises: two U.S. critical infrastructure organizations tested, two successful compromises. One issued no alerts. Meanwhile, over 100 U.S. water systems were attacked in July 2026.
Aug 27, 2026 2 1
Attackers are actively exploiting vulnerabilities in on-premises SharePoint Server to gain Farm Administrator rights and steal IIS machine keys to maintain access even after applying a patch.
Aug 25, 2026 4 1
A critical RCE flaw in VMware vCenter Syslog Server is being exploited in an active campaign. Attackers are deploying reverse SSH to maintain persistent access to hypervisors. The string of virtualization vulnerabilities continues.
Aug 14, 2026 9 3
The Dutch NCSC warns: an active campaign is exploiting a macOS screen-sharing vulnerability to deploy a cryptocurrency miner. The exploit code is public—time to patch.
Aug 14, 2026 7 2
While the security community is preoccupied with AI agents as a new attack vector, traditional ransomware groups are quietly stepping up their operations. *The Register* documents the correlation.
Aug 13, 2026 2 1
A European Valve contractor suffered a cyberattack exposing data of Steam Machine and Steam Controller buyers. Valve is notifying customers directly—at the worst possible time for its big hardware comeback.
Aug 10, 2026 8 2
