Berita CVE & Ransomware Terbaru

Diambil otomatis tiap 6 jam dari The Hacker News dan BleepingComputer, tersimpan sampai 7 hari ke belakang. Terakhir diperbarui: Kamis, 10 Sep 2026.

Rabu, 9 Sep 2026

The Hacker News

Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA

 The Hacker News

Webinar: Learn How to Answer “Are We Exposed?” Faster After a New CVE

 The Hacker News

DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval

 The Hacker News

Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets

 The Hacker News

U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok

 The Hacker News

Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

 The Hacker News

New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

 The Hacker News

F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans

 The Hacker News

Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed

 The Hacker News

SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution

 The Hacker News

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

 The Hacker News

N-able N-central Pre-Auth RCE Flaw Exploited in the Wild

 BleepingComputer

MFA's Weakest Link: Account Recovery Is the New Attack Path

 BleepingComputer

Over 36,000 exposed Plex servers vulnerable to recent flaws

 BleepingComputer

Man gets 15 years for extorting women with AI-generated porn videos

 BleepingComputer

New Microsoft Defender 'ShieldCrash' zero-day grants SYSTEM access

 BleepingComputer

Google warns of new Chrome zero-day bug exploited in attacks

Selasa, 8 Sep 2026

The Hacker News

Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution

 The Hacker News

Liquid Hackers Return 3,400 Bitcoin Taken via Elements Bug, Still Holding $47M in BTC

 The Hacker News

ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another Account

 BleepingComputer

Microsoft adds age-awareness APIs that can tell if users are children, teens, or adults

 The Hacker News

Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours

 The Hacker News

WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls

 The Hacker News

What It Took to Reach 1 Billion Build Manifests

 The Hacker News

FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials

 BleepingComputer

DoppelCart fraud network uses 119,000 fake shops to steal credit cards

 BleepingComputer

The EU CRA's Real Question: What Shipped, and When Did You Know?

 The Hacker News

Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell

 BleepingComputer

Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit

 The Hacker News

BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams

 BleepingComputer

Microsoft releases Windows 10 KB5122878 extended security update

 The Hacker News

Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing

 BleepingComputer

Windows 11 cumulative updates KB5124008 & KB5122880 released

 BleepingComputer

ShinyHunters hackers claim breach of Florida "DAVID" DMV database

 BleepingComputer

OpenAI says ChatGPT outage causes image generation errors

 BleepingComputer

SAP warns of maximum severity 'OVERPASS' kernel vulnerability

 BleepingComputer

OpenAI says GPT-6 Astra can find zero-days, but is also harder to monitor

 BleepingComputer

Adobe fixes critical Magento zero-day exploited to backdoor servers

 BleepingComputer

Webinar: The forgotten Google Workspace access that can lead to a breach

 BleepingComputer

Hackers build AI frameworks for widescale credential theft

 BleepingComputer

Microsoft: Windows Server 2025 changes causing app crashes

 BleepingComputer

220 million traveler records exposed in Vietnam-linked APIS leak

 The Hacker News

PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution

Senin, 7 Sep 2026

The Hacker News

Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks

 The Hacker News

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

 The Hacker News

Your Cloud Security Checklist Doesn't Work the Way You Think It Does

 The Hacker News

Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts

 The Hacker News

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released

 The Hacker News

N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw

 The Hacker News

JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

 BleepingComputer

Magento StyleSmuggler zero-day exploited to deploy Linux backdoor

 BleepingComputer

Trezor data breach impact now reaches 81,000 customers

 BleepingComputer

ChatGPT can now connect to your personal apps to mimic writing style

 BleepingComputer

Hackers exploit new MikroTik RouterOS flaws to hijack routers

 BleepingComputer

ConnectWise warns of new ScreenConnect flaw without patch

 BleepingComputer

N-able patches max severity N-central flaw amid ongoing attacks

Minggu, 6 Sep 2026

BleepingComputer

ChatGPT Astra is now rolling out to $20 Plus subscription

 The Hacker News

Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

 The Hacker News

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

 BleepingComputer

Attackers conceal phishing lures using invisible Unicode characters

 The Hacker News

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Sabtu, 5 Sep 2026

The Hacker News

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

 The Hacker News

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

 The Hacker News

Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted

 The Hacker News

Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel

 The Hacker News

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

 BleepingComputer

Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain

 BleepingComputer

OpenAI admits it didn't disclose rogue AI wiki hijacking incident

Jumat, 4 Sep 2026

The Hacker News

Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters

 The Hacker News

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

 The Hacker News

New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic

 The Hacker News

Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws

 The Hacker News

Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws

 The Hacker News

Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day

 The Hacker News

GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests

 BleepingComputer

IDScan sued over alleged data breach affecting 153 million drivers

 BleepingComputer

Critical Citrix NetScaler auth bypass now leveraged in attacks

 BleepingComputer

Microsoft says some users can’t open the Teams desktop client

 BleepingComputer

New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges

 BleepingComputer

Google warns of new Chrome zero-day flaw exploited in attacks

 The Hacker News

ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories

Kamis, 3 Sep 2026

The Hacker News

Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root

 The Hacker News

BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory

 The Hacker News

Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data

 The Hacker News

US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries

 BleepingComputer

French hospital fined €500,000 after breach exposes data of 727,000

 The Hacker News

Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks

 The Hacker News

Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means

 BleepingComputer

Coder's registry infrastructure compromised to push malicious modules

 The Hacker News

Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone

 BleepingComputer

HPE patches critical ArubaOS-CX remote code execution flaw

 The Hacker News

Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon

 The Hacker News

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

 BleepingComputer

Microsoft: KB5120998 mouse reset bug affects only non-English PCs

 BleepingComputer

Your Employee’s Password Appeared in an Infostealer Log. Now What?

 BleepingComputer

Microsoft says KB5120998 Windows update resets desktop settings

 BleepingComputer

Plex warns users to patch security vulnerabilities immediately

 BleepingComputer

Microsoft Teams, Outlook fail to launch on ARM-based Windows PCs

 The Hacker News

Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs