Berita CVE & Ransomware Terbaru

Diambil otomatis tiap 6 jam dari The Hacker News dan BleepingComputer, tersimpan sampai 7 hari ke belakang. Terakhir diperbarui: Minggu, 8 Nov 2026.

Sabtu, 7 Nov 2026

The Hacker News

Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

 BleepingComputer

Hackers pull off $133 million French bank heist via service provider

 BleepingComputer

CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands

Jumat, 6 Nov 2026

The Hacker News

Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time

 BleepingComputer

Latest Crédit Mutuel Arkéa news

 The Hacker News

Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot

 The Hacker News

OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits

 The Hacker News

Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It

 The Hacker News

Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers

 The Hacker News

The Flood is Coming And The Pipes Were Already Full

 BleepingComputer

SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks

 BleepingComputer

Runaway AI hacking agent behind WorkOS breach after escaping sandbox

 The Hacker News

Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services

 BleepingComputer

OpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs

 The Hacker News

Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs

 BleepingComputer

Fake security tools on GitHub push backdoors and infostealers

 The Hacker News

Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login

 BleepingComputer

QNAP says hackers breaching NAS devices in Plex2Shell attacks

 BleepingComputer

Veeam warns of Software Appliance boot failures on AMD EPYC hosts

 BleepingComputer

IMSI vs IMEI: What Your Phone Broadcasts and Who Can Read It

 BleepingComputer

D-Link warns of multiple zero-days in DGS-3130 Series switches

 BleepingComputer

MetaMask says recent attack didn't affect wallet infrastructure

Kamis, 5 Nov 2026

The Hacker News

OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux

 The Hacker News

Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction

 The Hacker News

ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories

 The Hacker News

Is Your Exposure Management Platform Leaving You Exposed? Five Tests to Find Out

 The Hacker News

OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run

 BleepingComputer

FBI, CISA warn of cyberattacks targeting refrigeration systems

 The Hacker News

5 Active Cyber Threats That Put US Enterprises at Risk in October 2026

 The Hacker News

Apple to Start Scanning Publicly Shared iCloud Photos and Files for Harmful Content

 The Hacker News

CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access

 BleepingComputer

Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts

 BleepingComputer

Nearly 1.5 million exposed secrets targeted in new revocation program

 The Hacker News

Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution

 BleepingComputer

OpenAI’s GPT-6 Astra silently obstructed safety research tasks

 The Hacker News

Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says

 BleepingComputer

OpenSSH flaw lets attackers log into password-disabled Linux accounts

 BleepingComputer

Hackers backdoor Linux servers using trojanized CWP web server

 BleepingComputer

DigiCert data breach exposes customer information, identity documents

 BleepingComputer

Latest Identity Documents news

 BleepingComputer

GhostMap Android flaw lets malicious app trigger persistent boot loop

 The Hacker News

Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root

 The Hacker News

SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records

Rabu, 4 Nov 2026

The Hacker News

Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit

 The Hacker News

APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

 The Hacker News

Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads

 The Hacker News

Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory

 The Hacker News

Radio With No Radar: Why Agent Runtime Security Fails Without the Layers Beneath It

 The Hacker News

China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor

 BleepingComputer

Vercel rolls out new protection against stolen session cookie attacks

 The Hacker News

Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure

 BleepingComputer

Zyxel fixes zero-day exploited to hack nearly 1,000 network switches

 The Hacker News

Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction

 BleepingComputer

DreamHost confirms data breach exposed FTP logins and webmail sessions

 The Hacker News

CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades

 BleepingComputer

Cyberattack disrupts blood storage refrigeration systems in France

 BleepingComputer

Latest Blood Bank news

 BleepingComputer

NIKKE PC game launcher hacked to spread remote access, data-stealing malware

 BleepingComputer

mSecure password manager hack prompts password reset warnings

 BleepingComputer

Google Calendar phishing campaign hijacks sessions, bypasses MFA

 BleepingComputer

Latest Operation CloudFire news

 BleepingComputer

SonicWall warns of unpatched flaws in end-of-life GMS software

 BleepingComputer

US charges two Canadians accused of hacking US universities

 BleepingComputer

CISA flags WordPress RCE flaw as actively exploited in attacks

 BleepingComputer

Hackers use n-day exploits in zero-click attacks on iOS, Android devices

 The Hacker News

mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity

 The Hacker News

Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes

Selasa, 3 Nov 2026

The Hacker News

Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft

 BleepingComputer

Latest Encrypted Backup news

 The Hacker News

Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access

 The Hacker News

Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges

 The Hacker News

cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes

 The Hacker News

Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing

 The Hacker News

The 4 Elements of Exposure Prioritization and How to Operationalize Them

 The Hacker News

Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware

 BleepingComputer

Hackers hijack cPGuard autoupdate to deploy backdoor, steal data

 The Hacker News

Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets

 The Hacker News

Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw

 The Hacker News

New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull Food

 BleepingComputer

Binance says fake job interview led to $6.3 billion crypto heist

 BleepingComputer

Google: LLMjacking attacks rack up $1 million in cloud AI charges

 The Hacker News

Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors

 The Hacker News

Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials

 BleepingComputer

Gartner Predicts SOCs Will Have 50% More Engineers Than Analysts by 2028

Senin, 2 Nov 2026

The Hacker News

⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More

 The Hacker News

Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access

 The Hacker News

DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment

 The Hacker News

Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

 The Hacker News

Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy

 The Hacker News

Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data

 The Hacker News

Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts

 BleepingComputer

Chinese hackers use ARTEX AI in automated attacks against 200 orgs

 BleepingComputer

Fintech platform Sageworks taken offline after suspected cyberattack

 The Hacker News

New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value

 BleepingComputer

Google disrupts million-device XCPE Android malware botnet, bans TV box maker

 BleepingComputer

BTCPay Server warns of hot wallet crypto thefts on outdated instances

 BleepingComputer

Your Mobile Carrier Stores Your Call Logs for Years

 BleepingComputer

Hackers disrupt refrigeration systems at European supermarkets

 BleepingComputer

Microsoft fixes Smart App Control broken by October Windows update

 BleepingComputer

Over 1,000 GitLab servers vulnerable to ongoing RCE attacks

 BleepingComputer

Synology warns of C3RB3R ransomware attacks targeting NAS devices

 BleepingComputer

Ivanti patches two more Connect Secure zero-days chained in attacks

Minggu, 1 Nov 2026

The Hacker News

CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

 The Hacker News

Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script

 The Hacker News

FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist

 The Hacker News

NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection

 BleepingComputer

FBI links $6.3 billion Binance crypto heist to North Korean hackers

 BleepingComputer

Alpine Linux rebuilds GitLab after attempted RCE attack

 BleepingComputer

Latest Alpine Linux news

 BleepingComputer

OpenAI says it's doubling Pro usage limits and bringing Work features to Chat