Security News

Live news from trusted publications, matched against DayBreach CVE data.

The Hacker News12 d ago

Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions. The arbitrary file access flaw, tracked as CVE-2026-21589 (CVSS score: 9.3) affects multiple products, including Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software

Related Companies

İlgili CVE'ler

CVE-2026-88772 CVE-2026-21589

Read at the source

The Hacker News12 d ago

What Is Agentic Pentesting? What It Proves, and Where It Stops.

If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch more than once: point it at a target, and it discovers, validates, and exploits attack paths autonomously, the way a real attacker would. That promise is worth taking seriously. It’s also worth pressure testing, and three questions do the heavy lifting. What can the assessment actually

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

The Hacker News13 d ago

Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws

Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models with reduced safeguards and blocking classifiers, as the company claimed its Project Glasswing initiative uncovered at least 129,000 verified software vulnerabilities between April and July 2026. The company said it also found an additional

Related Companies

İlgili CVE'ler

CVE-2026-88772 CVE-2026-61500 CVE-2026-26980

Read at the source

The Hacker News13 d ago

100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer

The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have been injected with malicious JavaScript to serve an information-stealing malware called LunexStealer (aka Psychedelic Stealer). The activity, which was observed by the agency in September 2026, has been attributed to a threat cluster dubbed UAC-0277. It did not disclose who the

Related Companies

cloudflare

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

The Hacker News13 d ago

Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes

Cybersecurity researchers have disclosed details of a "human-operated phishing platform" that impersonates advertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus. The products, which claim to offer campaign optimization, spend audits, and business-account connections, are designed with one goal in

Related Companies

anthropic

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

The Hacker News13 d ago

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly legitimate processes to blend in and evade detection. Threat actors are known to name their malicious software after a legitimate operating system component or a process as a defense evasion measure. By borrowing the name of a real binary, it may

Related Companies

İlgili CVE'ler

CVE-2026-88772 CVE-2023-2868 CVE-2023-7102

Read at the source

The Hacker News13 d ago

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researchers have shown. There is no warning first, of the kind either program shows before it runs a macro. The attack works only when the program's Java support is enabled. So far, it has only been shown as a proof of concept, and there are no reports of its use in

Related Companies

Citrix NetScaler

citrix

The Document Foundation

İlgili CVE'ler

The Hacker News13 d ago

Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies

The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on its platforms, including unsuccessful efforts to compromise Etherpad, a public note-taking tool, and edit Wikipedia pages. "The unauthorized bot activities included edits to our wikis, some unsuccessful attempts to exploit a public note-taking tool we host, and heavy traffic,

Related Companies

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

The Hacker News14 d ago

Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers

In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol delivered. Thousands of developers built servers, and enterprises plugged them into agent workflows. The ecosystem around it fell short. Earlier this year, our team at OX Security, traced critical vulnerabilities in Anthropic's MCP

Related Companies

pypi

03-lovepreetSingh

rubygems

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

The Hacker News14 d ago

Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports

Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in effect since October 1, means researchers can no longer submit security flaws in the code of projects such as Go, Angular, and Protocol Buffers there for a reward. Reports about supply chain compromises are still accepted, and reports filed before October 1 are

Related Companies

google

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

81-90 / 268 news items shown

Security News

Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

What Is Agentic Pentesting? What It Proves, and Where It Stops.

Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws

100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer

Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies

Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers

Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports

DayBreach

Glossary & Reference

Directories & Feeds

RSS & Integration