Search Results

Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

Matched "The Hacker News"Found in Source

SecuritySecurity Advisory

Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

Security researcher Chaotic Eclipse (aka Nightmare-Eclipse) has released a new proof-of-concept (PoC) exploit called LegacyHive. It has been described as a Windows User Profile Service arbitrary hive load elevation of privileges vulnerability. The Windows User Profile Service, also referred to as ProfSvc, is a core system component that manages user accounts and environments. "The PoC requires

The Hacker NewsJuly 15, 20261 min read

New Webinar: Closing the Approval Gap in AI-Era Ad Tech

Matched "The Hacker News"Found in Source

AINews

New Webinar: Closing the Approval Gap in AI-Era Ad Tech

A single approved marketing tag can quietly load fourth-party code your security team has never seen, granting full access to your forms, customer data, and checkout pages. This on-demand webinar reveals how this Approval Gap forms, and gives your team the blueprint to close it before an auditor, regulator, or attacker finds it first. The Reality of the Approval Gap It's a pattern every

The Hacker NewsJuly 15, 20261 min read

Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution

Matched "The Hacker News"Found in Source

SecuritySecurity Advisory

Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution

Open a repository in Cursor on Windows and, if a file named git.exe is sitting in the project root, Cursor runs it. No click, no approval dialog, no warning that anything in the folder is about to execute. Whatever that binary does, it does as you, with your source, your SSH keys and your cloud tokens. Cursor keeps re-running it for as long as the project stays open. No prompt

The Hacker NewsJuly 15, 20261 min read

Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

Matched "The Hacker News"Found in Source

SecuritySecurity Advisory

Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

Four compromised npm packages in the @asyncapi namespace have been observed distributing a multi-stage botnet loader, according to findings from OX Security, SafeDep, Socket, and StepSecurity. The affected packages are listed below - @asyncapi/generator-helpers@1.1.1 @asyncapi/generator-components@0.7.1 @asyncapi/generator@3.3.1 @asyncapi/specs(v6.11.2, v6.11.2-alpha.1) "The

The Hacker NewsJuly 15, 20261 min read

Nobody knows what a used GPU cluster is worth

Matched "The Hacker News"Found in Description

TechnologyNews

Nobody knows what a used GPU cluster is worth

206 points 186 comments on Hacker News · ciphertalk.substack.com

Hacker NewsJuly 15, 20261 min read

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

Matched "The Hacker News"Found in Source

SecuritySecurity Advisory

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

SonicWall has warned of active exploitation of two zero-day vulnerabilities impacting Secure Mobile Access (SMA) 1000 series appliances, one of which could be exploited to achieve arbitrary command execution. The vulnerabilities are listed below - CVE-2026-15409 (CVSS score: 10.0) - A Server-side request forgery (SSRF) vulnerability that a remote unauthenticated attacker could exploit to

The Hacker NewsJuly 15, 20261 min read

You only need the frontier model for one single edit

Matched "The Hacker News"Found in Description

TechnologyNews

You only need the frontier model for one single edit

56 points 10 comments on Hacker News · stencil.so

Hacker NewsJuly 15, 20261 min read

Is this the end of the once-mighty GoPro?

Matched "The Hacker News"Found in Description

TechnologyNews

Is this the end of the once-mighty GoPro?

112 points 158 comments on Hacker News · amateurphotographer.com

Hacker NewsJuly 15, 20261 min read

How to pack ternary numbers in 8-bit bytes

Matched "The Hacker News"Found in Description

TechnologyTutorial

How to pack ternary numbers in 8-bit bytes

27 points 12 comments on Hacker News · compilade.net

Hacker NewsJuly 14, 20261 min read

Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack

Matched "The Hacker News"Found in Source

SecuritySecurity Advisory

Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack

Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attackers are already exploiting. The release covers 622 of Microsoft's own CVEs by its Security Update Guide count, more than triple June's previous high of around 200. Those two live bugs are the ones to grab first. Microsoft credits incident responders for both. Both are

The Hacker NewsJuly 14, 20261 min read

SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data

Matched "The Hacker News"Found in Source

SecuritySecurity Advisory

SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data

SAP has rolled out updates to address multiple vulnerabilities as part of its July 2026 security updates, including a critical flaw in SAP NetWeaver Application Server ABAP. The vulnerability in question is CVE-2026-44747 (CVSS score: 9.9), an out-of-bounds write flaw that allows an authenticated attacker to leverage logical errors in memory management to cause a memory corruption that could

The Hacker NewsJuly 14, 20261 min read

Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads

Matched "The Hacker News"Found in Source

SecuritySecurity Advisory

Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads

Any other browser extension that can run a script on claude.ai can still trigger Claude for Chrome tasks aimed at your Gmail, your latest Google Doc and its comments, and your Calendar. Both this and ClaudeBleed need a rogue extension that can already run a script on claude.ai; the difference is scope. Anthropic restricted the arbitrary-prompt path in May as part of its response to the 

The Hacker NewsJuly 14, 20261 min read

Search Results

Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

New Webinar: Closing the Approval Gap in AI-Era Ad Tech

Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution

Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

Nobody knows what a used GPU cluster is worth

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

You only need the frontier model for one single edit

Is this the end of the once-mighty GoPro?

How to pack ternary numbers in 8-bit bytes

Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack

SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data

Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads

Top Discussion

Filters