GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severi... 2026-7-22 18:37:42 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com github security hackerone rewards

Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerab... 2026-7-22 18:7:16 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com snap confine attacker snapd qualys

Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data Vulnerability / Browser SecurityCybersecurity researchers have disclosed details of a now-patche... 2026-7-22 15:1:21 | 阅读: 1 | 收藏 | The Hacker News - thehackernews.com attacker rendered victim guardio security

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication Vulnerability / Web SecurityA high-severity security flaw impacting open-source developer platform... 2026-7-22 12:36:36 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com 2026 security windmill superadmin vulncheck

The Fastest Path to AI Adoption Runs Through Security Security leaders who build fast, visible paths to AI adoption are becoming the most valued partners... 2026-7-22 11:58:0 | 阅读: 5 | 收藏 | The Hacker News - thehackernews.com security governance approved workaround leaders

Why Modern SOCs Need Multi-Layered Detections The cycle is over. For years, cybersecurity followed a familiar pattern: defenses improved, attacke... 2026-7-22 11:25:35 | 阅读: 12 | 收藏 | The Hacker News - thehackernews.com network security ndr operational telemetry

Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA Law Enforcement / CybercrimeGerman and US law enforcement have taken down the core infrastructur... 2026-7-22 06:38:45 | 阅读: 13 | 收藏 | The Hacker News - thehackernews.com microsoft bka kratos phishing php

Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library Supply Chain Attack / MalwareCybersecurity researchers have discovered a NuGet typosquat that's un... 2026-7-22 06:0:6 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com digitain rigging crash newtonsoft nuget

Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents A single invisible comment in an Azure DevOps pull request can turn a reviewer's own AI coding agen... 2026-7-22 04:57:52 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com manifold attacker reviewer microsoft wiki

OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark AI Security / Cloud SecurityOpenAI on Tuesday said a combination of its artificial intelligence (A... 2026-7-22 04:18:33 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com openai hugging evaluation security software

Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs Vulnerability / Cloud SecurityApple has moved to address a security flaw in its Hide My Email serv... 2026-7-21 18:46:32 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com 2026 easyoptouts inbox murphy founder

AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code Hidden text on a web page was enough to make Kiro, AWS's agentic coding IDE, rewrite its own config... 2026-7-21 16:6:12 | 阅读: 8 | 收藏 | The Hacker News - thehackernews.com kiro developer intezer mcp approval

Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities Software Security / Artificial IntelligenceGoogle's DeepMind on Tuesday announced the release of G... 2026-7-21 15:9:28 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com gemini codemender deepmind defenders

Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC Vulnerability / Web SecurityA third SharePoint Server flaw patched by Microsoft as part of its Pat... 2026-7-21 14:57:51 | 阅读: 21 | 收藏 | The Hacker News - thehackernews.com 2026 50522 microsoft premises machine

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access Vulnerability / Network SecurityThreat actors have been observed exploiting a now-patched high-sev... 2026-7-21 14:4:57 | 阅读: 6 | 收藏 | The Hacker News - thehackernews.com ransomware attackers encryption victim

Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities Email Security / VulnerabilityZimbra has rolled out fixes to address multiple critical security is... 2026-7-21 13:18:31 | 阅读: 14 | 收藏 | The Hacker News - thehackernews.com security malicious zimbra exploited client

Open-Source Android AI Agents Could Let Invisible Screen Text Run Code on Host PCs An Android app that can draw over other windows and write to shared storage can slip instructions... 2026-7-21 11:58:0 | 阅读: 10 | 收藏 | The Hacker News - thehackernews.com autoglm appagent security broadcast agents

N-day is Becoming N-Hour. Patching Faster Won't Save You. Every patch is a confession.The moment a vendor ships a security fix, the diff between the old co... 2026-7-21 11:42:23 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com picus exposure attacker percent prove

New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and dow... 2026-7-21 11:24:50 | 阅读: 9 | 收藏 | The Hacker News - thehackernews.com grid khz gpus cloud modulation

WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning Vulnerability / Cyber AttacksAttackers have begun to exploit two critical vulnerabilities in WordP... 2026-7-21 08:59:30 | 阅读: 11 | 收藏 | The Hacker News - thehackernews.com wordpress remote 2026 security attackers