thehackernews.comLatest posts from the site’s own blog
Found via its RSS feed · checked 17 Oct 2026Feed ↗
Checking for new posts…
- 13 Oct 2026Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Anotherthehackernews.com blogA flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it…Read ↗
- 13 Oct 2026Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Farthehackernews.com blogAn attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes…Read ↗
- 13 Oct 2026SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theftthehackernews.com blogA flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant…Read ↗
- 13 Oct 2026GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijackingthehackernews.com blogGitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a…Read ↗
- 13 Oct 2026Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientationthehackernews.com blogThe Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft, €8.6 million ($9.62 million) for illegally relaying Grindr users' sensitive data to…Read ↗
- 13 Oct 2026[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controlsthehackernews.com blogThe dangerous part of a stolen identity isn't always the initial login. It's what an attacker can do with that access next. With AI accelerating reconnaissance, exploitation of vulnerabilities, and…Read ↗
- 13 Oct 2026LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Networkthehackernews.com blogThree vulnerabilities in LG's webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner. LG has issued a fix…Read ↗
- 13 Oct 2026Product Walkthrough: Bitdefender AI Visibility and Controlthehackernews.com blogA user opens a browser tab, pastes data into a chat assistant, and nothing is installed. A developer adds a coding assistant as an editor extension, and nothing shows up in the installed programs…Read ↗
- 13 Oct 2026Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllersthehackernews.com blogAttackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to throw food away, several retail chains said. The…Read ↗
- 13 Oct 2026Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Controlthehackernews.com blogTwo of 31 newly disclosed flaws in Progress Software's MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says.…Read ↗
Titles and short excerpts from the site's public feed; each post opens on thehackernews.com.