https://www.hackerposts.org/en/blog/arch-aur-typosquat-yay-paru-root-malware Hacker Posts en 2026-10-15T00:00:00.000Z Fake Arch AUR packages impersonate yay and paru, run as root https://www.hackerposts.org/en/blog/candiru-adfection-al-jazeera-zero-click-ads Hacker Posts en 2026-10-15T00:00:00.000Z Candiru spyware reached Al Jazeera through zero-click ads https://www.hackerposts.org/en/blog/centerpoint-energy-breach-1m-texans Hacker Posts en 2026-10-15T00:00:00.000Z CenterPoint Energy breach hits 1M+ Texans, utility confirms https://www.hackerposts.org/en/blog/drupal-cve-2026-108097-field-ui-rce Hacker Posts en 2026-10-15T00:00:00.000Z Drupal patches critical Field UI RCE reachable via modules https://www.hackerposts.org/en/blog/langflow-cve-2026-105740-mcp-stdio-rce Hacker Posts en 2026-10-15T00:00:00.000Z Langflow MCP stdio RCE exploited in the wild, fix in 1.9.0 https://www.hackerposts.org/en/blog/nextjs-cve-2026-96889-use-cache-svg-rce Hacker Posts en 2026-10-15T00:00:00.000Z Next.js ships out-of-band fix for two critical RCE flaws https://www.hackerposts.org/en/blog/nginx-cve-2026-97629-tls-session-five-flaws Hacker Posts en 2026-10-15T00:00:00.000Z NGINX fixes five flaws, including a TLS client-cert bypass https://www.hackerposts.org/en/blog/olvx-marketplace-north-macedonia-charged Hacker Posts en 2026-10-15T00:00:00.000Z OLVX marketplace admin charged in North Macedonia https://www.hackerposts.org/en/blog/palo-alto-pan-os-cve-2026-0322-management-rce Hacker Posts en 2026-10-15T00:00:00.000Z Palo Alto patches exploited PAN-OS RCE CVE-2026-0322 https://www.hackerposts.org/en/blog/uat-6275-winrar-cve-2025-8088-cis-government Hacker Posts en 2026-10-15T00:00:00.000Z UAT-6275 weaponizes WinRAR CVE-2025-8088 against CIS governments https://www.hackerposts.org/fr/blog/candiru-adfection-al-jazeera-zero-click-ads Hacker Posts fr 2026-10-15T00:00:00.000Z Candiru : un espiogiciel zéro-clic livré par la publicité ciblée https://www.hackerposts.org/fr/blog/microsoft-dcu-storm-2990-phishing-takedown Hacker Posts fr 2026-10-15T00:00:00.000Z Microsoft et Proofpoint perturbent un écosystème de phishing chinois https://www.hackerposts.org/fr/blog/palo-alto-pan-os-cve-2026-0322-management-rce Hacker Posts fr 2026-10-15T00:00:00.000Z Palo Alto : RCE PAN-OS CVE-2026-0322 activement exploitée https://www.hackerposts.org/en/blog/cisco-secure-email-gateway-cve-2026-76519-root-rce Hacker Posts en 2026-10-14T00:00:00.000Z Cisco patches exploited Secure Email Gateway root RCE https://www.hackerposts.org/en/blog/curl-cve-2026-92392-http2-use-after-free Hacker Posts en 2026-10-14T00:00:00.000Z curl patches HTTP/2 use-after-free that a PoC turned into RCE https://www.hackerposts.org/en/blog/doj-north-korea-it-worker-laptop-farms-14-charged Hacker Posts en 2026-10-14T00:00:00.000Z DOJ charges 14 over North Korean IT-worker laptop farms https://www.hackerposts.org/en/blog/ftc-digital-forensics-corp-belkin-sextortion-fraud Hacker Posts en 2026-10-14T00:00:00.000Z FTC sues Digital Forensics Corp over $60M sextortion-help fraud https://www.hackerposts.org/en/blog/ghostscript-cve-2026-39919-jpeg2000-pdf-rce Hacker Posts en 2026-10-14T00:00:00.000Z Ghostscript RCE via crafted PDF patched (CVE-2026-39919) https://www.hackerposts.org/en/blog/hirudo-android-banking-trojan-app-replacement Hacker Posts en 2026-10-14T00:00:00.000Z Hirudo Android trojan swaps real banking apps for patched copies https://www.hackerposts.org/en/blog/linux-vhost-cve-2026-74580-vm-escape Hacker Posts en 2026-10-14T00:00:00.000Z Linux vhost bug CVE-2026-74580 gives local root and a VM escape https://www.hackerposts.org/en/blog/microsoft-dcu-storm-2990-phishing-takedown Hacker Posts en 2026-10-14T00:00:00.000Z Microsoft, Health-ISAC seize domains behind 1B phishing messages https://www.hackerposts.org/en/blog/nextcloud-collabora-code-cve-2026-110447-rce Hacker Posts en 2026-10-14T00:00:00.000Z Nextcloud Collabora CODE RCE CVE-2026-110447 exploited https://www.hackerposts.org/en/blog/openai-insider-recording-device-alfozan-arrest Hacker Posts en 2026-10-14T00:00:00.000Z OpenAI engineer arrested over hidden office recording device https://www.hackerposts.org/fr/blog/danfoss-ak-sm-refrigeration-cert-fr-ale-012 Hacker Posts fr 2026-10-14T00:00:00.000Z Le CERT-FR alerte sur des attaques contre les contrôleurs frigorifiques https://www.hackerposts.org/fr/blog/ivanti-connect-secure-certfr-avi-1311-exploitation Hacker Posts fr 2026-10-14T00:00:00.000Z Ivanti Connect Secure : la CVE-2026-104935 activement exploitée https://www.hackerposts.org/fr/blog/patch-tuesday-octobre-2026-1411-failles Hacker Posts fr 2026-10-14T00:00:00.000Z Patch Tuesday : Microsoft corrige 1 411 failles, une déjà exploitée