WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords
Cybersecurity researchers have flagged two new malware families called WordlistLoader and SynkLoader that's used to deliver next-stage payloads and likely sell access to ransomware groups.
According to findings from...
ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit, and More
Ravie LakshmananAug 20, 2026Hacking News / Cybersecurity News
A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do.
Signed drivers get turned against...
ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More
Ravie LakshmananAug 20, 2026Hacking News / Cybersecurity News
A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do.
Signed drivers get turned against...
Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data
A JavaServer Pages (JSP) web shell deployed following the exploitation of a critical security flaw in PTC Windchill and FlexPLM servers is specifically designed for the enterprise Product Lifecycle...
Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation
Ravie LakshmananAug 19, 2026Vulnerability / Ransomware
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, stating they are...
StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data
Cybersecurity researchers have flagged a global cybercrime operation that abuses thousands of hacked WordPress websites as infrastructure to disseminate malware, commandeer infected hosts, store stolen documents, screenshots, and activity...
Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000
A ransomware affiliate calling itself Ransom Busters has been spotted proactively sending emails to victim organizations and claims to delete stolen data from ransomware groups' servers in exchange for...
Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware
Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus advanced persistent threat (APT).
The attacks involve the exploitation of...
Trump Memo Paves Way for U.S. Firms to Hack and Disrupt Foreign Crime Groups
Ravie LakshmananAug 14, 2026Cybercrime / Offensive Operation
A new White House memo signed by U.S. President Donald Trump has instructed the National Coordination Center (NCC) to establish a program that...
ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories
Ravie LakshmananAug 13, 2026Hacking News / Cybersecurity News
Some weeks have one big security story. Others bring many smaller updates that are easy to miss but still matter. This week...
