The Hacker News

🚨 Two miniOrange SAML flaws can give attackers WordPress admin access. Attackers are probing the authentication bypasses, which let unauthenticated users sign in as any existing account, including administrators. Read the details - https://thehackernews.com/2026/08/attackers-target-miniorange-saml-flaws.html

More threat data can make OT security harder, not better. Jaron Stammler of OMICRON Electronics explains why critical infrastructure teams need threat intelligence tied to the equipment, protocols, and processes they actually run, not another stream of generic indicators. The real question: Does this threat affect this…

⚠️ E4del and PINHOLE RATs hide commands in FTP banners. The campaigns turn FTP server welcome messages into dead drop resolvers to fetch commands or C2 details. PINHOLE also uses Pinterest and SurveyMonkey for C2 resolution. See how the technique works - https://thehackernews.com/2026/08/e4del-and-pinhole-rats-turn-ftp…

🚨 24 npm packages are turning unpkg into phishing infrastructure. They serve fake Cloudflare CAPTCHA pages from trusted unpkg URLs and use attacker-controlled redirect logic. The packages target visitors, not developers installing them. See how it works - https://thehackernews.com/2026/08/24-npm-packages-abuse-unpkg-m…

Frontier AI is outpacing traditional vulnerability management. CVSS, EPSS, and KEV are no longer enough. Teams need exploitability, reachability, misconfigurations, and business impact, plus faster, more automated patching. See what needs to change - https://thehackernews.com/2026/08/frontier-ai-vulnerability-managemen…