Hacking Desk
Hacking · Page 2
Stories 21–40 of 68, newest first. Back to the latest
Palo Alto PAN-OS root flaw CVE-2026-0322 under attack
Palo Alto says a management-interface bug that gives root on firewalls is seeing limited exploitation. CISA set a 17 October deadline.OFX breach exposed secret answers, customer email says
OFX says no client funds were touched in its September hack, but a customer email lists secret answers among the stolen details.ACSC adds NetScaler SAML bug to its critical alert
Australia's cyber agency has added CVE-2026-107406 to its NetScaler alert. Some builds that fixed the 3 October bug are still exposed.Japan breach wave: no JR leak found, Skyticket cards hit
JR East, JR Kyushu and JR Tokai now say no leak was confirmed after the IDC Frontier attack. Skyticket admits card details leaked for up to 6,140 people.Icon Cancer Centre breach hit a fax-to-email supplier
Icon Oncology says patient information was accessed on a supplier fax-to-email platform. A hacker claims more than 31,000 documents.FortiMail path traversal CVE-2026-104286 exploited
Fortinet and CISA say an unauthenticated FortiMail path traversal that can write arbitrary files is being exploited in the wild.Fortinet path traversal CVE-2025-61624 joins CISA KEV
CISA listed Fortinet's admin path traversal after Unit 42 showed attackers used it to plant the PEERSTITCH firewall implant.Microsoft patches Exchange flaw that reads other mail
An out-of-band Exchange Server update fixes CVE-2026-96940, which lets a logged-in attacker read other users' mailboxes.Big Echo karaoke data at risk after contractor hit
Daiichi Kosho says personal details on about 8.72 million Big Echo customers and staff may have leaked after malware hit a contractor PC.Cisco SD-WAN Manager auth bypass under attack
Cisco and CISA warn that CVE-2026-76504, an authentication bypass in Catalyst SD-WAN Manager, is being exploited in the wild.Cisco ESA AMP flaw CVE-2026-76519 under attack
Cisco says CVE-2026-76519, a new Secure Email Gateway flaw in its malware scanning feature, is under attack. CISA set a 17 October deadline.CenterPoint breach hits over 1 million Texans
Houston TV reports on a Texas AG filing say CenterPoint Energy's September breach exposed personal data on more than a million customers.Burger King Japan app leak hits 11.18 million
BK Japan's operator says about 11.18 million official-app membership records leaked after attackers got into the membership system.Atlassian file-read bug CVE-2026-21589 is under attack
CISA added Atlassian's CVE-2026-21589 to its KEV list after honeypots saw exploitation attempts within two hours of a public write-up.ASOS says employee login theft led to HACKED alerts
ASOS says a stolen employee login let attackers send "ASOS HACKED" app alerts on 6 October. Names and contact details were accessed, cards were not.BeyondTrust hack: how suspected China spies hid for a month
Suspected Chinese spies got into BeyondTrust's help desk software on 29 August and hid for a month. Here's how they did it, and what to do now.China suspected in Beyond Gravity cyberattack, SRF says
SRF says Swiss space firm Beyond Gravity and federal officials privately suspect China. Neither will confirm it, and data appears to have been taken.Meta admits its glasses recorded without 'Hey Meta'
Meta says a bug that saved Ray-Ban Meta conversations without a wake word is fixed. It won't say what caused it, or what happened to the audio.Ivanti Connect Secure zero-days chained, one still unpatched
CISA set a Friday deadline on CVE-2026-104935 after Volexity found a three-bug chain that gives unauthenticated root on Ivanti Connect Secure.CISA warns China-linked hackers are using automated tools
CISA and allies, including Australia, say hackers enabled by China's Integrity Tech are scanning, spraying Exchange logins and stealing data worldwide.


















