News The Hacker News ⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and MoreHow MCP Servers Can Expose Enterprise SecretsUnisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel AccessEvooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 ProxiesSuspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived RansomwareSAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After PatchApple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero MinerHackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and MalwareIAM Compliance Requirements and Best PracticesMustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for StealthChrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows BrowsersCTM360 Uncovers Over 3,000 Recruitment Phishing URLs Using Browser-in-the-Browser (BitB) Credential TrapsApple Warns Users in 110 Countries They May Be Targets of Mercenary SpywareTrump Memo Paves Way for U.S. Firms to Hack and Disrupt Foreign Crime GroupsChina-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto FraudUnpatched GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCEThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 13 More StoriesNew PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical InfrastructureAmnesiaStealer Hijacks Chromium Sessions to Give Attackers Live Browser Control on macOSWindRelay Android Malware Turns Victims' Phones Into NFC Relays for Payment Fraud Wired Security News New York City Lawmakers Push to ‘Ban the Scan’ at MSGCBP Workers Allegedly Used Government Databases to Spy on Exes, Crushes, and ColleaguesThis Coin-Sized Device Can Hack a Boeing 737‘The Worst I’ve Ever Seen’: Cargo Thefts Have Turned Violent in Pursuit of AI HardwareA Zoom Screen-Sharing Bug Let Anyone Take Over Other Devices on a CallFlock’s Plans for Rideshare Dashcams and Coaching Police, RevealedSensitive Info Goes Into ‘No Reply’ Emails Constantly. This Guy Sees It AllHackers Stalked Me by Hijacking a Smartwatch for KidsOpenAI Didn’t Notice Its AI Agents Using a Message Board to Plan Their Hacking SpreeA Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks WorldwideOpenAI’s Browser Could Be Hijacked to Spam Your WhatsApp ContactsDHS Wants Protesters’ Signal Group ChatsThe Most Dangerous AI Hacking Techniques Still Have Humans in the LoopDHS Is Hiring Bounty Hunters to Find and Photograph Deported People’s Homes AbroadMeta Ran Ads That Contained AI-Generated Child Sexual Abuse ImageryOK, Well, Rogue AI Agents Are Hacking AgainLandmark Deal Would Officially Add Laser Weapons to US Army ArsenalICE Collected Nearly 1 Million People’s DNA Last Year—Including Young Children7 States’ Water Systems Hit by Cyberattacks Likely Tied to IranNobody Knows if OpenAI’s and Anthropic’s AI Hacking Sprees Are Illegal Help Net Security News SafePal breach affects 39,798 customers, data allegedly for salePolice bust cybercrime ring accused of stealing €30 million in four-day spreeWindows 11’s strongest security defenses can be bypassed without a screwdriverHazmat: Open-source containment for AI agentsProduct showcase: ScamNet looks for warning signs in suspicious calls and shady linksWhen companies get specific about AI, revenue growth looks differentWeek in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-dayNew Android malware relays bank cards to fraudsters while victims still hold themOpenAI’s GPT-5.6 Sol runs up to 14× faster with Ultrafast modeAWS Certificate Manager sets 2027 end date for email-validated certificate renewalsUkrainian police raid 94 fraudulent call centers, seize $2 millionThe hardest part of agentic AI may be rebuilding the businessWeak IAM affects up to 98% of cloud environments17 draft Cyber Resilience Act standards are open for commentNew infosec products of the week: August 14, 2026White House authorizes private US companies to hack foreign criminal networksDataGrout helps enterprises control AI usage, governance and LLM costsA10 Networks introduces AI Gateway to secure and manage enterprise AIAttackers exploit critical SharePoint flaw after PoC goes public (CVE-2026-55040)Searchlight Cyber combines exposure and threat intelligence in new PTEM platform پلیس فتا RSS Error: WP HTTP Error: cURL error 60: SSL certificate problem: self signed certificate