16-Year-Old Linux KVM Flaw, Router Backdoors, BeyondTrust Auth Bypass Flaws, and More

THN Daily Updates Robot-Proof: When Machines Have all the Answers, Build Better People ($30.00 Value) FREE for a Limited Time A compelling story to expand the human’s perspective on the new, unprecedented world of AI. Download Now Sponsored LATEST NEWS Jul 7, 2026 What Changes When Your Software Supply Chain Includes AI Writing Your Code? Software supply chain security was hard enough. Then AI joined the build pipeline. For five years, "software supply chain security" meant one question: what's in your code? Which open-source packages, which versions, w... Read More CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware Several versions of firmware released by Chinese network device manufacturer Tenda have been found to embed an undocumented authentication backdoor that enables administrative access to the devices' web management inter... Read More Gartner Report: How to Implement Continuous Offensive Security Testing Get the Gartner research on the four-step journey from periodic pen tests to continuous validation. Read More BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA BeyondTrust has released updates to address two critical security flaws affecting Remote Support (RS) and Privileged Remote Access (PRA) products that, if successfully exploited, could allow unauthenticated attackers to... Read More Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations An Iranian hacking group affiliated with Iran's Ministry of Intelligence and Security (MOIS) has been wielding a previously undocumented modular command-and-control (C2) framework dubbed Cavern (aka Cav3rn) targeting I... Read More AI-Speed Attacks Are Forcing a Rethink of Incident Response AI-enabled attacks compress reconnaissance, phishing, malware changes, and containment timelines, turning response speed into a governance test. Read More 16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it. Dubbed 'Januscape' and tracked as CVE-2026-53359, the ... Read More ⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More A streaming box should not need a threat model. Neither should a username field, a demo repo, a reset flow, or a browser permission prompt. That is the irritating part this week: the risky pieces were ordinary. Home de... Read More Robot-Proof: When Machines Have all the Answers, Build Better People ($30.00 Value) FREE for a Limited Time A compelling story to expand the human’s perspective on the new, unprecedented world of AI. Download Now Sponsored This email was sent to sikubaycom.s3cr3tz@blogger.com. You are receiving this newsletter because you opted-in to receive relevant communications from THN. To manage your email newsletter preferences, please click here. Contact THN: info@thehackernews.com Unsubscribe THN | K.P BLock, Pitampura, Delhi