WebLogic Exploit Alert, WordPress SSO Under Attack, npm Powers ClickFix, FTP Banners Go Rogue

THN Daily Updates Summer Giveaway: Winxvideo AI V3.2 Lifetime License ($69.95 Value) FREE for a Limited Time Looking for an easier way to enhance, convert, compress, and edit your videos and images? Winxvideo AI is an AI-powered media toolkit designed to help creators, professionals, and content teams improve media quality and streamline their workflows. Download Now Sponsored LATEST NEWS Aug 25, 2026 Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows Thousands of companies have been affected by the Mirage2FA campaign from 2024 to 2026. The commercial phishing-as-a-service toolkit targets Microsoft 365 accounts by abusing legitimate login flows and bypassing two-fact... Read More 24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages Cybersecurity researchers have disclosed details of a new campaign that uses a cluster of 24 npm packages as free phishing infrastructure for redirecting to ClickFix-style fake CAPTCHA pages. "While the malware is simp... Read More Enterprises Log 58% of Attacks but Alert on Only 14%, New Research Finds 338M attack simulation reveals that only 1 in 7 attacks produces an alert. Get the Blue Report 2026 and see where detection breaks down. Read More E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands Cybersecurity researchers are calling attention to a new campaign that employs FTP banners as dead drop resolvers (DDRs) to deliver two previously unreported remote access trojans (RATs) tracked as E4del and PINHOLE. W... Read More Frontier AI: Vulnerability Management's Systemic Revolution Vulnerability management has been a staple of security programs since the dawn of the cybersecurity discipline. The symbiotic relationship between vulnerability and patch management teams has also existed for that time ... Read More Why AI Teams Need Verifiable Search Data Instead of Black-Box Signals Verifiable search data gives AI teams reproducible inputs for testing, incident review, drift monitoring, and model oversight. Read More Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access Bad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurify miniOrange SAML 2.0 Single Sign On plugin that make it possible for an attacker to sign in as any WordPress user, i... Read More Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) cata... Read More Summer Giveaway: Winxvideo AI V3.2 Lifetime License ($69.95 Value) FREE for a Limited Time Looking for an easier way to enhance, convert, compress, and edit your videos and images? Winxvideo AI is an AI-powered media toolkit designed to help creators, professionals, and content teams improve media quality and streamline their workflows. Download Now Sponsored This email was sent to sikubaycom.s3cr3tz@blogger.com. You are receiving this newsletter because you opted-in to receive relevant communications from THN. To manage your email newsletter preferences, please click here. Contact THN: info@thehackernews.com Unsubscribe THN | K.P BLock, Pitampura, Delhi