Cloudflare Flaw, OnePlus Root Exploit, Roundcube SQLi and $351M Crypto Hack

THN Daily Updates Cybersecurity Auditing: Principles, Practices, and Frameworks ($115.00 Value) FREE for a Limited Time Practical guide to cybersecurity controls, systems, programs, and management. Download Now Sponsored LATEST NEWS Sep 25, 2026 The SOC Doesn't Need to Start Over with Every Alert Security leaders keep debating whether AI will produce an entirely new class of cyberattack. The nearer change is quieter and already visible: AI has made a failed attack cheap to retry. The routine version looks like ... Read More Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise Cryptocurrency exchange Bitget said suspected North Korean threat actors have stolen $351.6 million from its hot and warm wallets. "At 18:31 UTC on September 24, 2026, Bitget's security systems identified unautho... Read More CIS Hardened Images®: cost-effective, compliance-ready VMs Pre-configured, security-hardened VMs that cut setup time, reduce risk, and keep audits on track. Read More Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild. The vulnerability in question is CVE-2026-48842 (CVSS score: 8.1), a pre-aut... Read More Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data A flaw in Cloudflare Containers let a paying customer read data that other customers' containers had left behind on the same server, Cloudflare and the researchers who found it said on Thursday. The data came from dis... Read More WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities (KEV) catalog, based ... Read More Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions A OnePlus 15 running the latest OxygenOS can be rooted by a malicious app the owner installs, one that asks for no special permissions. A researcher, Rasmus Moorats, chained two flaws in OnePlus's own software ... Read More ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories This week, the dangerous stuff keeps arriving dressed as something boring. An update. A login box. A search answer. A coding tool. A link you have clicked a hundred times before. That is the thread running through the... Read More Cybersecurity Auditing: Principles, Practices, and Frameworks ($115.00 Value) FREE for a Limited Time Practical guide to cybersecurity controls, systems, programs, and management. Download Now Sponsored This email was sent to sikubaycom.s3cr3tz@blogger.com. You are receiving this newsletter because you opted-in to receive relevant communications from THN. To manage your email newsletter preferences, please click here. Contact THN: info@thehackernews.com Unsubscribe THN | K.P BLock, Pitampura, Delhi