URGENT: Magento 0-Day, N-central RCE Hotfix, Telerik RCE Exploit, MikroTik Routers Hijacked and More

THN Daily Updates Mathematics in Cybersecurity ($123.95 Value) FREE for a Limited Time Balanced, in-depth exploration of mathematics in cybersecurity, supported by case studies and other learning features Download Now Sponsored LATEST NEWS Sep 7, 2026 Your Cloud Security Checklist Doesn't Work the Way You Think It Does If managing security across multiple cloud providers wasn't hard enough, each one fails in a different way. For the 2026 Cloud Security Index, Intruder analyzed misconfiguration data from 3,000 organizations across AW... Read More Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJAX into unauthenticated remote code execution — but only against applications in a specific non-default configuration, and Progre... Read More The MSP Cyber Resilience Playbook: Real-World Strategies That Deliver Results Learn how leading MSPs strengthen resilience, simplify backup, and drive recurring revenue. Read More N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw Every on-premises N-central build below 2026.3.1.14 — including servers updated to Hotfix 3 a day earlier — needs Hotfix 4. N-able's incident notice says the flaw has been exploited in the wild; its release notes say th... Read More JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, surveillance, and traffic-interception capabilities. "The payloads are protected with jav... Read More The Economics of Dwell Time and Why AI Native SIEM Changes the Equation AI-native SIEM can cut attacker dwell time by connecting signals, prioritizing alerts, and speeding investigations and containment. Read More Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication Attackers are exploiting MikroTik routers with their Secure Shell (SSH) remote-access service, which is reachable from the internet, to gain full administrative control without authentication, according to CERT Pol... Read More Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server without logging in, Dutch e-commerce security co... Read More Mathematics in Cybersecurity ($123.95 Value) FREE for a Limited Time Balanced, in-depth exploration of mathematics in cybersecurity, supported by case studies and other learning features Download Now Sponsored This email was sent to sikubaycom.s3cr3tz@blogger.com. You are receiving this newsletter because you opted-in to receive relevant communications from THN. To manage your email newsletter preferences, please click here. Contact THN: info@thehackernews.com Unsubscribe THN | K.P BLock, Pitampura, Delhi