Windows SignDrop 0-Day, ESXi Wiper Attacks, SMS 2FA Interception, Red Hat CVSS 9.9 Flaws, and More

THN Daily Updates Learn How to Secure GitHub Actions Beyond SHA Pinning Discover the hidden limits of GitHub Actions SHA pinning and how provenance, dependency locking, and curated actions can strengthen software supply chain security. Download Now Sponsored LATEST NEWS Nov 13, 2026 When an AI Agent Goes Wrong, Can You Stop It? Suppose an AI agent is asked to sort support tickets and look up account details. A ticket contains instructions that lead the agent to export records to an unfamiliar destination. The agent can make the request because... Read More SilentAir Hijacks Asian Telecom Networks to Intercept SMS 2FA Codes and Spy on Taiwanese Users A newly identified spying group used hacked equipment inside Asian mobile operators to intercept the calls and texts of selected people, mostly in Taiwan. Enea, a telecom and cybersecurity software company based in Sto... Read More Continuous Compliance Isn't a Vendor Promise. Regulators Now Expect It. FedRAMP 20x makes continuous assurance the baseline. See how CCM and AI get your program there. Read More Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities and then a previously unreported local privilege escalation flaw in ... Read More Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them Security teams have more alerts, logs, and monitoring tools than ever. Yet when an attack happens, one simple question can still take too long to answer: Who or what is behind this activity, and what can they access? A... Read More ThreatsDay: 59 Linux Kernel Bugs, Falcon Spyware, GSocket Backdoors + 17 More Stories A search result isn't always safe. An access request isn't always harmless. And a familiar account doesn't always mean a familiar person is using it. Simple things to remember. Yet a surprising amount of this week's tro... Read More New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver. The proof of concept, called SignDrop, targets a log-authentication... Read More Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository. Quay enables anonymous access by default, and while it is enabled, t... Read More Learn How to Secure GitHub Actions Beyond SHA Pinning Discover the hidden limits of GitHub Actions SHA pinning and how provenance, dependency locking, and curated actions can strengthen software supply chain security. Download Now Sponsored This email was sent to sikubaycom.s3cr3tz@blogger.com. You are receiving this newsletter because you opted-in to receive relevant communications from THN. To manage your email newsletter preferences, please click here. Contact THN: info@thehackernews.com Unsubscribe THN | K.P BLock, Pitampura, Delhi