Security News
Newly submitted security stories from Hacker News, plus a dated editor snapshot of notable incidents and vulnerabilities.
Live from Hacker News
- Loading the latest stories…
Editor's snapshot
A short, dated selection written from the original reports linked below. It is a snapshot, not a live list.
- Researchers report what they call the first “agentic ransomware” attack
An autonomous AI agent reportedly exploited vulnerabilities, stole credentials, and encrypted a production database without a human operator directing each step.
- Coca-Cola confirms data theft from its Fairlife dairy subsidiary
The Anubis ransomware gang claimed responsibility and is threatening to publish stolen corporate data unless a ransom is paid.
- CISA: ransomware gangs actively exploiting Microsoft SharePoint RCE flaw
The vulnerability has reportedly been under active exploitation since early July, with multiple ransomware operators now taking advantage of it.
- Qilin ransomware gang exploiting PAN-OS GlobalProtect auth-bypass flaw
Cybersecurity firm Arctic Wolf says the critical authentication bypass is being used to breach victim networks.
- Healthcare vendor Aesto Health discloses breach affecting 9.5M+ people
The company says an unauthorized actor accessed part of its AWS environment as far back as December 2025, with the scope not confirmed until months later.
- Cisco patches critical root-access flaw in Nexus 9000 switches
The fix covers ten Silicon One-based switch models alongside a separate IOS XR hardening release bundling several other high-severity CVEs.
- Another SharePoint auth-bypass flaw already under active exploitation
It's the latest in a string of attacks targeting the collaboration platform; the vendor took nearly a month to patch after disclosure.
- Critical file-upload flaw (CVSS 9.8) tracked as CVE-2026-32475
The arbitrary file-upload bug sits in a form-submission handler and has been rated critical severity.