Cyber Security News

CVE-2026-20253 is a CVSS 9.8 pre-auth flaw in Splunk Enterprise's PostgreSQL sidecar service. An unauthenticated attacker can write files and chain the primitive to RCE. A public PoC exists; no workaround, patch only. How CVE-2026-20253 Turns Splunk’s PostgreSQL Sidecar Into an Open Door on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses . from Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses https://ift.tt/GkfQ0ty

A reverse shell makes the target machine initiate the connection back to the attacker, bypassing firewalls that only filter inbound traffic. This guide walks through how attackers set one up, what they do after landing it, and how defenders can detect and stop it. Reverse Shell Explained: Setup, Attack Chain, and Detection on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses . from Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses https://ift.tt/C6cbAyV

A three-CVE chain lets any default LiteLLM user escalate to admin and get a shell on the gateway server. A separate RCE is already in CISA's KEV. Here's what to check and how to patch. LiteLLM Vulnerability Chain: What Security Teams Running AI Gateways Need to Do Now on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses . from Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses https://ift.tt/Z9R4oUV

Ransomware still encrypts files with a hybrid AES/RSA scheme, but the data theft and backup destruction that happen before encryption are where modern attacks do their real damage. How Ransomware Works: Encryption Is the Least of Your Problems on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses . from Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses https://ift.tt/Y8t1pSu

MIT's Fractal OS has found the first evidence of Apple M1 Phantom speculation and overturned prior research on the M1's conditional branch predictor, challenging the assumption that Apple Silicon is safer from speculative execution attacks. Apple Silicon Is Not a Safe Harbor From Spectre-Class Attacks on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses . from Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses https://ift.tt/bxKyQNR

An AUR supply chain attack compromised more than 400 Arch Linux packages from 11 June 2026, planting a Rust credential stealer and an eBPF rootkit that hides from standard inspection tools. Atomic Arch: 400+ AUR Packages Backdoored with eBPF Rootkit and Credential Stealer on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses . from Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses https://ift.tt/rGVzp0P