Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure Source: The Hacker News Threat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig. The vulnerability in question is CVE-2026-20896 (CVSS score: 9.8), a vulnerability that stems from the DevOps platform trusting the “X-WEBAUTH-USER” header f Read original
CISA: Microsoft SharePoint RCE flaw now actively exploited Source: BleepingComputer CISA warned on Wednesday that attackers have begun exploiting a high-severity Microsoft SharePoint remote code execution vulnerability patched in May. […] Read original
CISA: Microsoft SharePoint RCE flaw now actively exploited Source: BleepingComputer CISA warned on Wednesday that attackers have begun exploiting a high-severity Microsoft SharePoint remote code execution vulnerability patched in May. […] Read original
New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos Source: The Hacker News Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories on GitHub that claim to exploit hot new CVEs. Run one, and it quietly lifts your saved passwords, Read original
New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos Source: The Hacker News Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories on GitHub that claim to exploit hot new CVEs. Run one, and it quietly lifts your saved passwords, Read original
New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos Source: The Hacker News Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories on GitHub that claim to exploit hot new CVEs. Run one, and it quietly lifts your saved passwords, Read original
New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos Source: The Hacker News Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories on GitHub that claim to exploit hot new CVEs. Run one, and it quietly lifts your saved passwords, Read original
New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos Source: The Hacker News Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories on GitHub that claim to exploit hot new CVEs. Run one, and it quietly lifts your saved passwords, Read original
New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos Source: The Hacker News Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories on GitHub that claim to exploit hot new CVEs. Run one, and it quietly lifts your saved passwords, Read original
New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos Source: The Hacker News Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories on GitHub that claim to exploit hot new CVEs. Run one, and it quietly lifts your saved passwords, Read original