Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software
by info@thehackernews.com (The Hacker News) on October 20, 2026 at 5:09 pm
The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20. An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could issue a certificate for any website that a browser would accept. A researcher reported the
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
by info@thehackernews.com (The Hacker News) on October 20, 2026 at 3:38 pm
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially
Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
by info@thehackernews.com (The Hacker News) on October 20, 2026 at 3:32 pm
Palo Alto Networks has disclosed that it's continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw that could be exploited by bad actors to set up unauthorized VPN connections. It was patched by Palo Alto Networks in May 2026 and was
Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites
by info@thehackernews.com (The Hacker News) on October 20, 2026 at 2:07 pm
A Chinese-speaking criminal pointed autonomous AI agents at company websites and let them break in with almost no help, and a security researcher watched it happen because the operators left their control panels open on the internet. The agents tried more than 1,200 sites and reached websites belonging to more than 100 companies, including farm-equipment maker Deere, appliance company
Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election
by info@thehackernews.com (The Hacker News) on October 20, 2026 at 12:59 pm
The iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia's student protest movement, was infected with NSO Group's Pegasus spyware in 2026, the Citizen Lab said on October 19. The finding came six days before Serbia's October 25 snap parliamentary election. The infection used a zero-click exploit, meaning Đokić did not have to tap a link or