Breaking News – Cyber Threats (last 6h)
Generated: 2026-09-04 03:00 PDT
- Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws
The Hacker News • 2026-09-04 01:48 • thehackernews.com
Threat actors are exploiting two critical security flaws in WordPress plugins Super Forms and Elementor Pro, according to findings from Wordfence.The vulnerabilities in question are –
CVE-2026-14894 (CVSS score: 9.8) – A missing file type validation vulnerability in Super Forms – Drag & Drop Form Builder that allows unauthenticated attackers to upload files of any type, including
https://thehackernews.com/2026/09/over-440000-exploit-attempts-target.html - Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws
The Hacker News • 2026-09-04 00:35 • thehackernews.com
Plex is urging users to update their instances to the latest version following the release of an update that patches multiple security flaws.The fixes are available in Plex Media Server 1.43.3 and Plex Desktop 1.115.0. The streaming media service did not elaborate on what those issues are, but said CVE identifiers have been requested for them.
“We recommend all server owners and Desktop users
https://thehackernews.com/2026/09/plex-urges-immediate-updates-after.html - Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
The Hacker News • 2026-09-04 00:18 • thehackernews.com
Google on Thursday released security updates to patch 12 vulnerabilities, including one that has come under active exploitation in the wild.The high-severity vulnerability, tracked as CVE-2026-85046 (CVSS score: 8.8), has been described as a type confusion bug in V8, Chrome’s JavaScript and WebAssembly engine.
“Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote
https://thehackernews.com/2026/09/google-releases-chrome-update-to-patch.html - GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests
The Hacker News • 2026-09-03 23:47 • thehackernews.com
OpenAI on Thursday officially unveiled GPT‑6 Astra, which it described as the “world’s most intelligent and aligned model.”The development comes days after the artificial intelligence (AI) company said the model had reached the “Critical” cybersecurity capability threshold under its Preparedness Framework.
“Astra is state-of-the-art on computer use, browsing, software engineering,
https://thehackernews.com/2026/09/gpt-6-astra-scores-100-on-exploitbench.html
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
