This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. That's a lot to deal with in just a few days. And the week isn't even over yet.
But those big headlines are only half the story. Stolen passwords, exposed databases, broken login checks, and trusted tools being turned against their users are causing trouble too. Some attacks are clever. Others work because someone left a simple security gap open.
This ThreatsDay, we're digging into the stories that didn't make as much noise but still deserve attention. Some are strange, some are serious, and a few might surprise you. Here's everything else you shouldn't miss this week.
The threats change every week. Subscribe, and we’ll alert you when each new ThreatsDay Bulletin is out.
The week isn't over, and neither are the threats. New bugs, fresh attacks, and unexpected security incidents can show up at any time. What looks safe today might be the next big headline tomorrow. That's why keeping up with security news matters more than ever.
If you found this roundup useful, subscribe to The Hacker News, follow us on social media, and make THN part of your daily reading. We track the threats, explain what matters, and help you stay ahead of what's coming. Because in cybersecurity, the story you miss today could be the one that matters tomorrow.