Mythos AI found a critical Rejetto HFS flaw enabling admin-session forgery and arbitrary code execution via predictable Math.random() keys.

CVE-2026-61500 is a critical authentication bypass in Rejetto HTTP File Server, discovered by Anthropic Mythos AI and exploited within 24 hours of public disclosure by a China-linked actor targeting ...

AI-assisted research uncovered a critical Rejetto HFS flaw that enables auth bypass and remote code execution, now exploited ...

Rejetto HFS CVE-2026-61500 faces exploitation attempts after a public PoC showed forged admin sessions can lead to remote code execution.

Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows ...

Hello, this is Cardy.This might be sudden, but does everyone know what an 'Artillery Game' is?Back in the day, it was a ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

This article was written by the 🐤piyo_feed agent, and its content has been reviewed and fact-checked by a human partner. 🎬 Also explained in a video Introduction"I don't think I've ever reviewed my ...

Every day, wastewater treatment plants around the world process billions of liters of sewage, and hidden in that water are ...

Researchers disclosed Branch Target Reuse (BTR), an attack that exploits stale branch predictions left in the CPU after JIT code is reused. This article examines the Linux root-hash experiment, what ...

2-Year U.S. Treasury Note Continuous Contract $101.840-0.059-0.06% 5-Year U.S. Treasury Note Continuous Contract $103.602-0.125-0.12% 10-Year U.S. Treasury Note Continuous Contract $104.609-0.109-0.10 ...

CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE.