NewsThe Hacker News
Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point
More on Surfaces
Other advisories
- HighCVE-2026-85990Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation and plugin-management surfaces, Leantim…
- LowCVE-2026-81348The My Private Site WordPress plugin before 4.2.3 does not apply its site-privacy access control to certain unauthenticated front-end read surfaces, allowin…
- MediumCVE-2026-9078Firefox for iOS displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) incorrectly in link preview UI surfaces. A crafted …
- HighCVE-2026-40031MemProcFS before 5.17 contains multiple unsafe library-loading patterns that enable DLL and shared-library hijacking across six attack surfaces, including ba…
- HighCVE-2026-35444SDL_image is a library to load images of various formats as SDL surfaces. In do_layer_surface() in src/IMG_xcf.c, pixel index values from decoded XCF tile da…
- HighCVE-2026-32914OpenClaw: Command-authorized non-owners could reach owner-only `/config` and `/debug` surfaces
- MediumCVE-2026-31841Hyperterse is a tool-first MCP framework for building AI-ready backend surfaces from declarative config. Prior to v2.2.0, the search tool allows LLMs to sear…
- CriticalCVE-2024-4447In the System → Maintenance tool, the Logged Users tab surfaces sessionId data for all users via the Direct Web Remoting API (UserSessionAjax.getSessionList.…
Other news entries
- The 7 biggest issues CISOs and security teams face todayNewsCSO Online
- Virtual Event Today: Attack Surface Management SummitEventSecurityWeek
- How to secure hybrid meeting rooms without sacrificing user experienceNewsThe Register — Security
- 'Grandoreiro' Malware Resurfaces With Mexico CampaignNewsDark Reading
- Golden Chickens Resurfaces With Four New Malware Families and Modular ImplantsNewsThe Hacker News
- 'WP2Shell' Opens Millions of WordPress Sites to Remote TakeoverNewsDark Reading
- SOCs face a human challenge as AI speeds alerts and threatsNewsCSO Online
- Daxin Resurfaces in Taiwan Alongside Stupig Pre-Login SYSTEM BackdoorNewsThe Hacker News
Source: https://thehackernews.com/2026/09/attack-chains-not-just-attack-surfaces.html
ID