NewsThe Hacker News2026-10-08 07:42 UTC

U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks

The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in the United States in connection with the 2021 Microsoft Exchange Server attacks known as HAFNIUM. The reward is for information leading to his identification or location, the news outlet NTD reported this week, citing a notice

Other advisories

CVE-2026-91921none
Eine Cross-Site-Scripting-Schwachstelle (XSS) aufgrund unzureichender Eingabe-Validierung im clientseitigen Rendering-Engine der 1millionbot AI Chat Platform.
CVE-2026-91921none
Cross-Site Scripting (XSS) vulnerability due to inadequate input sanitisation in the client-side rendering engine of the 1millionbot AI Chat Platform. An una…
CVE-2010-20115none
Der Vermillion FTP Daemon (vftpd) von Arcane Software in Versionen bis einschließlich 1.
CVE-2010-20115critical
Arcane Software’s Vermillion FTP Daemon (vftpd) versions up to and including 1.31 contains a memory corruption vulnerability triggered by a malformed FTP POR…
osv:MAL-2025-26803none
Malicious code in mp3-file-zip-d-ownload-2021-390205-the-million-things-that-never-happened-o4c7i-uqspup (npm)
osv:MAL-2025-18443none
Malicious code in dice-dream-millions-win (npm)
osv:MAL-2024-9357none
Malicious code in down-lo-ad-now-zip-mp3-93-million-miles-psw9n-wbuosp (npm)
CVE-2009-4867none
tony_million tuniac: Sicherheitsluecke

Other news entries

Newsbleepingcomputer2026-10-09
Man admits to running network of 15,000 money mules for cybercriminals
Newssecurityweek2026-10-09
Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own
Newscsoonline2026-10-08
Growing PQC at the edge belies deeper quantum-readiness challenges
Newsbleepingcomputer2026-10-08
Uranium crypto exchange hacker convicted for stealing $53 million
Newssecurityweek2026-10-08
US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward
Newssecurityweek2026-10-08
Rein Security Raises $25 Million to Guard AI Agents at Runtime
Newsbleepingcomputer2026-10-08
Owner of Empire cybercrime market gets 40 years in prison
Newssecurityweek2026-10-08
Oracle Health Data Breach Tally Climbs to Nearly 20 Million

Source: https://thehackernews.com/2026/10/us-offers-up-to-10-million-for-tips-on.html

More on Million