NewsThe Hacker News25.09.2026

The SOC Doesn't Need to Start Over with Every Alert

Security leaders keep debating whether AI will produce an entirely new class of cyberattack. The nearer change is quieter and already visible: AI has made a failed attack cheap to retry. The routine version looks like this. An attacker lands on a low-privilege cloud account, and the first try at privilege escalation goes nowhere. That dead end used to cost hours of documentation reading,

Other advisories

Not ratedosv:CLEANSTART-2024-YN30556Incorrect placement of a preprocessor directive in source code results in logic that doesn't operate as intended when support for HVM guests is compiled out of Xen
Not ratedosv:CVE-2026-103502hex_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 25
MediumCVE-2026-103502hex_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 25
Not ratedosv:CLEANSTART-2026-FK73993Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage
Not ratedosv:CLEANSTART-2026-AS77854Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression)
MediumCVE-2026-5139Mattermost doesn't enforce administrator authorization on the {{setDefaultInstance}} call within the {{/gitlab connect}} command handler in github.com/mattermost/mattermost-server
LowCVE-2026-8074Mattermost doesn't enforce bot-specific permission checks on the user active status endpoint in github.com/mattermost/mattermost-server
MediumCVE-2026-9162Mattermost doesn't invalidate cached authentication state for active WebSocket connections during global session revocation in github.com/mattermost/mattermost-server

Other news entries

Source: https://thehackernews.com/2026/09/the-soc-doesnt-need-to-start-over-with.html

More on Doesn't

Other advisories

Other news entries