The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usTue, 06 Oct 2026 03:14:26 +0530hourly1Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxeshttps://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.htmlhttps://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.htmlMon, 05 Oct 2026 21:51:52 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrestshttps://thehackernews.com/2026/10/weekly-recap-netscaler-and-fortimail-0.htmlhttps://thehackernews.com/2026/10/weekly-recap-netscaler-and-fortimail-0.htmlMon, 05 Oct 2026 19:50:43 +0530info@thehackernews.com (The Hacker News)The Credential Layer Is Expanding Faster Than Security Teams Can See Ithttps://thehackernews.com/2026/10/the-credential-layer-is-expanding.htmlhttps://thehackernews.com/2026/10/the-credential-layer-is-expanding.htmlMon, 05 Oct 2026 17:25:00 +0530info@thehackernews.com (The Hacker News)Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2https://thehackernews.com/2026/10/realtek-jungle-sdk-exploit-attempts.htmlhttps://thehackernews.com/2026/10/realtek-jungle-sdk-exploit-attempts.htmlMon, 05 Oct 2026 17:16:25 +0530info@thehackernews.com (The Hacker News)Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Accesshttps://thehackernews.com/2026/10/apple-plans-tighter-macos-full-disk.htmlhttps://thehackernews.com/2026/10/apple-plans-tighter-macos-full-disk.htmlMon, 05 Oct 2026 16:08:50 +0530info@thehackernews.com (The Hacker News)Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCEhttps://thehackernews.com/2026/10/attackers-target-rejetto-hfs-flaw-that.htmlhttps://thehackernews.com/2026/10/attackers-target-rejetto-hfs-flaw-that.htmlMon, 05 Oct 2026 13:39:23 +0530info@thehackernews.com (The Hacker News)New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offlinehttps://thehackernews.com/2026/10/new-netscaler-zero-day-exploited-in.htmlhttps://thehackernews.com/2026/10/new-netscaler-zero-day-exploited-in.htmlMon, 05 Oct 2026 12:10:19 +0530info@thehackernews.com (The Hacker News)ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Membershttps://thehackernews.com/2026/10/shinyhunters-suspect-rey-reportedly.htmlhttps://thehackernews.com/2026/10/shinyhunters-suspect-rey-reportedly.htmlSun, 04 Oct 2026 12:52:05 +0530info@thehackernews.com (The Hacker News)China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishinghttps://thehackernews.com/2026/10/china-aligned-ta419-targets-us-ai.htmlhttps://thehackernews.com/2026/10/china-aligned-ta419-targets-us-ai.htmlSun, 04 Oct 2026 12:50:32 +0530info@thehackernews.com (The Hacker News)MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academicshttps://thehackernews.com/2026/10/mi5-says-chinas-mss-funded-research.htmlhttps://thehackernews.com/2026/10/mi5-says-chinas-mss-funded-research.htmlSat, 03 Oct 2026 20:08:46 +0530info@thehackernews.com (The Hacker News)Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomwarehttps://thehackernews.com/2026/10/warlock-exploits-sharepoint-flaws-to.htmlhttps://thehackernews.com/2026/10/warlock-exploits-sharepoint-flaws-to.htmlSat, 03 Oct 2026 20:06:33 +0530info@thehackernews.com (The Hacker News)The State of Cybersecurity in 2026: Key Segments, Insights, and Innovationshttps://thehackernews.com/2026/10/the-state-of-cybersecurity-in-2026key.htmlhttps://thehackernews.com/2026/10/the-state-of-cybersecurity-in-2026key.htmlSat, 03 Oct 2026 16:30:00 +0530info@thehackernews.com (The Hacker News)GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servershttps://thehackernews.com/2026/10/gitlab-patches-critical-self-hosted-ai.htmlhttps://thehackernews.com/2026/10/gitlab-patches-critical-self-hosted-ai.htmlFri, 02 Oct 2026 23:03:31 +0530info@thehackernews.com (The Hacker News)Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaignhttps://thehackernews.com/2026/10/antino-backdoor-uses-outlook-and.htmlhttps://thehackernews.com/2026/10/antino-backdoor-uses-outlook-and.htmlFri, 02 Oct 2026 23:03:16 +0530info@thehackernews.com (The Hacker News)Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodeshttps://thehackernews.com/2026/10/dell-csm-flaws-enable-unauthenticated.htmlhttps://thehackernews.com/2026/10/dell-csm-flaws-enable-unauthenticated.htmlFri, 02 Oct 2026 22:32:12 +0530info@thehackernews.com (The Hacker News)OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandlinghttps://thehackernews.com/2026/10/openai-parts-ways-with-three-safety.htmlhttps://thehackernews.com/2026/10/openai-parts-ways-with-three-safety.htmlFri, 02 Oct 2026 17:53:15 +0530info@thehackernews.com (The Hacker News)Why CISOs Struggle to Answer the Board's Three Hardest Questions, and How to Fix the Reporthttps://thehackernews.com/2026/10/why-cisos-struggle-to-answer-boards.htmlhttps://thehackernews.com/2026/10/why-cisos-struggle-to-answer-boards.htmlFri, 02 Oct 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Toolshttps://thehackernews.com/2026/10/android-17-advanced-protection-locks.htmlhttps://thehackernews.com/2026/10/android-17-advanced-protection-locks.htmlFri, 02 Oct 2026 13:31:30 +0530info@thehackernews.com (The Hacker News)Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writeshttps://thehackernews.com/2026/10/critical-fortimail-zero-day-flaw.htmlhttps://thehackernews.com/2026/10/critical-fortimail-zero-day-flaw.htmlFri, 02 Oct 2026 11:19:50 +0530info@thehackernews.com (The Hacker News)Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servershttps://thehackernews.com/2026/10/police-arrest-16-year-old-suspected-of.htmlhttps://thehackernews.com/2026/10/police-arrest-16-year-old-suspected-of.htmlThu, 01 Oct 2026 22:25:57 +0530info@thehackernews.com (The Hacker News)ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Storieshttps://thehackernews.com/2026/10/threatsday-ai-powered-zero-day-chain.htmlhttps://thehackernews.com/2026/10/threatsday-ai-powered-zero-day-chain.htmlThu, 01 Oct 2026 22:15:38 +0530info@thehackernews.com (The Hacker News)WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memoryhttps://thehackernews.com/2026/10/wordpress-backdoor-rebuilds-itself.htmlhttps://thehackernews.com/2026/10/wordpress-backdoor-rebuilds-itself.htmlThu, 01 Oct 2026 20:07:35 +0530info@thehackernews.com (The Hacker News)How Financial Services Companies Can Modernize Their Software Supply Chainhttps://thehackernews.com/2026/10/how-financial-services-companies-can.htmlhttps://thehackernews.com/2026/10/how-financial-services-companies-can.htmlThu, 01 Oct 2026 17:15:00 +0530info@thehackernews.com (The Hacker News)OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associateshttps://thehackernews.com/2026/10/openai-disrupts-reasoning-extraction.htmlhttps://thehackernews.com/2026/10/openai-disrupts-reasoning-extraction.htmlThu, 01 Oct 2026 16:12:36 +0530info@thehackernews.com (The Hacker News)CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEVhttps://thehackernews.com/2026/10/cisa-adds-exploited-cisco-catalyst-sd.htmlhttps://thehackernews.com/2026/10/cisa-adds-exploited-cisco-catalyst-sd.htmlThu, 01 Oct 2026 16:03:16 +0530info@thehackernews.com (The Hacker News)Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Versionhttps://thehackernews.com/2026/10/google-rolls-out-gemini-4-argon-to.htmlhttps://thehackernews.com/2026/10/google-rolls-out-gemini-4-argon-to.htmlThu, 01 Oct 2026 13:19:36 +0530info@thehackernews.com (The Hacker News)Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Pathhttps://thehackernews.com/2026/10/apple-coregraphics-poc-emerges-as.htmlhttps://thehackernews.com/2026/10/apple-coregraphics-poc-emerges-as.htmlThu, 01 Oct 2026 11:24:41 +0530info@thehackernews.com (The Hacker News)Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Thefthttps://thehackernews.com/2026/10/bitget-confirms-third-party-zero-day.htmlhttps://thehackernews.com/2026/10/bitget-confirms-third-party-zero-day.htmlThu, 01 Oct 2026 10:51:10 +0530info@thehackernews.com (The Hacker News)MetaMask Security Incident Prompts Exit of Affected Ethereum Validatorshttps://thehackernews.com/2026/10/metamask-security-incident-prompts-exit.htmlhttps://thehackernews.com/2026/10/metamask-security-incident-prompts-exit.htmlThu, 01 Oct 2026 10:40:09 +0530info@thehackernews.com (The Hacker News)Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLshttps://thehackernews.com/2026/10/citrix-netscaler-post-exploitation.htmlhttps://thehackernews.com/2026/10/citrix-netscaler-post-exploitation.htmlThu, 01 Oct 2026 10:05:34 +0530info@thehackernews.com (The Hacker News)Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secretshttps://thehackernews.com/2026/09/attackers-exploit-zimbra-flaw-to-deploy.htmlhttps://thehackernews.com/2026/09/attackers-exploit-zimbra-flaw-to-deploy.htmlWed, 30 Sep 2026 22:16:29 +0530info@thehackernews.com (The Hacker News)Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attackshttps://thehackernews.com/2026/09/attackers-abuse-msp360-to-deploy.htmlhttps://thehackernews.com/2026/09/attackers-abuse-msp360-to-deploy.htmlWed, 30 Sep 2026 22:02:59 +0530info@thehackernews.com (The Hacker News)Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Managerhttps://thehackernews.com/2026/09/cisco-warns-of-attackers-exploiting.htmlhttps://thehackernews.com/2026/09/cisco-warns-of-attackers-exploiting.htmlWed, 30 Sep 2026 20:54:54 +0530info@thehackernews.com (The Hacker News)Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lureshttps://thehackernews.com/2026/09/attackers-abuse-chatgpt-custom-gpts-to.htmlhttps://thehackernews.com/2026/09/attackers-abuse-chatgpt-custom-gpts-to.htmlWed, 30 Sep 2026 20:30:15 +0530info@thehackernews.com (The Hacker News)Know Your Enemy: Browser-Based Attack Techniques in 2026https://thehackernews.com/2026/09/know-your-enemy-browser-based-attack.htmlhttps://thehackernews.com/2026/09/know-your-enemy-browser-based-attack.htmlWed, 30 Sep 2026 17:28:00 +0530info@thehackernews.com (The Hacker News)AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHubhttps://thehackernews.com/2026/09/ai-coding-agents-exposed-13000-internal.htmlhttps://thehackernews.com/2026/09/ai-coding-agents-exposed-13000-internal.htmlWed, 30 Sep 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Accesshttps://thehackernews.com/2026/09/us-focused-csuite-phishing-steals.htmlhttps://thehackernews.com/2026/09/us-focused-csuite-phishing-steals.htmlWed, 30 Sep 2026 16:15:00 +0530info@thehackernews.com (The Hacker News)Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOThttps://thehackernews.com/2026/09/attackers-exploit-netscaler-flaw-for.htmlhttps://thehackernews.com/2026/09/attackers-exploit-netscaler-flaw-for.htmlWed, 30 Sep 2026 13:54:35 +0530info@thehackernews.com (The Hacker News)OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencryptedhttps://thehackernews.com/2026/09/openssl-fixes-high-severity-dtls-flaw.htmlhttps://thehackernews.com/2026/09/openssl-fixes-high-severity-dtls-flaw.htmlWed, 30 Sep 2026 13:39:28 +0530info@thehackernews.com (The Hacker News)Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Executionhttps://thehackernews.com/2026/09/citrix-netscaler-cve-2026-88772-exploit.htmlhttps://thehackernews.com/2026/09/citrix-netscaler-cve-2026-88772-exploit.htmlWed, 30 Sep 2026 11:00:30 +0530info@thehackernews.com (The Hacker News)French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weekshttps://thehackernews.com/2026/09/french-tax-data-theft-using-stolen.htmlhttps://thehackernews.com/2026/09/french-tax-data-theft-using-stolen.htmlTue, 29 Sep 2026 23:17:01 +0530info@thehackernews.com (The Hacker News)New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenseshttps://thehackernews.com/2026/09/new-spectre-v2-btr-attack-leaks-linux.htmlhttps://thehackernews.com/2026/09/new-spectre-v2-btr-attack-leaks-linux.htmlTue, 29 Sep 2026 22:50:17 +0530info@thehackernews.com (The Hacker News)Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoorhttps://thehackernews.com/2026/09/russias-star-blizzard-targets-100.htmlhttps://thehackernews.com/2026/09/russias-star-blizzard-targets-100.htmlTue, 29 Sep 2026 22:50:08 +0530info@thehackernews.com (The Hacker News)Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdownhttps://thehackernews.com/2026/09/kiteworks-fixes-critical-flaw-found.htmlhttps://thehackernews.com/2026/09/kiteworks-fixes-critical-flaw-found.htmlTue, 29 Sep 2026 19:43:20 +0530info@thehackernews.com (The Hacker News)101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consenthttps://thehackernews.com/2026/09/101-malicious-npm-packages-add.htmlhttps://thehackernews.com/2026/09/101-malicious-npm-packages-add.htmlTue, 29 Sep 2026 19:15:10 +0530info@thehackernews.com (The Hacker News)Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigationhttps://thehackernews.com/2026/09/dutch-police-arrest-24-year-old.htmlhttps://thehackernews.com/2026/09/dutch-police-arrest-24-year-old.htmlTue, 29 Sep 2026 14:05:10 +0530info@thehackernews.com (The Hacker News)Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentialshttps://thehackernews.com/2026/09/official-mcp-python-sdk-flaw-can-let.htmlhttps://thehackernews.com/2026/09/official-mcp-python-sdk-flaw-can-let.htmlTue, 29 Sep 2026 11:38:25 +0530info@thehackernews.com (The Hacker News)OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actionshttps://thehackernews.com/2026/09/openai-shelves-gpt-61-astra-after-tests.htmlhttps://thehackernews.com/2026/09/openai-shelves-gpt-61-astra-after-tests.htmlTue, 29 Sep 2026 10:42:32 +0530info@thehackernews.com (The Hacker News)OpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External Chatbothttps://thehackernews.com/2026/09/openai-pauses-tool-use-after-agent.htmlhttps://thehackernews.com/2026/09/openai-pauses-tool-use-after-agent.htmlTue, 29 Sep 2026 10:15:20 +0530info@thehackernews.com (The Hacker News)Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attackshttps://thehackernews.com/2026/09/apple-patches-coregraphics-flaw.htmlhttps://thehackernews.com/2026/09/apple-patches-coregraphics-flaw.htmlTue, 29 Sep 2026 00:48:01 +0530info@thehackernews.com (The Hacker News)