The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usSat, 30 May 2026 08:50:58 +0530hourly1ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surfacehttps://thehackernews.com/2026/05/chatgphish-vulnerability-turns-chatgpt.htmlhttps://thehackernews.com/2026/05/chatgphish-vulnerability-turns-chatgpt.htmlFri, 29 May 2026 23:37:12 +0530info@thehackernews.com (The Hacker News)Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploithttps://thehackernews.com/2026/05/attackers-use-llm-agent-for-post.htmlhttps://thehackernews.com/2026/05/attackers-use-llm-agent-for-post.htmlFri, 29 May 2026 20:09:56 +0530info@thehackernews.com (The Hacker News)New Russian-Linked GREYVIBE Targets Ukraine with AI-Powered Cyberattackshttps://thehackernews.com/2026/05/new-russian-linked-greyvibe-targets.htmlhttps://thehackernews.com/2026/05/new-russian-linked-greyvibe-targets.htmlFri, 29 May 2026 17:01:59 +0530info@thehackernews.com (The Hacker News)What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stackshttps://thehackernews.com/2026/05/what-2000-exposed-vibe-coded-apps.htmlhttps://thehackernews.com/2026/05/what-2000-exposed-vibe-coded-apps.htmlFri, 29 May 2026 16:00:00 +0530info@thehackernews.com (The Hacker News)Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secretshttps://thehackernews.com/2026/05/malicious-sicoob-nuget-steals-banking.htmlhttps://thehackernews.com/2026/05/malicious-sicoob-nuget-steals-banking.htmlFri, 29 May 2026 14:41:25 +0530info@thehackernews.com (The Hacker News)Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnelshttps://thehackernews.com/2026/05/kimsuky-deploys-httpspy-expands-arsenal.htmlhttps://thehackernews.com/2026/05/kimsuky-deploys-httpspy-expands-arsenal.htmlFri, 29 May 2026 11:27:41 +0530info@thehackernews.com (The Hacker News)Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Codehttps://thehackernews.com/2026/05/critical-gogs-rce-vulnerability-lets.htmlhttps://thehackernews.com/2026/05/critical-gogs-rce-vulnerability-lets.htmlThu, 28 May 2026 22:54:44 +0530info@thehackernews.com (The Hacker News)Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealerhttps://thehackernews.com/2026/05/threat-actors-exploit-critical.htmlhttps://thehackernews.com/2026/05/threat-actors-exploit-critical.htmlThu, 28 May 2026 20:56:04 +0530info@thehackernews.com (The Hacker News)Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removalhttps://thehackernews.com/2026/05/microsoft-slams-public-zero-day.htmlhttps://thehackernews.com/2026/05/microsoft-slams-public-zero-day.htmlThu, 28 May 2026 19:23:52 +0530info@thehackernews.com (The Hacker News)ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 Morehttps://thehackernews.com/2026/05/threatsday-bulletin-claude-security.htmlhttps://thehackernews.com/2026/05/threatsday-bulletin-claude-security.htmlThu, 28 May 2026 19:03:16 +0530info@thehackernews.com (The Hacker News)New AI Usage Report: Enterprise AI Risk Is Heavily Concentrated Among a Small Group of AI "Power users"https://thehackernews.com/2026/05/new-ai-usage-report-enterprise-ai-risk.htmlhttps://thehackernews.com/2026/05/new-ai-usage-report-enterprise-ai-risk.htmlThu, 28 May 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malwarehttps://thehackernews.com/2026/05/jinx-0164-targets-cryptocurrency-firms.htmlhttps://thehackernews.com/2026/05/jinx-0164-targets-cryptocurrency-firms.htmlThu, 28 May 2026 13:24:48 +0530info@thehackernews.com (The Hacker News)Grandoreiro Malware and BTMOB RAT Campaigns Target Windows and Android Usershttps://thehackernews.com/2026/05/grandoreiro-malware-and-btmob-rat.htmlhttps://thehackernews.com/2026/05/grandoreiro-malware-and-btmob-rat.htmlWed, 27 May 2026 21:40:21 +0530info@thehackernews.com (The Hacker News)Malicious npm Package Stole Files From Claude AI User Directory via GitHubhttps://thehackernews.com/2026/05/malicious-npm-package-stole-files-from.htmlhttps://thehackernews.com/2026/05/malicious-npm-package-stole-files-from.htmlWed, 27 May 2026 21:14:29 +0530info@thehackernews.com (The Hacker News)5 Steps to Managing Shadow AI Tools Without Slowing Down Employeeshttps://thehackernews.com/2026/05/5-steps-to-managing-shadow-ai-tools.htmlhttps://thehackernews.com/2026/05/5-steps-to-managing-shadow-ai-tools.htmlWed, 27 May 2026 18:58:48 +0530info@thehackernews.com (The Hacker News)GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructurehttps://thehackernews.com/2026/05/glassworm-malware-takedown-disrupts.htmlhttps://thehackernews.com/2026/05/glassworm-malware-takedown-disrupts.htmlWed, 27 May 2026 17:18:37 +0530info@thehackernews.com (The Hacker News)3 SOC Steps that Shut Down Incident Risks Earlyhttps://thehackernews.com/2026/05/3-soc-steps-that-shut-down-incident.htmlhttps://thehackernews.com/2026/05/3-soc-steps-that-shut-down-incident.htmlWed, 27 May 2026 17:15:00 +0530info@thehackernews.com (The Hacker News)Gitea Vulnerability Exposes Private Container Images without Authenticationhttps://thehackernews.com/2026/05/gitea-vulnerability-exposes-private.htmlhttps://thehackernews.com/2026/05/gitea-vulnerability-exposes-private.htmlWed, 27 May 2026 15:36:32 +0530info@thehackernews.com (The Hacker News)AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Siteshttps://thehackernews.com/2026/05/ai-chatbot-recommendations-redirect.htmlhttps://thehackernews.com/2026/05/ai-chatbot-recommendations-redirect.htmlWed, 27 May 2026 13:15:52 +0530info@thehackernews.com (The Hacker News)MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countrieshttps://thehackernews.com/2026/05/muddywater-uses-dll-side-loading-in.htmlhttps://thehackernews.com/2026/05/muddywater-uses-dll-side-loading-in.htmlTue, 26 May 2026 21:18:41 +0530info@thehackernews.com (The Hacker News)[THN Webinar] New AI DDoS Attacks Are Smarter. Learn How to Fight Backhttps://thehackernews.com/2026/05/new-ai-ddos-attacks-are-smarter-learn.htmlhttps://thehackernews.com/2026/05/new-ai-ddos-attacks-are-smarter-learn.htmlTue, 26 May 2026 17:28:00 +0530info@thehackernews.com (The Hacker News)Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versionshttps://thehackernews.com/2026/05/microsoft-patches-sharepoint-rce-flaw.htmlhttps://thehackernews.com/2026/05/microsoft-patches-sharepoint-rce-flaw.htmlTue, 26 May 2026 17:19:53 +0530info@thehackernews.com (The Hacker News)MFA Prompt Bombing: Why Your Second Factor Isn't Saving Youhttps://thehackernews.com/2026/05/mfa-prompt-bombing-why-your-second.htmlhttps://thehackernews.com/2026/05/mfa-prompt-bombing-why-your-second.htmlTue, 26 May 2026 16:00:00 +0530info@thehackernews.com (The Hacker News)CERT-In Recommends 12-Hour Patching for Internet-Facing Flaws Amid AI-Assisted Attackshttps://thehackernews.com/2026/05/cert-in-mandates-12-hour-patching-for.htmlhttps://thehackernews.com/2026/05/cert-in-mandates-12-hour-patching-for.htmlTue, 26 May 2026 14:43:02 +0530info@thehackernews.com (The Hacker News)Iranian Hackers Deploy MiniFast and MiniJunk V2 via Phishing and SEO Poisoninghttps://thehackernews.com/2026/05/iranian-hackers-deploy-minifast-and.htmlhttps://thehackernews.com/2026/05/iranian-hackers-deploy-minifast-and.htmlTue, 26 May 2026 12:43:05 +0530info@thehackernews.com (The Hacker News)KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strikehttps://thehackernews.com/2026/05/knowledgedeliver-lms-flaw-exploited-to.htmlhttps://thehackernews.com/2026/05/knowledgedeliver-lms-flaw-exploited-to.htmlTue, 26 May 2026 10:49:38 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaoshttps://thehackernews.com/2026/05/weekly-recap-linux-flaws-defender-0.htmlhttps://thehackernews.com/2026/05/weekly-recap-linux-flaws-defender-0.htmlMon, 25 May 2026 19:43:27 +0530info@thehackernews.com (The Hacker News)Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attackshttps://thehackernews.com/2026/05/ghost-cms-cve-2026-26980-exploited-to.htmlhttps://thehackernews.com/2026/05/ghost-cms-cve-2026-26980-exploited-to.htmlMon, 25 May 2026 17:32:46 +0530info@thehackernews.com (The Hacker News)The Alert Firehose Finally Meets Its Matchhttps://thehackernews.com/2026/05/the-alert-firehose-finally-meets-its.htmlhttps://thehackernews.com/2026/05/the-alert-firehose-finally-meets-its.htmlMon, 25 May 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firmshttps://thehackernews.com/2026/05/lazarus-deploys-remotepe-memory-only.htmlhttps://thehackernews.com/2026/05/lazarus-deploys-remotepe-memory-only.htmlMon, 25 May 2026 15:02:54 +0530info@thehackernews.com (The Hacker News)TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIOhttps://thehackernews.com/2026/05/trapdoor-supply-chain-attack-spreads.htmlhttps://thehackernews.com/2026/05/trapdoor-supply-chain-attack-spreads.htmlMon, 25 May 2026 11:29:13 +0530info@thehackernews.com (The Hacker News)npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attackshttps://thehackernews.com/2026/05/npm-adds-2fa-gated-publishing-and.htmlhttps://thehackernews.com/2026/05/npm-adds-2fa-gated-publishing-and.htmlSat, 23 May 2026 22:05:10 +0530info@thehackernews.com (The Hacker News)Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malwarehttps://thehackernews.com/2026/05/packagist-supply-chain-attack-infects-8.htmlhttps://thehackernews.com/2026/05/packagist-supply-chain-attack-infects-8.htmlSat, 23 May 2026 21:37:51 +0530info@thehackernews.com (The Hacker News)Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Softwarehttps://thehackernews.com/2026/05/claude-mythos-ai-finds-10000-high.htmlhttps://thehackernews.com/2026/05/claude-mythos-ai-finds-10000-high.htmlSat, 23 May 2026 17:25:35 +0530info@thehackernews.com (The Hacker News)Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealerhttps://thehackernews.com/2026/05/laravel-lang-php-packages-compromised.htmlhttps://thehackernews.com/2026/05/laravel-lang-php-packages-compromised.htmlSat, 23 May 2026 15:21:13 +0530info@thehackernews.com (The Hacker News)LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Roothttps://thehackernews.com/2026/05/litespeed-cpanel-plugin-cve-2026-48172.htmlhttps://thehackernews.com/2026/05/litespeed-cpanel-plugin-cve-2026-48172.htmlSat, 23 May 2026 13:05:13 +0530info@thehackernews.com (The Hacker News)Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEVhttps://thehackernews.com/2026/05/drupal-core-sql-injection-bug-actively.htmlhttps://thehackernews.com/2026/05/drupal-core-sql-injection-bug-actively.htmlSat, 23 May 2026 12:53:48 +0530info@thehackernews.com (The Hacker News)First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groupshttps://thehackernews.com/2026/05/first-vpn-dismantled-in-global-takedown.htmlhttps://thehackernews.com/2026/05/first-vpn-dismantled-in-global-takedown.htmlFri, 22 May 2026 23:05:02 +0530info@thehackernews.com (The Hacker News)Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malwarehttps://thehackernews.com/2026/05/ghostwriter-targets-ukraine-government.htmlhttps://thehackernews.com/2026/05/ghostwriter-targets-ukraine-government.htmlFri, 22 May 2026 21:50:32 +0530info@thehackernews.com (The Hacker News)Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflowshttps://thehackernews.com/2026/05/megalodon-github-attack-targets-5561.htmlhttps://thehackernews.com/2026/05/megalodon-github-attack-targets-5561.htmlFri, 22 May 2026 17:25:24 +0530info@thehackernews.com (The Hacker News)Making Vulnerable Drivers Exploitable Without Hardware - The BYOVD Perspectivehttps://thehackernews.com/2026/05/making-vulnerable-drivers-exploitable.htmlhttps://thehackernews.com/2026/05/making-vulnerable-drivers-exploitable.htmlFri, 22 May 2026 17:08:12 +0530info@thehackernews.com (The Hacker News)Kimwolf DDoS Botnet Operator Arrested in Canada Over DDoS-for-Hire Attackshttps://thehackernews.com/2026/05/kimwolf-ddos-botnet-operator-arrested.htmlhttps://thehackernews.com/2026/05/kimwolf-ddos-botnet-operator-arrested.htmlFri, 22 May 2026 14:20:18 +0530info@thehackernews.com (The Hacker News)CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEVhttps://thehackernews.com/2026/05/cisa-adds-exploited-langflow-and-trend.htmlhttps://thehackernews.com/2026/05/cisa-adds-exploited-langflow-and-trend.htmlFri, 22 May 2026 11:17:33 +0530info@thehackernews.com (The Hacker News)Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Accesshttps://thehackernews.com/2026/05/cisco-patches-cvss-100-secure-workload.htmlhttps://thehackernews.com/2026/05/cisco-patches-cvss-100-secure-workload.htmlFri, 22 May 2026 11:06:18 +0530info@thehackernews.com (The Hacker News)Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoorhttps://thehackernews.com/2026/05/showboat-linux-malware-hits-middle-east.htmlhttps://thehackernews.com/2026/05/showboat-linux-malware-hits-middle-east.htmlThu, 21 May 2026 19:47:09 +0530info@thehackernews.com (The Hacker News)ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Storieshttps://thehackernews.com/2026/05/threatsday-bulletin-linux-rootkits.htmlhttps://thehackernews.com/2026/05/threatsday-bulletin-linux-rootkits.htmlThu, 21 May 2026 17:22:14 +0530info@thehackernews.com (The Hacker News)Microsoft Warns of Two Actively Exploited Defender Vulnerabilitieshttps://thehackernews.com/2026/05/microsoft-warns-of-two-actively.htmlhttps://thehackernews.com/2026/05/microsoft-warns-of-two-actively.htmlThu, 21 May 2026 16:25:57 +0530info@thehackernews.com (The Hacker News)When Identity is the Attack Pathhttps://thehackernews.com/2026/05/when-identity-is-attack-path.htmlhttps://thehackernews.com/2026/05/when-identity-is-attack-path.htmlThu, 21 May 2026 16:00:00 +0530info@thehackernews.com (The Hacker News)9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distroshttps://thehackernews.com/2026/05/9-year-old-linux-kernel-flaw-enables.htmlhttps://thehackernews.com/2026/05/9-year-old-linux-kernel-flaw-enables.htmlThu, 21 May 2026 13:05:53 +0530info@thehackernews.com (The Hacker News)GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extensionhttps://thehackernews.com/2026/05/github-internal-repositories-breached.htmlhttps://thehackernews.com/2026/05/github-internal-repositories-breached.htmlThu, 21 May 2026 09:57:01 +0530info@thehackernews.com (The Hacker News)