The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usMon, 10 Aug 2026 23:31:13 +0530hourly1Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Developmenthttps://thehackernews.com/2026/08/shipping-1050-more-code-watch-this.htmlhttps://thehackernews.com/2026/08/shipping-1050-more-code-watch-this.htmlMon, 10 Aug 2026 22:59:17 +0530info@thehackernews.com (The Hacker News)China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flawhttps://thehackernews.com/2026/08/china-linked-hackers-deploy-new.htmlhttps://thehackernews.com/2026/08/china-linked-hackers-deploy-new.htmlMon, 10 Aug 2026 22:08:37 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoorshttps://thehackernews.com/2026/08/weekly-recap-ai-goes-rogue-metabase-0.htmlhttps://thehackernews.com/2026/08/weekly-recap-ai-goes-rogue-metabase-0.htmlMon, 10 Aug 2026 20:30:29 +0530info@thehackernews.com (The Hacker News)Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Developmenthttps://thehackernews.com/2026/08/kimsuky-builds-offline-ai-stack-that.htmlhttps://thehackernews.com/2026/08/kimsuky-builds-offline-ai-stack-that.htmlMon, 10 Aug 2026 18:49:58 +0530info@thehackernews.com (The Hacker News)New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFAhttps://thehackernews.com/2026/08/new-passkey-attacks-can-recover-synced.htmlhttps://thehackernews.com/2026/08/new-passkey-attacks-can-recover-synced.htmlMon, 10 Aug 2026 17:55:04 +0530info@thehackernews.com (The Hacker News)TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCorehttps://thehackernews.com/2026/08/head-mare-exploits-trueconf-flaws-to.htmlhttps://thehackernews.com/2026/08/head-mare-exploits-trueconf-flaws-to.htmlMon, 10 Aug 2026 17:03:41 +0530info@thehackernews.com (The Hacker News)Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentialshttps://thehackernews.com/2026/08/solidity-pro-vs-code-extensions-steal.htmlhttps://thehackernews.com/2026/08/solidity-pro-vs-code-extensions-steal.htmlMon, 10 Aug 2026 13:08:23 +0530info@thehackernews.com (The Hacker News)OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pausehttps://thehackernews.com/2026/08/openais-next-ai-model-astra-shows-cyber.htmlhttps://thehackernews.com/2026/08/openais-next-ai-model-astra-shows-cyber.htmlMon, 10 Aug 2026 11:20:03 +0530info@thehackernews.com (The Hacker News)Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackershttps://thehackernews.com/2026/08/atlassian-rovo-can-be-tricked-into.htmlhttps://thehackernews.com/2026/08/atlassian-rovo-can-be-tricked-into.htmlSat, 08 Aug 2026 14:24:50 +0530info@thehackernews.com (The Hacker News)New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokenshttps://thehackernews.com/2026/08/new-css-attacks-can-break-webmail.htmlhttps://thehackernews.com/2026/08/new-css-attacks-can-break-webmail.htmlSat, 08 Aug 2026 13:33:57 +0530info@thehackernews.com (The Hacker News)Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authenticationhttps://thehackernews.com/2026/08/metabase-zero-day-exploited-in-wild.htmlhttps://thehackernews.com/2026/08/metabase-zero-day-exploited-in-wild.htmlSat, 08 Aug 2026 12:28:31 +0530info@thehackernews.com (The Hacker News)N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persisthttps://thehackernews.com/2026/08/n-central-attackers-reach-managed.htmlhttps://thehackernews.com/2026/08/n-central-attackers-reach-managed.htmlSat, 08 Aug 2026 12:27:43 +0530info@thehackernews.com (The Hacker News)Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attemptshttps://thehackernews.com/2026/08/progress-kemp-loadmaster-flaw-hits-cisa.htmlhttps://thehackernews.com/2026/08/progress-kemp-loadmaster-flaw-hits-cisa.htmlSat, 08 Aug 2026 12:22:16 +0530info@thehackernews.com (The Hacker News)Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealerhttps://thehackernews.com/2026/08/nearly-800-malicious-npm-packages.htmlhttps://thehackernews.com/2026/08/nearly-800-malicious-npm-packages.htmlSat, 08 Aug 2026 00:18:17 +0530info@thehackernews.com (The Hacker News)ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Walletshttps://thehackernews.com/2026/08/clickfix-attacks-deliver-macos-stealer.htmlhttps://thehackernews.com/2026/08/clickfix-attacks-deliver-macos-stealer.htmlFri, 07 Aug 2026 23:59:08 +0530info@thehackernews.com (The Hacker News)UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Datahttps://thehackernews.com/2026/08/unc6671-vishing-attacks-target-personal.htmlhttps://thehackernews.com/2026/08/unc6671-vishing-attacks-target-personal.htmlFri, 07 Aug 2026 23:46:13 +0530info@thehackernews.com (The Hacker News)New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAPhttps://thehackernews.com/2026/08/new-wordpress-pre-auth-xss-could-lead.htmlhttps://thehackernews.com/2026/08/new-wordpress-pre-auth-xss-could-lead.htmlFri, 07 Aug 2026 18:26:23 +0530info@thehackernews.com (The Hacker News)Growing Up The Hard Wayhttps://thehackernews.com/2026/08/growing-up-hard-way.htmlhttps://thehackernews.com/2026/08/growing-up-hard-way.htmlFri, 07 Aug 2026 17:25:26 +0530info@thehackernews.com (The Hacker News)18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containershttps://thehackernews.com/2026/08/18-year-old-linux-sctp-flaw-could-let.htmlhttps://thehackernews.com/2026/08/18-year-old-linux-sctp-flaw-could-let.htmlFri, 07 Aug 2026 16:40:33 +0530info@thehackernews.com (The Hacker News)New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tableshttps://thehackernews.com/2026/08/new-natjack-attacks-hijack-tcp-sessions.htmlhttps://thehackernews.com/2026/08/new-natjack-attacks-hijack-tcp-sessions.htmlFri, 07 Aug 2026 16:28:38 +0530info@thehackernews.com (The Hacker News)Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emailshttps://thehackernews.com/2026/08/microsoft-365-aitm-phishing-hijacks.htmlhttps://thehackernews.com/2026/08/microsoft-365-aitm-phishing-hijacks.htmlFri, 07 Aug 2026 16:08:27 +0530info@thehackernews.com (The Hacker News)AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Dayhttps://thehackernews.com/2026/08/ai-assisted-http-terminator-finds-novel.htmlhttps://thehackernews.com/2026/08/ai-assisted-http-terminator-finds-novel.htmlFri, 07 Aug 2026 15:39:54 +0530info@thehackernews.com (The Hacker News)Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Accesshttps://thehackernews.com/2026/08/malware-can-abuse-windows-hello-for.htmlhttps://thehackernews.com/2026/08/malware-can-abuse-windows-hello-for.htmlFri, 07 Aug 2026 14:22:11 +0530info@thehackernews.com (The Hacker News)Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secretshttps://thehackernews.com/2026/08/claude-code-and-gemini-cli-flaws-let.htmlhttps://thehackernews.com/2026/08/claude-code-and-gemini-cli-flaws-let.htmlFri, 07 Aug 2026 13:48:35 +0530info@thehackernews.com (The Hacker News)TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaignhttps://thehackernews.com/2026/08/teampcp-linked-to-redis-attacks-dating.htmlhttps://thehackernews.com/2026/08/teampcp-linked-to-redis-attacks-dating.htmlFri, 07 Aug 2026 12:20:05 +0530info@thehackernews.com (The Hacker News)New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hostshttps://thehackernews.com/2026/08/new-zapscape-kvm-flaw-could-let.htmlhttps://thehackernews.com/2026/08/new-zapscape-kvm-flaw-could-let.htmlThu, 06 Aug 2026 23:28:30 +0530info@thehackernews.com (The Hacker News)Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugshttps://thehackernews.com/2026/08/cisco-patches-12-sd-wan-and-ios-xe.htmlhttps://thehackernews.com/2026/08/cisco-patches-12-sd-wan-and-ios-xe.htmlThu, 06 Aug 2026 22:43:15 +0530info@thehackernews.com (The Hacker News)New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUshttps://thehackernews.com/2026/08/new-interrupt-injection-attack-can.htmlhttps://thehackernews.com/2026/08/new-interrupt-injection-attack-can.htmlThu, 06 Aug 2026 21:47:13 +0530info@thehackernews.com (The Hacker News)ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Storieshttps://thehackernews.com/2026/08/threatsday-odysseus-rce-samsung-one.htmlhttps://thehackernews.com/2026/08/threatsday-odysseus-rce-samsung-one.htmlThu, 06 Aug 2026 20:54:31 +0530info@thehackernews.com (The Hacker News)Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Citieshttps://thehackernews.com/2026/08/over-4400-rockwell-plcs-exposed-online.htmlhttps://thehackernews.com/2026/08/over-4400-rockwell-plcs-exposed-online.htmlThu, 06 Aug 2026 17:46:58 +0530info@thehackernews.com (The Hacker News)CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Appshttps://thehackernews.com/2026/08/cryptojs-weak-rng-behind-57-million-in.htmlhttps://thehackernews.com/2026/08/cryptojs-weak-rng-behind-57-million-in.htmlThu, 06 Aug 2026 17:19:48 +0530info@thehackernews.com (The Hacker News)Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasseshttps://thehackernews.com/2026/08/webkit-proxy-bypasses-can-expose-real.htmlhttps://thehackernews.com/2026/08/webkit-proxy-bypasses-can-expose-real.htmlThu, 06 Aug 2026 17:03:08 +0530info@thehackernews.com (The Hacker News)AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memoryhttps://thehackernews.com/2026/08/ai-recommendation-poisoning-how-ask-ai.htmlhttps://thehackernews.com/2026/08/ai-recommendation-poisoning-how-ask-ai.htmlThu, 06 Aug 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Accesshttps://thehackernews.com/2026/08/attackers-compile-khunt-inside-oracle.htmlhttps://thehackernews.com/2026/08/attackers-compile-khunt-inside-oracle.htmlThu, 06 Aug 2026 14:49:23 +0530info@thehackernews.com (The Hacker News)AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Modelhttps://thehackernews.com/2026/08/aws-google-and-vercel-patch-agent-flaws.htmlhttps://thehackernews.com/2026/08/aws-google-and-vercel-patch-agent-flaws.htmlThu, 06 Aug 2026 14:27:30 +0530info@thehackernews.com (The Hacker News)Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shellshttps://thehackernews.com/2026/08/chinese-made-zbtlink-routers-ship-with.htmlhttps://thehackernews.com/2026/08/chinese-made-zbtlink-routers-ship-with.htmlThu, 06 Aug 2026 13:35:22 +0530info@thehackernews.com (The Hacker News)Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Servicehttps://thehackernews.com/2026/08/ransom-cartel-creator-gets-16-years-in.htmlhttps://thehackernews.com/2026/08/ransom-cartel-creator-gets-16-years-in.htmlThu, 06 Aug 2026 12:49:54 +0530info@thehackernews.com (The Hacker News)CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wildhttps://thehackernews.com/2026/08/cisa-flags-teamcity-cve-2026-63077-rce.htmlhttps://thehackernews.com/2026/08/cisa-flags-teamcity-cve-2026-63077-rce.htmlThu, 06 Aug 2026 12:21:43 +0530info@thehackernews.com (The Hacker News)Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million Peoplehttps://thehackernews.com/2026/08/snowflake-hacker-pleads-guilty-over.htmlhttps://thehackernews.com/2026/08/snowflake-hacker-pleads-guilty-over.htmlThu, 06 Aug 2026 11:34:30 +0530info@thehackernews.com (The Hacker News)Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lureshttps://thehackernews.com/2026/08/over-250-clickfix-domains-use-browser.htmlhttps://thehackernews.com/2026/08/over-250-clickfix-domains-use-browser.htmlThu, 06 Aug 2026 00:14:31 +0530info@thehackernews.com (The Hacker News)OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemeshttps://thehackernews.com/2026/08/openai-disrupts-poipet-scam-network.htmlhttps://thehackernews.com/2026/08/openai-disrupts-poipet-scam-network.htmlThu, 06 Aug 2026 00:03:47 +0530info@thehackernews.com (The Hacker News)Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompthttps://thehackernews.com/2026/08/poison-claude-sells-discounted-claude.htmlhttps://thehackernews.com/2026/08/poison-claude-sells-discounted-claude.htmlWed, 05 Aug 2026 21:06:03 +0530info@thehackernews.com (The Hacker News)Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Importshttps://thehackernews.com/2026/08/paperclip-ai-flaws-let-attackers-run.htmlhttps://thehackernews.com/2026/08/paperclip-ai-flaws-let-attackers-run.htmlWed, 05 Aug 2026 20:44:05 +0530info@thehackernews.com (The Hacker News)Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bughttps://thehackernews.com/2026/08/veeam-terraform-mcp-django-patch.htmlhttps://thehackernews.com/2026/08/veeam-terraform-mcp-django-patch.htmlWed, 05 Aug 2026 19:57:30 +0530info@thehackernews.com (The Hacker News)Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchainhttps://thehackernews.com/2026/08/trojanized-npm-packages-decode-c2-ip.htmlhttps://thehackernews.com/2026/08/trojanized-npm-packages-decode-c2-ip.htmlWed, 05 Aug 2026 19:11:27 +0530info@thehackernews.com (The Hacker News)New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitchhttps://thehackernews.com/2026/08/new-ovswrap-linux-kernel-flaw-lets.htmlhttps://thehackernews.com/2026/08/new-ovswrap-linux-kernel-flaw-lets.htmlWed, 05 Aug 2026 17:13:27 +0530info@thehackernews.com (The Hacker News)Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Riskhttps://thehackernews.com/2026/08/kali365-weaponizes-microsoft.htmlhttps://thehackernews.com/2026/08/kali365-weaponizes-microsoft.htmlWed, 05 Aug 2026 17:13:19 +0530info@thehackernews.com (The Hacker News)Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markuphttps://thehackernews.com/2026/08/critical-gitea-flaw-let-unauthenticated.htmlhttps://thehackernews.com/2026/08/critical-gitea-flaw-let-unauthenticated.htmlWed, 05 Aug 2026 16:34:23 +0530info@thehackernews.com (The Hacker News)Leaked n8n API Tokens Exposed Live Instances to Credential Thefthttps://thehackernews.com/2026/08/leaked-n8n-api-tokens-exposed-live.htmlhttps://thehackernews.com/2026/08/leaked-n8n-api-tokens-exposed-live.htmlWed, 05 Aug 2026 16:05:29 +0530info@thehackernews.com (The Hacker News)Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Datahttps://thehackernews.com/2026/08/open-vsx-removes-77-malicious-evil-twin.htmlhttps://thehackernews.com/2026/08/open-vsx-removes-77-malicious-evil-twin.htmlWed, 05 Aug 2026 14:53:03 +0530info@thehackernews.com (The Hacker News)