The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usThu, 25 Jun 2026 01:05:08 +0530hourly1CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploitedhttps://thehackernews.com/2026/06/cisa-warns-critical-lantronix-eds5000.htmlhttps://thehackernews.com/2026/06/cisa-warns-critical-lantronix-eds5000.htmlWed, 24 Jun 2026 22:49:18 +0530info@thehackernews.com (The Hacker News)Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recoveredhttps://thehackernews.com/2026/06/amadey-and-stealc-malware-network.htmlhttps://thehackernews.com/2026/06/amadey-and-stealc-malware-network.htmlWed, 24 Jun 2026 21:29:50 +0530info@thehackernews.com (The Hacker News)Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attackshttps://thehackernews.com/2026/06/cordyceps-cicd-flaws-expose-300-github.htmlhttps://thehackernews.com/2026/06/cordyceps-cicd-flaws-expose-300-github.htmlWed, 24 Jun 2026 18:18:11 +0530info@thehackernews.com (The Hacker News)Dawn of the Apex Agentic Adversaryhttps://thehackernews.com/2026/06/dawn-of-apex-agentic-adversary.htmlhttps://thehackernews.com/2026/06/dawn-of-apex-agentic-adversary.htmlWed, 24 Jun 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)DoJ Seizes Huione Cloud Account Tied to Cyber Scam Money Launderinghttps://thehackernews.com/2026/06/doj-seizes-huione-cloud-account-tied-to.htmlhttps://thehackernews.com/2026/06/doj-seizes-huione-cloud-account-tied-to.htmlWed, 24 Jun 2026 14:25:12 +0530info@thehackernews.com (The Hacker News)Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Roothttps://thehackernews.com/2026/06/cisco-unified-cm-flaw-exploited-after.htmlhttps://thehackernews.com/2026/06/cisco-unified-cm-flaw-exploited-after.htmlWed, 24 Jun 2026 12:20:38 +0530info@thehackernews.com (The Hacker News)FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operationhttps://thehackernews.com/2026/06/fortibleed-targeted-fortigate-firewalls.htmlhttps://thehackernews.com/2026/06/fortibleed-targeted-fortigate-firewalls.htmlTue, 23 Jun 2026 23:50:49 +0530info@thehackernews.com (The Hacker News)Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agentshttps://thehackernews.com/2026/06/fake-ai-agent-skill-passed-security.htmlhttps://thehackernews.com/2026/06/fake-ai-agent-skill-passed-security.htmlTue, 23 Jun 2026 20:46:43 +0530info@thehackernews.com (The Hacker News)Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migrationhttps://thehackernews.com/2026/06/trump-order-sets-2030-deadline-for.htmlhttps://thehackernews.com/2026/06/trump-order-sets-2030-deadline-for.htmlTue, 23 Jun 2026 20:46:40 +0530info@thehackernews.com (The Hacker News)GitHub Updates actions/checkout to Block Common Pwn Request Attack Patternshttps://thehackernews.com/2026/06/github-updates-actionscheckout-to-block.htmlhttps://thehackernews.com/2026/06/github-updates-actionscheckout-to-block.htmlTue, 23 Jun 2026 19:52:03 +0530info@thehackernews.com (The Hacker News)Agentic AI: The Weapon That No Longer Needs a Warriorhttps://thehackernews.com/2026/06/agentic-ai-weapon-that-no-longer-needs.htmlhttps://thehackernews.com/2026/06/agentic-ai-weapon-that-no-longer-needs.htmlTue, 23 Jun 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAThttps://thehackernews.com/2026/06/malicious-npm-packages-pose-as-postcss.htmlhttps://thehackernews.com/2026/06/malicious-npm-packages-pose-as-postcss.htmlTue, 23 Jun 2026 14:24:32 +0530info@thehackernews.com (The Hacker News)WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Toolhttps://thehackernews.com/2026/06/whatsapp-vbscript-campaign-uses-fake.htmlhttps://thehackernews.com/2026/06/whatsapp-vbscript-campaign-uses-fake.htmlTue, 23 Jun 2026 11:08:40 +0530info@thehackernews.com (The Hacker News)OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flawshttps://thehackernews.com/2026/06/openai-expands-daybreak-with-gpt-55.htmlhttps://thehackernews.com/2026/06/openai-expands-daybreak-with-gpt-55.htmlTue, 23 Jun 2026 09:26:58 +0530info@thehackernews.com (The Hacker News)ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attackhttps://thehackernews.com/2026/06/shapedplugin-wordpress-pro-plugins.htmlhttps://thehackernews.com/2026/06/shapedplugin-wordpress-pro-plugins.htmlMon, 22 Jun 2026 23:30:48 +0530info@thehackernews.com (The Hacker News)29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requestshttps://thehackernews.com/2026/06/29-year-old-squid-proxy-bug-squidbleed.htmlhttps://thehackernews.com/2026/06/29-year-old-squid-proxy-bug-squidbleed.htmlMon, 22 Jun 2026 21:59:00 +0530info@thehackernews.com (The Hacker News)Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenantshttps://thehackernews.com/2026/06/researchers-detail-difytap-flaws-in.htmlhttps://thehackernews.com/2026/06/researchers-detail-difytap-flaws-in.htmlMon, 22 Jun 2026 21:43:28 +0530info@thehackernews.com (The Hacker News)New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealerhttps://thehackernews.com/2026/06/new-oxloader-loader-uses-malicious.htmlhttps://thehackernews.com/2026/06/new-oxloader-loader-uses-malicious.htmlMon, 22 Jun 2026 18:50:12 +0530info@thehackernews.com (The Hacker News)Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countrieshttps://thehackernews.com/2026/06/google-sets-sept-30-deadline-for.htmlhttps://thehackernews.com/2026/06/google-sets-sept-30-deadline-for.htmlMon, 22 Jun 2026 18:15:08 +0530info@thehackernews.com (The Hacker News)Stop Your Legacy Infrastructure from Hijacking Your AI Agentshttps://thehackernews.com/2026/06/stop-your-legacy-infrastructure-from.htmlhttps://thehackernews.com/2026/06/stop-your-legacy-infrastructure-from.htmlMon, 22 Jun 2026 17:28:00 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and Morehttps://thehackernews.com/2026/06/weekly-recap-browser-bugs-edr-killers.htmlhttps://thehackernews.com/2026/06/weekly-recap-browser-bugs-edr-killers.htmlMon, 22 Jun 2026 16:25:10 +0530info@thehackernews.com (The Hacker News)Canada’s Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected Deviceshttps://thehackernews.com/2026/06/canadas-spy-agency-used-first-of-its.htmlhttps://thehackernews.com/2026/06/canadas-spy-agency-used-first-of-its.htmlMon, 22 Jun 2026 14:41:37 +0530info@thehackernews.com (The Hacker News)AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Networkhttps://thehackernews.com/2026/06/arystinger-malware-infects-4300-legacy.htmlhttps://thehackernews.com/2026/06/arystinger-malware-infects-4300-legacy.htmlMon, 22 Jun 2026 12:27:44 +0530info@thehackernews.com (The Hacker News)INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacifichttps://thehackernews.com/2026/06/interpol-warns-phishing-ransomware-and.htmlhttps://thehackernews.com/2026/06/interpol-warns-phishing-ransomware-and.htmlMon, 22 Jun 2026 11:36:53 +0530info@thehackernews.com (The Hacker News)Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keyshttps://thehackernews.com/2026/06/hackers-exploit-gravity-smtp-wordpress.htmlhttps://thehackernews.com/2026/06/hackers-exploit-gravity-smtp-wordpress.htmlSat, 20 Jun 2026 15:26:04 +0530info@thehackernews.com (The Hacker News)Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chainhttps://thehackernews.com/2026/06/unpatchable-usbliter8-exploit-breaks.htmlhttps://thehackernews.com/2026/06/unpatchable-usbliter8-exploit-breaks.htmlSat, 20 Jun 2026 00:07:41 +0530info@thehackernews.com (The Hacker News)The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processeshttps://thehackernews.com/2026/06/the-gentlemen-raas-uses-gentlekiller.htmlhttps://thehackernews.com/2026/06/the-gentlemen-raas-uses-gentlekiller.htmlSat, 20 Jun 2026 00:03:07 +0530info@thehackernews.com (The Hacker News)AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Executionhttps://thehackernews.com/2026/06/autojack-attack-lets-one-web-page.htmlhttps://thehackernews.com/2026/06/autojack-attack-lets-one-web-page.htmlFri, 19 Jun 2026 21:00:47 +0530info@thehackernews.com (The Hacker News)Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Siteshttps://thehackernews.com/2026/06/operation-endgame-disrupts-socgholish.htmlhttps://thehackernews.com/2026/06/operation-endgame-disrupts-socgholish.htmlFri, 19 Jun 2026 20:37:54 +0530info@thehackernews.com (The Hacker News)CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Deviceshttps://thehackernews.com/2026/06/cisa-warns-fortinet-customers-as.htmlhttps://thehackernews.com/2026/06/cisa-warns-fortinet-customers-as.htmlFri, 19 Jun 2026 19:30:21 +0530info@thehackernews.com (The Hacker News)From Assistive to Agentic: The AI Shift That's Redefining Threat Managementhttps://thehackernews.com/2026/06/from-assistive-to-agentic-ai-shift.htmlhttps://thehackernews.com/2026/06/from-assistive-to-agentic-ai-shift.htmlFri, 19 Jun 2026 17:28:00 +0530info@thehackernews.com (The Hacker News)Forget Data Leakage: Shadow AI's Real Threat Is Access Controlhttps://thehackernews.com/2026/06/forget-data-leakage-shadow-ais-real.htmlhttps://thehackernews.com/2026/06/forget-data-leakage-shadow-ais-real.htmlFri, 19 Jun 2026 16:00:00 +0530info@thehackernews.com (The Hacker News)Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Datahttps://thehackernews.com/2026/06/salesforce-disables-klue-app.htmlhttps://thehackernews.com/2026/06/salesforce-disables-klue-app.htmlFri, 19 Jun 2026 14:33:57 +0530info@thehackernews.com (The Hacker News)Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphonehttps://thehackernews.com/2026/06/apple-patches-beats-studio-buds-flaw.htmlhttps://thehackernews.com/2026/06/apple-patches-beats-studio-buds-flaw.htmlFri, 19 Jun 2026 12:06:09 +0530info@thehackernews.com (The Hacker News)F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Executionhttps://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.htmlhttps://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.htmlThu, 18 Jun 2026 23:02:14 +0530info@thehackernews.com (The Hacker News)Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Networkhttps://thehackernews.com/2026/06/orphaned-ai-agents-how-to-find-hidden.htmlhttps://thehackernews.com/2026/06/orphaned-ai-agents-how-to-find-hidden.htmlThu, 18 Jun 2026 21:03:49 +0530info@thehackernews.com (The Hacker News)ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Storieshttps://thehackernews.com/2026/06/threatsday-bulletin-claude-chat-abuse.htmlhttps://thehackernews.com/2026/06/threatsday-bulletin-claude-chat-abuse.htmlThu, 18 Jun 2026 20:57:54 +0530info@thehackernews.com (The Hacker News)Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2https://thehackernews.com/2026/06/microsoft-details-windows-clipper.htmlhttps://thehackernews.com/2026/06/microsoft-details-windows-clipper.htmlThu, 18 Jun 2026 20:00:42 +0530info@thehackernews.com (The Hacker News)INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023https://thehackernews.com/2026/06/inc-ransomware-claims-830-victims-since.htmlhttps://thehackernews.com/2026/06/inc-ransomware-claims-830-victims-since.htmlThu, 18 Jun 2026 19:42:48 +0530info@thehackernews.com (The Hacker News)The Scripts on Your Checkout Page Are Now a PCI DSS Problemhttps://thehackernews.com/2026/06/the-scripts-on-your-checkout-page-are.htmlhttps://thehackernews.com/2026/06/the-scripts-on-your-checkout-page-are.htmlThu, 18 Jun 2026 19:28:39 +0530info@thehackernews.com (The Hacker News)DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffichttps://thehackernews.com/2026/06/dragonforce-hackers-abuse-microsoft.htmlhttps://thehackernews.com/2026/06/dragonforce-hackers-abuse-microsoft.htmlThu, 18 Jun 2026 19:00:07 +0530info@thehackernews.com (The Hacker News)Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Commentshttps://thehackernews.com/2026/06/crypto-clipper-campaign-abuses-fake.htmlhttps://thehackernews.com/2026/06/crypto-clipper-campaign-abuses-fake.htmlWed, 17 Jun 2026 23:44:24 +0530info@thehackernews.com (The Hacker News)Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Developmenthttps://thehackernews.com/2026/06/microsoft-confirms-rogueplanet-defender_02022423645.htmlhttps://thehackernews.com/2026/06/microsoft-confirms-rogueplanet-defender_02022423645.htmlWed, 17 Jun 2026 23:06:28 +0530info@thehackernews.com (The Hacker News)Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offlinehttps://thehackernews.com/2026/06/junior-hacker-used-tailscale-and.htmlhttps://thehackernews.com/2026/06/junior-hacker-used-tailscale-and.htmlWed, 17 Jun 2026 21:30:56 +0530info@thehackernews.com (The Hacker News)Adversarial Exposure Validation Turns Security Visibility into Confident Prioritizationhttps://thehackernews.com/2026/06/adversarial-exposure-validation-turns.htmlhttps://thehackernews.com/2026/06/adversarial-exposure-validation-turns.htmlWed, 17 Jun 2026 20:28:00 +0530info@thehackernews.com (The Hacker News)Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chatshttps://thehackernews.com/2026/06/malicious-jetbrains-plugins-steal-ai.htmlhttps://thehackernews.com/2026/06/malicious-jetbrains-plugins-steal-ai.htmlWed, 17 Jun 2026 19:21:58 +0530info@thehackernews.com (The Hacker News)The Top 10 Attack Surface Exposures in 2026https://thehackernews.com/2026/06/the-top-10-attack-surface-exposures-in.htmlhttps://thehackernews.com/2026/06/the-top-10-attack-surface-exposures-in.htmlWed, 17 Jun 2026 16:00:00 +0530info@thehackernews.com (The Hacker News)145 Mastra npm Packages Compromised via Hijacked Contributor Accounthttps://thehackernews.com/2026/06/144-mastra-npm-packages-compromised-via.htmlhttps://thehackernews.com/2026/06/144-mastra-npm-packages-compromised-via.htmlWed, 17 Jun 2026 13:08:24 +0530info@thehackernews.com (The Hacker News)CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Executionhttps://thehackernews.com/2026/06/cisa-warns-of-actively-exploited-joomla.htmlhttps://thehackernews.com/2026/06/cisa-warns-of-actively-exploited-joomla.htmlWed, 17 Jun 2026 11:20:46 +0530info@thehackernews.com (The Hacker News)Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squattinghttps://thehackernews.com/2026/06/google-vertex-ai-sdk-flaw-let-attackers.htmlhttps://thehackernews.com/2026/06/google-vertex-ai-sdk-flaw-let-attackers.htmlWed, 17 Jun 2026 00:35:41 +0530info@thehackernews.com (The Hacker News)