The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usFri, 11 Sep 2026 15:32:26 +0530hourly1Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoorshttps://thehackernews.com/2026/09/attackers-chain-jfrog-artifactory-flaws.htmlhttps://thehackernews.com/2026/09/attackers-chain-jfrog-artifactory-flaws.htmlFri, 11 Sep 2026 13:01:05 +0530info@thehackernews.com (The Hacker News)China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoorhttps://thehackernews.com/2026/09/china-linked-unc3569-exploited-sogou.htmlhttps://thehackernews.com/2026/09/china-linked-unc3569-exploited-sogou.htmlFri, 11 Sep 2026 12:44:09 +0530info@thehackernews.com (The Hacker News)PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flawshttps://thehackernews.com/2026/09/papercut-replaces-emergency-patches.htmlhttps://thehackernews.com/2026/09/papercut-replaces-emergency-patches.htmlFri, 11 Sep 2026 12:16:18 +0530info@thehackernews.com (The Hacker News)Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomwarehttps://thehackernews.com/2026/09/cisco-fmc-flaws-exploited-to-steal.htmlhttps://thehackernews.com/2026/09/cisco-fmc-flaws-exploited-to-steal.htmlFri, 11 Sep 2026 11:49:59 +0530info@thehackernews.com (The Hacker News)ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Storieshttps://thehackernews.com/2026/09/threatsday-200-android-flaws-browser.htmlhttps://thehackernews.com/2026/09/threatsday-200-android-flaws-browser.htmlThu, 10 Sep 2026 23:17:38 +0530info@thehackernews.com (The Hacker News)Google Play Early Access Abused to Push Thousands of Deceptive Android Appshttps://thehackernews.com/2026/09/google-play-early-access-abused-to-push.htmlhttps://thehackernews.com/2026/09/google-play-early-access-abused-to-push.htmlThu, 10 Sep 2026 20:06:47 +0530info@thehackernews.com (The Hacker News)Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCEhttps://thehackernews.com/2026/09/check-point-discloses-two-98-rated-vpn.htmlhttps://thehackernews.com/2026/09/check-point-discloses-two-98-rated-vpn.htmlThu, 10 Sep 2026 17:15:05 +0530info@thehackernews.com (The Hacker News)PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instanceshttps://thehackernews.com/2026/09/papercut-attacker-uses-hundreds-of-ai.htmlhttps://thehackernews.com/2026/09/papercut-attacker-uses-hundreds-of-ai.htmlThu, 10 Sep 2026 17:11:53 +0530info@thehackernews.com (The Hacker News)Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checkshttps://thehackernews.com/2026/09/gigabud-creates-android-work-profiles.htmlhttps://thehackernews.com/2026/09/gigabud-creates-android-work-profiles.htmlThu, 10 Sep 2026 17:03:43 +0530info@thehackernews.com (The Hacker News)CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadlinehttps://thehackernews.com/2026/09/cisa-flags-exploited-cisco-citrix.htmlhttps://thehackernews.com/2026/09/cisa-flags-exploited-cisco-citrix.htmlThu, 10 Sep 2026 16:06:46 +0530info@thehackernews.com (The Hacker News)Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Keyhttps://thehackernews.com/2026/09/nearly-1-in-10-exposed-litellm-gateways.htmlhttps://thehackernews.com/2026/09/nearly-1-in-10-exposed-litellm-gateways.htmlThu, 10 Sep 2026 12:42:55 +0530info@thehackernews.com (The Hacker News)Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6https://thehackernews.com/2026/09/anthropic-ai-models-breached-real.htmlhttps://thehackernews.com/2026/09/anthropic-ai-models-breached-real.htmlThu, 10 Sep 2026 12:34:01 +0530info@thehackernews.com (The Hacker News)U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in Cryptohttps://thehackernews.com/2026/09/us-disrupts-xinbi-guarantee-scam.htmlhttps://thehackernews.com/2026/09/us-disrupts-xinbi-guarantee-scam.htmlWed, 09 Sep 2026 23:56:05 +0530info@thehackernews.com (The Hacker News)Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Weekhttps://thehackernews.com/2026/09/four-spy-groups-used-same-chrome-and.htmlhttps://thehackernews.com/2026/09/four-spy-groups-used-same-chrome-and.htmlWed, 09 Sep 2026 22:04:05 +0530info@thehackernews.com (The Hacker News)Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFAhttps://thehackernews.com/2026/09/infostealer-logs-expose-replayable-ai.htmlhttps://thehackernews.com/2026/09/infostealer-logs-expose-replayable-ai.htmlWed, 09 Sep 2026 19:53:55 +0530info@thehackernews.com (The Hacker News)Webinar: Learn How to Answer “Are We Exposed?” Faster After a New CVE https://thehackernews.com/2026/09/webinar-learn-how-to-answer-are-we.htmlhttps://thehackernews.com/2026/09/webinar-learn-how-to-answer-are-we.htmlWed, 09 Sep 2026 17:27:36 +0530info@thehackernews.com (The Hacker News)DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approvalhttps://thehackernews.com/2026/09/deepseek-harness-flaw-let-ai-agents.htmlhttps://thehackernews.com/2026/09/deepseek-harness-flaw-let-ai-agents.htmlWed, 09 Sep 2026 16:47:07 +0530info@thehackernews.com (The Hacker News)Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Walletshttps://thehackernews.com/2026/09/alby-hub-critical-flaw-could-let.htmlhttps://thehackernews.com/2026/09/alby-hub-critical-flaw-could-let.htmlWed, 09 Sep 2026 16:13:04 +0530info@thehackernews.com (The Hacker News)U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grokhttps://thehackernews.com/2026/09/us-agencies-accuse-china-ai-firms-of.htmlhttps://thehackernews.com/2026/09/us-agencies-accuse-china-ai-firms-of.htmlWed, 09 Sep 2026 15:02:26 +0530info@thehackernews.com (The Hacker News)Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandboxhttps://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.htmlhttps://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.htmlWed, 09 Sep 2026 14:41:03 +0530info@thehackernews.com (The Hacker News)New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Roothttps://thehackernews.com/2026/09/new-cpanel-flaw-lets-hosting-account.htmlhttps://thehackernews.com/2026/09/new-cpanel-flaw-lets-hosting-account.htmlWed, 09 Sep 2026 13:49:32 +0530info@thehackernews.com (The Hacker News)F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scanshttps://thehackernews.com/2026/09/f5-big-ip-apm-malware-injects-php-web.htmlhttps://thehackernews.com/2026/09/f5-big-ip-apm-malware-injects-php-web.htmlWed, 09 Sep 2026 13:06:49 +0530info@thehackernews.com (The Hacker News)Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassedhttps://thehackernews.com/2026/09/researcher-drops-new-microsoft-defender.htmlhttps://thehackernews.com/2026/09/researcher-drops-new-microsoft-defender.htmlWed, 09 Sep 2026 12:17:27 +0530info@thehackernews.com (The Hacker News)SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Executionhttps://thehackernews.com/2026/09/sap-patches-cvss-100-kernel-flaw.htmlhttps://thehackernews.com/2026/09/sap-patches-cvss-100-kernel-flaw.htmlWed, 09 Sep 2026 11:55:45 +0530info@thehackernews.com (The Hacker News)Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Dayshttps://thehackernews.com/2026/09/microsoft-patches-record-974-flaws.htmlhttps://thehackernews.com/2026/09/microsoft-patches-record-974-flaws.htmlWed, 09 Sep 2026 10:11:29 +0530info@thehackernews.com (The Hacker News)N-able N-central Pre-Auth RCE Flaw Exploited in the Wildhttps://thehackernews.com/2026/09/n-able-n-central-pre-auth-rce-flaw.htmlhttps://thehackernews.com/2026/09/n-able-n-central-pre-auth-rce-flaw.htmlWed, 09 Sep 2026 09:57:51 +0530info@thehackernews.com (The Hacker News)Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institutionhttps://thehackernews.com/2026/09/slim-spider-steals-crypto-custody.htmlhttps://thehackernews.com/2026/09/slim-spider-steals-crypto-custody.htmlTue, 08 Sep 2026 21:50:23 +0530info@thehackernews.com (The Hacker News)Liquid Hackers Return 3,400 Bitcoin Taken via Elements Bug, Still Holding $47M in BTChttps://thehackernews.com/2026/09/liquid-hackers-return-3400-bitcoin.htmlhttps://thehackernews.com/2026/09/liquid-hackers-return-3400-bitcoin.htmlTue, 08 Sep 2026 20:24:30 +0530info@thehackernews.com (The Hacker News)ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another Accounthttps://thehackernews.com/2026/09/chatgpt-flaw-let-planted-prompt-send.htmlhttps://thehackernews.com/2026/09/chatgpt-flaw-let-planted-prompt-send.htmlTue, 08 Sep 2026 19:49:17 +0530info@thehackernews.com (The Hacker News)Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hourshttps://thehackernews.com/2026/09/autonomous-ai-agents-compromise.htmlhttps://thehackernews.com/2026/09/autonomous-ai-agents-compromise.htmlTue, 08 Sep 2026 19:18:16 +0530info@thehackernews.com (The Hacker News)WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Callshttps://thehackernews.com/2026/09/wechat-zero-click-worm-took-over.htmlhttps://thehackernews.com/2026/09/wechat-zero-click-worm-took-over.htmlTue, 08 Sep 2026 17:24:29 +0530info@thehackernews.com (The Hacker News)What It Took to Reach 1 Billion Build Manifestshttps://thehackernews.com/2026/09/what-it-took-to-reach-1-billion-build.htmlhttps://thehackernews.com/2026/09/what-it-took-to-reach-1-billion-build.htmlTue, 08 Sep 2026 17:19:02 +0530info@thehackernews.com (The Hacker News)FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentialshttps://thehackernews.com/2026/09/freeipa-flaw-chain-lets-anonymous.htmlhttps://thehackernews.com/2026/09/freeipa-flaw-chain-lets-anonymous.htmlTue, 08 Sep 2026 16:52:07 +0530info@thehackernews.com (The Hacker News)Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shellhttps://thehackernews.com/2026/09/adobe-patches-magento-zero-day.htmlhttps://thehackernews.com/2026/09/adobe-patches-magento-zero-day.htmlTue, 08 Sep 2026 14:43:47 +0530info@thehackernews.com (The Hacker News)BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scamshttps://thehackernews.com/2026/09/bengalseo-poisons-bing-search-results.htmlhttps://thehackernews.com/2026/09/bengalseo-poisons-bing-search-results.htmlTue, 08 Sep 2026 14:13:51 +0530info@thehackernews.com (The Hacker News)Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharinghttps://thehackernews.com/2026/09/grindr-to-pay-26-million-to-settle-uk.htmlhttps://thehackernews.com/2026/09/grindr-to-pay-26-million-to-settle-uk.htmlTue, 08 Sep 2026 12:30:43 +0530info@thehackernews.com (The Hacker News)PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Executionhttps://thehackernews.com/2026/09/peep-turns-chrome-and-edge-into-post.htmlhttps://thehackernews.com/2026/09/peep-turns-chrome-and-edge-into-post.htmlMon, 07 Sep 2026 23:42:09 +0530info@thehackernews.com (The Hacker News)Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attackshttps://thehackernews.com/2026/09/microsoft-365-attackers-use-help-desk.htmlhttps://thehackernews.com/2026/09/microsoft-365-attackers-use-help-desk.htmlMon, 07 Sep 2026 21:21:56 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and Morehttps://thehackernews.com/2026/09/weekly-recap-chrome-0-day-router.htmlhttps://thehackernews.com/2026/09/weekly-recap-chrome-0-day-router.htmlMon, 07 Sep 2026 20:06:07 +0530info@thehackernews.com (The Hacker News)Your Cloud Security Checklist Doesn't Work the Way You Think It Doeshttps://thehackernews.com/2026/09/your-cloud-security-checklist-doesnt.htmlhttps://thehackernews.com/2026/09/your-cloud-security-checklist-doesnt.htmlMon, 07 Sep 2026 17:15:00 +0530info@thehackernews.com (The Hacker News)Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hostshttps://thehackernews.com/2026/09/rogue-screenconnect-clients-spread-four.htmlhttps://thehackernews.com/2026/09/rogue-screenconnect-clients-spread-four.htmlMon, 07 Sep 2026 17:06:39 +0530info@thehackernews.com (The Hacker News)Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Releasedhttps://thehackernews.com/2026/09/telerik-ui-padding-oracle-bug-chained.htmlhttps://thehackernews.com/2026/09/telerik-ui-padding-oracle-bug-chained.htmlMon, 07 Sep 2026 16:50:14 +0530info@thehackernews.com (The Hacker News)N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flawhttps://thehackernews.com/2026/09/n-able-issues-fourth-n-central-hotfix.htmlhttps://thehackernews.com/2026/09/n-able-issues-fourth-n-central-hotfix.htmlMon, 07 Sep 2026 14:01:12 +0530info@thehackernews.com (The Hacker News)JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookieshttps://thehackernews.com/2026/09/jsceal-malware-can-bypass-google.htmlhttps://thehackernews.com/2026/09/jsceal-malware-can-bypass-google.htmlMon, 07 Sep 2026 13:23:04 +0530info@thehackernews.com (The Hacker News)Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authenticationhttps://thehackernews.com/2026/09/attackers-hijack-mikrotik-routers.htmlhttps://thehackernews.com/2026/09/attackers-hijack-mikrotik-routers.htmlSun, 06 Sep 2026 15:02:38 +0530info@thehackernews.com (The Hacker News)Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Minerhttps://thehackernews.com/2026/09/four-revstealer-linked-modules-disable.htmlhttps://thehackernews.com/2026/09/four-revstealer-linked-modules-disable.htmlSun, 06 Sep 2026 14:04:20 +0530info@thehackernews.com (The Hacker News)Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Storeshttps://thehackernews.com/2026/09/unpatched-magento-and-adobe-commerce.htmlhttps://thehackernews.com/2026/09/unpatched-magento-and-adobe-commerce.htmlSun, 06 Sep 2026 01:44:47 +0530info@thehackernews.com (The Hacker News)Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentialshttps://thehackernews.com/2026/09/attackers-breached-jetbrains-cadence.htmlhttps://thehackernews.com/2026/09/attackers-breached-jetbrains-cadence.htmlSat, 05 Sep 2026 22:22:33 +0530info@thehackernews.com (The Hacker News)Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Codehttps://thehackernews.com/2026/09/critical-vmware-workstation-and-fusion.htmlhttps://thehackernews.com/2026/09/critical-vmware-workstation-and-fusion.htmlSat, 05 Sep 2026 21:35:08 +0530info@thehackernews.com (The Hacker News)Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deletedhttps://thehackernews.com/2026/09/trezor-says-shipmonk-breach-exposed.htmlhttps://thehackernews.com/2026/09/trezor-says-shipmonk-breach-exposed.htmlSat, 05 Sep 2026 19:47:02 +0530info@thehackernews.com (The Hacker News)