The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usThu, 21 May 2026 02:11:13 +0530hourly1Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Developmenthttps://thehackernews.com/2026/05/microsoft-open-sources-rampart-and.htmlhttps://thehackernews.com/2026/05/microsoft-open-sources-rampart-and.htmlWed, 20 May 2026 22:36:54 +0530info@thehackernews.com (The Hacker News)Microsoft Takes Down Malware-Signing Service Behind Ransomware Attackshttps://thehackernews.com/2026/05/microsoft-takes-down-malware-signing.htmlhttps://thehackernews.com/2026/05/microsoft-takes-down-malware-signing.htmlWed, 20 May 2026 20:06:44 +0530info@thehackernews.com (The Hacker News)Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph APIhttps://thehackernews.com/2026/05/webworm-deploys-echocreep-and-graphworm.htmlhttps://thehackernews.com/2026/05/webworm-deploys-echocreep-and-graphworm.htmlWed, 20 May 2026 18:21:43 +0530info@thehackernews.com (The Hacker News)Agent AI is Coming. Are You Ready?https://thehackernews.com/2026/05/agent-ai-is-coming-are-you-ready.htmlhttps://thehackernews.com/2026/05/agent-ai-is-coming-are-you-ready.htmlWed, 20 May 2026 17:28:00 +0530info@thehackernews.com (The Hacker News)GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal Reposhttps://thehackernews.com/2026/05/github-investigating-teampcp-claimed.htmlhttps://thehackernews.com/2026/05/github-investigating-teampcp-claimed.htmlWed, 20 May 2026 17:08:43 +0530info@thehackernews.com (The Hacker News)Typosquatting Is No Longer a User Problem. It's a Supply Chain Problemhttps://thehackernews.com/2026/05/typosquatting-is-no-longer-user-problem.htmlhttps://thehackernews.com/2026/05/typosquatting-is-no-longer-user-problem.htmlWed, 20 May 2026 16:00:00 +0530info@thehackernews.com (The Hacker News)Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploithttps://thehackernews.com/2026/05/microsoft-releases-mitigation-for.htmlhttps://thehackernews.com/2026/05/microsoft-releases-mitigation-for.htmlWed, 20 May 2026 13:58:26 +0530info@thehackernews.com (The Hacker News)Grafana GitHub Breach Exposes Source Code via TanStack npm Attackhttps://thehackernews.com/2026/05/grafana-github-breach-exposes-source.htmlhttps://thehackernews.com/2026/05/grafana-github-breach-exposes-source.htmlWed, 20 May 2026 10:42:06 +0530info@thehackernews.com (The Hacker News)Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid Requests Using 455 Appshttps://thehackernews.com/2026/05/trapdoor-android-ad-fraud-scheme-hit.htmlhttps://thehackernews.com/2026/05/trapdoor-android-ad-fraud-scheme-hit.htmlTue, 19 May 2026 22:08:12 +0530info@thehackernews.com (The Hacker News)DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerabilityhttps://thehackernews.com/2026/05/dirtydecrypt-poc-released-for-linux.htmlhttps://thehackernews.com/2026/05/dirtydecrypt-poc-released-for-linux.htmlTue, 19 May 2026 20:26:26 +0530info@thehackernews.com (The Hacker News)The New Phishing Click: How OAuth Consent Bypasses MFAhttps://thehackernews.com/2026/05/the-new-phishing-click-how-oauth.htmlhttps://thehackernews.com/2026/05/the-new-phishing-click-how-oauth.htmlTue, 19 May 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Preparehttps://thehackernews.com/2026/05/drupal-to-release-urgent-core-security.htmlhttps://thehackernews.com/2026/05/drupal-to-release-urgent-core-security.htmlTue, 19 May 2026 16:14:45 +0530info@thehackernews.com (The Hacker News)SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Accesshttps://thehackernews.com/2026/05/seppmail-secure-e-mail-gateway.htmlhttps://thehackernews.com/2026/05/seppmail-secure-e-mail-gateway.htmlTue, 19 May 2026 14:53:15 +0530info@thehackernews.com (The Hacker News)Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealerhttps://thehackernews.com/2026/05/compromised-nx-console-18950-targeted.htmlhttps://thehackernews.com/2026/05/compromised-nx-console-18950-targeted.htmlTue, 19 May 2026 13:19:23 +0530info@thehackernews.com (The Hacker News)Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD Credentialshttps://thehackernews.com/2026/05/github-actions-supply-chain-attack.htmlhttps://thehackernews.com/2026/05/github-actions-supply-chain-attack.htmlTue, 19 May 2026 10:58:06 +0530info@thehackernews.com (The Hacker News)Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Accounthttps://thehackernews.com/2026/05/mini-shai-hulud-pushes-malicious-antv.htmlhttps://thehackernews.com/2026/05/mini-shai-hulud-pushes-malicious-antv.htmlTue, 19 May 2026 10:24:17 +0530info@thehackernews.com (The Hacker News)INTERPOL Operation Ramz Disrupts MENA Cybercrime Networks with 201 Arrestshttps://thehackernews.com/2026/05/interpol-operation-ramz-disrupts-mena.htmlhttps://thehackernews.com/2026/05/interpol-operation-ramz-disrupts-mena.htmlMon, 18 May 2026 22:51:18 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and Morehttps://thehackernews.com/2026/05/weekly-recap-exchange-0-day-npm-worm.htmlhttps://thehackernews.com/2026/05/weekly-recap-exchange-0-day-npm-worm.htmlMon, 18 May 2026 19:20:17 +0530info@thehackernews.com (The Hacker News)How to Reduce Phishing Exposure Before It Turns into Business Disruptionhttps://thehackernews.com/2026/05/how-to-reduce-phishing-exposure-before.htmlhttps://thehackernews.com/2026/05/how-to-reduce-phishing-exposure-before.htmlMon, 18 May 2026 18:30:00 +0530info@thehackernews.com (The Hacker News)Developer Workstations Are Now Part of the Software Supply Chainhttps://thehackernews.com/2026/05/developer-workstations-are-now-part-of.htmlhttps://thehackernews.com/2026/05/developer-workstations-are-now-part-of.htmlMon, 18 May 2026 16:53:41 +0530info@thehackernews.com (The Hacker News)Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flawshttps://thehackernews.com/2026/05/ivanti-fortinet-sap-vmware-n8n-patch.htmlhttps://thehackernews.com/2026/05/ivanti-fortinet-sap-vmware-n8n-patch.htmlMon, 18 May 2026 16:24:05 +0530info@thehackernews.com (The Hacker News)MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systemshttps://thehackernews.com/2026/05/miniplasma-windows-0-day-enables-system.htmlhttps://thehackernews.com/2026/05/miniplasma-windows-0-day-enables-system.htmlMon, 18 May 2026 14:27:34 +0530info@thehackernews.com (The Hacker News)Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malwarehttps://thehackernews.com/2026/05/four-malicious-npm-packages-deliver.htmlhttps://thehackernews.com/2026/05/four-malicious-npm-packages-deliver.htmlMon, 18 May 2026 14:27:26 +0530info@thehackernews.com (The Hacker News)Pre-Stuxnet Fast16 Malware Tampered with Nuclear Weapons Simulationshttps://thehackernews.com/2026/05/pre-stuxnet-fast16-malware-tampered.htmlhttps://thehackernews.com/2026/05/pre-stuxnet-fast16-malware-tampered.htmlMon, 18 May 2026 12:16:37 +0530info@thehackernews.com (The Hacker News)NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCEhttps://thehackernews.com/2026/05/nginx-cve-2026-42945-exploited-in-wild.htmlhttps://thehackernews.com/2026/05/nginx-cve-2026-42945-exploited-in-wild.htmlSun, 17 May 2026 17:27:53 +0530info@thehackernews.com (The Hacker News)Grafana GitHub Token Breach Led to Codebase Download and Extortion Attempthttps://thehackernews.com/2026/05/grafana-github-token-breach-led-to.htmlhttps://thehackernews.com/2026/05/grafana-github-token-breach-led-to.htmlSun, 17 May 2026 12:43:33 +0530info@thehackernews.com (The Hacker News)Funnel Builder Flaw Under Active Exploitation Enables WooCommerce Checkout Skimminghttps://thehackernews.com/2026/05/funnel-builder-flaw-under-active.htmlhttps://thehackernews.com/2026/05/funnel-builder-flaw-under-active.htmlSat, 16 May 2026 20:50:48 +0530info@thehackernews.com (The Hacker News)Turla Turns Kazuar Backdoor Into Modular P2P Botnet for Persistent Accesshttps://thehackernews.com/2026/05/turla-turns-kazuar-backdoor-into.htmlhttps://thehackernews.com/2026/05/turla-turns-kazuar-backdoor-into.htmlFri, 15 May 2026 22:40:25 +0530info@thehackernews.com (The Hacker News)Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistencehttps://thehackernews.com/2026/05/four-openclaw-flaws-enable-data-theft.htmlhttps://thehackernews.com/2026/05/four-openclaw-flaws-enable-data-theft.htmlFri, 15 May 2026 19:05:04 +0530info@thehackernews.com (The Hacker News)What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surfacehttps://thehackernews.com/2026/05/what-45-days-of-watching-your-own-tools.htmlhttps://thehackernews.com/2026/05/what-45-days-of-watching-your-own-tools.htmlFri, 15 May 2026 16:30:00 +0530info@thehackernews.com (The Hacker News)TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updateshttps://thehackernews.com/2026/05/tanstack-supply-chain-attack-hits-two.htmlhttps://thehackernews.com/2026/05/tanstack-supply-chain-attack-hits-two.htmlFri, 15 May 2026 16:24:44 +0530info@thehackernews.com (The Hacker News)On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Emailhttps://thehackernews.com/2026/05/on-prem-microsoft-exchange-server-cve.htmlhttps://thehackernews.com/2026/05/on-prem-microsoft-exchange-server-cve.htmlFri, 15 May 2026 11:49:04 +0530info@thehackernews.com (The Hacker News)CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploitshttps://thehackernews.com/2026/05/cisa-adds-cisco-sd-wan-cve-2026-20182.htmlhttps://thehackernews.com/2026/05/cisa-adds-cisco-sd-wan-cve-2026-20182.htmlFri, 15 May 2026 10:58:03 +0530info@thehackernews.com (The Hacker News)Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Accesshttps://thehackernews.com/2026/05/cisco-catalyst-sd-wan-controller-auth.htmlhttps://thehackernews.com/2026/05/cisco-catalyst-sd-wan-controller-auth.htmlThu, 14 May 2026 23:15:20 +0530info@thehackernews.com (The Hacker News)Stealer Backdoor Found in 3 Node-IPC Versions Targeting Developer Secretshttps://thehackernews.com/2026/05/stealer-backdoor-found-in-3-node-ipc.htmlhttps://thehackernews.com/2026/05/stealer-backdoor-found-in-3-node-ipc.htmlThu, 14 May 2026 22:52:43 +0530info@thehackernews.com (The Hacker News)ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Storieshttps://thehackernews.com/2026/05/threatsday-bulletin-pan-os-rce-mythos.htmlhttps://thehackernews.com/2026/05/threatsday-bulletin-pan-os-rce-mythos.htmlThu, 14 May 2026 21:37:46 +0530info@thehackernews.com (The Hacker News)Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strikehttps://thehackernews.com/2026/05/ghostwriter-targets-ukrainian.htmlhttps://thehackernews.com/2026/05/ghostwriter-targets-ukrainian.htmlThu, 14 May 2026 19:30:37 +0530info@thehackernews.com (The Hacker News)PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosurehttps://thehackernews.com/2026/05/praisonai-cve-2026-44338-auth-bypass.htmlhttps://thehackernews.com/2026/05/praisonai-cve-2026-44338-auth-bypass.htmlThu, 14 May 2026 17:10:14 +0530info@thehackernews.com (The Hacker News)How AI Hallucinations Are Creating Real Security Riskshttps://thehackernews.com/2026/05/how-ai-hallucinations-are-creating-real.htmlhttps://thehackernews.com/2026/05/how-ai-hallucinations-are-creating-real.htmlThu, 14 May 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalationhttps://thehackernews.com/2026/05/windows-zero-days-expose-bitlocker.htmlhttps://thehackernews.com/2026/05/windows-zero-days-expose-bitlocker.htmlThu, 14 May 2026 14:55:50 +0530info@thehackernews.com (The Hacker News)New Fragnesia Linux Kernel LPE Grants Root Access via Page Cache Corruptionhttps://thehackernews.com/2026/05/new-fragnesia-linux-kernel-lpe-grants.htmlhttps://thehackernews.com/2026/05/new-fragnesia-linux-kernel-lpe-grants.htmlThu, 14 May 2026 12:36:15 +0530info@thehackernews.com (The Hacker News)18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCEhttps://thehackernews.com/2026/05/18-year-old-nginx-rewrite-module-flaw.htmlhttps://thehackernews.com/2026/05/18-year-old-nginx-rewrite-module-flaw.htmlThu, 14 May 2026 11:30:09 +0530info@thehackernews.com (The Hacker News)Microsoft's MDASH AI System Finds 16 Windows Flaws Fixed in Patch Tuesdayhttps://thehackernews.com/2026/05/microsofts-mdash-ai-system-finds-16.htmlhttps://thehackernews.com/2026/05/microsofts-mdash-ai-system-finds-16.htmlWed, 13 May 2026 19:16:02 +0530info@thehackernews.com (The Hacker News)Azerbaijani Energy Firm Hit by Repeated Microsoft Exchange Exploitationhttps://thehackernews.com/2026/05/azerbaijani-energy-firm-hit-by-repeated.htmlhttps://thehackernews.com/2026/05/azerbaijani-energy-firm-hit-by-repeated.htmlWed, 13 May 2026 18:30:00 +0530info@thehackernews.com (The Hacker News)[Webinar] How Modern Attack Paths Cross Code, Pipelines, and Cloudhttps://thehackernews.com/2026/05/webinar-why-your-appsec-tools-miss.htmlhttps://thehackernews.com/2026/05/webinar-why-your-appsec-tools-miss.htmlWed, 13 May 2026 17:22:43 +0530info@thehackernews.com (The Hacker News)Most Remediation Programs Never Confirm the Fix Actually Workedhttps://thehackernews.com/2026/05/most-remediation-programs-never-confirm.htmlhttps://thehackernews.com/2026/05/most-remediation-programs-never-confirm.htmlWed, 13 May 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Microsoft Patches 138 Vulnerabilities, Including DNS and Netlogon RCE Flawshttps://thehackernews.com/2026/05/microsoft-patches-138-vulnerabilities.htmlhttps://thehackernews.com/2026/05/microsoft-patches-138-vulnerabilities.htmlWed, 13 May 2026 16:06:10 +0530info@thehackernews.com (The Hacker News)GemStuffer Abuses 150+ RubyGems to Exfiltrate Scraped U.K. Council Portal Datahttps://thehackernews.com/2026/05/gemstuffer-abuses-150-rubygems-to.htmlhttps://thehackernews.com/2026/05/gemstuffer-abuses-150-rubygems-to.htmlWed, 13 May 2026 13:38:54 +0530info@thehackernews.com (The Hacker News)Android Adds Intrusion Logging for Sophisticated Spyware Forensicshttps://thehackernews.com/2026/05/android-adds-intrusion-logging-for.htmlhttps://thehackernews.com/2026/05/android-adds-intrusion-logging-for.htmlWed, 13 May 2026 12:25:42 +0530info@thehackernews.com (The Hacker News)New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Executionhttps://thehackernews.com/2026/05/new-exim-bdat-vulnerability-exposes.htmlhttps://thehackernews.com/2026/05/new-exim-bdat-vulnerability-exposes.htmlTue, 12 May 2026 22:14:00 +0530info@thehackernews.com (The Hacker News)