The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usSat, 16 May 2026 05:03:50 +0530hourly1Turla Turns Kazuar Backdoor Into Modular P2P Botnet for Persistent Accesshttps://thehackernews.com/2026/05/turla-turns-kazuar-backdoor-into.htmlhttps://thehackernews.com/2026/05/turla-turns-kazuar-backdoor-into.htmlFri, 15 May 2026 22:40:25 +0530info@thehackernews.com (The Hacker News)Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistencehttps://thehackernews.com/2026/05/four-openclaw-flaws-enable-data-theft.htmlhttps://thehackernews.com/2026/05/four-openclaw-flaws-enable-data-theft.htmlFri, 15 May 2026 19:05:04 +0530info@thehackernews.com (The Hacker News)What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surfacehttps://thehackernews.com/2026/05/what-45-days-of-watching-your-own-tools.htmlhttps://thehackernews.com/2026/05/what-45-days-of-watching-your-own-tools.htmlFri, 15 May 2026 16:30:00 +0530info@thehackernews.com (The Hacker News)TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updateshttps://thehackernews.com/2026/05/tanstack-supply-chain-attack-hits-two.htmlhttps://thehackernews.com/2026/05/tanstack-supply-chain-attack-hits-two.htmlFri, 15 May 2026 16:24:44 +0530info@thehackernews.com (The Hacker News)On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Emailhttps://thehackernews.com/2026/05/on-prem-microsoft-exchange-server-cve.htmlhttps://thehackernews.com/2026/05/on-prem-microsoft-exchange-server-cve.htmlFri, 15 May 2026 11:49:04 +0530info@thehackernews.com (The Hacker News)CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploitshttps://thehackernews.com/2026/05/cisa-adds-cisco-sd-wan-cve-2026-20182.htmlhttps://thehackernews.com/2026/05/cisa-adds-cisco-sd-wan-cve-2026-20182.htmlFri, 15 May 2026 10:58:03 +0530info@thehackernews.com (The Hacker News)Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Accesshttps://thehackernews.com/2026/05/cisco-catalyst-sd-wan-controller-auth.htmlhttps://thehackernews.com/2026/05/cisco-catalyst-sd-wan-controller-auth.htmlThu, 14 May 2026 23:15:20 +0530info@thehackernews.com (The Hacker News)Stealer Backdoor Found in 3 Node-IPC Versions Targeting Developer Secretshttps://thehackernews.com/2026/05/stealer-backdoor-found-in-3-node-ipc.htmlhttps://thehackernews.com/2026/05/stealer-backdoor-found-in-3-node-ipc.htmlThu, 14 May 2026 22:52:43 +0530info@thehackernews.com (The Hacker News)ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Storieshttps://thehackernews.com/2026/05/threatsday-bulletin-pan-os-rce-mythos.htmlhttps://thehackernews.com/2026/05/threatsday-bulletin-pan-os-rce-mythos.htmlThu, 14 May 2026 21:37:46 +0530info@thehackernews.com (The Hacker News)Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strikehttps://thehackernews.com/2026/05/ghostwriter-targets-ukrainian.htmlhttps://thehackernews.com/2026/05/ghostwriter-targets-ukrainian.htmlThu, 14 May 2026 19:30:37 +0530info@thehackernews.com (The Hacker News)PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosurehttps://thehackernews.com/2026/05/praisonai-cve-2026-44338-auth-bypass.htmlhttps://thehackernews.com/2026/05/praisonai-cve-2026-44338-auth-bypass.htmlThu, 14 May 2026 17:10:14 +0530info@thehackernews.com (The Hacker News)How AI Hallucinations Are Creating Real Security Riskshttps://thehackernews.com/2026/05/how-ai-hallucinations-are-creating-real.htmlhttps://thehackernews.com/2026/05/how-ai-hallucinations-are-creating-real.htmlThu, 14 May 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalationhttps://thehackernews.com/2026/05/windows-zero-days-expose-bitlocker.htmlhttps://thehackernews.com/2026/05/windows-zero-days-expose-bitlocker.htmlThu, 14 May 2026 14:55:50 +0530info@thehackernews.com (The Hacker News)New Fragnesia Linux Kernel LPE Grants Root Access via Page Cache Corruptionhttps://thehackernews.com/2026/05/new-fragnesia-linux-kernel-lpe-grants.htmlhttps://thehackernews.com/2026/05/new-fragnesia-linux-kernel-lpe-grants.htmlThu, 14 May 2026 12:36:15 +0530info@thehackernews.com (The Hacker News)18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCEhttps://thehackernews.com/2026/05/18-year-old-nginx-rewrite-module-flaw.htmlhttps://thehackernews.com/2026/05/18-year-old-nginx-rewrite-module-flaw.htmlThu, 14 May 2026 11:30:09 +0530info@thehackernews.com (The Hacker News)Microsoft's MDASH AI System Finds 16 Windows Flaws Fixed in Patch Tuesdayhttps://thehackernews.com/2026/05/microsofts-mdash-ai-system-finds-16.htmlhttps://thehackernews.com/2026/05/microsofts-mdash-ai-system-finds-16.htmlWed, 13 May 2026 19:16:02 +0530info@thehackernews.com (The Hacker News)Azerbaijani Energy Firm Hit by Repeated Microsoft Exchange Exploitationhttps://thehackernews.com/2026/05/azerbaijani-energy-firm-hit-by-repeated.htmlhttps://thehackernews.com/2026/05/azerbaijani-energy-firm-hit-by-repeated.htmlWed, 13 May 2026 18:30:00 +0530info@thehackernews.com (The Hacker News)[Webinar] How Modern Attack Paths Cross Code, Pipelines, and Cloudhttps://thehackernews.com/2026/05/webinar-why-your-appsec-tools-miss.htmlhttps://thehackernews.com/2026/05/webinar-why-your-appsec-tools-miss.htmlWed, 13 May 2026 17:22:43 +0530info@thehackernews.com (The Hacker News)Most Remediation Programs Never Confirm the Fix Actually Workedhttps://thehackernews.com/2026/05/most-remediation-programs-never-confirm.htmlhttps://thehackernews.com/2026/05/most-remediation-programs-never-confirm.htmlWed, 13 May 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Microsoft Patches 138 Vulnerabilities, Including DNS and Netlogon RCE Flawshttps://thehackernews.com/2026/05/microsoft-patches-138-vulnerabilities.htmlhttps://thehackernews.com/2026/05/microsoft-patches-138-vulnerabilities.htmlWed, 13 May 2026 16:06:10 +0530info@thehackernews.com (The Hacker News)GemStuffer Abuses 150+ RubyGems to Exfiltrate Scraped U.K. Council Portal Datahttps://thehackernews.com/2026/05/gemstuffer-abuses-150-rubygems-to.htmlhttps://thehackernews.com/2026/05/gemstuffer-abuses-150-rubygems-to.htmlWed, 13 May 2026 13:38:54 +0530info@thehackernews.com (The Hacker News)Android Adds Intrusion Logging for Sophisticated Spyware Forensicshttps://thehackernews.com/2026/05/android-adds-intrusion-logging-for.htmlhttps://thehackernews.com/2026/05/android-adds-intrusion-logging-for.htmlWed, 13 May 2026 12:25:42 +0530info@thehackernews.com (The Hacker News)New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Executionhttps://thehackernews.com/2026/05/new-exim-bdat-vulnerability-exposes.htmlhttps://thehackernews.com/2026/05/new-exim-bdat-vulnerability-exposes.htmlTue, 12 May 2026 22:14:00 +0530info@thehackernews.com (The Hacker News)RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploadedhttps://thehackernews.com/2026/05/rubygems-suspends-new-signups-after.htmlhttps://thehackernews.com/2026/05/rubygems-suspends-new-signups-after.htmlTue, 12 May 2026 20:17:00 +0530info@thehackernews.com (The Hacker News)New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivotshttps://thehackernews.com/2026/05/new-trickmo-variant-uses-ton-c2-and.htmlhttps://thehackernews.com/2026/05/new-trickmo-variant-uses-ton-c2-and.htmlTue, 12 May 2026 18:20:00 +0530info@thehackernews.com (The Hacker News)Webinar: What the Riskiest SOC Alerts Go Unanswered - and How Radiant Security Can Helphttps://thehackernews.com/2026/05/webinar-what-riskiest-soc-alerts-go.htmlhttps://thehackernews.com/2026/05/webinar-what-riskiest-soc-alerts-go.htmlTue, 12 May 2026 17:28:00 +0530info@thehackernews.com (The Hacker News)Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packageshttps://thehackernews.com/2026/05/mini-shai-hulud-worm-compromises.htmlhttps://thehackernews.com/2026/05/mini-shai-hulud-worm-compromises.htmlTue, 12 May 2026 17:16:00 +0530info@thehackernews.com (The Hacker News)Why Agentic AI Is Security's Next Blind Spothttps://thehackernews.com/2026/05/why-agentic-ai-is-securitys-next-blind.htmlhttps://thehackernews.com/2026/05/why-agentic-ai-is-securitys-next-blind.htmlTue, 12 May 2026 16:00:00 +0530info@thehackernews.com (The Hacker News)Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65TB Canvas Leakhttps://thehackernews.com/2026/05/instructure-reaches-ransom-agreement.htmlhttps://thehackernews.com/2026/05/instructure-reaches-ransom-agreement.htmlTue, 12 May 2026 13:07:00 +0530info@thehackernews.com (The Hacker News)OpenAI Launches Daybreak for AI-Powered Vulnerability Detection and Patch Validationhttps://thehackernews.com/2026/05/openai-launches-daybreak-for-ai-powered.htmlhttps://thehackernews.com/2026/05/openai-launches-daybreak-for-ai-powered.htmlTue, 12 May 2026 12:25:00 +0530info@thehackernews.com (The Hacker News)iOS 26.5 Brings Default End-to-End Encrypted RCS Messaging Between iPhone and Androidhttps://thehackernews.com/2026/05/ios-265-brings-default-end-to-end.htmlhttps://thehackernews.com/2026/05/ios-265-brings-default-end-to-end.htmlTue, 12 May 2026 10:48:00 +0530info@thehackernews.com (The Hacker News)TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain Attackhttps://thehackernews.com/2026/05/teampcp-compromises-checkmarx-jenkins.htmlhttps://thehackernews.com/2026/05/teampcp-compromises-checkmarx-jenkins.htmlTue, 12 May 2026 00:00:00 +0530info@thehackernews.com (The Hacker News)cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoorhttps://thehackernews.com/2026/05/cpanel-cve-2026-41940-under-active.htmlhttps://thehackernews.com/2026/05/cpanel-cve-2026-41940-under-active.htmlMon, 11 May 2026 23:24:00 +0530info@thehackernews.com (The Hacker News)Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitationhttps://thehackernews.com/2026/05/hackers-used-ai-to-develop-first-known.htmlhttps://thehackernews.com/2026/05/hackers-used-ai-to-develop-first-known.htmlMon, 11 May 2026 21:15:00 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and Morehttps://thehackernews.com/2026/05/weekly-recap-linux-rootkit-macos-crypto.htmlhttps://thehackernews.com/2026/05/weekly-recap-linux-rootkit-macos-crypto.htmlMon, 11 May 2026 18:06:00 +0530info@thehackernews.com (The Hacker News)Your Purple Team Isn't Purple — It's Just Red and Blue in the Same Roomhttps://thehackernews.com/2026/05/your-purple-team-isnt-purple-its-just.htmlhttps://thehackernews.com/2026/05/your-purple-team-isnt-purple-its-just.htmlMon, 11 May 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Fake OpenAI Privacy Filter Repo Hits #1 on Hugging Face, Draws 244K Downloadshttps://thehackernews.com/2026/05/fake-openai-privacy-filter-repo-hits-1.htmlhttps://thehackernews.com/2026/05/fake-openai-privacy-filter-repo-hits-1.htmlMon, 11 May 2026 12:35:00 +0530info@thehackernews.com (The Hacker News)Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leakhttps://thehackernews.com/2026/05/ollama-out-of-bounds-read-vulnerability.htmlhttps://thehackernews.com/2026/05/ollama-out-of-bounds-read-vulnerability.htmlSun, 10 May 2026 18:11:00 +0530info@thehackernews.com (The Hacker News)cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Nowhttps://thehackernews.com/2026/05/cpanel-whm-patch-3-new-vulnerabilities.htmlhttps://thehackernews.com/2026/05/cpanel-whm-patch-3-new-vulnerabilities.htmlSat, 09 May 2026 12:46:00 +0530info@thehackernews.com (The Hacker News)TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Wormshttps://thehackernews.com/2026/05/tclbanker-banking-trojan-targets.htmlhttps://thehackernews.com/2026/05/tclbanker-banking-trojan-targets.htmlFri, 08 May 2026 23:42:00 +0530info@thehackernews.com (The Hacker News)Fake Call History Apps Stole Payments From Users After 7.3 Million Play Store Downloadshttps://thehackernews.com/2026/05/fake-call-history-apps-stole-payments.htmlhttps://thehackernews.com/2026/05/fake-call-history-apps-stole-payments.htmlFri, 08 May 2026 20:38:00 +0530info@thehackernews.com (The Hacker News)One Click, Total Shutdown: The "Patient Zero" Webinar on Killing Stealth Breacheshttps://thehackernews.com/2026/05/one-click-total-shutdown-patient-zero.htmlhttps://thehackernews.com/2026/05/one-click-total-shutdown-patient-zero.htmlFri, 08 May 2026 19:31:00 +0530info@thehackernews.com (The Hacker News)Quasar Linux RAT Steals Developer Credentials for Software Supply Chain Compromisehttps://thehackernews.com/2026/05/quasar-linux-rat-steals-developer.htmlhttps://thehackernews.com/2026/05/quasar-linux-rat-steals-developer.htmlFri, 08 May 2026 16:30:00 +0530info@thehackernews.com (The Hacker News)One Missed Threat Per Week: What 25M Alerts Reveal About Low-Severity Riskhttps://thehackernews.com/2026/05/one-missed-threat-per-week-what-25m.htmlhttps://thehackernews.com/2026/05/one-missed-threat-per-week-what-25m.htmlFri, 08 May 2026 16:00:00 +0530info@thehackernews.com (The Hacker News)New Linux PamDOORa Backdoor Uses PAM Modules to Steal SSH Credentialshttps://thehackernews.com/2026/05/new-linux-pamdoora-backdoor-uses-pam.htmlhttps://thehackernews.com/2026/05/new-linux-pamdoora-backdoor-uses-pam.htmlFri, 08 May 2026 14:11:00 +0530info@thehackernews.com (The Hacker News)Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributionshttps://thehackernews.com/2026/05/linux-kernel-dirty-frag-lpe-exploit.htmlhttps://thehackernews.com/2026/05/linux-kernel-dirty-frag-lpe-exploit.htmlFri, 08 May 2026 10:42:00 +0530info@thehackernews.com (The Hacker News)Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Accesshttps://thehackernews.com/2026/05/ivanti-epmm-cve-2026-6973-rce-under.htmlhttps://thehackernews.com/2026/05/ivanti-epmm-cve-2026-6973-rce-under.htmlThu, 07 May 2026 23:25:00 +0530info@thehackernews.com (The Hacker News)PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systemshttps://thehackernews.com/2026/05/pcpjack-credential-stealer-exploits-5.htmlhttps://thehackernews.com/2026/05/pcpjack-credential-stealer-exploits-5.htmlThu, 07 May 2026 23:15:00 +0530info@thehackernews.com (The Hacker News)PAN-OS RCE Exploit Under Active Use Enabling Root Access and Espionagehttps://thehackernews.com/2026/05/pan-os-rce-exploit-under-active-use.htmlhttps://thehackernews.com/2026/05/pan-os-rce-exploit-under-active-use.htmlThu, 07 May 2026 19:04:00 +0530info@thehackernews.com (The Hacker News)ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days, Patch-or-Die Alerts and 25+ New Storieshttps://thehackernews.com/2026/05/threatsday-bulletin-edge-plaintext.htmlhttps://thehackernews.com/2026/05/threatsday-bulletin-edge-plaintext.htmlThu, 07 May 2026 17:03:00 +0530info@thehackernews.com (The Hacker News)