The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usWed, 17 Jun 2026 20:12:56 +0530hourly1Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chatshttps://thehackernews.com/2026/06/malicious-jetbrains-plugins-steal-ai.htmlhttps://thehackernews.com/2026/06/malicious-jetbrains-plugins-steal-ai.htmlWed, 17 Jun 2026 19:21:58 +0530info@thehackernews.com (The Hacker News)Adversarial Exposure Validation Turns Security Visibility into Confident Prioritizationhttps://thehackernews.com/2026/06/adversarial-exposure-validation-turns.htmlhttps://thehackernews.com/2026/06/adversarial-exposure-validation-turns.htmlWed, 17 Jun 2026 17:28:00 +0530info@thehackernews.com (The Hacker News)The Top 10 Attack Surface Exposures in 2026https://thehackernews.com/2026/06/the-top-10-attack-surface-exposures-in.htmlhttps://thehackernews.com/2026/06/the-top-10-attack-surface-exposures-in.htmlWed, 17 Jun 2026 16:00:00 +0530info@thehackernews.com (The Hacker News)144 Mastra npm Packages Compromised via Hijacked Contributor Accounthttps://thehackernews.com/2026/06/144-mastra-npm-packages-compromised-via.htmlhttps://thehackernews.com/2026/06/144-mastra-npm-packages-compromised-via.htmlWed, 17 Jun 2026 13:08:24 +0530info@thehackernews.com (The Hacker News)CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Executionhttps://thehackernews.com/2026/06/cisa-warns-of-actively-exploited-joomla.htmlhttps://thehackernews.com/2026/06/cisa-warns-of-actively-exploited-joomla.htmlWed, 17 Jun 2026 11:20:46 +0530info@thehackernews.com (The Hacker News)Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squattinghttps://thehackernews.com/2026/06/google-vertex-ai-sdk-flaw-let-attackers.htmlhttps://thehackernews.com/2026/06/google-vertex-ai-sdk-flaw-let-attackers.htmlWed, 17 Jun 2026 00:35:41 +0530info@thehackernews.com (The Hacker News)ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lureshttps://thehackernews.com/2026/06/clickfix-campaigns-expand-malware.htmlhttps://thehackernews.com/2026/06/clickfix-campaigns-expand-malware.htmlTue, 16 Jun 2026 23:11:28 +0530info@thehackernews.com (The Hacker News)New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Fundshttps://thehackernews.com/2026/06/new-rokarolla-android-malware-steals.htmlhttps://thehackernews.com/2026/06/new-rokarolla-android-malware-steals.htmlTue, 16 Jun 2026 18:40:17 +0530info@thehackernews.com (The Hacker News)Survey: 94% of Incidents Involve Anonymized Infrastructure. Teams Are Still Reactivehttps://thehackernews.com/2026/06/survey-94-of-incidents-involve.htmlhttps://thehackernews.com/2026/06/survey-94-of-incidents-involve.htmlTue, 16 Jun 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Weekhttps://thehackernews.com/2026/06/attackers-exploit-three-fortinet.htmlhttps://thehackernews.com/2026/06/attackers-exploit-three-fortinet.htmlTue, 16 Jun 2026 16:00:41 +0530info@thehackernews.com (The Hacker News)China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealthhttps://thehackernews.com/2026/06/china-linked-sprysocks-backdoor-expands.htmlhttps://thehackernews.com/2026/06/china-linked-sprysocks-backdoor-expands.htmlTue, 16 Jun 2026 15:14:34 +0530info@thehackernews.com (The Hacker News)Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malwarehttps://thehackernews.com/2026/06/fake-microsoft-alerts-used-to-deploy.htmlhttps://thehackernews.com/2026/06/fake-microsoft-alerts-used-to-deploy.htmlTue, 16 Jun 2026 13:44:55 +0530info@thehackernews.com (The Hacker News)Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flawhttps://thehackernews.com/2026/06/cisco-releases-security-updates-for.htmlhttps://thehackernews.com/2026/06/cisco-releases-security-updates-for.htmlTue, 16 Jun 2026 11:35:58 +0530info@thehackernews.com (The Hacker News)CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalationhttps://thehackernews.com/2026/06/cisa-flags-litespeed-cpanel-plugin-flaw.htmlhttps://thehackernews.com/2026/06/cisa-flags-litespeed-cpanel-plugin-flaw.htmlTue, 16 Jun 2026 11:11:52 +0530info@thehackernews.com (The Hacker News)Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emailshttps://thehackernews.com/2026/06/chinese-hackers-abused-google-workspace.htmlhttps://thehackernews.com/2026/06/chinese-hackers-abused-google-workspace.htmlTue, 16 Jun 2026 01:14:06 +0530info@thehackernews.com (The Hacker News)North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channelshttps://thehackernews.com/2026/06/north-korean-hackers-are-turning.htmlhttps://thehackernews.com/2026/06/north-korean-hackers-are-turning.htmlTue, 16 Jun 2026 01:02:52 +0530info@thehackernews.com (The Hacker News)LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servershttps://thehackernews.com/2026/06/litellm-vulnerability-chain-lets-low.htmlhttps://thehackernews.com/2026/06/litellm-vulnerability-chain-lets-low.htmlMon, 15 Jun 2026 22:09:01 +0530info@thehackernews.com (The Hacker News)One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codeshttps://thehackernews.com/2026/06/one-click-microsoft-365-copilot-flaw.htmlhttps://thehackernews.com/2026/06/one-click-microsoft-365-copilot-flaw.htmlMon, 15 Jun 2026 20:39:05 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and Morehttps://thehackernews.com/2026/06/weekly-recap-chrome-0-day-unifi.htmlhttps://thehackernews.com/2026/06/weekly-recap-chrome-0-day-unifi.htmlMon, 15 Jun 2026 19:19:29 +0530info@thehackernews.com (The Hacker News)The Onboarding Password Mistake That Creates Unnecessary Riskhttps://thehackernews.com/2026/06/the-onboarding-password-mistake-that.htmlhttps://thehackernews.com/2026/06/the-onboarding-password-mistake-that.htmlMon, 15 Jun 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)152 Chrome Wallpaper Extensions with 105K Installs Linked to Adware and Fake Traffichttps://thehackernews.com/2026/06/152-chrome-wallpaper-extensions-with.htmlhttps://thehackernews.com/2026/06/152-chrome-wallpaper-extensions-with.htmlMon, 15 Jun 2026 16:37:50 +0530info@thehackernews.com (The Hacker News)Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Siteshttps://thehackernews.com/2026/06/popular-wordpress-plugin-scripts.htmlhttps://thehackernews.com/2026/06/popular-wordpress-plugin-scripts.htmlMon, 15 Jun 2026 15:29:38 +0530info@thehackernews.com (The Hacker News)Sniper Dz Scams Target MENA Users via Fake Facebook Offers and Browser Alertshttps://thehackernews.com/2026/06/sniper-dz-scams-target-mena-users-via.htmlhttps://thehackernews.com/2026/06/sniper-dz-scams-target-mena-users-via.htmlMon, 15 Jun 2026 12:00:22 +0530info@thehackernews.com (The Hacker News)Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flawhttps://thehackernews.com/2026/06/palo-alto-warns-of-active-exploitation.htmlhttps://thehackernews.com/2026/06/palo-alto-warns-of-active-exploitation.htmlMon, 15 Jun 2026 11:47:32 +0530info@thehackernews.com (The Hacker News)Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authenticationhttps://thehackernews.com/2026/06/critical-splunk-enterprise-flaw-lets.htmlhttps://thehackernews.com/2026/06/critical-splunk-enterprise-flaw-lets.htmlSat, 13 Jun 2026 18:53:03 +0530info@thehackernews.com (The Hacker News)U.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign Nationalshttps://thehackernews.com/2026/06/us-orders-anthropic-to-suspend-fable-5.htmlhttps://thehackernews.com/2026/06/us-orders-anthropic-to-suspend-fable-5.htmlSat, 13 Jun 2026 11:12:50 +0530info@thehackernews.com (The Hacker News)Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkithttps://thehackernews.com/2026/06/over-400-arch-linux-aur-packages.htmlhttps://thehackernews.com/2026/06/over-400-arch-linux-aur-packages.htmlSat, 13 Jun 2026 01:03:25 +0530info@thehackernews.com (The Hacker News)Google Sues Chinese Smishing Network Accused of Using Gemini AI in Phishinghttps://thehackernews.com/2026/06/google-sues-chinese-smishing-network.htmlhttps://thehackernews.com/2026/06/google-sues-chinese-smishing-network.htmlSat, 13 Jun 2026 00:29:32 +0530info@thehackernews.com (The Hacker News)China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decadehttps://thehackernews.com/2026/06/china-linked-hackers-backdoored-linux.htmlhttps://thehackernews.com/2026/06/china-linked-hackers-backdoored-linux.htmlFri, 12 Jun 2026 23:47:55 +0530info@thehackernews.com (The Hacker News)Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Codehttps://thehackernews.com/2026/06/agentjacking-attack-tricks-ai-coding.htmlhttps://thehackernews.com/2026/06/agentjacking-attack-tricks-ai-coding.htmlFri, 12 Jun 2026 17:34:33 +0530info@thehackernews.com (The Hacker News)Rethinking MDR as Attackers and Defenders Embrace AIhttps://thehackernews.com/2026/06/rethinking-mdr-as-attackers-and.htmlhttps://thehackernews.com/2026/06/rethinking-mdr-as-attackers-and.htmlFri, 12 Jun 2026 16:30:00 +0530info@thehackernews.com (The Hacker News)LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Executionhttps://thehackernews.com/2026/06/langgraph-flaw-chain-exposes-self.htmlhttps://thehackernews.com/2026/06/langgraph-flaw-chain-exposes-self.htmlFri, 12 Jun 2026 15:20:36 +0530info@thehackernews.com (The Hacker News)INTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests Administratorhttps://thehackernews.com/2026/06/interpol-takes-down-sniper-dz-phishing.htmlhttps://thehackernews.com/2026/06/interpol-takes-down-sniper-dz-phishing.htmlFri, 12 Jun 2026 14:22:55 +0530info@thehackernews.com (The Hacker News)Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangshttps://thehackernews.com/2026/06/europol-disrupts-audia6-crypto.htmlhttps://thehackernews.com/2026/06/europol-disrupts-audia6-crypto.htmlFri, 12 Jun 2026 12:08:41 +0530info@thehackernews.com (The Hacker News)ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universitieshttps://thehackernews.com/2026/06/shinyhunters-exploits-oracle-peoplesoft.htmlhttps://thehackernews.com/2026/06/shinyhunters-exploits-oracle-peoplesoft.htmlFri, 12 Jun 2026 01:59:23 +0530info@thehackernews.com (The Hacker News)New Attacks Trick OpenClaw AI Agent Into Running Code and Leaking Secretshttps://thehackernews.com/2026/06/new-attacks-trick-openclaw-ai-agent.htmlhttps://thehackernews.com/2026/06/new-attacks-trick-openclaw-ai-agent.htmlThu, 11 Jun 2026 23:16:32 +0530info@thehackernews.com (The Hacker News)New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Fileshttps://thehackernews.com/2026/06/new-greatxml-exploit-bypasses-windows.htmlhttps://thehackernews.com/2026/06/new-greatxml-exploit-bypasses-windows.htmlThu, 11 Jun 2026 23:13:52 +0530info@thehackernews.com (The Hacker News)The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Wormhttps://thehackernews.com/2026/06/the-gentlemen-ransomware-claims-478.htmlhttps://thehackernews.com/2026/06/the-gentlemen-ransomware-claims-478.htmlThu, 11 Jun 2026 22:20:47 +0530info@thehackernews.com (The Hacker News)Cybersecurity Stars Awards 2026: Winners Announced Across 95 Categorieshttps://thehackernews.com/2026/06/cybersecurity-stars-awards-2026-winners.htmlhttps://thehackernews.com/2026/06/cybersecurity-stars-awards-2026-winners.htmlThu, 11 Jun 2026 18:56:13 +0530info@thehackernews.com (The Hacker News)ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New Storieshttps://thehackernews.com/2026/06/threatsday-bulletin-worm-code-leaked-ai.htmlhttps://thehackernews.com/2026/06/threatsday-bulletin-worm-code-leaked-ai.htmlThu, 11 Jun 2026 18:50:41 +0530info@thehackernews.com (The Hacker News)AI Broke Vulnerability Management. That's Why CISOs Are Moving Budget to BAS.https://thehackernews.com/2026/06/ai-broke-vulnerability-management-thats.htmlhttps://thehackernews.com/2026/06/ai-broke-vulnerability-management-thats.htmlThu, 11 Jun 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)OceanLotus Hits Vietnam Investors With SPECTRALVIPER in FireAnt Attackhttps://thehackernews.com/2026/06/oceanlotus-hits-vietnam-investors-with.htmlhttps://thehackernews.com/2026/06/oceanlotus-hits-vietnam-investors-with.htmlThu, 11 Jun 2026 15:15:58 +0530info@thehackernews.com (The Hacker News)GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attackshttps://thehackernews.com/2026/06/github-to-disable-npm-install-scripts.htmlhttps://thehackernews.com/2026/06/github-to-disable-npm-install-scripts.htmlThu, 11 Jun 2026 11:53:03 +0530info@thehackernews.com (The Hacker News)China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissancehttps://thehackernews.com/2026/06/china-linked-jdy-botnet-expands-to-1500.htmlhttps://thehackernews.com/2026/06/china-linked-jdy-botnet-expands-to-1500.htmlWed, 10 Jun 2026 21:38:42 +0530info@thehackernews.com (The Hacker News)Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilitieshttps://thehackernews.com/2026/06/ivanti-fortinet-and-sap-release-patches.htmlhttps://thehackernews.com/2026/06/ivanti-fortinet-and-sap-release-patches.htmlWed, 10 Jun 2026 20:40:59 +0530info@thehackernews.com (The Hacker News)Langflow Vulnerability CVE-2026-5027 Exploited for Unauthenticated RCEhttps://thehackernews.com/2026/06/unpatched-langflow-flaw-cve-2026-5027.htmlhttps://thehackernews.com/2026/06/unpatched-langflow-flaw-cve-2026-5027.htmlWed, 10 Jun 2026 20:30:59 +0530info@thehackernews.com (The Hacker News)CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitationhttps://thehackernews.com/2026/06/cisa-adds-cisco-chrome-and-arista-flaws.htmlhttps://thehackernews.com/2026/06/cisa-adds-cisco-chrome-and-arista-flaws.htmlWed, 10 Jun 2026 20:14:29 +0530info@thehackernews.com (The Hacker News)Your Automated Pentest Looks Clean. See What It Missed in This Expert Webinarhttps://thehackernews.com/2026/06/your-automated-pentest-looks-clean-see.htmlhttps://thehackernews.com/2026/06/your-automated-pentest-looks-clean-see.htmlWed, 10 Jun 2026 15:57:49 +0530info@thehackernews.com (The Hacker News)Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugshttps://thehackernews.com/2026/06/microsoft-patches-record-206-flaws.htmlhttps://thehackernews.com/2026/06/microsoft-patches-record-206-flaws.htmlWed, 10 Jun 2026 15:08:13 +0530info@thehackernews.com (The Hacker News)Anthropic Releases Claude Fable 5, Its Most Powerful AI Yet, With Cyber Safeguardshttps://thehackernews.com/2026/06/anthropic-releases-claude-fable-5-its.htmlhttps://thehackernews.com/2026/06/anthropic-releases-claude-fable-5-its.htmlWed, 10 Jun 2026 13:07:59 +0530info@thehackernews.com (The Hacker News)