The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usWed, 12 Aug 2026 04:36:27 +0530hourly1Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attackhttps://thehackernews.com/2026/08/microsoft-patches-398-flaws-including.htmlhttps://thehackernews.com/2026/08/microsoft-patches-398-flaws-including.htmlWed, 12 Aug 2026 01:40:55 +0530info@thehackernews.com (The Hacker News)Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsinghttps://thehackernews.com/2026/08/kimwolf-v7-android-botnet-makes-http2.htmlhttps://thehackernews.com/2026/08/kimwolf-v7-android-botnet-makes-http2.htmlWed, 12 Aug 2026 01:06:37 +0530info@thehackernews.com (The Hacker News)Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Clienthttps://thehackernews.com/2026/08/zoom-annotation-flaws-could-let-meeting.htmlhttps://thehackernews.com/2026/08/zoom-annotation-flaws-could-let-meeting.htmlWed, 12 Aug 2026 00:38:47 +0530info@thehackernews.com (The Hacker News)Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commandshttps://thehackernews.com/2026/08/sandworm-linked-uac-0145-uses-fake-job.htmlhttps://thehackernews.com/2026/08/sandworm-linked-uac-0145-uses-fake-job.htmlWed, 12 Aug 2026 00:06:47 +0530info@thehackernews.com (The Hacker News)Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCEhttps://thehackernews.com/2026/08/researchers-disclose-ai-assisted.htmlhttps://thehackernews.com/2026/08/researchers-disclose-ai-assisted.htmlTue, 11 Aug 2026 22:17:44 +0530info@thehackernews.com (The Hacker News)DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupthttps://thehackernews.com/2026/08/deadlock-ransomware-uses-polygon-smart.htmlhttps://thehackernews.com/2026/08/deadlock-ransomware-uses-polygon-smart.htmlTue, 11 Aug 2026 22:05:27 +0530info@thehackernews.com (The Hacker News)OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Developmenthttps://thehackernews.com/2026/08/openai-launches-gpt-56-cyber-with.htmlhttps://thehackernews.com/2026/08/openai-launches-gpt-56-cyber-with.htmlTue, 11 Aug 2026 18:41:23 +0530info@thehackernews.com (The Hacker News)A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Deviceshttps://thehackernews.com/2026/08/a-malicious-sim-card-can-run-attacker.htmlhttps://thehackernews.com/2026/08/a-malicious-sim-card-can-run-attacker.htmlTue, 11 Aug 2026 17:35:03 +0530info@thehackernews.com (The Hacker News)Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repohttps://thehackernews.com/2026/08/mozilla-revokes-firefox-and-thunderbird.htmlhttps://thehackernews.com/2026/08/mozilla-revokes-firefox-and-thunderbird.htmlTue, 11 Aug 2026 17:34:51 +0530info@thehackernews.com (The Hacker News)Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workershttps://thehackernews.com/2026/08/researchers-built-fake-crypto-startup.htmlhttps://thehackernews.com/2026/08/researchers-built-fake-crypto-startup.htmlTue, 11 Aug 2026 17:05:03 +0530info@thehackernews.com (The Hacker News)Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11https://thehackernews.com/2026/08/researchers-turn-usb-auto-install-into.htmlhttps://thehackernews.com/2026/08/researchers-turn-usb-auto-install-into.htmlTue, 11 Aug 2026 16:18:26 +0530info@thehackernews.com (The Hacker News)Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secretshttps://thehackernews.com/2026/08/malicious-mcp-servers-can-split.htmlhttps://thehackernews.com/2026/08/malicious-mcp-servers-can-split.htmlTue, 11 Aug 2026 15:54:00 +0530info@thehackernews.com (The Hacker News)Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networkshttps://thehackernews.com/2026/08/gunra-ransomware-exploits-fortinet-and.htmlhttps://thehackernews.com/2026/08/gunra-ransomware-exploits-fortinet-and.htmlTue, 11 Aug 2026 14:46:24 +0530info@thehackernews.com (The Hacker News)Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbinehttps://thehackernews.com/2026/08/hackers-breach-polish-power-plant.htmlhttps://thehackernews.com/2026/08/hackers-breach-polish-power-plant.htmlTue, 11 Aug 2026 12:25:45 +0530info@thehackernews.com (The Hacker News)BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Adminshttps://thehackernews.com/2026/08/bdthemes-supply-chain-attack-poisons.htmlhttps://thehackernews.com/2026/08/bdthemes-supply-chain-attack-poisons.htmlTue, 11 Aug 2026 11:18:44 +0530info@thehackernews.com (The Hacker News)Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Developmenthttps://thehackernews.com/2026/08/shipping-1050-more-code-watch-this.htmlhttps://thehackernews.com/2026/08/shipping-1050-more-code-watch-this.htmlMon, 10 Aug 2026 22:59:17 +0530info@thehackernews.com (The Hacker News)China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flawhttps://thehackernews.com/2026/08/china-linked-hackers-deploy-new.htmlhttps://thehackernews.com/2026/08/china-linked-hackers-deploy-new.htmlMon, 10 Aug 2026 22:08:37 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoorshttps://thehackernews.com/2026/08/weekly-recap-ai-goes-rogue-metabase-0.htmlhttps://thehackernews.com/2026/08/weekly-recap-ai-goes-rogue-metabase-0.htmlMon, 10 Aug 2026 20:30:29 +0530info@thehackernews.com (The Hacker News)Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Developmenthttps://thehackernews.com/2026/08/kimsuky-builds-offline-ai-stack-that.htmlhttps://thehackernews.com/2026/08/kimsuky-builds-offline-ai-stack-that.htmlMon, 10 Aug 2026 18:49:58 +0530info@thehackernews.com (The Hacker News)New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFAhttps://thehackernews.com/2026/08/new-passkey-attacks-can-recover-synced.htmlhttps://thehackernews.com/2026/08/new-passkey-attacks-can-recover-synced.htmlMon, 10 Aug 2026 17:55:04 +0530info@thehackernews.com (The Hacker News)TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCorehttps://thehackernews.com/2026/08/head-mare-exploits-trueconf-flaws-to.htmlhttps://thehackernews.com/2026/08/head-mare-exploits-trueconf-flaws-to.htmlMon, 10 Aug 2026 17:03:41 +0530info@thehackernews.com (The Hacker News)Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentialshttps://thehackernews.com/2026/08/solidity-pro-vs-code-extensions-steal.htmlhttps://thehackernews.com/2026/08/solidity-pro-vs-code-extensions-steal.htmlMon, 10 Aug 2026 13:08:23 +0530info@thehackernews.com (The Hacker News)OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pausehttps://thehackernews.com/2026/08/openais-next-ai-model-astra-shows-cyber.htmlhttps://thehackernews.com/2026/08/openais-next-ai-model-astra-shows-cyber.htmlMon, 10 Aug 2026 11:20:03 +0530info@thehackernews.com (The Hacker News)Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackershttps://thehackernews.com/2026/08/atlassian-rovo-can-be-tricked-into.htmlhttps://thehackernews.com/2026/08/atlassian-rovo-can-be-tricked-into.htmlSat, 08 Aug 2026 14:24:50 +0530info@thehackernews.com (The Hacker News)New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokenshttps://thehackernews.com/2026/08/new-css-attacks-can-break-webmail.htmlhttps://thehackernews.com/2026/08/new-css-attacks-can-break-webmail.htmlSat, 08 Aug 2026 13:33:57 +0530info@thehackernews.com (The Hacker News)Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authenticationhttps://thehackernews.com/2026/08/metabase-zero-day-exploited-in-wild.htmlhttps://thehackernews.com/2026/08/metabase-zero-day-exploited-in-wild.htmlSat, 08 Aug 2026 12:28:31 +0530info@thehackernews.com (The Hacker News)N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persisthttps://thehackernews.com/2026/08/n-central-attackers-reach-managed.htmlhttps://thehackernews.com/2026/08/n-central-attackers-reach-managed.htmlSat, 08 Aug 2026 12:27:43 +0530info@thehackernews.com (The Hacker News)Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attemptshttps://thehackernews.com/2026/08/progress-kemp-loadmaster-flaw-hits-cisa.htmlhttps://thehackernews.com/2026/08/progress-kemp-loadmaster-flaw-hits-cisa.htmlSat, 08 Aug 2026 12:22:16 +0530info@thehackernews.com (The Hacker News)Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealerhttps://thehackernews.com/2026/08/nearly-800-malicious-npm-packages.htmlhttps://thehackernews.com/2026/08/nearly-800-malicious-npm-packages.htmlSat, 08 Aug 2026 00:18:17 +0530info@thehackernews.com (The Hacker News)ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Walletshttps://thehackernews.com/2026/08/clickfix-attacks-deliver-macos-stealer.htmlhttps://thehackernews.com/2026/08/clickfix-attacks-deliver-macos-stealer.htmlFri, 07 Aug 2026 23:59:08 +0530info@thehackernews.com (The Hacker News)UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Datahttps://thehackernews.com/2026/08/unc6671-vishing-attacks-target-personal.htmlhttps://thehackernews.com/2026/08/unc6671-vishing-attacks-target-personal.htmlFri, 07 Aug 2026 23:46:13 +0530info@thehackernews.com (The Hacker News)New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAPhttps://thehackernews.com/2026/08/new-wordpress-pre-auth-xss-could-lead.htmlhttps://thehackernews.com/2026/08/new-wordpress-pre-auth-xss-could-lead.htmlFri, 07 Aug 2026 18:26:23 +0530info@thehackernews.com (The Hacker News)Growing Up The Hard Wayhttps://thehackernews.com/2026/08/growing-up-hard-way.htmlhttps://thehackernews.com/2026/08/growing-up-hard-way.htmlFri, 07 Aug 2026 17:25:26 +0530info@thehackernews.com (The Hacker News)18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containershttps://thehackernews.com/2026/08/18-year-old-linux-sctp-flaw-could-let.htmlhttps://thehackernews.com/2026/08/18-year-old-linux-sctp-flaw-could-let.htmlFri, 07 Aug 2026 16:40:33 +0530info@thehackernews.com (The Hacker News)New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tableshttps://thehackernews.com/2026/08/new-natjack-attacks-hijack-tcp-sessions.htmlhttps://thehackernews.com/2026/08/new-natjack-attacks-hijack-tcp-sessions.htmlFri, 07 Aug 2026 16:28:38 +0530info@thehackernews.com (The Hacker News)Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emailshttps://thehackernews.com/2026/08/microsoft-365-aitm-phishing-hijacks.htmlhttps://thehackernews.com/2026/08/microsoft-365-aitm-phishing-hijacks.htmlFri, 07 Aug 2026 16:08:27 +0530info@thehackernews.com (The Hacker News)AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Dayhttps://thehackernews.com/2026/08/ai-assisted-http-terminator-finds-novel.htmlhttps://thehackernews.com/2026/08/ai-assisted-http-terminator-finds-novel.htmlFri, 07 Aug 2026 15:39:54 +0530info@thehackernews.com (The Hacker News)Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Accesshttps://thehackernews.com/2026/08/malware-can-abuse-windows-hello-for.htmlhttps://thehackernews.com/2026/08/malware-can-abuse-windows-hello-for.htmlFri, 07 Aug 2026 14:22:11 +0530info@thehackernews.com (The Hacker News)Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secretshttps://thehackernews.com/2026/08/claude-code-and-gemini-cli-flaws-let.htmlhttps://thehackernews.com/2026/08/claude-code-and-gemini-cli-flaws-let.htmlFri, 07 Aug 2026 13:48:35 +0530info@thehackernews.com (The Hacker News)TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaignhttps://thehackernews.com/2026/08/teampcp-linked-to-redis-attacks-dating.htmlhttps://thehackernews.com/2026/08/teampcp-linked-to-redis-attacks-dating.htmlFri, 07 Aug 2026 12:20:05 +0530info@thehackernews.com (The Hacker News)New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hostshttps://thehackernews.com/2026/08/new-zapscape-kvm-flaw-could-let.htmlhttps://thehackernews.com/2026/08/new-zapscape-kvm-flaw-could-let.htmlThu, 06 Aug 2026 23:28:30 +0530info@thehackernews.com (The Hacker News)Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugshttps://thehackernews.com/2026/08/cisco-patches-12-sd-wan-and-ios-xe.htmlhttps://thehackernews.com/2026/08/cisco-patches-12-sd-wan-and-ios-xe.htmlThu, 06 Aug 2026 22:43:15 +0530info@thehackernews.com (The Hacker News)New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUshttps://thehackernews.com/2026/08/new-interrupt-injection-attack-can.htmlhttps://thehackernews.com/2026/08/new-interrupt-injection-attack-can.htmlThu, 06 Aug 2026 21:47:13 +0530info@thehackernews.com (The Hacker News)ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Storieshttps://thehackernews.com/2026/08/threatsday-odysseus-rce-samsung-one.htmlhttps://thehackernews.com/2026/08/threatsday-odysseus-rce-samsung-one.htmlThu, 06 Aug 2026 20:54:31 +0530info@thehackernews.com (The Hacker News)Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Citieshttps://thehackernews.com/2026/08/over-4400-rockwell-plcs-exposed-online.htmlhttps://thehackernews.com/2026/08/over-4400-rockwell-plcs-exposed-online.htmlThu, 06 Aug 2026 17:46:58 +0530info@thehackernews.com (The Hacker News)CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Appshttps://thehackernews.com/2026/08/cryptojs-weak-rng-behind-57-million-in.htmlhttps://thehackernews.com/2026/08/cryptojs-weak-rng-behind-57-million-in.htmlThu, 06 Aug 2026 17:19:48 +0530info@thehackernews.com (The Hacker News)Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasseshttps://thehackernews.com/2026/08/webkit-proxy-bypasses-can-expose-real.htmlhttps://thehackernews.com/2026/08/webkit-proxy-bypasses-can-expose-real.htmlThu, 06 Aug 2026 17:03:08 +0530info@thehackernews.com (The Hacker News)AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memoryhttps://thehackernews.com/2026/08/ai-recommendation-poisoning-how-ask-ai.htmlhttps://thehackernews.com/2026/08/ai-recommendation-poisoning-how-ask-ai.htmlThu, 06 Aug 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Accesshttps://thehackernews.com/2026/08/attackers-compile-khunt-inside-oracle.htmlhttps://thehackernews.com/2026/08/attackers-compile-khunt-inside-oracle.htmlThu, 06 Aug 2026 14:49:23 +0530info@thehackernews.com (The Hacker News)AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Modelhttps://thehackernews.com/2026/08/aws-google-and-vercel-patch-agent-flaws.htmlhttps://thehackernews.com/2026/08/aws-google-and-vercel-patch-agent-flaws.htmlThu, 06 Aug 2026 14:27:30 +0530info@thehackernews.com (The Hacker News)