The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usMon, 04 May 2026 09:24:05 +0530hourly1CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEVhttps://thehackernews.com/2026/05/cisa-adds-actively-exploited-linux-root.htmlhttps://thehackernews.com/2026/05/cisa-adds-actively-exploited-linux-root.htmlSun, 03 May 2026 11:56:00 +0530info@thehackernews.com (The Hacker News)Trellix Confirms Source Code Breach With Unauthorized Repository Accesshttps://thehackernews.com/2026/05/trellix-confirms-source-code-breach.htmlhttps://thehackernews.com/2026/05/trellix-confirms-source-code-breach.htmlSat, 02 May 2026 12:11:00 +0530info@thehackernews.com (The Hacker News)30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaignhttps://thehackernews.com/2026/05/30000-facebook-accounts-hacked-via.htmlhttps://thehackernews.com/2026/05/30000-facebook-accounts-hacked-via.htmlFri, 01 May 2026 23:39:00 +0530info@thehackernews.com (The Hacker News)Cybercrime Groups Using Vishing and SSO Abuse in Rapid SaaS Extortion Attackshttps://thehackernews.com/2026/05/cybercrime-groups-using-vishing-and-sso.htmlhttps://thehackernews.com/2026/05/cybercrime-groups-using-vishing-and-sso.htmlFri, 01 May 2026 19:56:00 +0530info@thehackernews.com (The Hacker News)China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activistshttps://thehackernews.com/2026/05/china-linked-hackers-target-asian.htmlhttps://thehackernews.com/2026/05/china-linked-hackers-target-asian.htmlFri, 01 May 2026 19:32:00 +0530info@thehackernews.com (The Hacker News)Top Five Sales Challenges Costing MSPs Cybersecurity Revenuehttps://thehackernews.com/2026/05/top-five-sales-challenges-costing-msps.htmlhttps://thehackernews.com/2026/05/top-five-sales-challenges-costing-msps.htmlFri, 01 May 2026 16:00:00 +0530info@thehackernews.com (The Hacker News)Two Cybersecurity Professionals Get 4-Year Sentences in BlackCat Ransomware Attackshttps://thehackernews.com/2026/05/two-cybersecurity-professionals-get-4.htmlhttps://thehackernews.com/2026/05/two-cybersecurity-professionals-get-4.htmlFri, 01 May 2026 15:26:00 +0530info@thehackernews.com (The Hacker News)Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Thefthttps://thehackernews.com/2026/05/poisoned-ruby-gems-and-go-modules.htmlhttps://thehackernews.com/2026/05/poisoned-ruby-gems-and-go-modules.htmlFri, 01 May 2026 15:13:00 +0530info@thehackernews.com (The Hacker News)PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentialshttps://thehackernews.com/2026/04/pytorch-lightning-compromised-in-pypi.htmlhttps://thehackernews.com/2026/04/pytorch-lightning-compromised-in-pypi.htmlThu, 30 Apr 2026 22:01:00 +0530info@thehackernews.com (The Hacker News)ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More Storieshttps://thehackernews.com/2026/04/threatsday-bulletin-sms-blaster-busts.htmlhttps://thehackernews.com/2026/04/threatsday-bulletin-sms-blaster-busts.htmlThu, 30 Apr 2026 19:25:00 +0530info@thehackernews.com (The Hacker News)New Python Backdoor Uses Tunneling Service to Steal Browser and Cloud Credentialshttps://thehackernews.com/2026/04/new-python-backdoor-uses-tunneling.htmlhttps://thehackernews.com/2026/04/new-python-backdoor-uses-tunneling.htmlThu, 30 Apr 2026 18:06:00 +0530info@thehackernews.com (The Hacker News)EtherRAT Distribution Spoofing Administrative Tools via GitHub Facadeshttps://thehackernews.com/2026/04/etherrat-distribution-spoofing.htmlhttps://thehackernews.com/2026/04/etherrat-distribution-spoofing.htmlThu, 30 Apr 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributionshttps://thehackernews.com/2026/04/new-linux-copy-fail-vulnerability.htmlhttps://thehackernews.com/2026/04/new-linux-copy-fail-vulnerability.htmlThu, 30 Apr 2026 14:54:00 +0530info@thehackernews.com (The Hacker News)Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Executionhttps://thehackernews.com/2026/04/google-fixes-cvss-10-gemini-cli-ci-rce.htmlhttps://thehackernews.com/2026/04/google-fixes-cvss-10-gemini-cli-ci-rce.htmlThu, 30 Apr 2026 12:37:00 +0530info@thehackernews.com (The Hacker News)SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attackhttps://thehackernews.com/2026/04/sap-npm-packages-compromised-by-mini.htmlhttps://thehackernews.com/2026/04/sap-npm-packages-compromised-by-mini.htmlWed, 29 Apr 2026 21:56:00 +0530info@thehackernews.com (The Hacker News)New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATshttps://thehackernews.com/2026/04/new-wave-of-dprk-attacks-uses-ai.htmlhttps://thehackernews.com/2026/04/new-wave-of-dprk-attacks-uses-ai.htmlWed, 29 Apr 2026 20:13:00 +0530info@thehackernews.com (The Hacker News)Webinar: How to Automate Exposure Validation to Match the Speed of AI Attackshttps://thehackernews.com/2026/04/webinar-how-to-automate-exposure.htmlhttps://thehackernews.com/2026/04/webinar-how-to-automate-exposure.htmlWed, 29 Apr 2026 17:32:00 +0530info@thehackernews.com (The Hacker News)What to Look for in an Exposure Management Platform (And What Most of Them Get Wrong)https://thehackernews.com/2026/04/what-to-look-for-in-exposure-management.htmlhttps://thehackernews.com/2026/04/what-to-look-for-in-exposure-management.htmlWed, 29 Apr 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Critical cPanel Authentication Vulnerability Identified — Update Your Server Immediatelyhttps://thehackernews.com/2026/04/critical-cpanel-authentication.htmlhttps://thehackernews.com/2026/04/critical-cpanel-authentication.htmlWed, 29 Apr 2026 15:07:00 +0530info@thehackernews.com (The Hacker News)CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEVhttps://thehackernews.com/2026/04/cisa-adds-actively-exploited.htmlhttps://thehackernews.com/2026/04/cisa-adds-actively-exploited.htmlWed, 29 Apr 2026 14:16:00 +0530info@thehackernews.com (The Hacker News)LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosurehttps://thehackernews.com/2026/04/litellm-cve-2026-42208-sql-injection.htmlhttps://thehackernews.com/2026/04/litellm-cve-2026-42208-sql-injection.htmlWed, 29 Apr 2026 11:04:00 +0530info@thehackernews.com (The Hacker News)Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Pushhttps://thehackernews.com/2026/04/researchers-discover-critical-github.htmlhttps://thehackernews.com/2026/04/researchers-discover-critical-github.htmlTue, 28 Apr 2026 23:49:00 +0530info@thehackernews.com (The Hacker News)Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer Campaignhttps://thehackernews.com/2026/04/brazilian-lofygang-resurfaces-after.htmlhttps://thehackernews.com/2026/04/brazilian-lofygang-resurfaces-after.htmlTue, 28 Apr 2026 23:09:00 +0530info@thehackernews.com (The Hacker News)VECT 2.0 Ransomware Irreversibly Destroys Files Over 131KB on Windows, Linux, ESXihttps://thehackernews.com/2026/04/vect-20-ransomware-irreversibly.htmlhttps://thehackernews.com/2026/04/vect-20-ransomware-irreversibly.htmlTue, 28 Apr 2026 19:31:00 +0530info@thehackernews.com (The Hacker News)Why Secure Data Movement Is the Zero Trust Bottleneck Nobody Talks Abouthttps://thehackernews.com/2026/04/why-secure-data-movement-is-zero-trust.htmlhttps://thehackernews.com/2026/04/why-secure-data-movement-is-zero-trust.htmlTue, 28 Apr 2026 17:28:00 +0530info@thehackernews.com (The Hacker News)Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCEhttps://thehackernews.com/2026/04/critical-cve-2026-25874-leaves-hugging.htmlhttps://thehackernews.com/2026/04/critical-cve-2026-25874-leaves-hugging.htmlTue, 28 Apr 2026 16:48:00 +0530info@thehackernews.com (The Hacker News)After Mythos: New Playbooks For a Zero-Window Erahttps://thehackernews.com/2026/04/after-mythos-new-playbooks-for-zero.htmlhttps://thehackernews.com/2026/04/after-mythos-new-playbooks-for-zero.htmlTue, 28 Apr 2026 16:00:00 +0530info@thehackernews.com (The Hacker News)Chinese Silk Typhoon Hacker Extradited to U.S. Over COVID Research Cyberattackshttps://thehackernews.com/2026/04/chinese-silk-typhoon-hacker-extradited.htmlhttps://thehackernews.com/2026/04/chinese-silk-typhoon-hacker-extradited.htmlTue, 28 Apr 2026 13:27:00 +0530info@thehackernews.com (The Hacker News)Microsoft Patches Entra ID Role Flaw That Enabled Service Principal Takeoverhttps://thehackernews.com/2026/04/microsoft-patches-entra-id-role-flaw.htmlhttps://thehackernews.com/2026/04/microsoft-patches-entra-id-role-flaw.htmlTue, 28 Apr 2026 12:07:00 +0530info@thehackernews.com (The Hacker News)Microsoft Confirms Active Exploitation of Windows Shell CVE-2026-32202https://thehackernews.com/2026/04/microsoft-confirms-active-exploitation.htmlhttps://thehackernews.com/2026/04/microsoft-confirms-active-exploitation.htmlTue, 28 Apr 2026 11:20:00 +0530info@thehackernews.com (The Hacker News)Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 Attackhttps://thehackernews.com/2026/04/checkmarx-confirms-github-repository.htmlhttps://thehackernews.com/2026/04/checkmarx-confirms-github-repository.htmlMon, 27 Apr 2026 19:49:00 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: Fast16 Malware, XChat Launch, Federal Backdoor, AI Employee Tracking & Morehttps://thehackernews.com/2026/04/weekly-recap-fast16-malware-xchat.htmlhttps://thehackernews.com/2026/04/weekly-recap-fast16-malware-xchat.htmlMon, 27 Apr 2026 19:00:00 +0530info@thehackernews.com (The Hacker News)Mythos Changed the Math on Vulnerability Discovery. Most Teams Aren't Ready for the Remediation Sidehttps://thehackernews.com/2026/04/mythos-changed-math-on-vulnerability.htmlhttps://thehackernews.com/2026/04/mythos-changed-math-on-vulnerability.htmlMon, 27 Apr 2026 17:28:00 +0530info@thehackernews.com (The Hacker News)PhantomCore Exploits TrueConf Vulnerabilities to Breach Russian Networkshttps://thehackernews.com/2026/04/phantomcore-exploits-trueconf.htmlhttps://thehackernews.com/2026/04/phantomcore-exploits-trueconf.htmlMon, 27 Apr 2026 17:24:00 +0530info@thehackernews.com (The Hacker News)Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 Malwarehttps://thehackernews.com/2026/04/researchers-uncover-73-fake-vs-code.htmlhttps://thehackernews.com/2026/04/researchers-uncover-73-fake-vs-code.htmlMon, 27 Apr 2026 16:53:00 +0530info@thehackernews.com (The Hacker News)Fake CAPTCHA IRSF Scam and 120 Keitaro Campaigns Drive Global SMS, Crypto Fraudhttps://thehackernews.com/2026/04/fake-captcha-irsf-scam-and-120-keitaro.htmlhttps://thehackernews.com/2026/04/fake-captcha-irsf-scam-and-120-keitaro.htmlMon, 27 Apr 2026 12:03:00 +0530info@thehackernews.com (The Hacker News)Researchers Uncover Pre-Stuxnet ‘fast16’ Malware Targeting Engineering Softwarehttps://thehackernews.com/2026/04/researchers-uncover-pre-stuxnet-fast16.htmlhttps://thehackernews.com/2026/04/researchers-uncover-pre-stuxnet-fast16.htmlSat, 25 Apr 2026 14:56:00 +0530info@thehackernews.com (The Hacker News)CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadlinehttps://thehackernews.com/2026/04/cisa-adds-4-exploited-flaws-to-kev-sets.htmlhttps://thehackernews.com/2026/04/cisa-adds-4-exploited-flaws-to-kev-sets.htmlSat, 25 Apr 2026 10:38:00 +0530info@thehackernews.com (The Hacker News)FIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security Patcheshttps://thehackernews.com/2026/04/firestarter-backdoor-hit-federal-cisco.htmlhttps://thehackernews.com/2026/04/firestarter-backdoor-hit-federal-cisco.htmlFri, 24 Apr 2026 22:36:00 +0530info@thehackernews.com (The Hacker News)NASA Employees Duped in Chinese Phishing Scheme Targeting U.S. Defense Softwarehttps://thehackernews.com/2026/04/nasa-employees-duped-in-chinese.htmlhttps://thehackernews.com/2026/04/nasa-employees-duped-in-chinese.htmlFri, 24 Apr 2026 19:43:00 +0530info@thehackernews.com (The Hacker News)Bridging the AI Agent Authority Gap: Continuous Observability as the Decision Enginehttps://thehackernews.com/2026/04/bridging-ai-agent-authority-gap.htmlhttps://thehackernews.com/2026/04/bridging-ai-agent-authority-gap.htmlFri, 24 Apr 2026 17:19:00 +0530info@thehackernews.com (The Hacker News)26 FakeWallet Apps Found on Apple App Store Targeting Crypto Seed Phraseshttps://thehackernews.com/2026/04/26-fakewallet-apps-found-on-apple-app.htmlhttps://thehackernews.com/2026/04/26-fakewallet-apps-found-on-apple-app.htmlFri, 24 Apr 2026 17:18:00 +0530info@thehackernews.com (The Hacker News)Tropic Trooper Uses Trojanized SumatraPDF and GitHub to Deploy AdaptixC2https://thehackernews.com/2026/04/tropic-trooper-uses-trojanized.htmlhttps://thehackernews.com/2026/04/tropic-trooper-uses-trojanized.htmlFri, 24 Apr 2026 14:59:00 +0530info@thehackernews.com (The Hacker News)LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Disclosurehttps://thehackernews.com/2026/04/lmdeploy-cve-2026-33626-flaw-exploited.htmlhttps://thehackernews.com/2026/04/lmdeploy-cve-2026-33626-flaw-exploited.htmlFri, 24 Apr 2026 12:54:00 +0530info@thehackernews.com (The Hacker News)UNC6692 Impersonates IT Help Desk via Microsoft Teams to Deploy SNOW Malwarehttps://thehackernews.com/2026/04/unc6692-impersonates-it-helpdesk-via.htmlhttps://thehackernews.com/2026/04/unc6692-impersonates-it-helpdesk-via.htmlThu, 23 Apr 2026 23:46:00 +0530info@thehackernews.com (The Hacker News)Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaignhttps://thehackernews.com/2026/04/bitwarden-cli-compromised-in-ongoing.htmlhttps://thehackernews.com/2026/04/bitwarden-cli-compromised-in-ongoing.htmlThu, 23 Apr 2026 19:12:00 +0530info@thehackernews.com (The Hacker News)ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Storieshttps://thehackernews.com/2026/04/threatsday-bulletin-290m-defi-hack.htmlhttps://thehackernews.com/2026/04/threatsday-bulletin-290m-defi-hack.htmlThu, 23 Apr 2026 18:47:00 +0530info@thehackernews.com (The Hacker News)[Webinar] Mythos Reality Check: Beating Automated Exploitation at AI Speedhttps://thehackernews.com/2026/04/webinar-mythos-reality-check-beating.htmlhttps://thehackernews.com/2026/04/webinar-mythos-reality-check-beating.htmlThu, 23 Apr 2026 17:33:00 +0530info@thehackernews.com (The Hacker News)Project Glasswing Proved AI Can Find the Bugs. Who's Going to Fix Them?https://thehackernews.com/2026/04/project-glasswing-proved-ai-can-find.htmlhttps://thehackernews.com/2026/04/project-glasswing-proved-ai-can-find.htmlThu, 23 Apr 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)China-Linked GopherWhisper Infects 12 Mongolian Government Systems with Go Backdoorshttps://thehackernews.com/2026/04/china-linked-gopherwhisper-infects-12.htmlhttps://thehackernews.com/2026/04/china-linked-gopherwhisper-infects-12.htmlThu, 23 Apr 2026 14:34:00 +0530info@thehackernews.com (The Hacker News)