The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usThu, 13 Aug 2026 15:31:01 +0530hourly1Attackers Exploit SharePoint Authentication Bypass After Public PoC Releasehttps://thehackernews.com/2026/08/attackers-exploit-sharepoint.htmlhttps://thehackernews.com/2026/08/attackers-exploit-sharepoint.htmlThu, 13 Aug 2026 11:39:48 +0530info@thehackernews.com (The Hacker News)Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoorhttps://thehackernews.com/2026/08/lazarus-exploits-windows-zero-day-to.htmlhttps://thehackernews.com/2026/08/lazarus-exploits-windows-zero-day-to.htmlWed, 12 Aug 2026 23:09:27 +0530info@thehackernews.com (The Hacker News)737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have Onehttps://thehackernews.com/2026/08/737-chrome-vpn-extensions-caught.htmlhttps://thehackernews.com/2026/08/737-chrome-vpn-extensions-caught.htmlWed, 12 Aug 2026 19:39:50 +0530info@thehackernews.com (The Hacker News)OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoninghttps://thehackernews.com/2026/08/openai-anthropic-google-api-flaw-let.htmlhttps://thehackernews.com/2026/08/openai-anthropic-google-api-flaw-let.htmlWed, 12 Aug 2026 17:17:38 +0530info@thehackernews.com (The Hacker News)Enterprise Defenses Recovered at the Edge and Collapsed Insidehttps://thehackernews.com/2026/08/enterprise-defenses-recovered-at-edge.htmlhttps://thehackernews.com/2026/08/enterprise-defenses-recovered-at-edge.htmlWed, 12 Aug 2026 17:11:34 +0530info@thehackernews.com (The Hacker News)Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flawshttps://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.htmlhttps://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.htmlWed, 12 Aug 2026 16:43:03 +0530info@thehackernews.com (The Hacker News)Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Accesshttps://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.htmlhttps://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.htmlWed, 12 Aug 2026 14:31:54 +0530info@thehackernews.com (The Hacker News)Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizationshttps://thehackernews.com/2026/08/malicious-litellm-releases-tied-to.htmlhttps://thehackernews.com/2026/08/malicious-litellm-releases-tied-to.htmlWed, 12 Aug 2026 13:34:52 +0530info@thehackernews.com (The Hacker News)SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Codehttps://thehackernews.com/2026/08/sap-commerce-cloud-flaw-could-let.htmlhttps://thehackernews.com/2026/08/sap-commerce-cloud-flaw-could-let.htmlWed, 12 Aug 2026 13:01:40 +0530info@thehackernews.com (The Hacker News)ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Accesshttps://thehackernews.com/2026/08/shieldbreak-zero-day-poc-claims.htmlhttps://thehackernews.com/2026/08/shieldbreak-zero-day-poc-claims.htmlWed, 12 Aug 2026 12:11:38 +0530info@thehackernews.com (The Hacker News)Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoShttps://thehackernews.com/2026/08/cisco-asa-and-ftd-flaw-exploited-in.htmlhttps://thehackernews.com/2026/08/cisco-asa-and-ftd-flaw-exploited-in.htmlWed, 12 Aug 2026 11:45:58 +0530info@thehackernews.com (The Hacker News)Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attackhttps://thehackernews.com/2026/08/microsoft-patches-398-flaws-including.htmlhttps://thehackernews.com/2026/08/microsoft-patches-398-flaws-including.htmlWed, 12 Aug 2026 01:40:55 +0530info@thehackernews.com (The Hacker News)Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsinghttps://thehackernews.com/2026/08/kimwolf-v7-android-botnet-makes-http2.htmlhttps://thehackernews.com/2026/08/kimwolf-v7-android-botnet-makes-http2.htmlWed, 12 Aug 2026 01:06:37 +0530info@thehackernews.com (The Hacker News)Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Clienthttps://thehackernews.com/2026/08/zoom-annotation-flaws-could-let-meeting.htmlhttps://thehackernews.com/2026/08/zoom-annotation-flaws-could-let-meeting.htmlWed, 12 Aug 2026 00:38:47 +0530info@thehackernews.com (The Hacker News)Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commandshttps://thehackernews.com/2026/08/sandworm-linked-uac-0145-uses-fake-job.htmlhttps://thehackernews.com/2026/08/sandworm-linked-uac-0145-uses-fake-job.htmlWed, 12 Aug 2026 00:06:47 +0530info@thehackernews.com (The Hacker News)Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCEhttps://thehackernews.com/2026/08/researchers-disclose-ai-assisted.htmlhttps://thehackernews.com/2026/08/researchers-disclose-ai-assisted.htmlTue, 11 Aug 2026 22:17:44 +0530info@thehackernews.com (The Hacker News)DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupthttps://thehackernews.com/2026/08/deadlock-ransomware-uses-polygon-smart.htmlhttps://thehackernews.com/2026/08/deadlock-ransomware-uses-polygon-smart.htmlTue, 11 Aug 2026 22:05:27 +0530info@thehackernews.com (The Hacker News)OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Developmenthttps://thehackernews.com/2026/08/openai-launches-gpt-56-cyber-with.htmlhttps://thehackernews.com/2026/08/openai-launches-gpt-56-cyber-with.htmlTue, 11 Aug 2026 18:41:23 +0530info@thehackernews.com (The Hacker News)A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Deviceshttps://thehackernews.com/2026/08/a-malicious-sim-card-can-run-attacker.htmlhttps://thehackernews.com/2026/08/a-malicious-sim-card-can-run-attacker.htmlTue, 11 Aug 2026 17:35:03 +0530info@thehackernews.com (The Hacker News)Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repohttps://thehackernews.com/2026/08/mozilla-revokes-firefox-and-thunderbird.htmlhttps://thehackernews.com/2026/08/mozilla-revokes-firefox-and-thunderbird.htmlTue, 11 Aug 2026 17:34:51 +0530info@thehackernews.com (The Hacker News)Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workershttps://thehackernews.com/2026/08/researchers-built-fake-crypto-startup.htmlhttps://thehackernews.com/2026/08/researchers-built-fake-crypto-startup.htmlTue, 11 Aug 2026 17:05:03 +0530info@thehackernews.com (The Hacker News)Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11https://thehackernews.com/2026/08/researchers-turn-usb-auto-install-into.htmlhttps://thehackernews.com/2026/08/researchers-turn-usb-auto-install-into.htmlTue, 11 Aug 2026 16:18:26 +0530info@thehackernews.com (The Hacker News)Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secretshttps://thehackernews.com/2026/08/malicious-mcp-servers-can-split.htmlhttps://thehackernews.com/2026/08/malicious-mcp-servers-can-split.htmlTue, 11 Aug 2026 15:54:00 +0530info@thehackernews.com (The Hacker News)Gunra Ransomware Exploits Fortinet FortiOS, FortiProxy Flaws to Breach Networkshttps://thehackernews.com/2026/08/gunra-ransomware-exploits-fortinet-and.htmlhttps://thehackernews.com/2026/08/gunra-ransomware-exploits-fortinet-and.htmlTue, 11 Aug 2026 14:46:24 +0530info@thehackernews.com (The Hacker News)Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbinehttps://thehackernews.com/2026/08/hackers-breach-polish-power-plant.htmlhttps://thehackernews.com/2026/08/hackers-breach-polish-power-plant.htmlTue, 11 Aug 2026 12:25:45 +0530info@thehackernews.com (The Hacker News)BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Adminshttps://thehackernews.com/2026/08/bdthemes-supply-chain-attack-poisons.htmlhttps://thehackernews.com/2026/08/bdthemes-supply-chain-attack-poisons.htmlTue, 11 Aug 2026 11:18:44 +0530info@thehackernews.com (The Hacker News)Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Developmenthttps://thehackernews.com/2026/08/shipping-1050-more-code-watch-this.htmlhttps://thehackernews.com/2026/08/shipping-1050-more-code-watch-this.htmlMon, 10 Aug 2026 22:59:17 +0530info@thehackernews.com (The Hacker News)China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flawhttps://thehackernews.com/2026/08/china-linked-hackers-deploy-new.htmlhttps://thehackernews.com/2026/08/china-linked-hackers-deploy-new.htmlMon, 10 Aug 2026 22:08:37 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoorshttps://thehackernews.com/2026/08/weekly-recap-ai-goes-rogue-metabase-0.htmlhttps://thehackernews.com/2026/08/weekly-recap-ai-goes-rogue-metabase-0.htmlMon, 10 Aug 2026 20:30:29 +0530info@thehackernews.com (The Hacker News)Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Developmenthttps://thehackernews.com/2026/08/kimsuky-builds-offline-ai-stack-that.htmlhttps://thehackernews.com/2026/08/kimsuky-builds-offline-ai-stack-that.htmlMon, 10 Aug 2026 18:49:58 +0530info@thehackernews.com (The Hacker News)New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFAhttps://thehackernews.com/2026/08/new-passkey-attacks-can-recover-synced.htmlhttps://thehackernews.com/2026/08/new-passkey-attacks-can-recover-synced.htmlMon, 10 Aug 2026 17:55:04 +0530info@thehackernews.com (The Hacker News)TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCorehttps://thehackernews.com/2026/08/head-mare-exploits-trueconf-flaws-to.htmlhttps://thehackernews.com/2026/08/head-mare-exploits-trueconf-flaws-to.htmlMon, 10 Aug 2026 17:03:41 +0530info@thehackernews.com (The Hacker News)Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentialshttps://thehackernews.com/2026/08/solidity-pro-vs-code-extensions-steal.htmlhttps://thehackernews.com/2026/08/solidity-pro-vs-code-extensions-steal.htmlMon, 10 Aug 2026 13:08:23 +0530info@thehackernews.com (The Hacker News)OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pausehttps://thehackernews.com/2026/08/openais-next-ai-model-astra-shows-cyber.htmlhttps://thehackernews.com/2026/08/openais-next-ai-model-astra-shows-cyber.htmlMon, 10 Aug 2026 11:20:03 +0530info@thehackernews.com (The Hacker News)Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackershttps://thehackernews.com/2026/08/atlassian-rovo-can-be-tricked-into.htmlhttps://thehackernews.com/2026/08/atlassian-rovo-can-be-tricked-into.htmlSat, 08 Aug 2026 14:24:50 +0530info@thehackernews.com (The Hacker News)New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokenshttps://thehackernews.com/2026/08/new-css-attacks-can-break-webmail.htmlhttps://thehackernews.com/2026/08/new-css-attacks-can-break-webmail.htmlSat, 08 Aug 2026 13:33:57 +0530info@thehackernews.com (The Hacker News)Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authenticationhttps://thehackernews.com/2026/08/metabase-zero-day-exploited-in-wild.htmlhttps://thehackernews.com/2026/08/metabase-zero-day-exploited-in-wild.htmlSat, 08 Aug 2026 12:28:31 +0530info@thehackernews.com (The Hacker News)N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persisthttps://thehackernews.com/2026/08/n-central-attackers-reach-managed.htmlhttps://thehackernews.com/2026/08/n-central-attackers-reach-managed.htmlSat, 08 Aug 2026 12:27:43 +0530info@thehackernews.com (The Hacker News)Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attemptshttps://thehackernews.com/2026/08/progress-kemp-loadmaster-flaw-hits-cisa.htmlhttps://thehackernews.com/2026/08/progress-kemp-loadmaster-flaw-hits-cisa.htmlSat, 08 Aug 2026 12:22:16 +0530info@thehackernews.com (The Hacker News)Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealerhttps://thehackernews.com/2026/08/nearly-800-malicious-npm-packages.htmlhttps://thehackernews.com/2026/08/nearly-800-malicious-npm-packages.htmlSat, 08 Aug 2026 00:18:17 +0530info@thehackernews.com (The Hacker News)ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Walletshttps://thehackernews.com/2026/08/clickfix-attacks-deliver-macos-stealer.htmlhttps://thehackernews.com/2026/08/clickfix-attacks-deliver-macos-stealer.htmlFri, 07 Aug 2026 23:59:08 +0530info@thehackernews.com (The Hacker News)UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Datahttps://thehackernews.com/2026/08/unc6671-vishing-attacks-target-personal.htmlhttps://thehackernews.com/2026/08/unc6671-vishing-attacks-target-personal.htmlFri, 07 Aug 2026 23:46:13 +0530info@thehackernews.com (The Hacker News)New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAPhttps://thehackernews.com/2026/08/new-wordpress-pre-auth-xss-could-lead.htmlhttps://thehackernews.com/2026/08/new-wordpress-pre-auth-xss-could-lead.htmlFri, 07 Aug 2026 18:26:23 +0530info@thehackernews.com (The Hacker News)Growing Up The Hard Wayhttps://thehackernews.com/2026/08/growing-up-hard-way.htmlhttps://thehackernews.com/2026/08/growing-up-hard-way.htmlFri, 07 Aug 2026 17:25:26 +0530info@thehackernews.com (The Hacker News)18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containershttps://thehackernews.com/2026/08/18-year-old-linux-sctp-flaw-could-let.htmlhttps://thehackernews.com/2026/08/18-year-old-linux-sctp-flaw-could-let.htmlFri, 07 Aug 2026 16:40:33 +0530info@thehackernews.com (The Hacker News)New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tableshttps://thehackernews.com/2026/08/new-natjack-attacks-hijack-tcp-sessions.htmlhttps://thehackernews.com/2026/08/new-natjack-attacks-hijack-tcp-sessions.htmlFri, 07 Aug 2026 16:28:38 +0530info@thehackernews.com (The Hacker News)Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emailshttps://thehackernews.com/2026/08/microsoft-365-aitm-phishing-hijacks.htmlhttps://thehackernews.com/2026/08/microsoft-365-aitm-phishing-hijacks.htmlFri, 07 Aug 2026 16:08:27 +0530info@thehackernews.com (The Hacker News)AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Dayhttps://thehackernews.com/2026/08/ai-assisted-http-terminator-finds-novel.htmlhttps://thehackernews.com/2026/08/ai-assisted-http-terminator-finds-novel.htmlFri, 07 Aug 2026 15:39:54 +0530info@thehackernews.com (The Hacker News)Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Accesshttps://thehackernews.com/2026/08/malware-can-abuse-windows-hello-for.htmlhttps://thehackernews.com/2026/08/malware-can-abuse-windows-hello-for.htmlFri, 07 Aug 2026 14:22:11 +0530info@thehackernews.com (The Hacker News)Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secretshttps://thehackernews.com/2026/08/claude-code-and-gemini-cli-flaws-let.htmlhttps://thehackernews.com/2026/08/claude-code-and-gemini-cli-flaws-let.htmlFri, 07 Aug 2026 13:48:35 +0530info@thehackernews.com (The Hacker News)