The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usMon, 13 Apr 2026 07:30:31 +0530hourly1CPUID Breach Distributes STX RAT via Trojanized CPU-Z and HWMonitor Downloadshttps://thehackernews.com/2026/04/cpuid-breach-distributes-stx-rat-via.htmlhttps://thehackernews.com/2026/04/cpuid-breach-distributes-stx-rat-via.htmlSun, 12 Apr 2026 11:24:00 +0530info@thehackernews.com (The Hacker News)Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621https://thehackernews.com/2026/04/adobe-patches-actively-exploited.htmlhttps://thehackernews.com/2026/04/adobe-patches-actively-exploited.htmlSun, 12 Apr 2026 09:55:00 +0530info@thehackernews.com (The Hacker News)Citizen Lab: Law Enforcement Used Webloc to Track 500 Million Devices via Ad Datahttps://thehackernews.com/2026/04/citizen-lab-law-enforcement-used-webloc.htmlhttps://thehackernews.com/2026/04/citizen-lab-law-enforcement-used-webloc.htmlSat, 11 Apr 2026 11:32:00 +0530info@thehackernews.com (The Hacker News)GlassWorm Campaign Uses Zig Dropper to Infect Multiple Developer IDEshttps://thehackernews.com/2026/04/glassworm-campaign-uses-zig-dropper-to.htmlhttps://thehackernews.com/2026/04/glassworm-campaign-uses-zig-dropper-to.htmlFri, 10 Apr 2026 18:53:00 +0530info@thehackernews.com (The Hacker News)Browser Extensions Are the New AI Consumption Channel That No One Is Talking Abouthttps://thehackernews.com/2026/04/browser-extensions-are-new-ai.htmlhttps://thehackernews.com/2026/04/browser-extensions-are-new-ai.htmlFri, 10 Apr 2026 16:30:00 +0530info@thehackernews.com (The Hacker News)Google Rolls Out DBSC in Chrome 146 to Block Session Theft on Windowshttps://thehackernews.com/2026/04/google-rolls-out-dbsc-in-chrome-146-to.htmlhttps://thehackernews.com/2026/04/google-rolls-out-dbsc-in-chrome-146-to.htmlFri, 10 Apr 2026 13:28:00 +0530info@thehackernews.com (The Hacker News)Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosurehttps://thehackernews.com/2026/04/marimo-rce-flaw-cve-2026-39987.htmlhttps://thehackernews.com/2026/04/marimo-rce-flaw-cve-2026-39987.htmlFri, 10 Apr 2026 13:07:00 +0530info@thehackernews.com (The Hacker News)Backdoored Smart Slider 3 Pro Update Distributed via Compromised Nextend Servershttps://thehackernews.com/2026/04/backdoored-smart-slider-3-pro-update.htmlhttps://thehackernews.com/2026/04/backdoored-smart-slider-3-pro-update.htmlFri, 10 Apr 2026 11:58:00 +0530info@thehackernews.com (The Hacker News)EngageLab SDK Flaw Exposed 50M Android Users, Including 30M Crypto Wallet Installshttps://thehackernews.com/2026/04/engagelab-sdk-flaw-exposed-50m-android.htmlhttps://thehackernews.com/2026/04/engagelab-sdk-flaw-exposed-50m-android.htmlThu, 09 Apr 2026 22:56:00 +0530info@thehackernews.com (The Hacker News)UAT-10362 Targets Taiwanese NGOs with LucidRook Malware in Spear-Phishing Campaignshttps://thehackernews.com/2026/04/uat-10362-targets-taiwanese-ngos-with.htmlhttps://thehackernews.com/2026/04/uat-10362-targets-taiwanese-ngos-with.htmlThu, 09 Apr 2026 21:53:00 +0530info@thehackernews.com (The Hacker News)ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Storieshttps://thehackernews.com/2026/04/threatsday-bulletin-hybrid-p2p-botnet.htmlhttps://thehackernews.com/2026/04/threatsday-bulletin-hybrid-p2p-botnet.htmlThu, 09 Apr 2026 18:27:00 +0530info@thehackernews.com (The Hacker News)The Hidden Security Risks of Shadow AI in Enterpriseshttps://thehackernews.com/2026/04/the-hidden-security-risks-of-shadow-ai.htmlhttps://thehackernews.com/2026/04/the-hidden-security-risks-of-shadow-ai.htmlThu, 09 Apr 2026 17:01:00 +0530info@thehackernews.com (The Hacker News)Adobe Reader Zero-Day Exploited via Malicious PDFs Since December 2025https://thehackernews.com/2026/04/adobe-reader-zero-day-exploited-via.htmlhttps://thehackernews.com/2026/04/adobe-reader-zero-day-exploited-via.htmlThu, 09 Apr 2026 16:45:00 +0530info@thehackernews.com (The Hacker News)Bitter-Linked Hack-for-Hire Campaign Targets Journalists Across MENA Regionhttps://thehackernews.com/2026/04/bitter-linked-hack-for-hire-campaign.htmlhttps://thehackernews.com/2026/04/bitter-linked-hack-for-hire-campaign.htmlThu, 09 Apr 2026 16:10:00 +0530info@thehackernews.com (The Hacker News)New Chaos Variant Targets Misconfigured Cloud Deployments, Adds SOCKS Proxyhttps://thehackernews.com/2026/04/new-chaos-variant-targets-misconfigured.htmlhttps://thehackernews.com/2026/04/new-chaos-variant-targets-misconfigured.htmlWed, 08 Apr 2026 23:21:00 +0530info@thehackernews.com (The Hacker News)Masjesu Botnet Emerges as DDoS-for-Hire Service Targeting Global IoT Deviceshttps://thehackernews.com/2026/04/masjesu-botnet-emerges-as-ddos-for-hire.htmlhttps://thehackernews.com/2026/04/masjesu-botnet-emerges-as-ddos-for-hire.htmlWed, 08 Apr 2026 22:00:00 +0530info@thehackernews.com (The Hacker News)APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO Allieshttps://thehackernews.com/2026/04/apt28-deploys-prismex-malware-in.htmlhttps://thehackernews.com/2026/04/apt28-deploys-prismex-malware-in.htmlWed, 08 Apr 2026 19:20:00 +0530info@thehackernews.com (The Hacker News)Shrinking the IAM Attack Surface through Identity Visibility and Intelligence Platforms (IVIP)https://thehackernews.com/2026/04/shrinking-iam-attack-surface-through.htmlhttps://thehackernews.com/2026/04/shrinking-iam-attack-surface-through.htmlWed, 08 Apr 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systemshttps://thehackernews.com/2026/04/anthropics-claude-mythos-finds.htmlhttps://thehackernews.com/2026/04/anthropics-claude-mythos-finds.htmlWed, 08 Apr 2026 14:46:00 +0530info@thehackernews.com (The Hacker News)N. Korean Hackers Spread 1,700 Malicious Packages Across npm, PyPI, Go, Rusthttps://thehackernews.com/2026/04/n-korean-hackers-spread-1700-malicious.htmlhttps://thehackernews.com/2026/04/n-korean-hackers-spread-1700-malicious.htmlWed, 08 Apr 2026 13:17:00 +0530info@thehackernews.com (The Hacker News)Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet-Exposed PLCshttps://thehackernews.com/2026/04/iran-linked-hackers-disrupt-us-critical.htmlhttps://thehackernews.com/2026/04/iran-linked-hackers-disrupt-us-critical.htmlWed, 08 Apr 2026 09:53:00 +0530info@thehackernews.com (The Hacker News)Russian State-Linked APT28 Exploits SOHO Routers in Global DNS Hijacking Campaignhttps://thehackernews.com/2026/04/russian-state-linked-apt28-exploits.htmlhttps://thehackernews.com/2026/04/russian-state-linked-apt28-exploits.htmlTue, 07 Apr 2026 22:18:00 +0530info@thehackernews.com (The Hacker News)[Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Riskhttps://thehackernews.com/2026/04/webinar-how-to-close-identity-gaps-in.htmlhttps://thehackernews.com/2026/04/webinar-how-to-close-identity-gaps-in.htmlTue, 07 Apr 2026 21:59:00 +0530info@thehackernews.com (The Hacker News)Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Accesshttps://thehackernews.com/2026/04/docker-cve-2026-34040-lets-attackers.htmlhttps://thehackernews.com/2026/04/docker-cve-2026-34040-lets-attackers.htmlTue, 07 Apr 2026 20:45:00 +0530info@thehackernews.com (The Hacker News)Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet Campaignhttps://thehackernews.com/2026/04/over-1000-exposed-comfyui-instances.htmlhttps://thehackernews.com/2026/04/over-1000-exposed-comfyui-instances.htmlTue, 07 Apr 2026 18:16:00 +0530info@thehackernews.com (The Hacker News)The Hidden Cost of Recurring Credential Incidentshttps://thehackernews.com/2026/04/the-hidden-cost-of-recurring-credential.htmlhttps://thehackernews.com/2026/04/the-hidden-cost-of-recurring-credential.htmlTue, 07 Apr 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flipshttps://thehackernews.com/2026/04/new-gpubreach-attack-enables-full-cpu.htmlhttps://thehackernews.com/2026/04/new-gpubreach-attack-enables-full-cpu.htmlTue, 07 Apr 2026 14:08:00 +0530info@thehackernews.com (The Hacker News)China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomwarehttps://thehackernews.com/2026/04/china-linked-storm-1175-exploits-zero.htmlhttps://thehackernews.com/2026/04/china-linked-storm-1175-exploits-zero.htmlTue, 07 Apr 2026 12:05:00 +0530info@thehackernews.com (The Hacker News)Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposedhttps://thehackernews.com/2026/04/flowise-ai-agent-builder-under-active.htmlhttps://thehackernews.com/2026/04/flowise-ai-agent-builder-under-active.htmlTue, 07 Apr 2026 11:26:00 +0530info@thehackernews.com (The Hacker News)Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizationshttps://thehackernews.com/2026/04/iran-linked-password-spraying-campaign.htmlhttps://thehackernews.com/2026/04/iran-linked-password-spraying-campaign.htmlTue, 07 Apr 2026 00:07:00 +0530info@thehackernews.com (The Hacker News)DPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South Koreahttps://thehackernews.com/2026/04/dprk-linked-hackers-use-github-as-c2-in.htmlhttps://thehackernews.com/2026/04/dprk-linked-hackers-use-github-as-c2-in.htmlMon, 06 Apr 2026 21:54:00 +0530info@thehackernews.com (The Hacker News)Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Stepshttps://thehackernews.com/2026/04/multi-os-cyberattacks-how-socs-close.htmlhttps://thehackernews.com/2026/04/multi-os-cyberattacks-how-socs-close.htmlMon, 06 Apr 2026 18:30:00 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and Morehttps://thehackernews.com/2026/04/weekly-recap-axios-hack-chrome-0-day.htmlhttps://thehackernews.com/2026/04/weekly-recap-axios-hack-chrome-0-day.htmlMon, 06 Apr 2026 18:16:00 +0530info@thehackernews.com (The Hacker News)How LiteLLM Turned Developer Machines Into Credential Vaults for Attackershttps://thehackernews.com/2026/04/how-litellm-turned-developer-machines.htmlhttps://thehackernews.com/2026/04/how-litellm-turned-developer-machines.htmlMon, 06 Apr 2026 17:15:00 +0530info@thehackernews.com (The Hacker News)Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Toolshttps://thehackernews.com/2026/04/qilin-and-warlock-ransomware-use.htmlhttps://thehackernews.com/2026/04/qilin-and-warlock-ransomware-use.htmlMon, 06 Apr 2026 15:37:00 +0530info@thehackernews.com (The Hacker News)BKA Identifies REvil Leaders Behind 130 German Ransomware Attackshttps://thehackernews.com/2026/04/bka-identifies-revil-leaders-behind-130.htmlhttps://thehackernews.com/2026/04/bka-identifies-revil-leaders-behind-130.htmlMon, 06 Apr 2026 12:29:00 +0530info@thehackernews.com (The Hacker News)$285 Million Drift Hack Traced to Six-Month DPRK Social Engineering Operationhttps://thehackernews.com/2026/04/285-million-drift-hack-traced-to-six.htmlhttps://thehackernews.com/2026/04/285-million-drift-hack-traced-to-six.htmlSun, 05 Apr 2026 23:55:00 +0530info@thehackernews.com (The Hacker News)36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implantshttps://thehackernews.com/2026/04/36-malicious-npm-packages-exploited.htmlhttps://thehackernews.com/2026/04/36-malicious-npm-packages-exploited.htmlSun, 05 Apr 2026 10:37:00 +0530info@thehackernews.com (The Hacker News)Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMShttps://thehackernews.com/2026/04/fortinet-patches-actively-exploited-cve.htmlhttps://thehackernews.com/2026/04/fortinet-patches-actively-exploited-cve.htmlSun, 05 Apr 2026 10:02:00 +0530info@thehackernews.com (The Hacker News)China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishinghttps://thehackernews.com/2026/04/china-linked-ta416-targets-european.htmlhttps://thehackernews.com/2026/04/china-linked-ta416-targets-european.htmlFri, 03 Apr 2026 23:04:00 +0530info@thehackernews.com (The Hacker News)Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servershttps://thehackernews.com/2026/04/microsoft-details-cookie-controlled-php.htmlhttps://thehackernews.com/2026/04/microsoft-details-cookie-controlled-php.htmlFri, 03 Apr 2026 21:02:00 +0530info@thehackernews.com (The Hacker News)UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attackhttps://thehackernews.com/2026/04/unc1069-social-engineering-of-axios.htmlhttps://thehackernews.com/2026/04/unc1069-social-engineering-of-axios.htmlFri, 03 Apr 2026 16:34:00 +0530info@thehackernews.com (The Hacker News)Why Third-Party Risk Is the Biggest Gap in Your Clients' Security Posturehttps://thehackernews.com/2026/04/why-third-party-risk-is-biggest-gap-in.htmlhttps://thehackernews.com/2026/04/why-third-party-risk-is-biggest-gap-in.htmlFri, 03 Apr 2026 16:30:00 +0530info@thehackernews.com (The Hacker News)New SparkCat Variant in iOS, Android Apps Steals Crypto Wallet Recovery Phrase Imageshttps://thehackernews.com/2026/04/new-sparkcat-variant-in-ios-android.htmlhttps://thehackernews.com/2026/04/new-sparkcat-variant-in-ios-android.htmlFri, 03 Apr 2026 14:40:00 +0530info@thehackernews.com (The Hacker News)Drift Loses $285 Million in Durable Nonce Social Engineering Attack Linked to DPRKhttps://thehackernews.com/2026/04/drift-loses-285-million-in-durable.htmlhttps://thehackernews.com/2026/04/drift-loses-285-million-in-durable.htmlFri, 03 Apr 2026 14:05:00 +0530info@thehackernews.com (The Hacker News)Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentialshttps://thehackernews.com/2026/04/hackers-exploit-cve-2025-55182-to.htmlhttps://thehackernews.com/2026/04/hackers-exploit-cve-2025-55182-to.htmlFri, 03 Apr 2026 01:00:00 +0530info@thehackernews.com (The Hacker News)Cisco Patches 9.8 CVSS IMC and SSM Flaws Allowing Remote System Compromisehttps://thehackernews.com/2026/04/cisco-patches-98-cvss-imc-and-ssm-flaws.htmlhttps://thehackernews.com/2026/04/cisco-patches-98-cvss-imc-and-ssm-flaws.htmlThu, 02 Apr 2026 20:51:00 +0530info@thehackernews.com (The Hacker News)ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More Storieshttps://thehackernews.com/2026/04/threatsday-bulletin-pre-auth-chains.htmlhttps://thehackernews.com/2026/04/threatsday-bulletin-pre-auth-chains.htmlThu, 02 Apr 2026 18:15:00 +0530info@thehackernews.com (The Hacker News)Researchers Uncover Mining Operation Using ISO Lures to Spread RATs and Crypto Minershttps://thehackernews.com/2026/04/researchers-uncover-mining-operation.htmlhttps://thehackernews.com/2026/04/researchers-uncover-mining-operation.htmlThu, 02 Apr 2026 17:12:00 +0530info@thehackernews.com (The Hacker News)The State of Trusted Open Source Reporthttps://thehackernews.com/2026/04/the-state-of-trusted-open-source-report.htmlhttps://thehackernews.com/2026/04/the-state-of-trusted-open-source-report.htmlThu, 02 Apr 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)