The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usMon, 21 Sep 2026 05:10:22 +0530hourly1Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flawshttps://thehackernews.com/2026/09/claude-opus-5-helped-researchers-take.htmlhttps://thehackernews.com/2026/09/claude-opus-5-helped-researchers-take.htmlSun, 20 Sep 2026 00:06:53 +0530info@thehackernews.com (The Hacker News)Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinarhttps://thehackernews.com/2026/09/can-you-prove-new-cve-is-exploitable.htmlhttps://thehackernews.com/2026/09/can-you-prove-new-cve-is-exploitable.htmlSat, 19 Sep 2026 18:58:48 +0530info@thehackernews.com (The Hacker News)Identity Visibility in 2026: The Foundation of Identity Securityhttps://thehackernews.com/2026/09/identity-visibility-in-2026-foundation.htmlhttps://thehackernews.com/2026/09/identity-visibility-in-2026-foundation.htmlSat, 19 Sep 2026 18:58:41 +0530info@thehackernews.com (The Hacker News)SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCEhttps://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.htmlhttps://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.htmlSat, 19 Sep 2026 15:01:17 +0530info@thehackernews.com (The Hacker News)Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wildhttps://thehackernews.com/2026/09/critical-pre-auth-rce-in-orkes.htmlhttps://thehackernews.com/2026/09/critical-pre-auth-rce-in-orkes.htmlSat, 19 Sep 2026 13:48:54 +0530info@thehackernews.com (The Hacker News)Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Uphttps://thehackernews.com/2026/09/google-gemini-broke-into-real-company.htmlhttps://thehackernews.com/2026/09/google-gemini-broke-into-real-company.htmlSat, 19 Sep 2026 13:21:34 +0530info@thehackernews.com (The Hacker News)CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositorieshttps://thehackernews.com/2026/09/crowdsec-says-tanstack-npm-attack-led.htmlhttps://thehackernews.com/2026/09/crowdsec-says-tanstack-npm-attack-led.htmlSat, 19 Sep 2026 12:44:54 +0530info@thehackernews.com (The Hacker News)CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wildhttps://thehackernews.com/2026/09/cisa-flags-three-linux-kernel.htmlhttps://thehackernews.com/2026/09/cisa-flags-three-linux-kernel.htmlSat, 19 Sep 2026 11:54:10 +0530info@thehackernews.com (The Hacker News)Public Exploits Released for Four Linux Kernel Flaws That Enable Local Roothttps://thehackernews.com/2026/09/public-exploits-released-for-four-linux.htmlhttps://thehackernews.com/2026/09/public-exploits-released-for-four-linux.htmlFri, 18 Sep 2026 23:32:24 +0530info@thehackernews.com (The Hacker News)New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Executionhttps://thehackernews.com/2026/09/new-wordpress-click2shell-flaw-forces.htmlhttps://thehackernews.com/2026/09/new-wordpress-click2shell-flaw-forces.htmlFri, 18 Sep 2026 22:26:19 +0530info@thehackernews.com (The Hacker News)Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2https://thehackernews.com/2026/09/transparent-tribe-deploys-new-rust.htmlhttps://thehackernews.com/2026/09/transparent-tribe-deploys-new-rust.htmlFri, 18 Sep 2026 20:54:16 +0530info@thehackernews.com (The Hacker News)Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalationhttps://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.htmlhttps://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.htmlFri, 18 Sep 2026 18:17:04 +0530info@thehackernews.com (The Hacker News)An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.https://thehackernews.com/2026/09/an-abandoned-cdn-domain-was-re.htmlhttps://thehackernews.com/2026/09/an-abandoned-cdn-domain-was-re.htmlFri, 18 Sep 2026 16:31:16 +0530info@thehackernews.com (The Hacker News)Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agentshttps://thehackernews.com/2026/09/plugin4shell-lets-repository-owners.htmlhttps://thehackernews.com/2026/09/plugin4shell-lets-repository-owners.htmlFri, 18 Sep 2026 16:31:01 +0530info@thehackernews.com (The Hacker News)WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storagehttps://thehackernews.com/2026/09/weaselbiscuit-stealer-spreads-via-13.htmlhttps://thehackernews.com/2026/09/weaselbiscuit-stealer-spreads-via-13.htmlFri, 18 Sep 2026 16:10:06 +0530info@thehackernews.com (The Hacker News)Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealerhttps://thehackernews.com/2026/09/claimed-bug-bounty-hunter-likely-used.htmlhttps://thehackernews.com/2026/09/claimed-bug-bounty-hunter-likely-used.htmlFri, 18 Sep 2026 14:48:03 +0530info@thehackernews.com (The Hacker News)RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstallhttps://thehackernews.com/2026/09/rathat-android-malware-abuses-adb-to.htmlhttps://thehackernews.com/2026/09/rathat-android-malware-abuses-adb-to.htmlFri, 18 Sep 2026 11:47:25 +0530info@thehackernews.com (The Hacker News)Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Roothttps://thehackernews.com/2026/09/critical-check-point-management-server.htmlhttps://thehackernews.com/2026/09/critical-check-point-management-server.htmlThu, 17 Sep 2026 23:38:28 +0530info@thehackernews.com (The Hacker News)ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories https://thehackernews.com/2026/09/threatsday-self-rewriting-agents-800.htmlhttps://thehackernews.com/2026/09/threatsday-self-rewriting-agents-800.htmlThu, 17 Sep 2026 23:02:22 +0530info@thehackernews.com (The Hacker News)Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Fileshttps://thehackernews.com/2026/09/critical-docker-sandboxes-flaw-lets.htmlhttps://thehackernews.com/2026/09/critical-docker-sandboxes-flaw-lets.htmlThu, 17 Sep 2026 21:07:56 +0530info@thehackernews.com (The Hacker News)Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwordshttps://thehackernews.com/2026/09/iran-linked-handala-hack-tied-to.htmlhttps://thehackernews.com/2026/09/iran-linked-handala-hack-tied-to.htmlThu, 17 Sep 2026 19:33:13 +0530info@thehackernews.com (The Hacker News)Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zonehttps://thehackernews.com/2026/09/critical-unbound-dnssec-validator-flaw.htmlhttps://thehackernews.com/2026/09/critical-unbound-dnssec-validator-flaw.htmlThu, 17 Sep 2026 18:00:00 +0530info@thehackernews.com (The Hacker News)CISO's Expert Guide to Agentic Pentesting for Websiteshttps://thehackernews.com/2026/09/cisos-expert-guide-to-agentic.htmlhttps://thehackernews.com/2026/09/cisos-expert-guide-to-agentic.htmlThu, 17 Sep 2026 16:20:53 +0530info@thehackernews.com (The Hacker News)China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin Americahttps://thehackernews.com/2026/09/china-aligned-famoussparrow-deploys.htmlhttps://thehackernews.com/2026/09/china-aligned-famoussparrow-deploys.htmlThu, 17 Sep 2026 15:35:45 +0530info@thehackernews.com (The Hacker News)OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploadshttps://thehackernews.com/2026/09/openai-reveals-six-model-incidents.htmlhttps://thehackernews.com/2026/09/openai-reveals-six-model-incidents.htmlThu, 17 Sep 2026 15:23:38 +0530info@thehackernews.com (The Hacker News)BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPShttps://thehackernews.com/2026/09/bind-9-update-fixes-14-flaws-including.htmlhttps://thehackernews.com/2026/09/bind-9-update-fixes-14-flaws-including.htmlThu, 17 Sep 2026 13:30:29 +0530info@thehackernews.com (The Hacker News)Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Recordshttps://thehackernews.com/2026/09/gyazo-breach-exposes-2362-million-user.htmlhttps://thehackernews.com/2026/09/gyazo-breach-exposes-2362-million-user.htmlThu, 17 Sep 2026 13:00:01 +0530info@thehackernews.com (The Hacker News)Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attackshttps://thehackernews.com/2026/09/cisco-warns-of-new-zero-day-ise-auth.htmlhttps://thehackernews.com/2026/09/cisco-warns-of-new-zero-day-ise-auth.htmlThu, 17 Sep 2026 12:09:40 +0530info@thehackernews.com (The Hacker News)U.S. Seizes NightmareStresser Domains Linked to Hundreds of Thousands of DDoS Attackshttps://thehackernews.com/2026/09/us-seizes-nightmarestresser-domains.htmlhttps://thehackernews.com/2026/09/us-seizes-nightmarestresser-domains.htmlThu, 17 Sep 2026 10:43:46 +0530info@thehackernews.com (The Hacker News)Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Executionhttps://thehackernews.com/2026/09/attackers-exploit-issabel-framework.htmlhttps://thehackernews.com/2026/09/attackers-exploit-issabel-framework.htmlWed, 16 Sep 2026 21:20:59 +0530info@thehackernews.com (The Hacker News)Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipershttps://thehackernews.com/2026/09/three-threat-groups-target-russian.htmlhttps://thehackernews.com/2026/09/three-threat-groups-target-russian.htmlWed, 16 Sep 2026 20:57:49 +0530info@thehackernews.com (The Hacker News)One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claudehttps://thehackernews.com/2026/09/one-extension-could-hijack-ai.htmlhttps://thehackernews.com/2026/09/one-extension-could-hijack-ai.htmlWed, 16 Sep 2026 20:06:44 +0530info@thehackernews.com (The Hacker News)Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositorieshttps://thehackernews.com/2026/09/attacker-hijacks-ai-coding-assistant.htmlhttps://thehackernews.com/2026/09/attacker-hijacks-ai-coding-assistant.htmlWed, 16 Sep 2026 19:07:07 +0530info@thehackernews.com (The Hacker News)Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fixhttps://thehackernews.com/2026/09/parallels-desktop-flaw-lets-non-admin.htmlhttps://thehackernews.com/2026/09/parallels-desktop-flaw-lets-non-admin.htmlWed, 16 Sep 2026 18:44:05 +0530info@thehackernews.com (The Hacker News)N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Securityhttps://thehackernews.com/2026/09/n0va-phishkit-targets-us-and-eu.htmlhttps://thehackernews.com/2026/09/n0va-phishkit-targets-us-and-eu.htmlWed, 16 Sep 2026 17:28:00 +0530info@thehackernews.com (The Hacker News)Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitationhttps://thehackernews.com/2026/09/google-patches-pixel-modem-flaw-amid.htmlhttps://thehackernews.com/2026/09/google-patches-pixel-modem-flaw-amid.htmlWed, 16 Sep 2026 16:45:58 +0530info@thehackernews.com (The Hacker News)Threat Intelligence Alone Won't Close the Exploitation Gaphttps://thehackernews.com/2026/09/threat-intelligence-alone-wont-close.htmlhttps://thehackernews.com/2026/09/threat-intelligence-alone-wont-close.htmlWed, 16 Sep 2026 16:45:48 +0530info@thehackernews.com (The Hacker News)Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attackshttps://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.htmlhttps://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.htmlWed, 16 Sep 2026 16:38:54 +0530info@thehackernews.com (The Hacker News)Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shellshttps://thehackernews.com/2026/09/attackers-exploit-woocommerce-wholesale.htmlhttps://thehackernews.com/2026/09/attackers-exploit-woocommerce-wholesale.htmlWed, 16 Sep 2026 11:18:28 +0530info@thehackernews.com (The Hacker News)Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokenshttps://thehackernews.com/2026/09/active-exploitation-attempts-target.htmlhttps://thehackernews.com/2026/09/active-exploitation-attempts-target.htmlWed, 16 Sep 2026 10:48:06 +0530info@thehackernews.com (The Hacker News)KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokenshttps://thehackernews.com/2026/09/kremlin-banking-malware-hijacks-chrome.htmlhttps://thehackernews.com/2026/09/kremlin-banking-malware-hijacks-chrome.htmlWed, 16 Sep 2026 00:24:14 +0530info@thehackernews.com (The Hacker News)Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalistshttps://thehackernews.com/2026/09/iranian-hackers-use-telegram-controlled.htmlhttps://thehackernews.com/2026/09/iranian-hackers-use-telegram-controlled.htmlTue, 15 Sep 2026 21:59:51 +0530info@thehackernews.com (The Hacker News)BambooToken Malware Uses MQTT to Control Windows and Linux Systemshttps://thehackernews.com/2026/09/bambootoken-malware-uses-mqtt-to.htmlhttps://thehackernews.com/2026/09/bambootoken-malware-uses-mqtt-to.htmlTue, 15 Sep 2026 20:53:19 +0530info@thehackernews.com (The Hacker News)Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Secondshttps://thehackernews.com/2026/09/human-attacker-exploits-marimo-rce.htmlhttps://thehackernews.com/2026/09/human-attacker-exploits-marimo-rce.htmlTue, 15 Sep 2026 17:22:28 +0530info@thehackernews.com (The Hacker News)Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Pointhttps://thehackernews.com/2026/09/attack-chains-not-just-attack-surfaces.htmlhttps://thehackernews.com/2026/09/attack-chains-not-just-attack-surfaces.htmlTue, 15 Sep 2026 16:56:36 +0530info@thehackernews.com (The Hacker News)Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servershttps://thehackernews.com/2026/09/mass-scanning-campaign-exploits-vite.htmlhttps://thehackernews.com/2026/09/mass-scanning-campaign-exploits-vite.htmlTue, 15 Sep 2026 16:42:32 +0530info@thehackernews.com (The Hacker News)LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Serverhttps://thehackernews.com/2026/09/litespeed-enterprise-flaw-could-let-one.htmlhttps://thehackernews.com/2026/09/litespeed-enterprise-flaw-could-let-one.htmlTue, 15 Sep 2026 12:22:16 +0530info@thehackernews.com (The Hacker News)Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Executionhttps://thehackernews.com/2026/09/cisco-secure-email-gateway-flaw.htmlhttps://thehackernews.com/2026/09/cisco-secure-email-gateway-flaw.htmlTue, 15 Sep 2026 11:41:11 +0530info@thehackernews.com (The Hacker News)China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGEhttps://thehackernews.com/2026/09/china-linked-hackers-exploit-chrome.htmlhttps://thehackernews.com/2026/09/china-linked-hackers-exploit-chrome.htmlTue, 15 Sep 2026 11:01:05 +0530info@thehackernews.com (The Hacker News)New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computinghttps://thehackernews.com/2026/09/new-ddrop-attack-breaks-intel-tdx-and.htmlhttps://thehackernews.com/2026/09/new-ddrop-attack-breaks-intel-tdx-and.htmlMon, 14 Sep 2026 23:32:13 +0530info@thehackernews.com (The Hacker News)