The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usSun, 24 May 2026 10:51:53 +0530hourly1npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attackshttps://thehackernews.com/2026/05/npm-adds-2fa-gated-publishing-and.htmlhttps://thehackernews.com/2026/05/npm-adds-2fa-gated-publishing-and.htmlSat, 23 May 2026 22:05:10 +0530info@thehackernews.com (The Hacker News)Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malwarehttps://thehackernews.com/2026/05/packagist-supply-chain-attack-infects-8.htmlhttps://thehackernews.com/2026/05/packagist-supply-chain-attack-infects-8.htmlSat, 23 May 2026 21:37:51 +0530info@thehackernews.com (The Hacker News)Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Softwarehttps://thehackernews.com/2026/05/claude-mythos-ai-finds-10000-high.htmlhttps://thehackernews.com/2026/05/claude-mythos-ai-finds-10000-high.htmlSat, 23 May 2026 17:25:35 +0530info@thehackernews.com (The Hacker News)Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealerhttps://thehackernews.com/2026/05/laravel-lang-php-packages-compromised.htmlhttps://thehackernews.com/2026/05/laravel-lang-php-packages-compromised.htmlSat, 23 May 2026 15:21:13 +0530info@thehackernews.com (The Hacker News)LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Roothttps://thehackernews.com/2026/05/litespeed-cpanel-plugin-cve-2026-48172.htmlhttps://thehackernews.com/2026/05/litespeed-cpanel-plugin-cve-2026-48172.htmlSat, 23 May 2026 13:05:13 +0530info@thehackernews.com (The Hacker News)Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEVhttps://thehackernews.com/2026/05/drupal-core-sql-injection-bug-actively.htmlhttps://thehackernews.com/2026/05/drupal-core-sql-injection-bug-actively.htmlSat, 23 May 2026 12:53:48 +0530info@thehackernews.com (The Hacker News)First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groupshttps://thehackernews.com/2026/05/first-vpn-dismantled-in-global-takedown.htmlhttps://thehackernews.com/2026/05/first-vpn-dismantled-in-global-takedown.htmlFri, 22 May 2026 23:05:02 +0530info@thehackernews.com (The Hacker News)Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malwarehttps://thehackernews.com/2026/05/ghostwriter-targets-ukraine-government.htmlhttps://thehackernews.com/2026/05/ghostwriter-targets-ukraine-government.htmlFri, 22 May 2026 21:50:32 +0530info@thehackernews.com (The Hacker News)Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflowshttps://thehackernews.com/2026/05/megalodon-github-attack-targets-5561.htmlhttps://thehackernews.com/2026/05/megalodon-github-attack-targets-5561.htmlFri, 22 May 2026 17:25:24 +0530info@thehackernews.com (The Hacker News)Making Vulnerable Drivers Exploitable Without Hardware - The BYOVD Perspectivehttps://thehackernews.com/2026/05/making-vulnerable-drivers-exploitable.htmlhttps://thehackernews.com/2026/05/making-vulnerable-drivers-exploitable.htmlFri, 22 May 2026 17:08:12 +0530info@thehackernews.com (The Hacker News)Kimwolf DDoS Botnet Operator Arrested in Canada Over DDoS-for-Hire Attackshttps://thehackernews.com/2026/05/kimwolf-ddos-botnet-operator-arrested.htmlhttps://thehackernews.com/2026/05/kimwolf-ddos-botnet-operator-arrested.htmlFri, 22 May 2026 14:20:18 +0530info@thehackernews.com (The Hacker News)CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEVhttps://thehackernews.com/2026/05/cisa-adds-exploited-langflow-and-trend.htmlhttps://thehackernews.com/2026/05/cisa-adds-exploited-langflow-and-trend.htmlFri, 22 May 2026 11:17:33 +0530info@thehackernews.com (The Hacker News)Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Accesshttps://thehackernews.com/2026/05/cisco-patches-cvss-100-secure-workload.htmlhttps://thehackernews.com/2026/05/cisco-patches-cvss-100-secure-workload.htmlFri, 22 May 2026 11:06:18 +0530info@thehackernews.com (The Hacker News)Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoorhttps://thehackernews.com/2026/05/showboat-linux-malware-hits-middle-east.htmlhttps://thehackernews.com/2026/05/showboat-linux-malware-hits-middle-east.htmlThu, 21 May 2026 19:47:09 +0530info@thehackernews.com (The Hacker News)ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Storieshttps://thehackernews.com/2026/05/threatsday-bulletin-linux-rootkits.htmlhttps://thehackernews.com/2026/05/threatsday-bulletin-linux-rootkits.htmlThu, 21 May 2026 17:22:14 +0530info@thehackernews.com (The Hacker News)Microsoft Warns of Two Actively Exploited Defender Vulnerabilitieshttps://thehackernews.com/2026/05/microsoft-warns-of-two-actively.htmlhttps://thehackernews.com/2026/05/microsoft-warns-of-two-actively.htmlThu, 21 May 2026 16:25:57 +0530info@thehackernews.com (The Hacker News)When Identity is the Attack Pathhttps://thehackernews.com/2026/05/when-identity-is-attack-path.htmlhttps://thehackernews.com/2026/05/when-identity-is-attack-path.htmlThu, 21 May 2026 16:00:00 +0530info@thehackernews.com (The Hacker News)9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distroshttps://thehackernews.com/2026/05/9-year-old-linux-kernel-flaw-enables.htmlhttps://thehackernews.com/2026/05/9-year-old-linux-kernel-flaw-enables.htmlThu, 21 May 2026 13:05:53 +0530info@thehackernews.com (The Hacker News)GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extensionhttps://thehackernews.com/2026/05/github-internal-repositories-breached.htmlhttps://thehackernews.com/2026/05/github-internal-repositories-breached.htmlThu, 21 May 2026 09:57:01 +0530info@thehackernews.com (The Hacker News)Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attackshttps://thehackernews.com/2026/05/highly-critical-drupal-core-flaw.htmlhttps://thehackernews.com/2026/05/highly-critical-drupal-core-flaw.htmlThu, 21 May 2026 09:14:11 +0530info@thehackernews.com (The Hacker News)Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Developmenthttps://thehackernews.com/2026/05/microsoft-open-sources-rampart-and.htmlhttps://thehackernews.com/2026/05/microsoft-open-sources-rampart-and.htmlWed, 20 May 2026 22:36:54 +0530info@thehackernews.com (The Hacker News)Microsoft Takes Down Malware-Signing Service Behind Ransomware Attackshttps://thehackernews.com/2026/05/microsoft-takes-down-malware-signing.htmlhttps://thehackernews.com/2026/05/microsoft-takes-down-malware-signing.htmlWed, 20 May 2026 20:06:44 +0530info@thehackernews.com (The Hacker News)Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph APIhttps://thehackernews.com/2026/05/webworm-deploys-echocreep-and-graphworm.htmlhttps://thehackernews.com/2026/05/webworm-deploys-echocreep-and-graphworm.htmlWed, 20 May 2026 18:21:43 +0530info@thehackernews.com (The Hacker News)Agent AI is Coming. Are You Ready?https://thehackernews.com/2026/05/agent-ai-is-coming-are-you-ready.htmlhttps://thehackernews.com/2026/05/agent-ai-is-coming-are-you-ready.htmlWed, 20 May 2026 17:28:00 +0530info@thehackernews.com (The Hacker News)GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal Reposhttps://thehackernews.com/2026/05/github-investigating-teampcp-claimed.htmlhttps://thehackernews.com/2026/05/github-investigating-teampcp-claimed.htmlWed, 20 May 2026 17:08:43 +0530info@thehackernews.com (The Hacker News)Typosquatting Is No Longer a User Problem. It's a Supply Chain Problemhttps://thehackernews.com/2026/05/typosquatting-is-no-longer-user-problem.htmlhttps://thehackernews.com/2026/05/typosquatting-is-no-longer-user-problem.htmlWed, 20 May 2026 16:00:00 +0530info@thehackernews.com (The Hacker News)Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploithttps://thehackernews.com/2026/05/microsoft-releases-mitigation-for.htmlhttps://thehackernews.com/2026/05/microsoft-releases-mitigation-for.htmlWed, 20 May 2026 13:58:26 +0530info@thehackernews.com (The Hacker News)Grafana GitHub Breach Exposes Source Code via TanStack npm Attackhttps://thehackernews.com/2026/05/grafana-github-breach-exposes-source.htmlhttps://thehackernews.com/2026/05/grafana-github-breach-exposes-source.htmlWed, 20 May 2026 10:42:06 +0530info@thehackernews.com (The Hacker News)Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid Requests Using 455 Appshttps://thehackernews.com/2026/05/trapdoor-android-ad-fraud-scheme-hit.htmlhttps://thehackernews.com/2026/05/trapdoor-android-ad-fraud-scheme-hit.htmlTue, 19 May 2026 22:08:12 +0530info@thehackernews.com (The Hacker News)DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerabilityhttps://thehackernews.com/2026/05/dirtydecrypt-poc-released-for-linux.htmlhttps://thehackernews.com/2026/05/dirtydecrypt-poc-released-for-linux.htmlTue, 19 May 2026 20:26:26 +0530info@thehackernews.com (The Hacker News)The New Phishing Click: How OAuth Consent Bypasses MFAhttps://thehackernews.com/2026/05/the-new-phishing-click-how-oauth.htmlhttps://thehackernews.com/2026/05/the-new-phishing-click-how-oauth.htmlTue, 19 May 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Preparehttps://thehackernews.com/2026/05/drupal-to-release-urgent-core-security.htmlhttps://thehackernews.com/2026/05/drupal-to-release-urgent-core-security.htmlTue, 19 May 2026 16:14:45 +0530info@thehackernews.com (The Hacker News)SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Accesshttps://thehackernews.com/2026/05/seppmail-secure-e-mail-gateway.htmlhttps://thehackernews.com/2026/05/seppmail-secure-e-mail-gateway.htmlTue, 19 May 2026 14:53:15 +0530info@thehackernews.com (The Hacker News)Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealerhttps://thehackernews.com/2026/05/compromised-nx-console-18950-targeted.htmlhttps://thehackernews.com/2026/05/compromised-nx-console-18950-targeted.htmlTue, 19 May 2026 13:19:23 +0530info@thehackernews.com (The Hacker News)Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD Credentialshttps://thehackernews.com/2026/05/github-actions-supply-chain-attack.htmlhttps://thehackernews.com/2026/05/github-actions-supply-chain-attack.htmlTue, 19 May 2026 10:58:06 +0530info@thehackernews.com (The Hacker News)Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Accounthttps://thehackernews.com/2026/05/mini-shai-hulud-pushes-malicious-antv.htmlhttps://thehackernews.com/2026/05/mini-shai-hulud-pushes-malicious-antv.htmlTue, 19 May 2026 10:24:17 +0530info@thehackernews.com (The Hacker News)INTERPOL Operation Ramz Disrupts MENA Cybercrime Networks with 201 Arrestshttps://thehackernews.com/2026/05/interpol-operation-ramz-disrupts-mena.htmlhttps://thehackernews.com/2026/05/interpol-operation-ramz-disrupts-mena.htmlMon, 18 May 2026 22:51:18 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and Morehttps://thehackernews.com/2026/05/weekly-recap-exchange-0-day-npm-worm.htmlhttps://thehackernews.com/2026/05/weekly-recap-exchange-0-day-npm-worm.htmlMon, 18 May 2026 19:20:17 +0530info@thehackernews.com (The Hacker News)How to Reduce Phishing Exposure Before It Turns into Business Disruptionhttps://thehackernews.com/2026/05/how-to-reduce-phishing-exposure-before.htmlhttps://thehackernews.com/2026/05/how-to-reduce-phishing-exposure-before.htmlMon, 18 May 2026 18:30:00 +0530info@thehackernews.com (The Hacker News)Developer Workstations Are Now Part of the Software Supply Chainhttps://thehackernews.com/2026/05/developer-workstations-are-now-part-of.htmlhttps://thehackernews.com/2026/05/developer-workstations-are-now-part-of.htmlMon, 18 May 2026 16:53:41 +0530info@thehackernews.com (The Hacker News)Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flawshttps://thehackernews.com/2026/05/ivanti-fortinet-sap-vmware-n8n-patch.htmlhttps://thehackernews.com/2026/05/ivanti-fortinet-sap-vmware-n8n-patch.htmlMon, 18 May 2026 16:24:05 +0530info@thehackernews.com (The Hacker News)MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systemshttps://thehackernews.com/2026/05/miniplasma-windows-0-day-enables-system.htmlhttps://thehackernews.com/2026/05/miniplasma-windows-0-day-enables-system.htmlMon, 18 May 2026 14:27:34 +0530info@thehackernews.com (The Hacker News)Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malwarehttps://thehackernews.com/2026/05/four-malicious-npm-packages-deliver.htmlhttps://thehackernews.com/2026/05/four-malicious-npm-packages-deliver.htmlMon, 18 May 2026 14:27:26 +0530info@thehackernews.com (The Hacker News)Pre-Stuxnet Fast16 Malware Tampered with Nuclear Weapons Simulationshttps://thehackernews.com/2026/05/pre-stuxnet-fast16-malware-tampered.htmlhttps://thehackernews.com/2026/05/pre-stuxnet-fast16-malware-tampered.htmlMon, 18 May 2026 12:16:37 +0530info@thehackernews.com (The Hacker News)NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCEhttps://thehackernews.com/2026/05/nginx-cve-2026-42945-exploited-in-wild.htmlhttps://thehackernews.com/2026/05/nginx-cve-2026-42945-exploited-in-wild.htmlSun, 17 May 2026 17:27:53 +0530info@thehackernews.com (The Hacker News)Grafana GitHub Token Breach Led to Codebase Download and Extortion Attempthttps://thehackernews.com/2026/05/grafana-github-token-breach-led-to.htmlhttps://thehackernews.com/2026/05/grafana-github-token-breach-led-to.htmlSun, 17 May 2026 12:43:33 +0530info@thehackernews.com (The Hacker News)Funnel Builder Flaw Under Active Exploitation Enables WooCommerce Checkout Skimminghttps://thehackernews.com/2026/05/funnel-builder-flaw-under-active.htmlhttps://thehackernews.com/2026/05/funnel-builder-flaw-under-active.htmlSat, 16 May 2026 20:50:48 +0530info@thehackernews.com (The Hacker News)Turla Turns Kazuar Backdoor Into Modular P2P Botnet for Persistent Accesshttps://thehackernews.com/2026/05/turla-turns-kazuar-backdoor-into.htmlhttps://thehackernews.com/2026/05/turla-turns-kazuar-backdoor-into.htmlFri, 15 May 2026 22:40:25 +0530info@thehackernews.com (The Hacker News)Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistencehttps://thehackernews.com/2026/05/four-openclaw-flaws-enable-data-theft.htmlhttps://thehackernews.com/2026/05/four-openclaw-flaws-enable-data-theft.htmlFri, 15 May 2026 19:05:04 +0530info@thehackernews.com (The Hacker News)What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surfacehttps://thehackernews.com/2026/05/what-45-days-of-watching-your-own-tools.htmlhttps://thehackernews.com/2026/05/what-45-days-of-watching-your-own-tools.htmlFri, 15 May 2026 16:30:00 +0530info@thehackernews.com (The Hacker News)