The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usFri, 03 Jul 2026 06:07:24 +0530hourly1Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Deviceshttps://thehackernews.com/2026/07/google-disrupts-netnut-residential.htmlhttps://thehackernews.com/2026/07/google-disrupts-netnut-residential.htmlFri, 03 Jul 2026 00:24:06 +0530info@thehackernews.com (The Hacker News)Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentialshttps://thehackernews.com/2026/07/ransomware-groups-turn-to-citrix-bleed.htmlhttps://thehackernews.com/2026/07/ransomware-groups-turn-to-citrix-bleed.htmlFri, 03 Jul 2026 00:00:33 +0530info@thehackernews.com (The Hacker News)ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Storieshttps://thehackernews.com/2026/07/threatsday-ai-compute-hijacking-apple.htmlhttps://thehackernews.com/2026/07/threatsday-ai-compute-hijacking-apple.htmlThu, 02 Jul 2026 20:54:18 +0530info@thehackernews.com (The Hacker News)ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google APIhttps://thehackernews.com/2026/07/toddycat-linked-umbrij-malware-abuses.htmlhttps://thehackernews.com/2026/07/toddycat-linked-umbrij-malware-abuses.htmlThu, 02 Jul 2026 18:34:13 +0530info@thehackernews.com (The Hacker News)Identity Lifecycle Management Wasn't Built for AI Agents https://thehackernews.com/2026/07/identity-lifecycle-management.htmlhttps://thehackernews.com/2026/07/identity-lifecycle-management.htmlThu, 02 Jul 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)AI Agent Exploits Langflow RCE to Automate Database Ransomware Attackhttps://thehackernews.com/2026/07/ai-agent-exploits-langflow-rce-to.htmlhttps://thehackernews.com/2026/07/ai-agent-exploits-langflow-rce-to.htmlThu, 02 Jul 2026 14:43:13 +0530info@thehackernews.com (The Hacker News)FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operationshttps://thehackernews.com/2026/07/fortibleed-credential-theft-linked-to.htmlhttps://thehackernews.com/2026/07/fortibleed-credential-theft-linked-to.htmlThu, 02 Jul 2026 13:30:49 +0530info@thehackernews.com (The Hacker News)New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Reposhttps://thehackernews.com/2026/07/new-chocopoc-rat-targets-vulnerability.htmlhttps://thehackernews.com/2026/07/new-chocopoc-rat-targets-vulnerability.htmlThu, 02 Jul 2026 12:54:23 +0530info@thehackernews.com (The Hacker News)SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitationhttps://thehackernews.com/2026/07/sharepoint-rce-cve-2026-45659-added-to.htmlhttps://thehackernews.com/2026/07/sharepoint-rce-cve-2026-45659-added-to.htmlThu, 02 Jul 2026 11:16:45 +0530info@thehackernews.com (The Hacker News)Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clustershttps://thehackernews.com/2026/07/unpatched-argo-cd-repo-server-flaw.htmlhttps://thehackernews.com/2026/07/unpatched-argo-cd-repo-server-flaw.htmlThu, 02 Jul 2026 01:10:06 +0530info@thehackernews.com (The Hacker News)19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Chargeshttps://thehackernews.com/2026/07/19-year-old-scattered-spider-suspect.htmlhttps://thehackernews.com/2026/07/19-year-old-scattered-spider-suspect.htmlThu, 02 Jul 2026 00:58:07 +0530info@thehackernews.com (The Hacker News)SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAThttps://thehackernews.com/2026/07/seo-poisoned-software-sites-abuse.htmlhttps://thehackernews.com/2026/07/seo-poisoned-software-sites-abuse.htmlWed, 01 Jul 2026 23:23:06 +0530info@thehackernews.com (The Hacker News)VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealerhttps://thehackernews.com/2026/07/veildrop-malware-chain-uses-blogger.htmlhttps://thehackernews.com/2026/07/veildrop-malware-chain-uses-blogger.htmlWed, 01 Jul 2026 22:48:50 +0530info@thehackernews.com (The Hacker News)Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lureshttps://thehackernews.com/2026/07/ousaban-banking-trojan-targets-iberian.htmlhttps://thehackernews.com/2026/07/ousaban-banking-trojan-targets-iberian.htmlWed, 01 Jul 2026 20:56:55 +0530info@thehackernews.com (The Hacker News)Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classichttps://thehackernews.com/2026/07/adobe-patches-7-cvss-100-flaws-in.htmlhttps://thehackernews.com/2026/07/adobe-patches-7-cvss-100-flaws-in.htmlWed, 01 Jul 2026 20:55:46 +0530info@thehackernews.com (The Hacker News)Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commandshttps://thehackernews.com/2026/07/critical-cursor-flaws-could-let-prompt.htmlhttps://thehackernews.com/2026/07/critical-cursor-flaws-could-let-prompt.htmlWed, 01 Jul 2026 20:12:54 +0530info@thehackernews.com (The Hacker News)Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attemptshttps://thehackernews.com/2026/07/latest-progress-kemp-loadmaster-pre.htmlhttps://thehackernews.com/2026/07/latest-progress-kemp-loadmaster-pre.htmlWed, 01 Jul 2026 19:26:18 +0530info@thehackernews.com (The Hacker News)AI-Generated Browser Ransomware Abuses Chromium API on Windows, Linux, macOS, Androidhttps://thehackernews.com/2026/07/ai-generated-browser-ransomware-abuses.htmlhttps://thehackernews.com/2026/07/ai-generated-browser-ransomware-abuses.htmlWed, 01 Jul 2026 18:29:19 +0530info@thehackernews.com (The Hacker News)2026 Cybersecurity Assessment: The Gap Between Awareness and Resiliencehttps://thehackernews.com/2026/07/2026-cybersecurity-assessment-gap.htmlhttps://thehackernews.com/2026/07/2026-cybersecurity-assessment-gap.htmlWed, 01 Jul 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Microsoft Accelerates Post-Quantum Cryptography Shift to 2029https://thehackernews.com/2026/07/microsoft-accelerates-post-quantum.htmlhttps://thehackernews.com/2026/07/microsoft-accelerates-post-quantum.htmlWed, 01 Jul 2026 16:11:36 +0530info@thehackernews.com (The Hacker News)Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malwarehttps://thehackernews.com/2026/07/phantom-squatting-uses-ai-hallucinated.htmlhttps://thehackernews.com/2026/07/phantom-squatting-uses-ai-hallucinated.htmlWed, 01 Jul 2026 12:50:51 +0530info@thehackernews.com (The Hacker News)Anthropic Restores Claude Fable 5 After U.S. Lifts Jailbreak-Linked Export Controlshttps://thehackernews.com/2026/07/anthropic-restores-claude-fable-5-after.htmlhttps://thehackernews.com/2026/07/anthropic-restores-claude-fable-5-after.htmlWed, 01 Jul 2026 12:16:17 +0530info@thehackernews.com (The Hacker News)Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attemptshttps://thehackernews.com/2026/07/azure-cli-password-spray-hits-at-least.htmlhttps://thehackernews.com/2026/07/azure-cli-password-spray-hits-at-least.htmlWed, 01 Jul 2026 11:16:03 +0530info@thehackernews.com (The Hacker News)Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Deliveryhttps://thehackernews.com/2026/07/researcher-analyzes-3000-live-clickfix.htmlhttps://thehackernews.com/2026/07/researcher-analyzes-3000-live-clickfix.htmlWed, 01 Jul 2026 11:02:12 +0530info@thehackernews.com (The Hacker News)Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Servicehttps://thehackernews.com/2026/07/citrix-patches-six-netscaler-flaws.htmlhttps://thehackernews.com/2026/07/citrix-patches-six-netscaler-flaws.htmlWed, 01 Jul 2026 09:24:22 +0530info@thehackernews.com (The Hacker News)Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Datahttps://thehackernews.com/2026/06/microsoft-warns-poisoned-mcp-tool.htmlhttps://thehackernews.com/2026/06/microsoft-warns-poisoned-mcp-tool.htmlTue, 30 Jun 2026 23:16:07 +0530info@thehackernews.com (The Hacker News)RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoShttps://thehackernews.com/2026/06/rustduck-botnet-rebuilds-in-rust-to.htmlhttps://thehackernews.com/2026/06/rustduck-botnet-rebuilds-in-rust-to.htmlTue, 30 Jun 2026 23:15:25 +0530info@thehackernews.com (The Hacker News)Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpointshttps://thehackernews.com/2026/06/langflow-rce-exploited-to-deploy-monero.htmlhttps://thehackernews.com/2026/06/langflow-rce-exploited-to-deploy-monero.htmlTue, 30 Jun 2026 21:17:20 +0530info@thehackernews.com (The Hacker News)Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresseshttps://thehackernews.com/2026/06/silent-swap-crypto-clipper-uses-fake.htmlhttps://thehackernews.com/2026/06/silent-swap-crypto-clipper-uses-fake.htmlTue, 30 Jun 2026 21:10:18 +0530info@thehackernews.com (The Hacker News)GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Riskshttps://thehackernews.com/2026/06/guardfall-exposes-open-source-ai-coding.htmlhttps://thehackernews.com/2026/06/guardfall-exposes-open-source-ai-coding.htmlTue, 30 Jun 2026 19:56:15 +0530info@thehackernews.com (The Hacker News)282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Studyhttps://thehackernews.com/2026/06/282-ios-apps-found-leaking-llm-api-keys.htmlhttps://thehackernews.com/2026/06/282-ios-apps-found-leaking-llm-api-keys.htmlTue, 30 Jun 2026 19:19:34 +0530info@thehackernews.com (The Hacker News)What the Numbers Say About FIFA 2026 Cyber Riskhttps://thehackernews.com/2026/06/what-numbers-say-about-fifa-2026-cyber.htmlhttps://thehackernews.com/2026/06/what-numbers-say-about-fifa-2026-cyber.htmlTue, 30 Jun 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealerhttps://thehackernews.com/2026/06/attackers-exploit-simplehelp-cve-2026.htmlhttps://thehackernews.com/2026/06/attackers-exploit-simplehelp-cve-2026.htmlTue, 30 Jun 2026 16:48:47 +0530info@thehackernews.com (The Hacker News)AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checkshttps://thehackernews.com/2026/06/airdrop-and-quick-share-flaws-let.htmlhttps://thehackernews.com/2026/06/airdrop-and-quick-share-flaws-let.htmlTue, 30 Jun 2026 14:57:58 +0530info@thehackernews.com (The Hacker News)New BioShocking Attack Tricks AI Browsers Into Leaking User Credentialshttps://thehackernews.com/2026/06/new-bioshocking-attack-tricks-ai.htmlhttps://thehackernews.com/2026/06/new-bioshocking-attack-tricks-ai.htmlTue, 30 Jun 2026 14:07:19 +0530info@thehackernews.com (The Hacker News)Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Authhttps://thehackernews.com/2026/06/progress-kemp-loadmaster-flaw-could-let.htmlhttps://thehackernews.com/2026/06/progress-kemp-loadmaster-flaw-could-let.htmlTue, 30 Jun 2026 13:08:07 +0530info@thehackernews.com (The Hacker News)Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wildhttps://thehackernews.com/2026/06/oracle-e-business-suite-flaw-cve-2026.htmlhttps://thehackernews.com/2026/06/oracle-e-business-suite-flaw-cve-2026.htmlTue, 30 Jun 2026 10:34:06 +0530info@thehackernews.com (The Hacker News)WhatsApp is Finally Getting Usernames to Help Keep Phone Numbers Privatehttps://thehackernews.com/2026/06/whatsapp-is-finally-getting-usernames.htmlhttps://thehackernews.com/2026/06/whatsapp-is-finally-getting-usernames.htmlMon, 29 Jun 2026 21:39:21 +0530info@thehackernews.com (The Hacker News)Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Inputhttps://thehackernews.com/2026/06/malicious-perplexity-chrome-extension.htmlhttps://thehackernews.com/2026/06/malicious-perplexity-chrome-extension.htmlMon, 29 Jun 2026 21:10:00 +0530info@thehackernews.com (The Hacker News)Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugshttps://thehackernews.com/2026/06/apple-patches-30-ios-macos-safari-flaws.htmlhttps://thehackernews.com/2026/06/apple-patches-30-ios-macos-safari-flaws.htmlMon, 29 Jun 2026 21:00:00 +0530info@thehackernews.com (The Hacker News)Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attackshttps://thehackernews.com/2026/06/mustang-panda-uses-zoho-workdrive-as.htmlhttps://thehackernews.com/2026/06/mustang-panda-uses-zoho-workdrive-as.htmlMon, 29 Jun 2026 20:33:40 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and Morehttps://thehackernews.com/2026/06/weekly-recap-linux-kernel-flaws-ai.htmlhttps://thehackernews.com/2026/06/weekly-recap-linux-kernel-flaws-ai.htmlMon, 29 Jun 2026 20:11:07 +0530info@thehackernews.com (The Hacker News)236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainershttps://thehackernews.com/2026/06/236000-dcloud-uni-app-sites-used-in.htmlhttps://thehackernews.com/2026/06/236000-dcloud-uni-app-sites-used-in.htmlMon, 29 Jun 2026 17:27:40 +0530info@thehackernews.com (The Hacker News)Why Post-Quantum Cryptography Starts With Credentialshttps://thehackernews.com/2026/06/why-post-quantum-cryptography-starts.htmlhttps://thehackernews.com/2026/06/why-post-quantum-cryptography-starts.htmlMon, 29 Jun 2026 17:12:16 +0530info@thehackernews.com (The Hacker News)Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abusehttps://thehackernews.com/2026/06/gamaredon-expands-ukraine-attacks-with.htmlhttps://thehackernews.com/2026/06/gamaredon-expands-ukraine-attacks-with.htmlMon, 29 Jun 2026 17:10:24 +0530info@thehackernews.com (The Hacker News)Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fontshttps://thehackernews.com/2026/06/microsoft-removes-119-edge-extensions.htmlhttps://thehackernews.com/2026/06/microsoft-removes-119-edge-extensions.htmlMon, 29 Jun 2026 14:02:31 +0530info@thehackernews.com (The Hacker News)Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flawhttps://thehackernews.com/2026/06/public-poc-released-for-critical.htmlhttps://thehackernews.com/2026/06/public-poc-released-for-critical.htmlMon, 29 Jun 2026 12:36:34 +0530info@thehackernews.com (The Hacker News)Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealerhttps://thehackernews.com/2026/06/hijacked-npm-and-go-packages-use-vs.htmlhttps://thehackernews.com/2026/06/hijacked-npm-and-go-packages-use-vs.htmlMon, 29 Jun 2026 11:06:06 +0530info@thehackernews.com (The Hacker News)Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentialshttps://thehackernews.com/2026/06/ukraine-says-russian-intelligence-used.htmlhttps://thehackernews.com/2026/06/ukraine-says-russian-intelligence-used.htmlSat, 27 Jun 2026 22:57:11 +0530info@thehackernews.com (The Hacker News)OpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber Safeguardshttps://thehackernews.com/2026/06/openai-limits-gpt-56-rollout-as-sol.htmlhttps://thehackernews.com/2026/06/openai-limits-gpt-56-rollout-as-sol.htmlSat, 27 Jun 2026 17:49:37 +0530info@thehackernews.com (The Hacker News)