The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usTue, 08 Sep 2026 19:46:39 +0530hourly1Liquid Hackers Return 3,400 Bitcoin Taken via Elements Bug, Still Holding $47M in BTChttps://thehackernews.com/2026/09/liquid-hackers-return-3400-bitcoin.htmlhttps://thehackernews.com/2026/09/liquid-hackers-return-3400-bitcoin.htmlTue, 08 Sep 2026 20:24:30 +0530info@thehackernews.com (The Hacker News)ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another Accounthttps://thehackernews.com/2026/09/chatgpt-flaw-let-planted-prompt-send.htmlhttps://thehackernews.com/2026/09/chatgpt-flaw-let-planted-prompt-send.htmlTue, 08 Sep 2026 19:49:17 +0530info@thehackernews.com (The Hacker News)Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hourshttps://thehackernews.com/2026/09/autonomous-ai-agents-compromise.htmlhttps://thehackernews.com/2026/09/autonomous-ai-agents-compromise.htmlTue, 08 Sep 2026 19:18:16 +0530info@thehackernews.com (The Hacker News)WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Callshttps://thehackernews.com/2026/09/wechat-zero-click-worm-took-over.htmlhttps://thehackernews.com/2026/09/wechat-zero-click-worm-took-over.htmlTue, 08 Sep 2026 17:24:29 +0530info@thehackernews.com (The Hacker News)What It Took to Reach 1 Billion Build Manifestshttps://thehackernews.com/2026/09/what-it-took-to-reach-1-billion-build.htmlhttps://thehackernews.com/2026/09/what-it-took-to-reach-1-billion-build.htmlTue, 08 Sep 2026 17:19:02 +0530info@thehackernews.com (The Hacker News)FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentialshttps://thehackernews.com/2026/09/freeipa-flaw-chain-lets-anonymous.htmlhttps://thehackernews.com/2026/09/freeipa-flaw-chain-lets-anonymous.htmlTue, 08 Sep 2026 16:52:07 +0530info@thehackernews.com (The Hacker News)Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shellhttps://thehackernews.com/2026/09/adobe-patches-magento-zero-day.htmlhttps://thehackernews.com/2026/09/adobe-patches-magento-zero-day.htmlTue, 08 Sep 2026 14:43:47 +0530info@thehackernews.com (The Hacker News)BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scamshttps://thehackernews.com/2026/09/bengalseo-poisons-bing-search-results.htmlhttps://thehackernews.com/2026/09/bengalseo-poisons-bing-search-results.htmlTue, 08 Sep 2026 14:13:51 +0530info@thehackernews.com (The Hacker News)Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharinghttps://thehackernews.com/2026/09/grindr-to-pay-26-million-to-settle-uk.htmlhttps://thehackernews.com/2026/09/grindr-to-pay-26-million-to-settle-uk.htmlTue, 08 Sep 2026 12:30:43 +0530info@thehackernews.com (The Hacker News)PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Executionhttps://thehackernews.com/2026/09/peep-turns-chrome-and-edge-into-post.htmlhttps://thehackernews.com/2026/09/peep-turns-chrome-and-edge-into-post.htmlMon, 07 Sep 2026 23:42:09 +0530info@thehackernews.com (The Hacker News)Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attackshttps://thehackernews.com/2026/09/microsoft-365-attackers-use-help-desk.htmlhttps://thehackernews.com/2026/09/microsoft-365-attackers-use-help-desk.htmlMon, 07 Sep 2026 21:21:56 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and Morehttps://thehackernews.com/2026/09/weekly-recap-chrome-0-day-router.htmlhttps://thehackernews.com/2026/09/weekly-recap-chrome-0-day-router.htmlMon, 07 Sep 2026 20:06:07 +0530info@thehackernews.com (The Hacker News)Your Cloud Security Checklist Doesn't Work the Way You Think It Doeshttps://thehackernews.com/2026/09/your-cloud-security-checklist-doesnt.htmlhttps://thehackernews.com/2026/09/your-cloud-security-checklist-doesnt.htmlMon, 07 Sep 2026 17:15:00 +0530info@thehackernews.com (The Hacker News)Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hostshttps://thehackernews.com/2026/09/rogue-screenconnect-clients-spread-four.htmlhttps://thehackernews.com/2026/09/rogue-screenconnect-clients-spread-four.htmlMon, 07 Sep 2026 17:06:39 +0530info@thehackernews.com (The Hacker News)Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Releasedhttps://thehackernews.com/2026/09/telerik-ui-padding-oracle-bug-chained.htmlhttps://thehackernews.com/2026/09/telerik-ui-padding-oracle-bug-chained.htmlMon, 07 Sep 2026 16:50:14 +0530info@thehackernews.com (The Hacker News)N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flawhttps://thehackernews.com/2026/09/n-able-issues-fourth-n-central-hotfix.htmlhttps://thehackernews.com/2026/09/n-able-issues-fourth-n-central-hotfix.htmlMon, 07 Sep 2026 14:01:12 +0530info@thehackernews.com (The Hacker News)JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookieshttps://thehackernews.com/2026/09/jsceal-malware-can-bypass-google.htmlhttps://thehackernews.com/2026/09/jsceal-malware-can-bypass-google.htmlMon, 07 Sep 2026 13:23:04 +0530info@thehackernews.com (The Hacker News)Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authenticationhttps://thehackernews.com/2026/09/attackers-hijack-mikrotik-routers.htmlhttps://thehackernews.com/2026/09/attackers-hijack-mikrotik-routers.htmlSun, 06 Sep 2026 15:02:38 +0530info@thehackernews.com (The Hacker News)Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Minerhttps://thehackernews.com/2026/09/four-revstealer-linked-modules-disable.htmlhttps://thehackernews.com/2026/09/four-revstealer-linked-modules-disable.htmlSun, 06 Sep 2026 14:04:20 +0530info@thehackernews.com (The Hacker News)Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Storeshttps://thehackernews.com/2026/09/unpatched-magento-and-adobe-commerce.htmlhttps://thehackernews.com/2026/09/unpatched-magento-and-adobe-commerce.htmlSun, 06 Sep 2026 01:44:47 +0530info@thehackernews.com (The Hacker News)Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentialshttps://thehackernews.com/2026/09/attackers-breached-jetbrains-cadence.htmlhttps://thehackernews.com/2026/09/attackers-breached-jetbrains-cadence.htmlSat, 05 Sep 2026 22:22:33 +0530info@thehackernews.com (The Hacker News)Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Codehttps://thehackernews.com/2026/09/critical-vmware-workstation-and-fusion.htmlhttps://thehackernews.com/2026/09/critical-vmware-workstation-and-fusion.htmlSat, 05 Sep 2026 21:35:08 +0530info@thehackernews.com (The Hacker News)Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deletedhttps://thehackernews.com/2026/09/trezor-says-shipmonk-breach-exposed.htmlhttps://thehackernews.com/2026/09/trezor-says-shipmonk-breach-exposed.htmlSat, 05 Sep 2026 19:47:02 +0530info@thehackernews.com (The Hacker News)Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channelhttps://thehackernews.com/2026/09/thousands-of-openai-agents-quietly.htmlhttps://thehackernews.com/2026/09/thousands-of-openai-agents-quietly.htmlSat, 05 Sep 2026 13:25:10 +0530info@thehackernews.com (The Hacker News)Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universitieshttps://thehackernews.com/2026/09/attackers-exploit-papercut-flaws-to.htmlhttps://thehackernews.com/2026/09/attackers-exploit-papercut-flaws-to.htmlSat, 05 Sep 2026 13:01:53 +0530info@thehackernews.com (The Hacker News)Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filtershttps://thehackernews.com/2026/09/phishing-campaign-sends-millions-of.htmlhttps://thehackernews.com/2026/09/phishing-campaign-sends-millions-of.htmlFri, 04 Sep 2026 21:27:15 +0530info@thehackernews.com (The Hacker News)PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Executionhttps://thehackernews.com/2026/09/postgresql-fixes-12-year-old-logical.htmlhttps://thehackernews.com/2026/09/postgresql-fixes-12-year-old-logical.htmlFri, 04 Sep 2026 20:50:19 +0530info@thehackernews.com (The Hacker News)New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffichttps://thehackernews.com/2026/09/new-ted-backdoor-hides-inside-victims.htmlhttps://thehackernews.com/2026/09/new-ted-backdoor-hides-inside-victims.htmlFri, 04 Sep 2026 20:21:13 +0530info@thehackernews.com (The Hacker News)Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flawshttps://thehackernews.com/2026/09/over-440000-exploit-attempts-target.htmlhttps://thehackernews.com/2026/09/over-440000-exploit-attempts-target.htmlFri, 04 Sep 2026 14:18:45 +0530info@thehackernews.com (The Hacker News)Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flawshttps://thehackernews.com/2026/09/plex-urges-immediate-updates-after.htmlhttps://thehackernews.com/2026/09/plex-urges-immediate-updates-after.htmlFri, 04 Sep 2026 13:05:14 +0530info@thehackernews.com (The Hacker News)Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Dayhttps://thehackernews.com/2026/09/google-releases-chrome-update-to-patch.htmlhttps://thehackernews.com/2026/09/google-releases-chrome-update-to-patch.htmlFri, 04 Sep 2026 12:48:47 +0530info@thehackernews.com (The Hacker News)GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requestshttps://thehackernews.com/2026/09/gpt-6-astra-scores-100-on-exploitbench.htmlhttps://thehackernews.com/2026/09/gpt-6-astra-scores-100-on-exploitbench.htmlFri, 04 Sep 2026 12:17:52 +0530info@thehackernews.com (The Hacker News)ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Storieshttps://thehackernews.com/2026/09/threatsday-ceo-phishing-kits-5k-dropbox.htmlhttps://thehackernews.com/2026/09/threatsday-ceo-phishing-kits-5k-dropbox.htmlThu, 03 Sep 2026 23:32:47 +0530info@thehackernews.com (The Hacker News)Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Roothttps://thehackernews.com/2026/09/critical-cisco-nexus-9000-flaw-lets.htmlhttps://thehackernews.com/2026/09/critical-cisco-nexus-9000-flaw-lets.htmlThu, 03 Sep 2026 21:22:07 +0530info@thehackernews.com (The Hacker News)BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventoryhttps://thehackernews.com/2026/09/brazetsu-malware-turns-compromised.htmlhttps://thehackernews.com/2026/09/brazetsu-malware-turns-compromised.htmlThu, 03 Sep 2026 20:56:47 +0530info@thehackernews.com (The Hacker News)Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Datahttps://thehackernews.com/2026/09/thomson-reuters-court-software-breach.htmlhttps://thehackernews.com/2026/09/thomson-reuters-court-software-breach.htmlThu, 03 Sep 2026 20:09:05 +0530info@thehackernews.com (The Hacker News)US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countrieshttps://thehackernews.com/2026/09/us-becomes-top-target-in-rmm-phishing.htmlhttps://thehackernews.com/2026/09/us-becomes-top-target-in-rmm-phishing.htmlThu, 03 Sep 2026 17:28:00 +0530info@thehackernews.com (The Hacker News)Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attackshttps://thehackernews.com/2026/09/attackers-turn-trusted-nodejs-runtime.htmlhttps://thehackernews.com/2026/09/attackers-turn-trusted-nodejs-runtime.htmlThu, 03 Sep 2026 16:13:01 +0530info@thehackernews.com (The Hacker News)Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Meanshttps://thehackernews.com/2026/09/shai-huluds-reach-just-grew-to-469.htmlhttps://thehackernews.com/2026/09/shai-huluds-reach-just-grew-to-469.htmlThu, 03 Sep 2026 16:06:39 +0530info@thehackernews.com (The Hacker News)Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhonehttps://thehackernews.com/2026/09/pegasus-zero-click-spyware-exploit.htmlhttps://thehackernews.com/2026/09/pegasus-zero-click-spyware-exploit.htmlThu, 03 Sep 2026 14:13:17 +0530info@thehackernews.com (The Hacker News)Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falconhttps://thehackernews.com/2026/09/researcher-releases-falconflank-poc.htmlhttps://thehackernews.com/2026/09/researcher-releases-falconflank-poc.htmlThu, 03 Sep 2026 11:56:59 +0530info@thehackernews.com (The Hacker News)CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Minershttps://thehackernews.com/2026/09/cisa-adds-seven-exploited-flaws-as.htmlhttps://thehackernews.com/2026/09/cisa-adds-seven-exploited-flaws-as.htmlThu, 03 Sep 2026 10:49:04 +0530info@thehackernews.com (The Hacker News)Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programshttps://thehackernews.com/2026/09/google-anthropic-and-openai-unveil.htmlhttps://thehackernews.com/2026/09/google-anthropic-and-openai-unveil.htmlWed, 02 Sep 2026 23:57:49 +0530info@thehackernews.com (The Hacker News)Fake Software Installers Disable Windows Update and Weaken Microsoft Defenderhttps://thehackernews.com/2026/09/fake-software-installers-disable.htmlhttps://thehackernews.com/2026/09/fake-software-installers-disable.htmlWed, 02 Sep 2026 22:11:06 +0530info@thehackernews.com (The Hacker News)Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Codehttps://thehackernews.com/2026/09/malicious-git-configs-can-make-claude.htmlhttps://thehackernews.com/2026/09/malicious-git-configs-can-make-claude.htmlWed, 02 Sep 2026 19:36:59 +0530info@thehackernews.com (The Hacker News)Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pageshttps://thehackernews.com/2026/09/malicious-apache-modules-hijack.htmlhttps://thehackernews.com/2026/09/malicious-apache-modules-hijack.htmlWed, 02 Sep 2026 19:14:16 +0530info@thehackernews.com (The Hacker News)BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Accesshttps://thehackernews.com/2026/09/bgp-hijack-delivers-malicious.htmlhttps://thehackernews.com/2026/09/bgp-hijack-delivers-malicious.htmlWed, 02 Sep 2026 18:42:45 +0530info@thehackernews.com (The Hacker News)Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Controlhttps://thehackernews.com/2026/09/meta-ads-push-streamrat-android-trojan.htmlhttps://thehackernews.com/2026/09/meta-ads-push-streamrat-android-trojan.htmlWed, 02 Sep 2026 17:52:02 +0530info@thehackernews.com (The Hacker News)How to Secure Enterprise AI: From Adoption to Incident Readinesshttps://thehackernews.com/2026/09/how-to-secure-enterprise-ai-from.htmlhttps://thehackernews.com/2026/09/how-to-secure-enterprise-ai-from.htmlWed, 02 Sep 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chainhttps://thehackernews.com/2026/09/attackers-exploit-two-sonicwall-sma.htmlhttps://thehackernews.com/2026/09/attackers-exploit-two-sonicwall-sma.htmlWed, 02 Sep 2026 16:23:49 +0530info@thehackernews.com (The Hacker News)