The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usMon, 20 Jul 2026 04:33:39 +0530hourly1Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Executionhttps://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.htmlhttps://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.htmlMon, 20 Jul 2026 02:12:49 +0530info@thehackernews.com (The Hacker News)UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malwarehttps://thehackernews.com/2026/07/uac-0145-uses-clickfix-captchas-to.htmlhttps://thehackernews.com/2026/07/uac-0145-uses-clickfix-captchas-to.htmlSun, 19 Jul 2026 19:00:55 +0530info@thehackernews.com (The Hacker News)SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Accesshttps://thehackernews.com/2026/07/sonicwall-sma-zero-days-exploited.htmlhttps://thehackernews.com/2026/07/sonicwall-sma-zero-days-exploited.htmlSun, 19 Jul 2026 18:48:56 +0530info@thehackernews.com (The Hacker News)New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Codehttps://thehackernews.com/2026/07/new-wp2shell-wordpress-core-flaw-lets.htmlhttps://thehackernews.com/2026/07/new-wp2shell-wordpress-core-flaw-lets.htmlSat, 18 Jul 2026 02:50:10 +0530info@thehackernews.com (The Hacker News)OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requestshttps://thehackernews.com/2026/07/openssl-hollowbyte-flaw-could-freeze.htmlhttps://thehackernews.com/2026/07/openssl-hollowbyte-flaw-could-freeze.htmlSat, 18 Jul 2026 01:50:53 +0530info@thehackernews.com (The Hacker News)Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAThttps://thehackernews.com/2026/07/seven-malicious-vite-npm-packages-use.htmlhttps://thehackernews.com/2026/07/seven-malicious-vite-npm-packages-use.htmlSat, 18 Jul 2026 00:24:51 +0530info@thehackernews.com (The Hacker News)New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokenshttps://thehackernews.com/2026/07/new-nadmesh-botnet-hunts-exposed-ai.htmlhttps://thehackernews.com/2026/07/new-nadmesh-botnet-hunts-exposed-ai.htmlFri, 17 Jul 2026 22:42:23 +0530info@thehackernews.com (The Hacker News)GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Thefthttps://thehackernews.com/2026/07/goldeneyedog-subgroup-linked-to.htmlhttps://thehackernews.com/2026/07/goldeneyedog-subgroup-linked-to.htmlFri, 17 Jul 2026 22:09:16 +0530info@thehackernews.com (The Hacker News)Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Imageshttps://thehackernews.com/2026/07/north-korea-linked-hackers-hide.htmlhttps://thehackernews.com/2026/07/north-korea-linked-hackers-hide.htmlFri, 17 Jul 2026 19:18:56 +0530info@thehackernews.com (The Hacker News)E.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistantshttps://thehackernews.com/2026/07/eu-orders-google-to-open-android-mic.htmlhttps://thehackernews.com/2026/07/eu-orders-google-to-open-android-mic.htmlFri, 17 Jul 2026 17:14:41 +0530info@thehackernews.com (The Hacker News)The Race to Field Military Autonomy Is On, Can Trusted Information Infrastructure Keep Pace?https://thehackernews.com/2026/07/the-race-to-field-military-autonomy-is.htmlhttps://thehackernews.com/2026/07/the-race-to-field-military-autonomy-is.htmlFri, 17 Jul 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Manhttps://thehackernews.com/2026/07/armenia-detains-russian-tourist-on-us.htmlhttps://thehackernews.com/2026/07/armenia-detains-russian-tourist-on-us.htmlFri, 17 Jul 2026 16:23:31 +0530info@thehackernews.com (The Hacker News)ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Fileshttps://thehackernews.com/2026/07/acr-stealer-uses-clickfix-lures-to.htmlhttps://thehackernews.com/2026/07/acr-stealer-uses-clickfix-lures-to.htmlFri, 17 Jul 2026 14:26:39 +0530info@thehackernews.com (The Hacker News)New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionagehttps://thehackernews.com/2026/07/new-goserpent-malware-targets-southeast.htmlhttps://thehackernews.com/2026/07/new-goserpent-malware-targets-southeast.htmlFri, 17 Jul 2026 14:16:45 +0530info@thehackernews.com (The Hacker News)CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEVhttps://thehackernews.com/2026/07/cisa-adds-exploited-sharepoint-rce-zero.htmlhttps://thehackernews.com/2026/07/cisa-adds-exploited-sharepoint-rce-zero.htmlFri, 17 Jul 2026 12:12:23 +0530info@thehackernews.com (The Hacker News)Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hackhttps://thehackernews.com/2026/07/two-scattered-spider-hackers-get-55.htmlhttps://thehackernews.com/2026/07/two-scattered-spider-hackers-get-55.htmlThu, 16 Jul 2026 22:39:25 +0530info@thehackernews.com (The Hacker News)ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Storieshttps://thehackernews.com/2026/07/threatsday-game-cheat-spyware-24-hour.htmlhttps://thehackernews.com/2026/07/threatsday-game-cheat-spyware-24-hour.htmlThu, 16 Jul 2026 21:11:15 +0530info@thehackernews.com (The Hacker News)n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuerhttps://thehackernews.com/2026/07/n8n-token-exchange-flaw-could-let.htmlhttps://thehackernews.com/2026/07/n8n-token-exchange-flaw-could-let.htmlThu, 16 Jul 2026 19:03:25 +0530info@thehackernews.com (The Hacker News)New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commandshttps://thehackernews.com/2026/07/new-telepuz-malware-spreads-via.htmlhttps://thehackernews.com/2026/07/new-telepuz-malware-spreads-via.htmlThu, 16 Jul 2026 18:20:13 +0530info@thehackernews.com (The Hacker News)New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Passwordhttps://thehackernews.com/2026/07/new-clicklock-macos-stealer-kills-apps.htmlhttps://thehackernews.com/2026/07/new-clicklock-macos-stealer-kills-apps.htmlThu, 16 Jul 2026 18:03:42 +0530info@thehackernews.com (The Hacker News)20+ Hijacked Government Websites Became
an Attack Channelhttps://thehackernews.com/2026/07/20-hijacked-government-websites.htmlhttps://thehackernews.com/2026/07/20-hijacked-government-websites.htmlThu, 16 Jul 2026 17:28:00 +0530info@thehackernews.com (The Hacker News)New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commandshttps://thehackernews.com/2026/07/new-agent-data-injection-attack-can.htmlhttps://thehackernews.com/2026/07/new-agent-data-injection-attack-can.htmlThu, 16 Jul 2026 17:02:28 +0530info@thehackernews.com (The Hacker News)Daxin Resurfaces in Taiwan Alongside Stupig Pre-Login SYSTEM Backdoorhttps://thehackernews.com/2026/07/daxin-resurfaces-in-taiwan-alongside.htmlhttps://thehackernews.com/2026/07/daxin-resurfaces-in-taiwan-alongside.htmlThu, 16 Jul 2026 16:47:23 +0530info@thehackernews.com (The Hacker News)AI Can Find Bugs, But Human Knowledge Still Proves Themhttps://thehackernews.com/2026/07/ai-can-find-bugs-but-human-knowledge.htmlhttps://thehackernews.com/2026/07/ai-can-find-bugs-but-human-knowledge.htmlThu, 16 Jul 2026 15:40:00 +0530info@thehackernews.com (The Hacker News)Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Widehttps://thehackernews.com/2026/07/unpatched-shark-vacuum-flaw-could-let.htmlhttps://thehackernews.com/2026/07/unpatched-shark-vacuum-flaw-could-let.htmlThu, 16 Jul 2026 14:53:19 +0530info@thehackernews.com (The Hacker News)OpenAI’s GPT-Red Automates Prompt Injection Testing to Harden GPT-5.6 Solhttps://thehackernews.com/2026/07/openais-gpt-red-automates-prompt.htmlhttps://thehackernews.com/2026/07/openais-gpt-red-automates-prompt.htmlThu, 16 Jul 2026 14:12:31 +0530info@thehackernews.com (The Hacker News)Zoom Patches Critical Windows Flaw That Could Enable Account Takeoverhttps://thehackernews.com/2026/07/zoom-patches-critical-windows-flaw-that.htmlhttps://thehackernews.com/2026/07/zoom-patches-critical-windows-flaw-that.htmlThu, 16 Jul 2026 12:52:44 +0530info@thehackernews.com (The Hacker News)TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Developmenthttps://thehackernews.com/2026/07/tuxbot-v3-evolution-shows-signs-of-llm.htmlhttps://thehackernews.com/2026/07/tuxbot-v3-evolution-shows-signs-of-llm.htmlThu, 16 Jul 2026 00:13:08 +0530info@thehackernews.com (The Hacker News)OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Appshttps://thehackernews.com/2026/07/okobot-malware-framework-injects-seed.htmlhttps://thehackernews.com/2026/07/okobot-malware-framework-injects-seed.htmlWed, 15 Jul 2026 21:00:30 +0530info@thehackernews.com (The Hacker News)Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flawshttps://thehackernews.com/2026/07/firefox-chrome-adobe-and-vmware-updates.htmlhttps://thehackernews.com/2026/07/firefox-chrome-adobe-and-vmware-updates.htmlWed, 15 Jul 2026 18:48:53 +0530info@thehackernews.com (The Hacker News)SASE Has An AI Blind Spot. Inspecting Packets Is No Longer Enough.https://thehackernews.com/2026/07/sase-has-ai-blind-spot-inspecting.htmlhttps://thehackernews.com/2026/07/sase-has-ai-blind-spot-inspecting.htmlWed, 15 Jul 2026 17:20:01 +0530info@thehackernews.com (The Hacker News)Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesdayhttps://thehackernews.com/2026/07/researcher-drops-new-windows-zero-day.htmlhttps://thehackernews.com/2026/07/researcher-drops-new-windows-zero-day.htmlWed, 15 Jul 2026 16:37:07 +0530info@thehackernews.com (The Hacker News)New Webinar: Closing the Approval Gap in AI-Era Ad Techhttps://thehackernews.com/2026/07/new-webinar-closing-approval-gap-in-ai.htmlhttps://thehackernews.com/2026/07/new-webinar-closing-approval-gap-in-ai.htmlWed, 15 Jul 2026 16:36:57 +0530info@thehackernews.com (The Hacker News)Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Executionhttps://thehackernews.com/2026/07/cursor-flaw-lets-malicious-cloned.htmlhttps://thehackernews.com/2026/07/cursor-flaw-lets-malicious-cloned.htmlWed, 15 Jul 2026 16:25:22 +0530info@thehackernews.com (The Hacker News)Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malwarehttps://thehackernews.com/2026/07/compromised-asyncapi-npm-packages.htmlhttps://thehackernews.com/2026/07/compromised-asyncapi-npm-packages.htmlWed, 15 Jul 2026 14:46:13 +0530info@thehackernews.com (The Hacker News)Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commandshttps://thehackernews.com/2026/07/two-sonicwall-sma-1000-zero-days.htmlhttps://thehackernews.com/2026/07/two-sonicwall-sma-1000-zero-days.htmlWed, 15 Jul 2026 11:00:21 +0530info@thehackernews.com (The Hacker News)Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attackhttps://thehackernews.com/2026/07/microsoft-patches-record-622-flaws.htmlhttps://thehackernews.com/2026/07/microsoft-patches-record-622-flaws.htmlWed, 15 Jul 2026 01:55:47 +0530info@thehackernews.com (The Hacker News)SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Datahttps://thehackernews.com/2026/07/sap-patches-cvss-99-netweaver-abap-flaw.htmlhttps://thehackernews.com/2026/07/sap-patches-cvss-99-netweaver-abap-flaw.htmlTue, 14 Jul 2026 23:47:57 +0530info@thehackernews.com (The Hacker News)Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Readshttps://thehackernews.com/2026/07/claude-for-chrome-flaw-lets-other.htmlhttps://thehackernews.com/2026/07/claude-for-chrome-flaw-lets-other.htmlTue, 14 Jul 2026 22:57:23 +0530info@thehackernews.com (The Hacker News)LabubaRAT Masquerades as NVIDIA Software to Control Windows Hostshttps://thehackernews.com/2026/07/labubarat-masquerades-as-nvidia.htmlhttps://thehackernews.com/2026/07/labubarat-masquerades-as-nvidia.htmlTue, 14 Jul 2026 22:22:37 +0530info@thehackernews.com (The Hacker News)RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadatahttps://thehackernews.com/2026/07/rabbitmq-flaws-could-leak-oauth-secrets.htmlhttps://thehackernews.com/2026/07/rabbitmq-flaws-could-leak-oauth-secrets.htmlTue, 14 Jul 2026 19:18:07 +0530info@thehackernews.com (The Hacker News)11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boothttps://thehackernews.com/2026/07/11-old-microsoft-signed-linux-uefi.htmlhttps://thehackernews.com/2026/07/11-old-microsoft-signed-linux-uefi.htmlTue, 14 Jul 2026 18:16:18 +0530info@thehackernews.com (The Hacker News)Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Riskshttps://thehackernews.com/2026/07/study-of-85-crypto-wallet-extensions.htmlhttps://thehackernews.com/2026/07/study-of-85-crypto-wallet-extensions.htmlTue, 14 Jul 2026 17:25:00 +0530info@thehackernews.com (The Hacker News)How Pentera Turns AI Security Workflows into Validation Engineshttps://thehackernews.com/2026/07/how-pentera-turns-ai-security-workflows.htmlhttps://thehackernews.com/2026/07/how-pentera-turns-ai-security-workflows.htmlTue, 14 Jul 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentialshttps://thehackernews.com/2026/07/oauth-client-id-spoofing-lets-attackers.htmlhttps://thehackernews.com/2026/07/oauth-client-id-spoofing-lets-attackers.htmlTue, 14 Jul 2026 16:51:35 +0530info@thehackernews.com (The Hacker News)Grok Build Uploaded Entire Git Repositories to xAI Storage, Not Just Files It Readhttps://thehackernews.com/2026/07/grok-build-uploads-entire-git.htmlhttps://thehackernews.com/2026/07/grok-build-uploads-entire-git.htmlTue, 14 Jul 2026 14:32:48 +0530info@thehackernews.com (The Hacker News)U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Supporthttps://thehackernews.com/2026/07/us-sanctions-first-vpn-service-and.htmlhttps://thehackernews.com/2026/07/us-sanctions-first-vpn-service-and.htmlTue, 14 Jul 2026 13:32:33 +0530info@thehackernews.com (The Hacker News)148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnethttps://thehackernews.com/2026/07/148-npm-packages-disguised-as-student.htmlhttps://thehackernews.com/2026/07/148-npm-packages-disguised-as-student.htmlTue, 14 Jul 2026 12:38:36 +0530info@thehackernews.com (The Hacker News)Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activityhttps://thehackernews.com/2026/07/microsoft-maps-year-long-shinyhunters.htmlhttps://thehackernews.com/2026/07/microsoft-maps-year-long-shinyhunters.htmlTue, 14 Jul 2026 11:49:24 +0530info@thehackernews.com (The Hacker News)CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checkshttps://thehackernews.com/2026/07/crashstealer-macos-malware-uses.htmlhttps://thehackernews.com/2026/07/crashstealer-macos-malware-uses.htmlMon, 13 Jul 2026 23:06:12 +0530info@thehackernews.com (The Hacker News)