The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usSat, 20 Jun 2026 01:58:56 +0530hourly1Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chainhttps://thehackernews.com/2026/06/unpatchable-usbliter8-exploit-breaks.htmlhttps://thehackernews.com/2026/06/unpatchable-usbliter8-exploit-breaks.htmlSat, 20 Jun 2026 00:07:41 +0530info@thehackernews.com (The Hacker News)The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processeshttps://thehackernews.com/2026/06/the-gentlemen-raas-uses-gentlekiller.htmlhttps://thehackernews.com/2026/06/the-gentlemen-raas-uses-gentlekiller.htmlSat, 20 Jun 2026 00:03:07 +0530info@thehackernews.com (The Hacker News)AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Executionhttps://thehackernews.com/2026/06/autojack-attack-lets-one-web-page.htmlhttps://thehackernews.com/2026/06/autojack-attack-lets-one-web-page.htmlFri, 19 Jun 2026 21:00:47 +0530info@thehackernews.com (The Hacker News)Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Siteshttps://thehackernews.com/2026/06/operation-endgame-disrupts-socgholish.htmlhttps://thehackernews.com/2026/06/operation-endgame-disrupts-socgholish.htmlFri, 19 Jun 2026 20:37:54 +0530info@thehackernews.com (The Hacker News)CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Deviceshttps://thehackernews.com/2026/06/cisa-warns-fortinet-customers-as.htmlhttps://thehackernews.com/2026/06/cisa-warns-fortinet-customers-as.htmlFri, 19 Jun 2026 19:30:21 +0530info@thehackernews.com (The Hacker News)From Assistive to Agentic: The AI Shift That's Redefining Threat Managementhttps://thehackernews.com/2026/06/from-assistive-to-agentic-ai-shift.htmlhttps://thehackernews.com/2026/06/from-assistive-to-agentic-ai-shift.htmlFri, 19 Jun 2026 17:28:00 +0530info@thehackernews.com (The Hacker News)Forget Data Leakage: Shadow AI's Real Threat Is Access Controlhttps://thehackernews.com/2026/06/forget-data-leakage-shadow-ais-real.htmlhttps://thehackernews.com/2026/06/forget-data-leakage-shadow-ais-real.htmlFri, 19 Jun 2026 16:00:00 +0530info@thehackernews.com (The Hacker News)Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Datahttps://thehackernews.com/2026/06/salesforce-disables-klue-app.htmlhttps://thehackernews.com/2026/06/salesforce-disables-klue-app.htmlFri, 19 Jun 2026 14:33:57 +0530info@thehackernews.com (The Hacker News)Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphonehttps://thehackernews.com/2026/06/apple-patches-beats-studio-buds-flaw.htmlhttps://thehackernews.com/2026/06/apple-patches-beats-studio-buds-flaw.htmlFri, 19 Jun 2026 12:06:09 +0530info@thehackernews.com (The Hacker News)F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Executionhttps://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.htmlhttps://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.htmlThu, 18 Jun 2026 23:02:14 +0530info@thehackernews.com (The Hacker News)Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Networkhttps://thehackernews.com/2026/06/orphaned-ai-agents-how-to-find-hidden.htmlhttps://thehackernews.com/2026/06/orphaned-ai-agents-how-to-find-hidden.htmlThu, 18 Jun 2026 21:03:49 +0530info@thehackernews.com (The Hacker News)ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Storieshttps://thehackernews.com/2026/06/threatsday-bulletin-claude-chat-abuse.htmlhttps://thehackernews.com/2026/06/threatsday-bulletin-claude-chat-abuse.htmlThu, 18 Jun 2026 20:57:54 +0530info@thehackernews.com (The Hacker News)Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2https://thehackernews.com/2026/06/microsoft-details-windows-clipper.htmlhttps://thehackernews.com/2026/06/microsoft-details-windows-clipper.htmlThu, 18 Jun 2026 20:00:42 +0530info@thehackernews.com (The Hacker News)INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023https://thehackernews.com/2026/06/inc-ransomware-claims-830-victims-since.htmlhttps://thehackernews.com/2026/06/inc-ransomware-claims-830-victims-since.htmlThu, 18 Jun 2026 19:42:48 +0530info@thehackernews.com (The Hacker News)The Scripts on Your Checkout Page Are Now a PCI DSS Problemhttps://thehackernews.com/2026/06/the-scripts-on-your-checkout-page-are.htmlhttps://thehackernews.com/2026/06/the-scripts-on-your-checkout-page-are.htmlThu, 18 Jun 2026 19:28:39 +0530info@thehackernews.com (The Hacker News)DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffichttps://thehackernews.com/2026/06/dragonforce-hackers-abuse-microsoft.htmlhttps://thehackernews.com/2026/06/dragonforce-hackers-abuse-microsoft.htmlThu, 18 Jun 2026 19:00:07 +0530info@thehackernews.com (The Hacker News)Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Commentshttps://thehackernews.com/2026/06/crypto-clipper-campaign-abuses-fake.htmlhttps://thehackernews.com/2026/06/crypto-clipper-campaign-abuses-fake.htmlWed, 17 Jun 2026 23:44:24 +0530info@thehackernews.com (The Hacker News)Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Developmenthttps://thehackernews.com/2026/06/microsoft-confirms-rogueplanet-defender_02022423645.htmlhttps://thehackernews.com/2026/06/microsoft-confirms-rogueplanet-defender_02022423645.htmlWed, 17 Jun 2026 23:06:28 +0530info@thehackernews.com (The Hacker News)Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offlinehttps://thehackernews.com/2026/06/junior-hacker-used-tailscale-and.htmlhttps://thehackernews.com/2026/06/junior-hacker-used-tailscale-and.htmlWed, 17 Jun 2026 21:30:56 +0530info@thehackernews.com (The Hacker News)Adversarial Exposure Validation Turns Security Visibility into Confident Prioritizationhttps://thehackernews.com/2026/06/adversarial-exposure-validation-turns.htmlhttps://thehackernews.com/2026/06/adversarial-exposure-validation-turns.htmlWed, 17 Jun 2026 20:28:00 +0530info@thehackernews.com (The Hacker News)Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chatshttps://thehackernews.com/2026/06/malicious-jetbrains-plugins-steal-ai.htmlhttps://thehackernews.com/2026/06/malicious-jetbrains-plugins-steal-ai.htmlWed, 17 Jun 2026 19:21:58 +0530info@thehackernews.com (The Hacker News)The Top 10 Attack Surface Exposures in 2026https://thehackernews.com/2026/06/the-top-10-attack-surface-exposures-in.htmlhttps://thehackernews.com/2026/06/the-top-10-attack-surface-exposures-in.htmlWed, 17 Jun 2026 16:00:00 +0530info@thehackernews.com (The Hacker News)145 Mastra npm Packages Compromised via Hijacked Contributor Accounthttps://thehackernews.com/2026/06/144-mastra-npm-packages-compromised-via.htmlhttps://thehackernews.com/2026/06/144-mastra-npm-packages-compromised-via.htmlWed, 17 Jun 2026 13:08:24 +0530info@thehackernews.com (The Hacker News)CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Executionhttps://thehackernews.com/2026/06/cisa-warns-of-actively-exploited-joomla.htmlhttps://thehackernews.com/2026/06/cisa-warns-of-actively-exploited-joomla.htmlWed, 17 Jun 2026 11:20:46 +0530info@thehackernews.com (The Hacker News)Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squattinghttps://thehackernews.com/2026/06/google-vertex-ai-sdk-flaw-let-attackers.htmlhttps://thehackernews.com/2026/06/google-vertex-ai-sdk-flaw-let-attackers.htmlWed, 17 Jun 2026 00:35:41 +0530info@thehackernews.com (The Hacker News)ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lureshttps://thehackernews.com/2026/06/clickfix-campaigns-expand-malware.htmlhttps://thehackernews.com/2026/06/clickfix-campaigns-expand-malware.htmlTue, 16 Jun 2026 23:11:28 +0530info@thehackernews.com (The Hacker News)New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Fundshttps://thehackernews.com/2026/06/new-rokarolla-android-malware-steals.htmlhttps://thehackernews.com/2026/06/new-rokarolla-android-malware-steals.htmlTue, 16 Jun 2026 18:40:17 +0530info@thehackernews.com (The Hacker News)Survey: 94% of Incidents Involve Anonymized Infrastructure. Teams Are Still Reactivehttps://thehackernews.com/2026/06/survey-94-of-incidents-involve.htmlhttps://thehackernews.com/2026/06/survey-94-of-incidents-involve.htmlTue, 16 Jun 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Weekhttps://thehackernews.com/2026/06/attackers-exploit-three-fortinet.htmlhttps://thehackernews.com/2026/06/attackers-exploit-three-fortinet.htmlTue, 16 Jun 2026 16:00:41 +0530info@thehackernews.com (The Hacker News)China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealthhttps://thehackernews.com/2026/06/china-linked-sprysocks-backdoor-expands.htmlhttps://thehackernews.com/2026/06/china-linked-sprysocks-backdoor-expands.htmlTue, 16 Jun 2026 15:14:34 +0530info@thehackernews.com (The Hacker News)Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malwarehttps://thehackernews.com/2026/06/fake-microsoft-alerts-used-to-deploy.htmlhttps://thehackernews.com/2026/06/fake-microsoft-alerts-used-to-deploy.htmlTue, 16 Jun 2026 13:44:55 +0530info@thehackernews.com (The Hacker News)Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flawhttps://thehackernews.com/2026/06/cisco-releases-security-updates-for.htmlhttps://thehackernews.com/2026/06/cisco-releases-security-updates-for.htmlTue, 16 Jun 2026 11:35:58 +0530info@thehackernews.com (The Hacker News)CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalationhttps://thehackernews.com/2026/06/cisa-flags-litespeed-cpanel-plugin-flaw.htmlhttps://thehackernews.com/2026/06/cisa-flags-litespeed-cpanel-plugin-flaw.htmlTue, 16 Jun 2026 11:11:52 +0530info@thehackernews.com (The Hacker News)Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emailshttps://thehackernews.com/2026/06/chinese-hackers-abused-google-workspace.htmlhttps://thehackernews.com/2026/06/chinese-hackers-abused-google-workspace.htmlTue, 16 Jun 2026 01:14:06 +0530info@thehackernews.com (The Hacker News)North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channelshttps://thehackernews.com/2026/06/north-korean-hackers-are-turning.htmlhttps://thehackernews.com/2026/06/north-korean-hackers-are-turning.htmlTue, 16 Jun 2026 01:02:52 +0530info@thehackernews.com (The Hacker News)LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servershttps://thehackernews.com/2026/06/litellm-vulnerability-chain-lets-low.htmlhttps://thehackernews.com/2026/06/litellm-vulnerability-chain-lets-low.htmlMon, 15 Jun 2026 22:09:01 +0530info@thehackernews.com (The Hacker News)One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codeshttps://thehackernews.com/2026/06/one-click-microsoft-365-copilot-flaw.htmlhttps://thehackernews.com/2026/06/one-click-microsoft-365-copilot-flaw.htmlMon, 15 Jun 2026 20:39:05 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and Morehttps://thehackernews.com/2026/06/weekly-recap-chrome-0-day-unifi.htmlhttps://thehackernews.com/2026/06/weekly-recap-chrome-0-day-unifi.htmlMon, 15 Jun 2026 19:19:29 +0530info@thehackernews.com (The Hacker News)The Onboarding Password Mistake That Creates Unnecessary Riskhttps://thehackernews.com/2026/06/the-onboarding-password-mistake-that.htmlhttps://thehackernews.com/2026/06/the-onboarding-password-mistake-that.htmlMon, 15 Jun 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)152 Chrome Wallpaper Extensions with 105K Installs Linked to Adware and Fake Traffichttps://thehackernews.com/2026/06/152-chrome-wallpaper-extensions-with.htmlhttps://thehackernews.com/2026/06/152-chrome-wallpaper-extensions-with.htmlMon, 15 Jun 2026 16:37:50 +0530info@thehackernews.com (The Hacker News)Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Siteshttps://thehackernews.com/2026/06/popular-wordpress-plugin-scripts.htmlhttps://thehackernews.com/2026/06/popular-wordpress-plugin-scripts.htmlMon, 15 Jun 2026 15:29:38 +0530info@thehackernews.com (The Hacker News)Sniper Dz Scams Target MENA Users via Fake Facebook Offers and Browser Alertshttps://thehackernews.com/2026/06/sniper-dz-scams-target-mena-users-via.htmlhttps://thehackernews.com/2026/06/sniper-dz-scams-target-mena-users-via.htmlMon, 15 Jun 2026 12:00:22 +0530info@thehackernews.com (The Hacker News)Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flawhttps://thehackernews.com/2026/06/palo-alto-warns-of-active-exploitation.htmlhttps://thehackernews.com/2026/06/palo-alto-warns-of-active-exploitation.htmlMon, 15 Jun 2026 11:47:32 +0530info@thehackernews.com (The Hacker News)Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authenticationhttps://thehackernews.com/2026/06/critical-splunk-enterprise-flaw-lets.htmlhttps://thehackernews.com/2026/06/critical-splunk-enterprise-flaw-lets.htmlSat, 13 Jun 2026 18:53:03 +0530info@thehackernews.com (The Hacker News)U.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign Nationalshttps://thehackernews.com/2026/06/us-orders-anthropic-to-suspend-fable-5.htmlhttps://thehackernews.com/2026/06/us-orders-anthropic-to-suspend-fable-5.htmlSat, 13 Jun 2026 11:12:50 +0530info@thehackernews.com (The Hacker News)Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkithttps://thehackernews.com/2026/06/over-400-arch-linux-aur-packages.htmlhttps://thehackernews.com/2026/06/over-400-arch-linux-aur-packages.htmlSat, 13 Jun 2026 01:03:25 +0530info@thehackernews.com (The Hacker News)Google Sues Chinese Smishing Network Accused of Using Gemini AI in Phishinghttps://thehackernews.com/2026/06/google-sues-chinese-smishing-network.htmlhttps://thehackernews.com/2026/06/google-sues-chinese-smishing-network.htmlSat, 13 Jun 2026 00:29:32 +0530info@thehackernews.com (The Hacker News)China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decadehttps://thehackernews.com/2026/06/china-linked-hackers-backdoored-linux.htmlhttps://thehackernews.com/2026/06/china-linked-hackers-backdoored-linux.htmlFri, 12 Jun 2026 23:47:55 +0530info@thehackernews.com (The Hacker News)Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Codehttps://thehackernews.com/2026/06/agentjacking-attack-tricks-ai-coding.htmlhttps://thehackernews.com/2026/06/agentjacking-attack-tricks-ai-coding.htmlFri, 12 Jun 2026 17:34:33 +0530info@thehackernews.com (The Hacker News)Rethinking MDR as Attackers and Defenders Embrace AIhttps://thehackernews.com/2026/06/rethinking-mdr-as-attackers-and.htmlhttps://thehackernews.com/2026/06/rethinking-mdr-as-attackers-and.htmlFri, 12 Jun 2026 16:30:00 +0530info@thehackernews.com (The Hacker News)