The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usMon, 08 Jun 2026 12:56:37 +0530hourly1UNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion Campaignhttps://thehackernews.com/2026/06/unc3753-used-vishing-and-physical.htmlhttps://thehackernews.com/2026/06/unc3753-used-vishing-and-physical.htmlMon, 08 Jun 2026 13:09:28 +0530info@thehackernews.com (The Hacker News)VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attackshttps://thehackernews.com/2026/06/vs-code-adds-2-hour-extension-auto.htmlhttps://thehackernews.com/2026/06/vs-code-adds-2-hour-extension-auto.htmlMon, 08 Jun 2026 11:38:44 +0530info@thehackernews.com (The Hacker News)New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltrationhttps://thehackernews.com/2026/06/new-chatgpt-lockdown-mode-limits-tools.htmlhttps://thehackernews.com/2026/06/new-chatgpt-lockdown-mode-limits-tools.htmlSat, 06 Jun 2026 19:06:57 +0530info@thehackernews.com (The Hacker News)Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AIhttps://thehackernews.com/2026/06/free-apps-are-quietly-turning-smart-tvs.htmlhttps://thehackernews.com/2026/06/free-apps-are-quietly-turning-smart-tvs.htmlSat, 06 Jun 2026 13:59:05 +0530info@thehackernews.com (The Hacker News)CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Cataloghttps://thehackernews.com/2026/06/cisa-adds-actively-exploited-solarwinds.htmlhttps://thehackernews.com/2026/06/cisa-adds-actively-exploited-solarwinds.htmlSat, 06 Jun 2026 13:44:31 +0530info@thehackernews.com (The Hacker News)AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugshttps://thehackernews.com/2026/06/ai-agent-uncovers-21-zero-days-in.htmlhttps://thehackernews.com/2026/06/ai-agent-uncovers-21-zero-days-in.htmlSat, 06 Jun 2026 12:58:30 +0530info@thehackernews.com (The Hacker News)Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attackhttps://thehackernews.com/2026/06/miasma-worm-hits-73-microsoft-github.htmlhttps://thehackernews.com/2026/06/miasma-worm-hits-73-microsoft-github.htmlSat, 06 Jun 2026 12:28:04 +0530info@thehackernews.com (The Hacker News)Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Availablehttps://thehackernews.com/2026/06/cisco-catalyst-sd-wan-manager-cve-2026.htmlhttps://thehackernews.com/2026/06/cisco-catalyst-sd-wan-manager-cve-2026.htmlSat, 06 Jun 2026 09:49:28 +0530info@thehackernews.com (The Hacker News)IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attackshttps://thehackernews.com/2026/06/ironworm-and-new-miasma-worm-variant.htmlhttps://thehackernews.com/2026/06/ironworm-and-new-miasma-worm-variant.htmlFri, 05 Jun 2026 23:35:30 +0530info@thehackernews.com (The Hacker News)Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Appshttps://thehackernews.com/2026/06/android-spyware-asin-targets-arabic.htmlhttps://thehackernews.com/2026/06/android-spyware-asin-targets-arabic.htmlFri, 05 Jun 2026 20:23:40 +0530info@thehackernews.com (The Hacker News)New Threat Cluster OP-512 Targets Microsoft IIS Servers with Custom Web Shell Frameworkhttps://thehackernews.com/2026/06/new-threat-cluster-op-512-targets.htmlhttps://thehackernews.com/2026/06/new-threat-cluster-op-512-targets.htmlFri, 05 Jun 2026 18:03:38 +0530info@thehackernews.com (The Hacker News)Only 10% of SOCs Say They’re Getting Excellent Value From AI. Here’s What the Second Wave Has to Deliverhttps://thehackernews.com/2026/06/only-10-of-socs-say-theyre-getting.htmlhttps://thehackernews.com/2026/06/only-10-of-socs-say-theyre-getting.htmlFri, 05 Jun 2026 16:50:00 +0530info@thehackernews.com (The Hacker News)Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Siteshttps://thehackernews.com/2026/06/hackers-exploit-critical-everest-forms.htmlhttps://thehackernews.com/2026/06/hackers-exploit-critical-everest-forms.htmlFri, 05 Jun 2026 14:08:59 +0530info@thehackernews.com (The Hacker News)FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Loginshttps://thehackernews.com/2026/06/fifa-world-cup-2026-scams-are-already.htmlhttps://thehackernews.com/2026/06/fifa-world-cup-2026-scams-are-already.htmlFri, 05 Jun 2026 12:31:41 +0530info@thehackernews.com (The Hacker News)PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Networkhttps://thehackernews.com/2026/06/pcpjack-hijacks-230-aws-google-cloud.htmlhttps://thehackernews.com/2026/06/pcpjack-hijacks-230-aws-google-cloud.htmlFri, 05 Jun 2026 11:04:19 +0530info@thehackernews.com (The Hacker News)Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Publichttps://thehackernews.com/2026/06/cisco-patches-cve-2026-20230-in-unified.htmlhttps://thehackernews.com/2026/06/cisco-patches-cve-2026-20230-in-unified.htmlThu, 04 Jun 2026 22:25:51 +0530info@thehackernews.com (The Hacker News)Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositorieshttps://thehackernews.com/2026/06/claude-code-github-action-flaw-let-one.htmlhttps://thehackernews.com/2026/06/claude-code-github-action-flaw-let-one.htmlThu, 04 Jun 2026 20:45:26 +0530info@thehackernews.com (The Hacker News)Agentic AI Is Transforming Defense, But Only Secure IT Infrastructure Will Maximize Ithttps://thehackernews.com/2026/06/agentic-ai-is-transforming-defense-but.htmlhttps://thehackernews.com/2026/06/agentic-ai-is-transforming-defense-but.htmlThu, 04 Jun 2026 20:40:00 +0530info@thehackernews.com (The Hacker News)ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Storieshttps://thehackernews.com/2026/06/threatsday-bulletin-ai-agents-gone.htmlhttps://thehackernews.com/2026/06/threatsday-bulletin-ai-agents-gone.htmlThu, 04 Jun 2026 19:30:49 +0530info@thehackernews.com (The Hacker News)China-Linked TA4922 Expands Phishing Attacks to U.K., Germany, Italy, and South Africahttps://thehackernews.com/2026/06/china-linked-ta4922-expands-phishing.htmlhttps://thehackernews.com/2026/06/china-linked-ta4922-expands-phishing.htmlThu, 04 Jun 2026 17:52:25 +0530info@thehackernews.com (The Hacker News)FlutterShell Backdoor Spreads to macOS via Malicious Google and YouTube Adshttps://thehackernews.com/2026/06/fluttershell-backdoor-spreads-to-macos.htmlhttps://thehackernews.com/2026/06/fluttershell-backdoor-spreads-to-macos.htmlThu, 04 Jun 2026 16:49:53 +0530info@thehackernews.com (The Hacker News)Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDShttps://thehackernews.com/2026/06/fake-sites-mimicking-open-source-tools.htmlhttps://thehackernews.com/2026/06/fake-sites-mimicking-open-source-tools.htmlThu, 04 Jun 2026 15:21:28 +0530info@thehackernews.com (The Hacker News)Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Monthshttps://thehackernews.com/2026/06/hackers-spied-on-stock-exchange.htmlhttps://thehackernews.com/2026/06/hackers-spied-on-stock-exchange.htmlThu, 04 Jun 2026 15:03:57 +0530info@thehackernews.com (The Hacker News)DoJ Disrupts Southeast Asia Crypto Fraud Networks, Freezes $3.8 Million in Assetshttps://thehackernews.com/2026/06/doj-disrupts-southeast-asia-crypto.htmlhttps://thehackernews.com/2026/06/doj-disrupts-southeast-asia-crypto.htmlThu, 04 Jun 2026 11:36:25 +0530info@thehackernews.com (The Hacker News)WhatsApp, Slack Notifications Could Hijack Google Gemini on Androidhttps://thehackernews.com/2026/06/whatsapp-slack-notifications-could.htmlhttps://thehackernews.com/2026/06/whatsapp-slack-notifications-could.htmlThu, 04 Jun 2026 00:41:15 +0530info@thehackernews.com (The Hacker News)Microsoft Fixes One-Click GitHub Dev Attack That Let Attackers Steal OAuth Tokenshttps://thehackernews.com/2026/06/one-click-github-dev-attack-lets.htmlhttps://thehackernews.com/2026/06/one-click-github-dev-attack-lets.htmlWed, 03 Jun 2026 23:28:00 +0530info@thehackernews.com (The Hacker News)Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)https://thehackernews.com/2026/06/autonomous-ai-tool-finds-2-year-old-rce.htmlhttps://thehackernews.com/2026/06/autonomous-ai-tool-finds-2-year-old-rce.htmlWed, 03 Jun 2026 22:10:00 +0530info@thehackernews.com (The Hacker News)CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Cataloghttps://thehackernews.com/2026/06/cisa-adds-exploited-magento-rce-flaw.htmlhttps://thehackernews.com/2026/06/cisa-adds-exploited-magento-rce-flaw.htmlWed, 03 Jun 2026 22:00:00 +0530info@thehackernews.com (The Hacker News)Google DoubleClick Abused in New Malspam Campaign to Deliver DesckVB RAThttps://thehackernews.com/2026/06/google-doubleclick-abused-in-new.htmlhttps://thehackernews.com/2026/06/google-doubleclick-abused-in-new.htmlWed, 03 Jun 2026 21:59:16 +0530info@thehackernews.com (The Hacker News)Beyond the Zero-Day: See Your Network Like an Attacker | Webinar with HD Moorehttps://thehackernews.com/2026/06/beyond-zero-day-see-your-network-like.htmlhttps://thehackernews.com/2026/06/beyond-zero-day-see-your-network-like.htmlWed, 03 Jun 2026 20:26:46 +0530info@thehackernews.com (The Hacker News)Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flaghttps://thehackernews.com/2026/06/microsoft-365-android-apps-let-any-app.htmlhttps://thehackernews.com/2026/06/microsoft-365-android-apps-let-any-app.htmlWed, 03 Jun 2026 20:26:35 +0530info@thehackernews.com (The Hacker News)Shrinking the IAM Attack Surface through Identity Visibility and Intelligence Platforms (IVIP)https://thehackernews.com/2026/06/shrinking-iam-attack-surface-through.htmlhttps://thehackernews.com/2026/06/shrinking-iam-attack-surface-through.htmlWed, 03 Jun 2026 17:28:00 +0530info@thehackernews.com (The Hacker News)Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hasheshttps://thehackernews.com/2026/06/unpatched-windows-search-uri.htmlhttps://thehackernews.com/2026/06/unpatched-windows-search-uri.htmlWed, 03 Jun 2026 15:48:52 +0530info@thehackernews.com (The Hacker News)New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflarehttps://thehackernews.com/2026/06/new-http2-bomb-vulnerability-allows.htmlhttps://thehackernews.com/2026/06/new-http2-bomb-vulnerability-allows.htmlWed, 03 Jun 2026 14:03:35 +0530info@thehackernews.com (The Hacker News)Weedhack Attacks Minecraft Users, CountLoader Hits 86K, Miners Spread via Pirated Contenthttps://thehackernews.com/2026/06/weedhack-attacks-minecraft-users.htmlhttps://thehackernews.com/2026/06/weedhack-attacks-minecraft-users.htmlWed, 03 Jun 2026 11:46:54 +0530info@thehackernews.com (The Hacker News)Google June 2026 Android Update Patches 124 Flaws, One Actively Exploitedhttps://thehackernews.com/2026/06/google-june-2026-android-update-patches.htmlhttps://thehackernews.com/2026/06/google-june-2026-android-update-patches.htmlWed, 03 Jun 2026 00:16:00 +0530info@thehackernews.com (The Hacker News)Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukrainehttps://thehackernews.com/2026/06/gamaredon-exploits-winrar-to-deliver.htmlhttps://thehackernews.com/2026/06/gamaredon-exploits-winrar-to-deliver.htmlTue, 02 Jun 2026 23:51:49 +0530info@thehackernews.com (The Hacker News)Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitationhttps://thehackernews.com/2026/06/oracle-weblogic-cve-2024-21182-added-to.htmlhttps://thehackernews.com/2026/06/oracle-weblogic-cve-2024-21182-added-to.htmlTue, 02 Jun 2026 23:44:42 +0530info@thehackernews.com (The Hacker News)AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It.https://thehackernews.com/2026/06/ai-driven-exploitation-is-destroying.htmlhttps://thehackernews.com/2026/06/ai-driven-exploitation-is-destroying.htmlTue, 02 Jun 2026 17:28:00 +0530info@thehackernews.com (The Hacker News)How Leading Organizations Are Turning EDR Into Operational Resiliencehttps://thehackernews.com/2026/06/how-leading-organizations-are-turning.htmlhttps://thehackernews.com/2026/06/how-leading-organizations-are-turning.htmlTue, 02 Jun 2026 16:00:00 +0530info@thehackernews.com (The Hacker News)Pakistan-Linked SideCopy Targets Afghanistan Finance Ministry with Xeno RAThttps://thehackernews.com/2026/06/pakistan-linked-sidecopy-targets.htmlhttps://thehackernews.com/2026/06/pakistan-linked-sidecopy-targets.htmlTue, 02 Jun 2026 14:35:40 +0530info@thehackernews.com (The Hacker News)Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users Downloadedhttps://thehackernews.com/2026/06/dashlane-discloses-brute-force-attack.htmlhttps://thehackernews.com/2026/06/dashlane-discloses-brute-force-attack.htmlTue, 02 Jun 2026 09:25:25 +0530info@thehackernews.com (The Hacker News)Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Wormhttps://thehackernews.com/2026/06/miasma-supply-chain-attack-compromises.htmlhttps://thehackernews.com/2026/06/miasma-supply-chain-attack-compromises.htmlMon, 01 Jun 2026 23:10:28 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and Morehttps://thehackernews.com/2026/06/weekly-recap-new-linux-flaw-pan-os.htmlhttps://thehackernews.com/2026/06/weekly-recap-new-linux-flaw-pan-os.htmlMon, 01 Jun 2026 19:29:54 +0530info@thehackernews.com (The Hacker News)China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & Taiwanhttps://thehackernews.com/2026/06/china-aligned-groups-ramp-up-attacks.htmlhttps://thehackernews.com/2026/06/china-aligned-groups-ramp-up-attacks.htmlMon, 01 Jun 2026 17:24:24 +0530info@thehackernews.com (The Hacker News)The Security Growth Platform: Why MSPs Are Moving Beyond vCISO Toolshttps://thehackernews.com/2026/06/the-security-growth-platform-why-msps.htmlhttps://thehackernews.com/2026/06/the-security-growth-platform-why-msps.htmlMon, 01 Jun 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attackhttps://thehackernews.com/2026/06/openai-codex-authentication-tokens.htmlhttps://thehackernews.com/2026/06/openai-codex-authentication-tokens.htmlMon, 01 Jun 2026 15:01:15 +0530info@thehackernews.com (The Hacker News)Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accountshttps://thehackernews.com/2026/06/critical-wp-maps-pro-flaw-actively.htmlhttps://thehackernews.com/2026/06/critical-wp-maps-pro-flaw-actively.htmlMon, 01 Jun 2026 14:15:29 +0530info@thehackernews.com (The Hacker News)Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Deviceshttps://thehackernews.com/2026/05/dutch-authorities-dismantle-botnet.htmlhttps://thehackernews.com/2026/05/dutch-authorities-dismantle-botnet.htmlSun, 31 May 2026 17:52:12 +0530info@thehackernews.com (The Hacker News)PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitationhttps://thehackernews.com/2026/05/pan-os-globalprotect-authentication.htmlhttps://thehackernews.com/2026/05/pan-os-globalprotect-authentication.htmlSat, 30 May 2026 12:11:26 +0530info@thehackernews.com (The Hacker News)