The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usFri, 28 Aug 2026 18:55:03 +0530hourly1Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetoothhttps://thehackernews.com/2026/08/two-unitree-g1-edu-humanoid-robot-flaws.htmlhttps://thehackernews.com/2026/08/two-unitree-g1-edu-humanoid-robot-flaws.htmlFri, 28 Aug 2026 17:37:24 +0530info@thehackernews.com (The Hacker News)Key Reasons Why Identity Fabric Matters in 2026https://thehackernews.com/2026/08/key-reasons-why-identity-fabric-matters.htmlhttps://thehackernews.com/2026/08/key-reasons-why-identity-fabric-matters.htmlFri, 28 Aug 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQLhttps://thehackernews.com/2026/08/three-cvss-100-servicenow-flaws-could.htmlhttps://thehackernews.com/2026/08/three-cvss-100-servicenow-flaws-could.htmlFri, 28 Aug 2026 16:50:32 +0530info@thehackernews.com (The Hacker News)China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Accesshttps://thehackernews.com/2026/08/china-made-zbt-routers-ship-with-two.htmlhttps://thehackernews.com/2026/08/china-made-zbt-routers-ship-with-two.htmlFri, 28 Aug 2026 16:28:29 +0530info@thehackernews.com (The Hacker News)Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Serverhttps://thehackernews.com/2026/08/critical-cpanel-flaw-could-let-one.htmlhttps://thehackernews.com/2026/08/critical-cpanel-flaw-could-let-one.htmlFri, 28 Aug 2026 15:15:15 +0530info@thehackernews.com (The Hacker News)PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versionshttps://thehackernews.com/2026/08/papercut-zero-day-exploited-in-attacks.htmlhttps://thehackernews.com/2026/08/papercut-zero-day-exploited-in-attacks.htmlFri, 28 Aug 2026 13:55:36 +0530info@thehackernews.com (The Hacker News)APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizationshttps://thehackernews.com/2026/08/apt28-linked-hookedge-backdoor-targets.htmlhttps://thehackernews.com/2026/08/apt28-linked-hookedge-backdoor-targets.htmlFri, 28 Aug 2026 13:50:59 +0530info@thehackernews.com (The Hacker News)OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Facehttps://thehackernews.com/2026/08/openai-says-reward-hacking-drove-ai.htmlhttps://thehackernews.com/2026/08/openai-says-reward-hacking-drove-ai.htmlFri, 28 Aug 2026 00:06:19 +0530info@thehackernews.com (The Hacker News)Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCEhttps://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.htmlhttps://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.htmlThu, 27 Aug 2026 20:43:00 +0530info@thehackernews.com (The Hacker News)ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Storieshttps://thehackernews.com/2026/08/threatsday-296k-iot-botnet-100-water.htmlhttps://thehackernews.com/2026/08/threatsday-296k-iot-botnet-100-water.htmlThu, 27 Aug 2026 20:42:16 +0530info@thehackernews.com (The Hacker News)Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powershttps://thehackernews.com/2026/08/amazon-kiro-prompt-injection-can.htmlhttps://thehackernews.com/2026/08/amazon-kiro-prompt-injection-can.htmlThu, 27 Aug 2026 19:09:56 +0530info@thehackernews.com (The Hacker News)Learn How to Build Security Operations Ready for AI-Powered Attackshttps://thehackernews.com/2026/08/learn-how-to-build-security-operations.htmlhttps://thehackernews.com/2026/08/learn-how-to-build-security-operations.htmlThu, 27 Aug 2026 17:26:30 +0530info@thehackernews.com (The Hacker News)Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attackshttps://thehackernews.com/2026/08/alleged-teampcp-hackers-charged-in.htmlhttps://thehackernews.com/2026/08/alleged-teampcp-hackers-charged-in.htmlThu, 27 Aug 2026 17:26:26 +0530info@thehackernews.com (The Hacker News)What the Data Says About AI in Security Operations in 2026https://thehackernews.com/2026/08/what-data-says-about-ai-in-security.htmlhttps://thehackernews.com/2026/08/what-data-says-about-ai-in-security.htmlThu, 27 Aug 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Toolshttps://thehackernews.com/2026/08/spark-rat-targets-cambodia-abuses.htmlhttps://thehackernews.com/2026/08/spark-rat-targets-cambodia-abuses.htmlThu, 27 Aug 2026 16:30:57 +0530info@thehackernews.com (The Hacker News)GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Addresshttps://thehackernews.com/2026/08/gocaracal-malware-uses-ethereum-smart.htmlhttps://thehackernews.com/2026/08/gocaracal-malware-uses-ethereum-smart.htmlThu, 27 Aug 2026 15:03:38 +0530info@thehackernews.com (The Hacker News)New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Accesshttps://thehackernews.com/2026/08/gputhor-rowhammer-defeats-ecc-on-nvidia.htmlhttps://thehackernews.com/2026/08/gputhor-rowhammer-defeats-ecc-on-nvidia.htmlThu, 27 Aug 2026 13:43:11 +0530info@thehackernews.com (The Hacker News)CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugshttps://thehackernews.com/2026/08/cisa-adds-six-exploited-flaws-to-kev.htmlhttps://thehackernews.com/2026/08/cisa-adds-six-exploited-flaws-to-kev.htmlThu, 27 Aug 2026 12:35:28 +0530info@thehackernews.com (The Hacker News)FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizationshttps://thehackernews.com/2026/08/fbi-disrupts-china-linked-qtfy.htmlhttps://thehackernews.com/2026/08/fbi-disrupts-china-linked-qtfy.htmlWed, 26 Aug 2026 22:12:03 +0530info@thehackernews.com (The Hacker News)Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunnelerhttps://thehackernews.com/2026/08/nimbus-manticore-expands-toolset-with.htmlhttps://thehackernews.com/2026/08/nimbus-manticore-expands-toolset-with.htmlWed, 26 Aug 2026 21:05:05 +0530info@thehackernews.com (The Hacker News)NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessionshttps://thehackernews.com/2026/08/novacookies-campaigns-abuse-genuine.htmlhttps://thehackernews.com/2026/08/novacookies-campaigns-abuse-genuine.htmlWed, 26 Aug 2026 19:14:31 +0530info@thehackernews.com (The Hacker News)CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothinghttps://thehackernews.com/2026/08/cisa-red-team-compromised-two-critical.htmlhttps://thehackernews.com/2026/08/cisa-red-team-compromised-two-critical.htmlWed, 26 Aug 2026 18:37:02 +0530info@thehackernews.com (The Hacker News)Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Codehttps://thehackernews.com/2026/08/unpatched-kaltura-mwembed-flaws-could.htmlhttps://thehackernews.com/2026/08/unpatched-kaltura-mwembed-flaws-could.htmlWed, 26 Aug 2026 17:25:00 +0530info@thehackernews.com (The Hacker News)Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Enginehttps://thehackernews.com/2026/08/imagine-soc-without-queue-from-alert.htmlhttps://thehackernews.com/2026/08/imagine-soc-without-queue-from-alert.htmlWed, 26 Aug 2026 17:06:49 +0530info@thehackernews.com (The Hacker News)Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Testshttps://thehackernews.com/2026/08/claude-opus-46-bypasses-gym-booking.htmlhttps://thehackernews.com/2026/08/claude-opus-46-bypasses-gym-booking.htmlWed, 26 Aug 2026 15:57:23 +0530info@thehackernews.com (The Hacker News)OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operationhttps://thehackernews.com/2026/08/openai-bans-russian-chatgpt-accounts.htmlhttps://thehackernews.com/2026/08/openai-bans-russian-chatgpt-accounts.htmlWed, 26 Aug 2026 15:08:45 +0530info@thehackernews.com (The Hacker News)INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdownhttps://thehackernews.com/2026/08/interpol-operation-jackal-iv-arrests-58.htmlhttps://thehackernews.com/2026/08/interpol-operation-jackal-iv-arrests-58.htmlWed, 26 Aug 2026 13:24:12 +0530info@thehackernews.com (The Hacker News)New SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecodehttps://thehackernews.com/2026/08/newly-sleepwalker-backdoor-waits-for.htmlhttps://thehackernews.com/2026/08/newly-sleepwalker-backdoor-waits-for.htmlWed, 26 Aug 2026 12:42:55 +0530info@thehackernews.com (The Hacker News)Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payloadhttps://thehackernews.com/2026/08/critical-gitea-rce-actively-exploited.htmlhttps://thehackernews.com/2026/08/critical-gitea-rce-actively-exploited.htmlWed, 26 Aug 2026 11:57:07 +0530info@thehackernews.com (The Hacker News)Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codeshttps://thehackernews.com/2026/08/fake-apple-support-ai-calls-target.htmlhttps://thehackernews.com/2026/08/fake-apple-support-ai-calls-target.htmlWed, 26 Aug 2026 11:17:28 +0530info@thehackernews.com (The Hacker News)U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breacheshttps://thehackernews.com/2026/08/us-sanctions-iran-linked-hackers-behind.htmlhttps://thehackernews.com/2026/08/us-sanctions-iran-linked-hackers-behind.htmlTue, 25 Aug 2026 23:47:17 +0530info@thehackernews.com (The Hacker News)A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClawhttps://thehackernews.com/2026/08/a-malicious-webpage-could-poison-your.htmlhttps://thehackernews.com/2026/08/a-malicious-webpage-could-poison-your.htmlTue, 25 Aug 2026 19:37:37 +0530info@thehackernews.com (The Hacker News)WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Androidhttps://thehackernews.com/2026/08/whatsapp-adds-multiple-passkeys-for.htmlhttps://thehackernews.com/2026/08/whatsapp-adds-multiple-passkeys-for.htmlTue, 25 Aug 2026 18:49:41 +0530info@thehackernews.com (The Hacker News)Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Modehttps://thehackernews.com/2026/08/marimo-notebook-flaw-could-run-mcp.htmlhttps://thehackernews.com/2026/08/marimo-notebook-flaw-could-run-mcp.htmlTue, 25 Aug 2026 18:13:51 +0530info@thehackernews.com (The Hacker News)Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flowshttps://thehackernews.com/2026/08/mirage2fa-surge-hits-4500-us-and-eu.htmlhttps://thehackernews.com/2026/08/mirage2fa-surge-hits-4500-us-and-eu.htmlTue, 25 Aug 2026 17:26:15 +0530info@thehackernews.com (The Hacker News)24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pageshttps://thehackernews.com/2026/08/24-npm-packages-abuse-unpkg-mirrors-to.htmlhttps://thehackernews.com/2026/08/24-npm-packages-abuse-unpkg-mirrors-to.htmlTue, 25 Aug 2026 17:22:43 +0530info@thehackernews.com (The Hacker News)E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commandshttps://thehackernews.com/2026/08/e4del-and-pinhole-rats-turn-ftp-banners.htmlhttps://thehackernews.com/2026/08/e4del-and-pinhole-rats-turn-ftp-banners.htmlTue, 25 Aug 2026 17:03:44 +0530info@thehackernews.com (The Hacker News)Frontier AI: Vulnerability Management's Systemic Revolutionhttps://thehackernews.com/2026/08/frontier-ai-vulnerability-managements.htmlhttps://thehackernews.com/2026/08/frontier-ai-vulnerability-managements.htmlTue, 25 Aug 2026 16:44:07 +0530info@thehackernews.com (The Hacker News)Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Accesshttps://thehackernews.com/2026/08/attackers-target-miniorange-saml-flaws.htmlhttps://thehackernews.com/2026/08/attackers-target-miniorange-saml-flaws.htmlTue, 25 Aug 2026 14:04:07 +0530info@thehackernews.com (The Hacker News)Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Datahttps://thehackernews.com/2026/08/actively-exploited-oracle-weblogic-flaw.htmlhttps://thehackernews.com/2026/08/actively-exploited-oracle-weblogic-flaw.htmlTue, 25 Aug 2026 11:42:35 +0530info@thehackernews.com (The Hacker News)Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debthttps://thehackernews.com/2026/08/shipping-more-ai-code-than-you-can.htmlhttps://thehackernews.com/2026/08/shipping-more-ai-code-than-you-can.htmlMon, 24 Aug 2026 23:11:30 +0530info@thehackernews.com (The Hacker News)Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoninghttps://thehackernews.com/2026/08/weedhack-malware-spreads-via-fake.htmlhttps://thehackernews.com/2026/08/weedhack-malware-spreads-via-fake.htmlMon, 24 Aug 2026 23:11:11 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and Morehttps://thehackernews.com/2026/08/weekly-recap-ai-powered-plc-attacks.htmlhttps://thehackernews.com/2026/08/weekly-recap-ai-powered-plc-attacks.htmlMon, 24 Aug 2026 20:02:10 +0530info@thehackernews.com (The Hacker News)WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwordshttps://thehackernews.com/2026/08/wordlistloader-delivers-amatera-via.htmlhttps://thehackernews.com/2026/08/wordlistloader-delivers-amatera-via.htmlMon, 24 Aug 2026 18:05:36 +0530info@thehackernews.com (The Hacker News)Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Accounthttps://thehackernews.com/2026/08/critical-keycloak-password-reset-flaw.htmlhttps://thehackernews.com/2026/08/critical-keycloak-password-reset-flaw.htmlMon, 24 Aug 2026 17:26:34 +0530info@thehackernews.com (The Hacker News)Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoorhttps://thehackernews.com/2026/08/operation-quicsilver-targets-myanmar.htmlhttps://thehackernews.com/2026/08/operation-quicsilver-targets-myanmar.htmlMon, 24 Aug 2026 17:21:36 +0530info@thehackernews.com (The Hacker News)The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Riskhttps://thehackernews.com/2026/08/the-outsized-shadow-why-5-of-ai-users.htmlhttps://thehackernews.com/2026/08/the-outsized-shadow-why-5-of-ai-users.htmlMon, 24 Aug 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkithttps://thehackernews.com/2026/08/uat-10147-uses-ai-to-scale-server.htmlhttps://thehackernews.com/2026/08/uat-10147-uses-ai-to-scale-server.htmlMon, 24 Aug 2026 13:38:31 +0530info@thehackernews.com (The Hacker News)TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuithttps://thehackernews.com/2026/08/tiktok-agrees-to-400-million-settlement.htmlhttps://thehackernews.com/2026/08/tiktok-agrees-to-400-million-settlement.htmlSat, 22 Aug 2026 20:02:41 +0530info@thehackernews.com (The Hacker News)14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2https://thehackernews.com/2026/08/14-trojanized-npm-packages-drop-redc2.htmlhttps://thehackernews.com/2026/08/14-trojanized-npm-packages-drop-redc2.htmlSat, 22 Aug 2026 00:23:00 +0530info@thehackernews.com (The Hacker News)