The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usTue, 13 Oct 2026 11:23:32 +0530hourly1Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxieshttps://thehackernews.com/2026/10/low-cost-android-phones-ship-with.htmlhttps://thehackernews.com/2026/10/low-cost-android-phones-ship-with.htmlTue, 13 Oct 2026 11:30:11 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and Morehttps://thehackernews.com/2026/10/weekly-recap-helpdesk-0-days-rogue.htmlhttps://thehackernews.com/2026/10/weekly-recap-helpdesk-0-days-rogue.htmlMon, 12 Oct 2026 20:46:26 +0530info@thehackernews.com (The Hacker News)Bring Your Own Agent: Your Employees' Assistants Are Already Logged Inhttps://thehackernews.com/2026/10/bring-your-own-agent-your-employees.htmlhttps://thehackernews.com/2026/10/bring-your-own-agent-your-employees.htmlMon, 12 Oct 2026 17:25:00 +0530info@thehackernews.com (The Hacker News)Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reportshttps://thehackernews.com/2026/10/ledger-finds-unauthorized-hardware.htmlhttps://thehackernews.com/2026/10/ledger-finds-unauthorized-hardware.htmlMon, 12 Oct 2026 16:51:48 +0530info@thehackernews.com (The Hacker News)Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patchhttps://thehackernews.com/2026/10/critical-sonicwall-sma-1000-flaw.htmlhttps://thehackernews.com/2026/10/critical-sonicwall-sma-1000-flaw.htmlMon, 12 Oct 2026 16:06:56 +0530info@thehackernews.com (The Hacker News)Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCEhttps://thehackernews.com/2026/10/attackers-exploit-cvss-100-bricksforge.htmlhttps://thehackernews.com/2026/10/attackers-exploit-cvss-100-bricksforge.htmlMon, 12 Oct 2026 14:32:14 +0530info@thehackernews.com (The Hacker News)CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Recordshttps://thehackernews.com/2026/10/cyberxero-uses-claude-code-in-campaign.htmlhttps://thehackernews.com/2026/10/cyberxero-uses-claude-code-in-campaign.htmlMon, 12 Oct 2026 12:56:12 +0530info@thehackernews.com (The Hacker News)P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commandshttps://thehackernews.com/2026/10/p7-darksword-ios-exploit-kit-adds.htmlhttps://thehackernews.com/2026/10/p7-darksword-ios-exploit-kit-adds.htmlSun, 11 Oct 2026 09:54:34 +0530info@thehackernews.com (The Hacker News)The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn'thttps://thehackernews.com/2026/10/the-third-party-agent-problem-why.htmlhttps://thehackernews.com/2026/10/the-third-party-agent-problem-why.htmlSat, 10 Oct 2026 16:30:00 +0530info@thehackernews.com (The Hacker News)Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flawshttps://thehackernews.com/2026/10/anthropic-cuts-live-internet-access-for.htmlhttps://thehackernews.com/2026/10/anthropic-cuts-live-internet-access-for.htmlSat, 10 Oct 2026 14:48:45 +0530info@thehackernews.com (The Hacker News)Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositorieshttps://thehackernews.com/2026/10/credential-stealing-github-actions.htmlhttps://thehackernews.com/2026/10/credential-stealing-github-actions.htmlSat, 10 Oct 2026 00:44:28 +0530info@thehackernews.com (The Hacker News)FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hackhttps://thehackernews.com/2026/10/fbi-arrests-another-shinyhunters.htmlhttps://thehackernews.com/2026/10/fbi-arrests-another-shinyhunters.htmlFri, 09 Oct 2026 23:15:26 +0530info@thehackernews.com (The Hacker News)TP-Link Sued by Four More U.S. States Over Router Security and China Tieshttps://thehackernews.com/2026/10/tp-link-sued-by-four-more-us-states.htmlhttps://thehackernews.com/2026/10/tp-link-sued-by-four-more-us-states.htmlFri, 09 Oct 2026 18:52:53 +0530info@thehackernews.com (The Hacker News)Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Accesshttps://thehackernews.com/2026/10/researchers-publish-working-exploit-for.htmlhttps://thehackernews.com/2026/10/researchers-publish-working-exploit-for.htmlFri, 09 Oct 2026 18:29:22 +0530info@thehackernews.com (The Hacker News)Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projectshttps://thehackernews.com/2026/10/anthropic-launches-free-ai.htmlhttps://thehackernews.com/2026/10/anthropic-launches-free-ai.htmlFri, 09 Oct 2026 18:17:28 +0530info@thehackernews.com (The Hacker News)Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edgehttps://thehackernews.com/2026/10/attackers-exploit-ahsaycbs-flaws-to.htmlhttps://thehackernews.com/2026/10/attackers-exploit-ahsaycbs-flaws-to.htmlFri, 09 Oct 2026 18:17:26 +0530info@thehackernews.com (The Hacker News)Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencieshttps://thehackernews.com/2026/10/flax-typhoon-exploits-five-flaws-as.htmlhttps://thehackernews.com/2026/10/flax-typhoon-exploits-five-flaws-as.htmlFri, 09 Oct 2026 17:51:51 +0530info@thehackernews.com (The Hacker News)The AI Velocity Paradox: Why Security Is Decades Behind AI Ambitionhttps://thehackernews.com/2026/10/the-ai-velocity-paradox-why-security-is.htmlhttps://thehackernews.com/2026/10/the-ai-velocity-paradox-why-security-is.htmlFri, 09 Oct 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keyshttps://thehackernews.com/2026/10/gobalance-flaw-lets-attackers-hijack.htmlhttps://thehackernews.com/2026/10/gobalance-flaw-lets-attackers-hijack.htmlFri, 09 Oct 2026 14:33:24 +0530info@thehackernews.com (The Hacker News)Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Ownhttps://thehackernews.com/2026/10/three-teams-demonstrate-remote-hacks-of.htmlhttps://thehackernews.com/2026/10/three-teams-demonstrate-remote-hacks-of.htmlFri, 09 Oct 2026 13:56:17 +0530info@thehackernews.com (The Hacker News)Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deploymentshttps://thehackernews.com/2026/10/citrix-patches-critical-netscaler-flaw.htmlhttps://thehackernews.com/2026/10/citrix-patches-critical-netscaler-flaw.htmlFri, 09 Oct 2026 13:41:33 +0530info@thehackernews.com (The Hacker News)FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusionshttps://thehackernews.com/2026/10/fbi-seizes-7-domains-disrupts-flax.htmlhttps://thehackernews.com/2026/10/fbi-seizes-7-domains-disrupts-flax.htmlFri, 09 Oct 2026 12:09:29 +0530info@thehackernews.com (The Hacker News)FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emailshttps://thehackernews.com/2026/10/fbi-says-china-linked-hackers-ran.htmlhttps://thehackernews.com/2026/10/fbi-says-china-linked-hackers-ran.htmlFri, 09 Oct 2026 00:02:21 +0530info@thehackernews.com (The Hacker News)ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Storieshttps://thehackernews.com/2026/10/threatsday-ransomware-affiliate.htmlhttps://thehackernews.com/2026/10/threatsday-ransomware-affiliate.htmlThu, 08 Oct 2026 23:28:02 +0530info@thehackernews.com (The Hacker News)Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attackshttps://thehackernews.com/2026/10/japan-sees-sharp-rise-in-web-data-leaks.htmlhttps://thehackernews.com/2026/10/japan-sees-sharp-rise-in-web-data-leaks.htmlThu, 08 Oct 2026 21:15:56 +0530info@thehackernews.com (The Hacker News)UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTMLhttps://thehackernews.com/2026/10/uac-0099-targets-ukrainian-government.htmlhttps://thehackernews.com/2026/10/uac-0099-targets-ukrainian-government.htmlThu, 08 Oct 2026 20:56:56 +0530info@thehackernews.com (The Hacker News)ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firmshttps://thehackernews.com/2026/10/artex-ai-pentesting-tool-used-in-data.htmlhttps://thehackernews.com/2026/10/artex-ai-pentesting-tool-used-in-data.htmlThu, 08 Oct 2026 19:42:34 +0530info@thehackernews.com (The Hacker News)Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australiahttps://thehackernews.com/2026/10/wazza-phishkit-targets-banking.htmlhttps://thehackernews.com/2026/10/wazza-phishkit-targets-banking.htmlThu, 08 Oct 2026 16:00:00 +0530info@thehackernews.com (The Hacker News)16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phraseshttps://thehackernews.com/2026/10/16-malicious-firefox-extensions-pose-as.htmlhttps://thehackernews.com/2026/10/16-malicious-firefox-extensions-pose-as.htmlThu, 08 Oct 2026 15:16:32 +0530info@thehackernews.com (The Hacker News)U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hackshttps://thehackernews.com/2026/10/us-offers-up-to-10-million-for-tips-on.htmlhttps://thehackernews.com/2026/10/us-offers-up-to-10-million-for-tips-on.htmlThu, 08 Oct 2026 13:12:04 +0530info@thehackernews.com (The Hacker News)MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Datahttps://thehackernews.com/2026/10/monstercloud-owner-accused-of-billing.htmlhttps://thehackernews.com/2026/10/monstercloud-owner-accused-of-billing.htmlThu, 08 Oct 2026 13:11:44 +0530info@thehackernews.com (The Hacker News)Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Wormhttps://thehackernews.com/2026/10/tensorlake-npm-package-compromised-to.htmlhttps://thehackernews.com/2026/10/tensorlake-npm-package-compromised-to.htmlThu, 08 Oct 2026 11:16:20 +0530info@thehackernews.com (The Hacker News)Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domainshttps://thehackernews.com/2026/10/attackers-hijack-gh-sl-and-as.htmlhttps://thehackernews.com/2026/10/attackers-hijack-gh-sl-and-as.htmlThu, 08 Oct 2026 00:18:17 +0530info@thehackernews.com (The Hacker News)Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealerhttps://thehackernews.com/2026/10/eight-malicious-npm-packages-downloaded.htmlhttps://thehackernews.com/2026/10/eight-malicious-npm-packages-downloaded.htmlWed, 07 Oct 2026 23:13:20 +0530info@thehackernews.com (The Hacker News)SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Applianceshttps://thehackernews.com/2026/10/sonicwall-patches-cvss-100-pre.htmlhttps://thehackernews.com/2026/10/sonicwall-patches-cvss-100-pre.htmlWed, 07 Oct 2026 21:47:44 +0530info@thehackernews.com (The Hacker News)Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotelyhttps://thehackernews.com/2026/10/unpatched-critical-lmcache-flaw-lets.htmlhttps://thehackernews.com/2026/10/unpatched-critical-lmcache-flaw-lets.htmlWed, 07 Oct 2026 21:04:53 +0530info@thehackernews.com (The Hacker News)PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnethttps://thehackernews.com/2026/10/poellm-malware-infects-3400-servers-to.htmlhttps://thehackernews.com/2026/10/poellm-malware-infects-3400-servers-to.htmlWed, 07 Oct 2026 21:03:51 +0530info@thehackernews.com (The Hacker News)The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflowhttps://thehackernews.com/2026/10/the-sixth-voice-of-ciso-data-shows.htmlhttps://thehackernews.com/2026/10/the-sixth-voice-of-ciso-data-shows.htmlWed, 07 Oct 2026 17:27:05 +0530info@thehackernews.com (The Hacker News)FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentialshttps://thehackernews.com/2026/10/fbi-warns-fortibleed-remains-active.htmlhttps://thehackernews.com/2026/10/fbi-warns-fortibleed-remains-active.htmlWed, 07 Oct 2026 17:26:56 +0530info@thehackernews.com (The Hacker News)Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Detailshttps://thehackernews.com/2026/10/atlassian-data-center-flaw-draws.htmlhttps://thehackernews.com/2026/10/atlassian-data-center-flaw-draws.htmlWed, 07 Oct 2026 17:19:26 +0530info@thehackernews.com (The Hacker News)What Is Agentic Pentesting? What It Proves, and Where It Stops.https://thehackernews.com/2026/10/what-is-agentic-pentesting-what-it.htmlhttps://thehackernews.com/2026/10/what-is-agentic-pentesting-what-it.htmlWed, 07 Oct 2026 17:12:24 +0530info@thehackernews.com (The Hacker News)Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flawshttps://thehackernews.com/2026/10/anthropic-expands-claude-access-for.htmlhttps://thehackernews.com/2026/10/anthropic-expands-claude-access-for.htmlWed, 07 Oct 2026 13:37:38 +0530info@thehackernews.com (The Hacker News)100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealerhttps://thehackernews.com/2026/10/100-compromised-websites-use-fake.htmlhttps://thehackernews.com/2026/10/100-compromised-websites-use-fake.htmlWed, 07 Oct 2026 12:27:54 +0530info@thehackernews.com (The Hacker News)Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codeshttps://thehackernews.com/2026/10/fake-chatgpt-gemini-and-claude-ad.htmlhttps://thehackernews.com/2026/10/fake-chatgpt-gemini-and-claude-ad.htmlWed, 07 Oct 2026 00:08:55 +0530info@thehackernews.com (The Hacker News)Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwanhttps://thehackernews.com/2026/10/linux-backdoors-impersonate-email.htmlhttps://thehackernews.com/2026/10/linux-backdoors-impersonate-email.htmlTue, 06 Oct 2026 23:54:25 +0530info@thehackernews.com (The Hacker News)LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warningshttps://thehackernews.com/2026/10/libreoffice-and-openoffice-flaws-let.htmlhttps://thehackernews.com/2026/10/libreoffice-and-openoffice-flaws-let.htmlTue, 06 Oct 2026 17:27:00 +0530info@thehackernews.com (The Hacker News)Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxieshttps://thehackernews.com/2026/10/wikimedia-says-openai-agents-tried-to.htmlhttps://thehackernews.com/2026/10/wikimedia-says-openai-agents-tried-to.htmlTue, 06 Oct 2026 16:56:25 +0530info@thehackernews.com (The Hacker News)Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servershttps://thehackernews.com/2026/10/welcome-to-jungle-what-we-found-inside.htmlhttps://thehackernews.com/2026/10/welcome-to-jungle-what-we-found-inside.htmlTue, 06 Oct 2026 16:32:30 +0530info@thehackernews.com (The Hacker News)Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reportshttps://thehackernews.com/2026/10/google-pauses-oss-product-bug-bounty.htmlhttps://thehackernews.com/2026/10/google-pauses-oss-product-bug-bounty.htmlTue, 06 Oct 2026 14:51:47 +0530info@thehackernews.com (The Hacker News)Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Productshttps://thehackernews.com/2026/10/critical-atlassian-flaw-lets.htmlhttps://thehackernews.com/2026/10/critical-atlassian-flaw-lets.htmlTue, 06 Oct 2026 12:28:56 +0530info@thehackernews.com (The Hacker News)