The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usMon, 19 Oct 2026 14:03:20 +0530hourly1Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routershttps://thehackernews.com/2026/10/unpatched-broadcom-wi-fi-flaw-lets.htmlhttps://thehackernews.com/2026/10/unpatched-broadcom-wi-fi-flaw-lets.htmlMon, 19 Oct 2026 11:59:44 +0530info@thehackernews.com (The Hacker News)OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keyshttps://thehackernews.com/2026/10/opencode-console-breach-may-have.htmlhttps://thehackernews.com/2026/10/opencode-console-breach-may-have.htmlMon, 19 Oct 2026 11:37:08 +0530info@thehackernews.com (The Hacker News)ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenantshttps://thehackernews.com/2026/10/connectwise-suspends-cloud-backup-after.htmlhttps://thehackernews.com/2026/10/connectwise-suspends-cloud-backup-after.htmlSun, 18 Oct 2026 13:53:02 +0530info@thehackernews.com (The Hacker News)MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addonhttps://thehackernews.com/2026/10/malfex-npm-package-imgdecode-hides.htmlhttps://thehackernews.com/2026/10/malfex-npm-package-imgdecode-hides.htmlSat, 17 Oct 2026 16:41:56 +0530info@thehackernews.com (The Hacker News)Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenantshttps://thehackernews.com/2026/10/hackers-use-compromised-connectwise.htmlhttps://thehackernews.com/2026/10/hackers-use-compromised-connectwise.htmlSat, 17 Oct 2026 11:46:46 +0530info@thehackernews.com (The Hacker News)Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bughttps://thehackernews.com/2026/10/researchers-demonstrate-openbsd-root.htmlhttps://thehackernews.com/2026/10/researchers-demonstrate-openbsd-root.htmlFri, 16 Oct 2026 23:18:45 +0530info@thehackernews.com (The Hacker News)Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoorhttps://thehackernews.com/2026/10/attackers-tampered-with-aomei.htmlhttps://thehackernews.com/2026/10/attackers-tampered-with-aomei.htmlFri, 16 Oct 2026 22:13:39 +0530info@thehackernews.com (The Hacker News)UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishinghttps://thehackernews.com/2026/10/uat-11985-uses-fake-event-invites-to.htmlhttps://thehackernews.com/2026/10/uat-11985-uses-fake-event-invites-to.htmlFri, 16 Oct 2026 21:46:44 +0530info@thehackernews.com (The Hacker News)OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contracthttps://thehackernews.com/2026/10/openai-research-model-spent-3rd-party.htmlhttps://thehackernews.com/2026/10/openai-research-model-spent-3rd-party.htmlFri, 16 Oct 2026 19:33:04 +0530info@thehackernews.com (The Hacker News)AI Decision Models and Their Impact on AI SOC Platformshttps://thehackernews.com/2026/10/ai-decision-models-and-their-impact-on.htmlhttps://thehackernews.com/2026/10/ai-decision-models-and-their-impact-on.htmlFri, 16 Oct 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servershttps://thehackernews.com/2026/10/china-linked-hackers-exploited.htmlhttps://thehackernews.com/2026/10/china-linked-hackers-exploited.htmlFri, 16 Oct 2026 12:25:55 +0530info@thehackernews.com (The Hacker News)CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testinghttps://thehackernews.com/2026/10/cert-in-warns-ai-agents-accessed.htmlhttps://thehackernews.com/2026/10/cert-in-warns-ai-agents-accessed.htmlFri, 16 Oct 2026 12:23:09 +0530info@thehackernews.com (The Hacker News)PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessionshttps://thehackernews.com/2026/10/attackers-exploit-fortios-flaw-to.htmlhttps://thehackernews.com/2026/10/attackers-exploit-fortios-flaw-to.htmlFri, 16 Oct 2026 10:29:36 +0530info@thehackernews.com (The Hacker News)Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memoryhttps://thehackernews.com/2026/10/critical-pwnescape-linux-kernel.htmlhttps://thehackernews.com/2026/10/critical-pwnescape-linux-kernel.htmlFri, 16 Oct 2026 01:54:36 +0530info@thehackernews.com (The Hacker News)ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 Morehttps://thehackernews.com/2026/10/threatsday-adobe-rce-dns-wallet-theft.htmlhttps://thehackernews.com/2026/10/threatsday-adobe-rce-dns-wallet-theft.htmlFri, 16 Oct 2026 00:19:33 +0530info@thehackernews.com (The Hacker News)Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Adshttps://thehackernews.com/2026/10/citizen-lab-traces-zero-click-candiru.htmlhttps://thehackernews.com/2026/10/citizen-lab-traces-zero-click-candiru.htmlThu, 15 Oct 2026 21:31:57 +0530info@thehackernews.com (The Hacker News)Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attackshttps://thehackernews.com/2026/10/silent-lynx-exploits-winrar-flaw-to.htmlhttps://thehackernews.com/2026/10/silent-lynx-exploits-winrar-flaw-to.htmlThu, 15 Oct 2026 21:30:26 +0530info@thehackernews.com (The Hacker News)Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scamshttps://thehackernews.com/2026/10/help-tds-linked-to-hotejka-as-20000.htmlhttps://thehackernews.com/2026/10/help-tds-linked-to-hotejka-as-20000.htmlThu, 15 Oct 2026 19:41:36 +0530info@thehackernews.com (The Hacker News)NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checkshttps://thehackernews.com/2026/10/nginx-fixes-5-flaws-including-possible.htmlhttps://thehackernews.com/2026/10/nginx-fixes-5-flaws-including-possible.htmlThu, 15 Oct 2026 18:28:05 +0530info@thehackernews.com (The Hacker News)Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processinghttps://thehackernews.com/2026/10/nextjs-ships-out-of-band-patch-for-two.htmlhttps://thehackernews.com/2026/10/nextjs-ships-out-of-band-patch-for-two.htmlThu, 15 Oct 2026 17:58:13 +0530info@thehackernews.com (The Hacker News)Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Moduleshttps://thehackernews.com/2026/10/drupal-patches-critical-core-rce-flaw.htmlhttps://thehackernews.com/2026/10/drupal-patches-critical-core-rce-flaw.htmlThu, 15 Oct 2026 17:37:20 +0530info@thehackernews.com (The Hacker News)Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Earlyhttps://thehackernews.com/2026/10/fake-ai-attacks-spread-across-us.htmlhttps://thehackernews.com/2026/10/fake-ai-attacks-spread-across-us.htmlThu, 15 Oct 2026 17:16:59 +0530info@thehackernews.com (The Hacker News)Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitationhttps://thehackernews.com/2026/10/palo-alto-networks-patches-pan-os.htmlhttps://thehackernews.com/2026/10/palo-alto-networks-patches-pan-os.htmlThu, 15 Oct 2026 17:16:49 +0530info@thehackernews.com (The Hacker News)Why AI Confidence Is Not Validationhttps://thehackernews.com/2026/10/why-ai-confidence-is-not-validation.htmlhttps://thehackernews.com/2026/10/why-ai-confidence-is-not-validation.htmlThu, 15 Oct 2026 16:34:35 +0530info@thehackernews.com (The Hacker News)India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1https://thehackernews.com/2026/10/india-mandates-registered-caller-name.htmlhttps://thehackernews.com/2026/10/india-mandates-registered-caller-name.htmlThu, 15 Oct 2026 16:12:16 +0530info@thehackernews.com (The Hacker News)GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositorieshttps://thehackernews.com/2026/10/ghostaction-compromises-about-1900.htmlhttps://thehackernews.com/2026/10/ghostaction-compromises-about-1900.htmlThu, 15 Oct 2026 14:15:10 +0530info@thehackernews.com (The Hacker News)Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attemptshttps://thehackernews.com/2026/10/langflows-critical-authenticated-rce.htmlhttps://thehackernews.com/2026/10/langflows-critical-authenticated-rce.htmlThu, 15 Oct 2026 12:37:05 +0530info@thehackernews.com (The Hacker News)AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patcheshttps://thehackernews.com/2026/10/ahsaycbs-flaws-exploited-to-deploy-web.htmlhttps://thehackernews.com/2026/10/ahsaycbs-flaws-exploited-to-deploy-web.htmlThu, 15 Oct 2026 12:13:08 +0530info@thehackernews.com (The Hacker News)Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerabilityhttps://thehackernews.com/2026/10/cisco-warns-of-active-attacks.htmlhttps://thehackernews.com/2026/10/cisco-warns-of-active-attacks.htmlThu, 15 Oct 2026 00:08:56 +0530info@thehackernews.com (The Hacker News)Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE Apphttps://thehackernews.com/2026/10/hackers-backdoor-nextcloud-servers.htmlhttps://thehackernews.com/2026/10/hackers-backdoor-nextcloud-servers.htmlWed, 14 Oct 2026 23:08:31 +0530info@thehackernews.com (The Hacker News)Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messageshttps://thehackernews.com/2026/10/microsoft-disrupts-3-phishing-kits.htmlhttps://thehackernews.com/2026/10/microsoft-disrupts-3-phishing-kits.htmlWed, 14 Oct 2026 22:39:15 +0530info@thehackernews.com (The Hacker News)U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraudhttps://thehackernews.com/2026/10/us-shuts-down-over-40-laptop-farms.htmlhttps://thehackernews.com/2026/10/us-shuts-down-over-40-laptop-farms.htmlWed, 14 Oct 2026 22:04:31 +0530info@thehackernews.com (The Hacker News)CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attemptshttps://thehackernews.com/2026/10/cisa-urges-immediate-ivanti-connect.htmlhttps://thehackernews.com/2026/10/cisa-urges-immediate-ivanti-connect.htmlWed, 14 Oct 2026 18:00:42 +0530info@thehackernews.com (The Hacker News)curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Executionhttps://thehackernews.com/2026/10/curl-patches-http2-upload-flaw-after.htmlhttps://thehackernews.com/2026/10/curl-patches-http2-upload-flaw-after.htmlWed, 14 Oct 2026 17:43:36 +0530info@thehackernews.com (The Hacker News)How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Teamhttps://thehackernews.com/2026/10/how-to-run-deepfake-readiness-drill.htmlhttps://thehackernews.com/2026/10/how-to-run-deepfake-readiness-drill.htmlWed, 14 Oct 2026 17:20:00 +0530info@thehackernews.com (The Hacker News)Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Dayshttps://thehackernews.com/2026/10/researchers-used-public-openai-model-to.htmlhttps://thehackernews.com/2026/10/researchers-used-public-openai-model-to.htmlWed, 14 Oct 2026 16:49:02 +0530info@thehackernews.com (The Hacker News)Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checkshttps://thehackernews.com/2026/10/hirudo-android-trojan-uses-patched.htmlhttps://thehackernews.com/2026/10/hirudo-android-trojan-uses-patched.htmlWed, 14 Oct 2026 16:38:22 +0530info@thehackernews.com (The Hacker News)An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.https://thehackernews.com/2026/10/an-ai-agent-found-critical-otp-bypass.htmlhttps://thehackernews.com/2026/10/an-ai-agent-found-critical-otp-bypass.htmlWed, 14 Oct 2026 16:30:00 +0530info@thehackernews.com (The Hacker News)AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Hosthttps://thehackernews.com/2026/10/ai-found-linux-kernel-flaw-gives-local.htmlhttps://thehackernews.com/2026/10/ai-found-linux-kernel-flaw-gives-local.htmlWed, 14 Oct 2026 13:16:57 +0530info@thehackernews.com (The Hacker News)Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclavehttps://thehackernews.com/2026/10/four-byte-write-and-timing-bug-let.htmlhttps://thehackernews.com/2026/10/four-byte-write-and-timing-bug-let.htmlWed, 14 Oct 2026 11:22:28 +0530info@thehackernews.com (The Hacker News)Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bughttps://thehackernews.com/2026/10/microsoft-patches-record-1413-flaws.htmlhttps://thehackernews.com/2026/10/microsoft-patches-record-1413-flaws.htmlWed, 14 Oct 2026 10:04:43 +0530info@thehackernews.com (The Hacker News)OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Roomhttps://thehackernews.com/2026/10/openai-employee-arrested-for-allegedly.htmlhttps://thehackernews.com/2026/10/openai-employee-arrested-for-allegedly.htmlWed, 14 Oct 2026 07:29:25 +0530info@thehackernews.com (The Hacker News)Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnetshttps://thehackernews.com/2026/10/anthropic-warns-small-ai-models-could.htmlhttps://thehackernews.com/2026/10/anthropic-warns-small-ai-models-could.htmlTue, 13 Oct 2026 23:50:57 +0530info@thehackernews.com (The Hacker News)Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Anotherhttps://thehackernews.com/2026/10/docker-fixes-critical-two-year-old-hub.htmlhttps://thehackernews.com/2026/10/docker-fixes-critical-two-year-old-hub.htmlTue, 13 Oct 2026 23:33:18 +0530info@thehackernews.com (The Hacker News)Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Farhttps://thehackernews.com/2026/10/attacker-chains-three-ivanti-connect.htmlhttps://thehackernews.com/2026/10/attacker-chains-three-ivanti-connect.htmlTue, 13 Oct 2026 23:03:11 +0530info@thehackernews.com (The Hacker News)SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Thefthttps://thehackernews.com/2026/10/sap-discloses-critical-cvss-10-flaw-in.htmlhttps://thehackernews.com/2026/10/sap-discloses-critical-cvss-10-flaw-in.htmlTue, 13 Oct 2026 22:58:50 +0530info@thehackernews.com (The Hacker News)GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijackinghttps://thehackernews.com/2026/10/github-tightens-npm-publishing-after.htmlhttps://thehackernews.com/2026/10/github-tightens-npm-publishing-after.htmlTue, 13 Oct 2026 21:48:18 +0530info@thehackernews.com (The Hacker News)Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientationhttps://thehackernews.com/2026/10/xandr-fined-record-86-million-for.htmlhttps://thehackernews.com/2026/10/xandr-fined-record-86-million-for.htmlTue, 13 Oct 2026 18:42:32 +0530info@thehackernews.com (The Hacker News)[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controlshttps://thehackernews.com/2026/10/webinar-how-to-stop-ai-driven-privilege.htmlhttps://thehackernews.com/2026/10/webinar-how-to-stop-ai-driven-privilege.htmlTue, 13 Oct 2026 17:27:06 +0530info@thehackernews.com (The Hacker News)LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Networkhttps://thehackernews.com/2026/10/lg-smart-tvs-vulnerable-to-pre-auth.htmlhttps://thehackernews.com/2026/10/lg-smart-tvs-vulnerable-to-pre-auth.htmlTue, 13 Oct 2026 16:39:10 +0530info@thehackernews.com (The Hacker News)