The Hacker Newshttps://thehackernews.comMost trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.comen-usThu, 20 Aug 2026 15:37:19 +0530hourly1NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commandshttps://thehackernews.com/2026/08/nasa-ait-gui-flaws-could-let.htmlhttps://thehackernews.com/2026/08/nasa-ait-gui-flaws-could-let.htmlThu, 20 Aug 2026 16:35:11 +0530info@thehackernews.com (The Hacker News)ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraudhttps://thehackernews.com/2026/08/toxicpanda-20-and-golddigger-expand.htmlhttps://thehackernews.com/2026/08/toxicpanda-20-and-golddigger-expand.htmlThu, 20 Aug 2026 16:08:28 +0530info@thehackernews.com (The Hacker News)40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secretshttps://thehackernews.com/2026/08/40-malicious-firefox-extensions-pose-as.htmlhttps://thehackernews.com/2026/08/40-malicious-firefox-extensions-pose-as.htmlThu, 20 Aug 2026 14:12:03 +0530info@thehackernews.com (The Hacker News)Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Codehttps://thehackernews.com/2026/08/elementor-pro-flaw-could-let.htmlhttps://thehackernews.com/2026/08/elementor-pro-flaw-could-let.htmlThu, 20 Aug 2026 11:34:34 +0530info@thehackernews.com (The Hacker News)Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Secondhttps://thehackernews.com/2026/08/cloudflare-workers-spectre-attack-leaks.htmlhttps://thehackernews.com/2026/08/cloudflare-workers-spectre-attack-leaks.htmlThu, 20 Aug 2026 00:32:40 +0530info@thehackernews.com (The Hacker News)OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behaviorhttps://thehackernews.com/2026/08/openai-pauses-frontier-rl-training-as.htmlhttps://thehackernews.com/2026/08/openai-pauses-frontier-rl-training-as.htmlWed, 19 Aug 2026 23:36:44 +0530info@thehackernews.com (The Hacker News)SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATshttps://thehackernews.com/2026/08/silkparasite-espionage-campaign-targets.htmlhttps://thehackernews.com/2026/08/silkparasite-espionage-campaign-targets.htmlWed, 19 Aug 2026 18:42:17 +0530info@thehackernews.com (The Hacker News)Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2Phttps://thehackernews.com/2026/08/hackers-compromised-14500-dahua-devices.htmlhttps://thehackernews.com/2026/08/hackers-compromised-14500-dahua-devices.htmlWed, 19 Aug 2026 17:04:28 +0530info@thehackernews.com (The Hacker News)Phishing 3.0: The Fight Moves to Agent Versus Agenthttps://thehackernews.com/2026/08/phishing-30-fight-moves-to-agent-versus.htmlhttps://thehackernews.com/2026/08/phishing-30-fight-moves-to-agent-versus.htmlWed, 19 Aug 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Datahttps://thehackernews.com/2026/08/stopandprotect-uses-nearly-2000-hacked.htmlhttps://thehackernews.com/2026/08/stopandprotect-uses-nearly-2000-hacked.htmlWed, 19 Aug 2026 16:55:28 +0530info@thehackernews.com (The Hacker News)Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitationhttps://thehackernews.com/2026/08/critical-macos-sharepoint-vcenter-and.htmlhttps://thehackernews.com/2026/08/critical-macos-sharepoint-vcenter-and.htmlWed, 19 Aug 2026 16:31:48 +0530info@thehackernews.com (The Hacker News)Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructurehttps://thehackernews.com/2026/08/microsoft-links-30-rotating-domains-to.htmlhttps://thehackernews.com/2026/08/microsoft-links-30-rotating-domains-to.htmlWed, 19 Aug 2026 11:31:53 +0530info@thehackernews.com (The Hacker News)Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Datahttps://thehackernews.com/2026/08/clop-linked-windchill-web-shell.htmlhttps://thehackernews.com/2026/08/clop-linked-windchill-web-shell.htmlWed, 19 Aug 2026 11:09:25 +0530info@thehackernews.com (The Hacker News)Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Appshttps://thehackernews.com/2026/08/microsoft-copilot-personal-flaws-could.htmlhttps://thehackernews.com/2026/08/microsoft-copilot-personal-flaws-could.htmlTue, 18 Aug 2026 23:17:22 +0530info@thehackernews.com (The Hacker News)Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secretshttps://thehackernews.com/2026/08/attackers-exploit-mlflow-ssrf-flaw-to.htmlhttps://thehackernews.com/2026/08/attackers-exploit-mlflow-ssrf-flaw-to.htmlTue, 18 Aug 2026 23:14:05 +0530info@thehackernews.com (The Hacker News)Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000https://thehackernews.com/2026/08/ransom-busters-claims-it-hacked.htmlhttps://thehackernews.com/2026/08/ransom-busters-claims-it-hacked.htmlTue, 18 Aug 2026 22:28:16 +0530info@thehackernews.com (The Hacker News)AI "Mind Viruses" Can Spread Between Agents Through Persistent Prompt Fileshttps://thehackernews.com/2026/08/ai-mind-viruses-can-spread-between.htmlhttps://thehackernews.com/2026/08/ai-mind-viruses-can-spread-between.htmlTue, 18 Aug 2026 18:08:36 +0530info@thehackernews.com (The Hacker News)TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networkshttps://thehackernews.com/2026/08/twinloot-abuses-sharepoint-and-teams-to.htmlhttps://thehackernews.com/2026/08/twinloot-abuses-sharepoint-and-teams-to.htmlTue, 18 Aug 2026 18:08:20 +0530info@thehackernews.com (The Hacker News)One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025https://thehackernews.com/2026/08/one-attacker-has-scraped-both.htmlhttps://thehackernews.com/2026/08/one-attacker-has-scraped-both.htmlTue, 18 Aug 2026 17:00:00 +0530info@thehackernews.com (The Hacker News)16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Walletshttps://thehackernews.com/2026/08/16-typosquatted-rubygems-packages-steal.htmlhttps://thehackernews.com/2026/08/16-typosquatted-rubygems-packages-steal.htmlTue, 18 Aug 2026 16:50:00 +0530info@thehackernews.com (The Hacker News)SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customershttps://thehackernews.com/2026/08/safepal-hardware-wallet-maker-says-flaw.htmlhttps://thehackernews.com/2026/08/safepal-hardware-wallet-maker-says-flaw.htmlTue, 18 Aug 2026 14:40:45 +0530info@thehackernews.com (The Hacker News)CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCEhttps://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.htmlhttps://thehackernews.com/2026/08/cisa-flags-actively-exploited-ray-flaw.htmlTue, 18 Aug 2026 12:04:20 +0530info@thehackernews.com (The Hacker News)Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projectshttps://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.htmlhttps://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.htmlTue, 18 Aug 2026 02:33:04 +0530info@thehackernews.com (The Hacker News)Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injectionhttps://thehackernews.com/2026/08/snowflake-github-actions-flaw-lets_0330881554.htmlhttps://thehackernews.com/2026/08/snowflake-github-actions-flaw-lets_0330881554.htmlTue, 18 Aug 2026 00:14:17 +0530info@thehackernews.com (The Hacker News)Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploadshttps://thehackernews.com/2026/08/forminator-wordpress-flaw-can-enable.htmlhttps://thehackernews.com/2026/08/forminator-wordpress-flaw-can-enable.htmlMon, 17 Aug 2026 23:52:09 +0530info@thehackernews.com (The Hacker News)Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffichttps://thehackernews.com/2026/08/cavern-c2-uses-dns-and-google-apps.htmlhttps://thehackernews.com/2026/08/cavern-c2-uses-dns-and-google-apps.htmlMon, 17 Aug 2026 23:11:06 +0530info@thehackernews.com (The Hacker News)⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and Morehttps://thehackernews.com/2026/08/weekly-recap-vmware-exploits-windows-0.htmlhttps://thehackernews.com/2026/08/weekly-recap-vmware-exploits-windows-0.htmlMon, 17 Aug 2026 18:53:51 +0530info@thehackernews.com (The Hacker News)How MCP Servers Can Expose Enterprise Secretshttps://thehackernews.com/2026/08/how-mcp-servers-can-expose-enterprise.htmlhttps://thehackernews.com/2026/08/how-mcp-servers-can-expose-enterprise.htmlMon, 17 Aug 2026 17:28:00 +0530info@thehackernews.com (The Hacker News)Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Accesshttps://thehackernews.com/2026/08/unisoc-volte-video-call-exploit-chain.htmlhttps://thehackernews.com/2026/08/unisoc-volte-video-call-exploit-chain.htmlMon, 17 Aug 2026 16:22:34 +0530info@thehackernews.com (The Hacker News)Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxieshttps://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.htmlhttps://thehackernews.com/2026/08/evooo1bot-linux-botnet-exploits-known.htmlMon, 17 Aug 2026 14:59:55 +0530info@thehackernews.com (The Hacker News)Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomwarehttps://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.htmlhttps://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.htmlMon, 17 Aug 2026 13:06:19 +0530info@thehackernews.com (The Hacker News)SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patchhttps://thehackernews.com/2026/08/sap-commerce-cloud-cve-2026-58231.htmlhttps://thehackernews.com/2026/08/sap-commerce-cloud-cve-2026-58231.htmlSat, 15 Aug 2026 14:08:46 +0530info@thehackernews.com (The Hacker News)Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Minerhttps://thehackernews.com/2026/08/apple-macos-screen-sharing-flaw.htmlhttps://thehackernews.com/2026/08/apple-macos-screen-sharing-flaw.htmlSat, 15 Aug 2026 12:54:04 +0530info@thehackernews.com (The Hacker News)Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malwarehttps://thehackernews.com/2026/08/hackers-spend-nearly-7-million-on.htmlhttps://thehackernews.com/2026/08/hackers-spend-nearly-7-million-on.htmlSat, 15 Aug 2026 00:18:46 +0530info@thehackernews.com (The Hacker News)IAM Compliance Requirements and Best Practiceshttps://thehackernews.com/2026/08/iam-compliance-requirements-and-best.htmlhttps://thehackernews.com/2026/08/iam-compliance-requirements-and-best.htmlFri, 14 Aug 2026 22:49:49 +0530info@thehackernews.com (The Hacker News)Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealthhttps://thehackernews.com/2026/08/mustang-panda-adds-signed-windows.htmlhttps://thehackernews.com/2026/08/mustang-panda-adds-signed-windows.htmlFri, 14 Aug 2026 18:38:56 +0530info@thehackernews.com (The Hacker News)Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsershttps://thehackernews.com/2026/08/chrome-devtools-technique-enables.htmlhttps://thehackernews.com/2026/08/chrome-devtools-technique-enables.htmlFri, 14 Aug 2026 16:37:45 +0530info@thehackernews.com (The Hacker News)CTM360 Uncovers Over 3,000 Recruitment Phishing URLs Using Browser-in-the-Browser (BitB) Credential Trapshttps://thehackernews.com/2026/08/ctm360-uncovers-over-3000-recruitment.htmlhttps://thehackernews.com/2026/08/ctm360-uncovers-over-3000-recruitment.htmlFri, 14 Aug 2026 16:27:00 +0530info@thehackernews.com (The Hacker News)Apple Warns Users in 110 Countries They May Be Targets of Mercenary Spywarehttps://thehackernews.com/2026/08/apple-warns-users-in-110-countries-they.htmlhttps://thehackernews.com/2026/08/apple-warns-users-in-110-countries-they.htmlFri, 14 Aug 2026 16:14:34 +0530info@thehackernews.com (The Hacker News)Trump Memo Paves Way for U.S. Firms to Hack and Disrupt Foreign Crime Groupshttps://thehackernews.com/2026/08/trump-memo-paves-way-for-us-firms-to.htmlhttps://thehackernews.com/2026/08/trump-memo-paves-way-for-us-firms-to.htmlFri, 14 Aug 2026 15:08:56 +0530info@thehackernews.com (The Hacker News)China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraudhttps://thehackernews.com/2026/08/china-linked-jewelbug-uses-xg-web-for.htmlhttps://thehackernews.com/2026/08/china-linked-jewelbug-uses-xg-web-for.htmlFri, 14 Aug 2026 13:24:18 +0530info@thehackernews.com (The Hacker News)GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCEhttps://thehackernews.com/2026/08/unpatched-geoserver-zero-day-targeted.htmlhttps://thehackernews.com/2026/08/unpatched-geoserver-zero-day-targeted.htmlFri, 14 Aug 2026 00:15:12 +0530info@thehackernews.com (The Hacker News)ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Storieshttps://thehackernews.com/2026/08/threatsday-ghostjacking-ai-attacks.htmlhttps://thehackernews.com/2026/08/threatsday-ghostjacking-ai-attacks.htmlThu, 13 Aug 2026 23:47:10 +0530info@thehackernews.com (The Hacker News)New PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical Infrastructurehttps://thehackernews.com/2026/08/new-patchcord-backdoor-targets-afghan.htmlhttps://thehackernews.com/2026/08/new-patchcord-backdoor-targets-afghan.htmlThu, 13 Aug 2026 20:30:29 +0530info@thehackernews.com (The Hacker News)AmnesiaStealer Hijacks Chromium Sessions to Give Attackers Live Browser Control on macOShttps://thehackernews.com/2026/08/amnesiastealer-hijacks-chromium.htmlhttps://thehackernews.com/2026/08/amnesiastealer-hijacks-chromium.htmlThu, 13 Aug 2026 19:13:14 +0530info@thehackernews.com (The Hacker News)WindRelay Android Malware Turns Victims' Phones Into NFC Relays for Payment Fraudhttps://thehackernews.com/2026/08/windrelay-android-malware-turns-victims.htmlhttps://thehackernews.com/2026/08/windrelay-android-malware-turns-victims.htmlThu, 13 Aug 2026 17:23:14 +0530info@thehackernews.com (The Hacker News)North Korean Remote Workers Are Infiltrating Government and Businesses: How to Expose Them Before Hiringhttps://thehackernews.com/2026/08/north-korean-remote-workers-are.htmlhttps://thehackernews.com/2026/08/north-korean-remote-workers-are.htmlThu, 13 Aug 2026 17:15:00 +0530info@thehackernews.com (The Hacker News)Attackers Exploit SharePoint Authentication Bypass After Public PoC Releasehttps://thehackernews.com/2026/08/attackers-exploit-sharepoint.htmlhttps://thehackernews.com/2026/08/attackers-exploit-sharepoint.htmlThu, 13 Aug 2026 11:39:48 +0530info@thehackernews.com (The Hacker News)Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoorhttps://thehackernews.com/2026/08/lazarus-exploits-windows-zero-day-to.htmlhttps://thehackernews.com/2026/08/lazarus-exploits-windows-zero-day-to.htmlWed, 12 Aug 2026 23:09:27 +0530info@thehackernews.com (The Hacker News)737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have Onehttps://thehackernews.com/2026/08/737-chrome-vpn-extensions-caught.htmlhttps://thehackernews.com/2026/08/737-chrome-vpn-extensions-caught.htmlWed, 12 Aug 2026 19:39:50 +0530info@thehackernews.com (The Hacker News)