logo

The Hacker News

ID: fa8b6a49-416b-5e02-96d2-6e80c4becccd

STIX ID: identity--fa8b6a49-416b-5e02-96d2-6e80c4becccd

Feed Type: rss

Earliest post: 2023-12-18

Latest post: 2026-10-13

The Hacker News is a leading independent source for real-time cybersecurity news, threat intelligence, vulnerabilities, breach reports, and expert analysis.

01/01/2020
10/14/2026
Title Date Published ↓Threat ScoreAuthorVisible
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another2026-10-1370[email protected] (The Hacker News)True
Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control2026-10-1370[email protected] (The Hacker News)True
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code2026-10-1390[email protected] (The Hacker News)True
Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies2026-10-1375[email protected] (The Hacker News)True
Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories2026-10-0988[email protected] (The Hacker News)True
FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack2026-10-0985[email protected] (The Hacker News)True
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands2026-10-0982[email protected] (The Hacker News)True
TP-Link Sued by Four More U.S. States Over Router Security and China Ties2026-10-0970[email protected] (The Hacker News)True
Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access2026-10-0972[email protected] (The Hacker News)True
Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects2026-10-0930[email protected] (The Hacker News)True
Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge2026-10-0978[email protected] (The Hacker News)True
Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies2026-10-0985[email protected] (The Hacker News)True
GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys2026-10-0970[email protected] (The Hacker News)True
Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own2026-10-0950[email protected] (The Hacker News)True
Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments2026-10-0970[email protected] (The Hacker News)True
FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions2026-10-0990[email protected] (The Hacker News)True
FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails2026-10-0888[email protected] (The Hacker News)True
ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories2026-10-0878[email protected] (The Hacker News)True
Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks2026-10-0875[email protected] (The Hacker News)True
UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML2026-10-0890[email protected] (The Hacker News)True
ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms2026-10-0878[email protected] (The Hacker News)True
Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia2026-10-0865[email protected] (The Hacker News)True
16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases2026-10-0870[email protected] (The Hacker News)True
U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks2026-10-0890[email protected] (The Hacker News)True
MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data2026-10-0865[email protected] (The Hacker News)True
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm2026-10-0890[email protected] (The Hacker News)True
Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains2026-10-0760[email protected] (The Hacker News)True
Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer2026-10-0772[email protected] (The Hacker News)True
SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances2026-10-0775[email protected] (The Hacker News)True
Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely2026-10-0780[email protected] (The Hacker News)True
PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet2026-10-0772[email protected] (The Hacker News)True
FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials2026-10-0782[email protected] (The Hacker News)True
Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details2026-10-0785[email protected] (The Hacker News)True
Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws2026-10-0755[email protected] (The Hacker News)True
100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer2026-10-0778[email protected] (The Hacker News)True
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes2026-10-0675[email protected] (The Hacker News)True
Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan2026-10-0685[email protected] (The Hacker News)True
LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings2026-10-0655[email protected] (The Hacker News)True
Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies2026-10-0660[email protected] (The Hacker News)True
Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers2026-10-0655[email protected] (The Hacker News)True
Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports2026-10-0610[email protected] (The Hacker News)True
Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products2026-10-0675[email protected] (The Hacker News)True
FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach2026-10-0678[email protected] (The Hacker News)True
Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account2026-10-0675[email protected] (The Hacker News)True
ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits2026-10-0678[email protected] (The Hacker News)True
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes2026-10-0575[email protected] (The Hacker News)True
⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests2026-10-0585[email protected] (The Hacker News)True
The Credential Layer Is Expanding Faster Than Security Teams Can See It2026-10-0570[email protected] (The Hacker News)True
Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C22026-10-0578[email protected] (The Hacker News)True
Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access2026-10-0570[email protected] (The Hacker News)True

1–50 of 2216