The Hacker News
feeds.feedburner.com

Most trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.com

CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE

The Hacker News2 min read
Read on Scour →
Feeds

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

The Hacker NewsCovered by62 min read
Read on Scour →
Feeds

Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

The Hacker NewsCovered by33 min read
Read on Scour →
Feeds

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

The Hacker News2 min read
Read on Scour →
Feeds

Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic

The Hacker News4 min read
Read on Scour →
Feeds

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

The Hacker News15 min read
Read on Scour →
Feeds

How MCP Servers Can Expose Enterprise Secrets

The Hacker News5 min read
Read on Scour →
Feeds

Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access

The Hacker NewsCovered by23 min read
The Hacker News
Covered by2 sites
All 2 sites ›
Covers 1 story
UNISOC T612 LPE
Read on Scour →
Feeds

Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies

The Hacker News3 min read
Read on Scour →
Feeds

Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware

The Hacker News6 min read
Read on Scour →
Feeds

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

The Hacker News1 min read
Read on Scour →
Feeds

Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner

The Hacker NewsCovered by34 min read
The Hacker News
Covered by3 sites
TNW | Artificial-intelligence, and more ›
Covers 12 stories
NCSC NL, About the security content of macOS Tahoe 26.6.1, and more ›
Read on Scour →
Feeds

Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware

The Hacker News8 min read
Read on Scour →
Feeds

IAM Compliance Requirements and Best Practices

The Hacker News10 min read
Read on Scour →
Feeds

Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealth

The Hacker News4 min read
Read on Scour →
Feeds

Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers

The Hacker News4 min read
Read on Scour →
Feeds

CTM360 Uncovers Over 3,000 Recruitment Phishing URLs Using Browser-in-the-Browser (BitB) Credential Traps

The Hacker News3 min read
Read on Scour →
Feeds

Apple Warns Users in 110 Countries They May Be Targets of Mercenary Spyware

The Hacker News2 min read
Read on Scour →
Feeds

Trump Memo Paves Way for U.S. Firms to Hack and Disrupt Foreign Crime Groups

The Hacker News2 min read
Read on Scour →
Feeds

China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud

The Hacker News5 min read
Read on Scour →
Feeds

Keyboard shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post actions

Love post
a
Like post
l
Dislike
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help