The Hacker News
feeds.feedburner.com

Most trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.com

ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories

The Hacker News20 min read
Read on Scour →
Feeds

Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities

The Hacker NewsCovered by22 min read
Read on Scour →
Feeds

CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps

The Hacker News4 min read
Read on Scour →
Feeds

Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses

The Hacker News2 min read
Read on Scour →
Feeds

AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memory

The Hacker News5 min read
Read on Scour →
Feeds

Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access

The Hacker News2 min read
Read on Scour →
Feeds

AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model

The Hacker News7 min read
Read on Scour →
Feeds

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells

The Hacker News2 min read
Read on Scour →
Feeds

Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Service

The Hacker News2 min read
Read on Scour →
Feeds

CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild

The Hacker NewsCovered by31 min read
Read on Scour →
Feeds

Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People

The Hacker News3 min read
Read on Scour →
Feeds

Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures

The Hacker News3 min read
Read on Scour →
Feeds

OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes

The Hacker NewsCovered by33 min read
The Hacker News
Covered by3 sites
TechRadar, and more ›
Read on Scour →
Feeds

Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt

The Hacker News3 min read
Read on Scour →
Feeds

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports

The Hacker News6 min read
Read on Scour →
Feeds

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug

The Hacker News6 min read
Read on Scour →
Feeds

Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses

The Hacker NewsCovered by33 min read
Read on Scour →
Feeds

Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk

The Hacker News4 min read
Read on Scour →
Feeds

New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch

The Hacker News4 min read
Read on Scour →
Feeds

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

The Hacker NewsCovered by42 min read
The Hacker News
Covered by4 sites
4sysops, Criminal IP, and more ›
Read on Scour →
Feeds

Keyboard shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post actions

Love post
a
Like post
l
Dislike
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help