The Hacker News
feeds.feedburner.com

Most trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.com

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

The Hacker News3 min read
Read on Scour →
Feeds

CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking

The Hacker News6 min read
Read on Scour →
Feeds

Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE

The Hacker News2 min read
Read on Scour →
Feeds

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

The Hacker News5 min read
Read on Scour →
Feeds

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

The Hacker News3 min read
Read on Scour →
Feeds

BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

The Hacker News5 min read
Read on Scour →
Feeds

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

The Hacker NewsCovered by23 min read
Read on Scour →
Feeds

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

The Hacker News4 min read
Read on Scour →
Feeds

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

The Hacker News4 min read
Read on Scour →
Feeds

Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do

The Hacker News8 min read
Read on Scour →
Feeds

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

The Hacker NewsCovered by25 min read
Read on Scour →
Feeds

Golden Chickens Resurfaces With Four New Malware Families and Modular Implants

The Hacker NewsCovered by23 min read
Read on Scour →
Feeds

NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

The Hacker News3 min read
Read on Scour →
Feeds

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

The Hacker News4 min read
Read on Scour →
Feeds

Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

The Hacker News4 min read
Read on Scour →
Feeds

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

The Hacker News5 min read
Read on Scour →
Feeds

ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories

The Hacker News10 min read
Read on Scour →
Feeds

Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files

The Hacker NewsCovered by63 min read
Read on Scour →
Feeds

Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge

The Hacker News4 min read
Read on Scour →
Feeds

China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks

The Hacker News3 min read
Read on Scour →
Feeds

Keyboard shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post actions

Love post
a
Like post
l
Dislike
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help