All News
The Hacker News
The Hacker News
November 5, 2026
Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction
A patched ChatGPT HTML preview flaw let crafted content bypass Lockdown Mode restrictions, enabling chat data exfiltration.
The Hacker News
November 5, 2026
OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux
OpenSSH 10.6p2 fixes a critical password bypass allowing access to key-only accounts on affected Alpine Linux servers using long passwords.
The Hacker News
November 5, 2026
ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories
This week's cybersecurity news covers AI-powered attacks, critical vulnerabilities, ransomware, stolen credentials, cloud breaches, and secu...
The Hacker News
November 5, 2026
Is Your Exposure Management Platform Leaving You Exposed? Five Tests to Find Out
Five tests for evaluating exposure management platforms across asset discovery, risk prioritization, validation, remediation, and verificati...
The Hacker News
November 5, 2026
5 Active Cyber Threats That Put US Enterprises at Risk in October 2026
Five cyber threats target US businesses through Microsoft 365 device-code phishing, fake AI apps, credential theft, and malware.
The Hacker News
November 5, 2026
Apple to Start Scanning Publicly Shared iCloud Photos and Files for Harmful Content
Apple will check public iCloud links for harmful content starting with version 27.3, with link sharing disabling end-to-end encryption.
The Hacker News
November 5, 2026
Backdoored Docker Image for ARTEX AI Hacking Tool Exposes Servers to Root Access
CERT-In warns of AI-assisted attacks on Indian financial firms, while a backdoored ARTEX Docker image exposes 62 consoles to root access.
The Hacker News
November 5, 2026
Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution
Zyxel fixes a GS1900 flaw that allows unauthenticated command execution after researchers show an earlier patch fails to block the exploit.
The Hacker News
November 5, 2026
Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
CISA adds Apple CVE-2024-27834 to its KEV catalog after reports of active exploitation involving a pointer authentication bypass.
The Hacker News
November 5, 2026
OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run
OpenAI's AI pipeline reproduced 1,724 Linux vulnerabilities and generated 948 working local privilege escalation exploits for $1.2 million.
The Hacker News
November 4, 2026
SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
SonicWall warns two flaws in end-of-life GMS 9.5.2 and earlier will remain unpatched, allowing file reads or SQL injection under specific co...
The Hacker News
November 4, 2026
Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
APT flaw CVE-2026-109518 lets attackers with HTTP traffic control replace verified packages and execute code as root when downloads retry.
The Hacker News
November 4, 2026
Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit
Haiou jailbreak modifies OpenAI Codex instructions to inject persistent ads for a third-party LLM gateway into agent responses.
The Hacker News
November 4, 2026
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
APT29-linked attackers use compromised sites and Plerdy analytics to deliver iOS and Android exploits that steal browser and device data.
The Hacker News
November 4, 2026
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
Rails fixes a critical Active Storage flaw that enables arbitrary file writes through ImageMagick uploads and file reads in Disk service app...
The Hacker News
November 4, 2026
Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory
Two Xen hypervisor flaws allow malicious guest VMs to read and write other VMs' memory, including dom0. Patches are available.
The Hacker News
November 4, 2026
Radio With No Radar: Why Agent Runtime Security Fails Without the Layers Beneath It
AI agents running inside SaaS platforms can evade gateway inspection, requiring visibility into identities, permissions, and delegated actio...
The Hacker News
November 4, 2026
China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor
China-aligned SlippyNunchucks hijacked Sogou Input Method DNS requests to deploy DarkVigil malware. Tencent patched the flaw in version 16.1...
The Hacker News
November 4, 2026
Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure
Russian police arrest three suspected VasyGrek members and dismantle infrastructure linked to phishing, malware, and financial theft.
The Hacker News
November 4, 2026
Google Patches Critical Android Flaw Allowing Remote Code Execution Without User Interaction
Google fixes 216 Android flaws, including 23 Critical bugs and a remote code execution vulnerability requiring no user interaction.
The Hacker News
November 4, 2026
CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
CISA confirms active exploitation of CVE-2026-119977, a WordPress Core flaw that allows unauthenticated code execution during upgrades.
The Hacker News
November 3, 2026
Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes
Chainstack confirms a breach exposing customer account data and password hashes, with suspected links to an AI-powered attack campaign.
The Hacker News
November 3, 2026
Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft
Binance says a $6.43 billion crypto theft involved trojanized Homebrew, fake job interviews, compromised engineers, and abuse of internal AI...
The Hacker News
November 3, 2026
Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access
Two Barracuda flaws could be chained to bypass authorization and gain root access to devices if attackers can reach their admin interfaces.
The Hacker News
November 3, 2026
Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges
Google details LLMjacking attacks that hijack enterprise AI resources, generating fraudulent cloud charges reaching $1 million at some organ...
The Hacker News
November 3, 2026
cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes
Attackers hijacked cPGuard updates to plant a backdoor and collect server secrets, with 32 files confirmed retrieved from OPSSHIELD's server...
The Hacker News
November 3, 2026
Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing
Red Hat patches a critical Linux TCP flaw enabling remote code execution, while Ubuntu fixes remain in testing for three LTS releases.
The Hacker News
November 3, 2026
The 4 Elements of Exposure Prioritization and How to Operationalize Them
Gartner predicts 70% lower breach likelihood by 2028 for organizations prioritizing exposures using threat intelligence, asset context, and...
The Hacker News
November 3, 2026
Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware
Russia-aligned Gorbag uses spear-phishing, info-stealers, and a reverse shell to collect sensitive data from Ukrainian organizations.
The Hacker News
November 3, 2026
Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets
Hackers exploited a BTCPay Server vulnerability to steal Bitcoin and Litecoin from hot wallets on versions 2.4.1 and earlier.
The Hacker News
November 3, 2026
Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
Synology warns of ransomware attacks exploiting a patched DSM flaw as NAS users report C3RB3R infections and encrypted files.
The Hacker News
November 3, 2026
Second Wave of Cyberattacks Hits Supermarket Fridges Across Europe, Forcing Food Withdrawals
Hackers altered supermarket refrigeration settings across Europe, forcing food withdrawals and exposing weaknesses in remote controls.
The Hacker News
November 3, 2026
Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors
Attackers exploit CVE-2026-58115 in Siemens SIMATIC IoT2050 devices to deploy Linux bot payloads and command execution backdoors.
The Hacker News
November 3, 2026
Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials
Attackers are attempting to exploit an unpatched CryptoPayment Gateway WordPress flaw that could expose wallet credentials and delete files.
The Hacker News
November 2, 2026
⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
This week's ThreatsDay Bulletin covers the $6.43B crypto heist, Volt Typhoon, ChatGPT flaws, AI extension backdoors, spyware, critical CVEs,...
The Hacker News
November 2, 2026
Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access
Google disrupts the x.cpe botnet on over 1.3 million Android devices, linking the firmware backdoor to manufacturer Videostrong.
The Hacker News
November 2, 2026
DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment
Iran-linked DarkBlinders compromised targets in Israel and Iraqi Kurdistan using credential phishing and malware-laced applications.
The Hacker News
November 2, 2026
Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers
Langflow 1.13.0 fixes two critical flaws that could let unauthenticated attackers bypass authentication or remotely execute code.
The Hacker News
November 2, 2026
Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy
Assess AI SOC readiness with checks for data access, investigation standards, baseline metrics, human approvals, and detection coverage.
The Hacker News
November 2, 2026
Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
Attackers posed as IT support on Teams in two intrusions, abusing AD CS to gain privileged access and copying company data in one case.
The Hacker News
November 2, 2026
Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts
CL-UNK-1211 targets government Linux servers using AI-assisted scripts, PHP web shells, and SysGoRAT to steal credentials and maintain acces...
The Hacker News
November 2, 2026
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
VOLTA Windows infostealer uses multiple LLMs to rank stolen data by monetization value and sends AI-generated victim assessments via Telegra...
The Hacker News
November 1, 2026
CVSS 10.0 LXD and MicroCloud Flaw Enables Trusted Client Impersonation Without Private Keys
Canonical patches CVE-2026-112816 in LXD and MicroCloud, a CVSS 10.0 flaw enabling trusted client impersonation without private keys.
The Hacker News
November 1, 2026
Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script
A hijacked DebugBear script drained about $2.7 million from Polymarket traders, affecting 726 wallets and triggering $3.9 million in refunds...
The Hacker News
November 1, 2026
NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection
NetamLoader targets a government-only Windows 10 build in Asia, using AppDomainManager injection and layered .NET payloads to execute code
The Hacker News
November 1, 2026
FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist
The FBI attributes a $6 billion-plus crypto theft to North Korea-linked TraderTraitor as investigators track laundering through Ethereum.
The Hacker News
October 31, 2026
Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
Chainalysis confirms an attack using agentic techniques exposed customer names, emails, and user IDs, but not credentials or session tokens.
The Hacker News
October 31, 2026
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
CISA adds two exploited Ivanti Connect Secure flaws to its KEV catalog after attackers chained them to gain unauthenticated root-level code...
The Hacker News
October 31, 2026
A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
OpenAI fixed a P1 ChatGPT flaw that let malicious shared links execute code in signed-in sessions and access private conversations.
The Hacker News
October 30, 2026