All News
The Hacker News
The Hacker News
January 5, 2026
The Security Platform Is Dead. Long Live the Security Platform
Why security platforms rise as tool sprawl hits 45 tools per enterprise, consolidation grows, and mid-market teams seek simpler, prevention-...
The Hacker News
January 5, 2026
New VVS Stealer Malware Targets Discord Accounts via Obfuscated Python Code
VVS Stealer is a Python-based malware sold on Telegram that steals Discord tokens, browser data, and credentials using heavy code obfuscatio...
The Hacker News
January 5, 2026
Deepfake Job Hires: When Your Next Breach Starts With an Interview
Deepfake-driven hiring fraud is rising, with fake employees gaining access, stealing data, and evading detection across organizations.
The Hacker News
January 2, 2026
Transparent Tribe Launches New RAT Attacks Against Indian Government and Academia
Transparent Tribe (APT36) is linked to new cyber-espionage attacks using malicious LNK files, adaptive RATs, and long-term persistence again...
The Hacker News
January 2, 2026
The ROI Problem in Attack Surface Management
Attack surface management ROI improves when ownership, exposure duration, and risky endpoints decline—not when asset counts rise.
The Hacker News
January 2, 2026
Cybercriminals Abuse Google Cloud Email Feature in Multi-Stage Phishing Campaign
Attackers misused Google Cloud Application Integration to send 9,394 phishing emails from Google domains, bypassing filters and stealing cre...
The Hacker News
January 1, 2026
ThreatsDay Bulletin: GhostAd Drain, macOS Attacks, Proxy Botnets, Cloud Exploits, and 12+ Stories
The first ThreatsDay Bulletin of 2026 tracks GhostAd adware, macOS malware, proxy botnets, cloud exploits, and more emerging cyber threats.
The Hacker News
January 1, 2026
RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web Servers
RondoDox botnet exploits the React2Shell vulnerability in Next.js, with over 90,000 exposed systems used to deploy miners and malware worldw...
The Hacker News
January 1, 2026
How To Browse Faster and Get More Done Using Adapt Browser
Learn how a lightweight browser architecture can reduce overhead, improve performance, & help users browse faster while staying focused & pr...
The Hacker News
December 31, 2025
Trust Wallet Chrome Extension Hack Drains $8.5M via Shai-Hulud Supply Chain Attack
Trust Wallet confirmed a supply chain attack let hackers push a malicious Chrome extension update, draining $8.5 million from 2,520 wallets.
The Hacker News
December 31, 2025
DarkSpectre Browser Extension Campaigns Exposed After Impacting 8.8 Million Users Worldwide
A China-linked threat actor used malicious browser extensions over seven years to steal data and corporate intelligence from Chrome, Edge, a...
The Hacker News
December 31, 2025
Critical CVSS 9.8 Flaw Found in IBM API Connect Authentication System
IBM disclosed a critical CVSS 9.8 authentication bypass in IBM API Connect that could allow remote access; patches are now available.
The Hacker News
December 31, 2025
Researchers Spot Modified Shai-Hulud Worm Testing Payload on npm Registry
A new Shai-Hulud npm strain and a fake Jackson Maven package show how attackers abuse trusted dependencies to steal secrets and spread malwa...
The Hacker News
December 31, 2025
U.S. Treasury Lifts Sanctions on Three Individuals Linked to Intellexa and Predator Spyware
The U.S. Treasury has removed three individuals linked to Intellexa and Predator spyware from its sanctions list, without explaining the dec...
The Hacker News
December 30, 2025
CSA Issues Alert on Critical SmarterMail Bug Allowing Remote Code Execution
Singapore’s CSA warns of a CVSS 10.0 SmarterMail vulnerability allowing unauthenticated remote code execution via file upload; patch availab...
The Hacker News
December 30, 2025
Silver Fox Targets Indian Users With Tax-Themed Emails Delivering ValleyRAT Malware
Silver Fox is using India income tax phishing emails and fake software sites to install ValleyRAT, a modular Windows remote access trojan.
The Hacker News
December 30, 2025
How to Integrate AI into Modern SOC Workflows
The 2025 SANS SOC Survey shows AI use is rising, but many SOCs lack integration, customization, and clear validation processes.
The Hacker News
December 30, 2025
Mustang Panda Uses Signed Kernel-Mode Rootkit to Load TONESHELL Backdoor
Mustang Panda deployed TONESHELL via a signed kernel-mode rootkit, targeting Asian government networks and evading security tools.
The Hacker News
December 29, 2025
⚡ Weekly Recap: MongoDB Attacks, Wallet Breaches, Android Spyware, Insider Crime & More
Weekly 2025 cyber recap: MongoBleed targets 87,000, Trust Wallet $7M loss, LastPass $35M theft, DNS poisoning, npm WhatsApp trap.
The Hacker News
December 29, 2025
MongoDB Vulnerability CVE-2025-14847 Under Active Exploitation Worldwide
A critical MongoDB flaw, CVE-2025-14847, is under active exploitation, allowing unauthenticated data leaks from 87,000+ vulnerable servers w...
The Hacker News
December 29, 2025
27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials
Researchers uncovered 27 malicious npm packages used over five months to host phishing pages that steal credentials from targeted organizati...
The Hacker News
December 29, 2025
Traditional Security Frameworks Leave Organizations Exposed to AI-Specific Attack Vectors
AI-driven attacks leaked 23.77 million secrets in 2024, revealing that NIST, ISO, and CIS frameworks lack coverage for AI-specific threats.
The Hacker News
December 27, 2025
New MongoDB Flaw Lets Unauthenticated Attackers Read Uninitialized Memory
High-severity CVE-2025-14847 allows unauthenticated attackers to read uninitialized heap memory in MongoDB due to a zlib compression handlin...
The Hacker News
December 26, 2025
Trust Wallet Chrome Extension Breach Caused $7 Million Crypto Loss via Malicious Code
Trust Wallet says a security incident in its Chrome extension v2.68 caused about $7M in crypto losses and urges users to update to v2.69.
The Hacker News
December 26, 2025
China-Linked Evasive Panda Ran DNS Poisoning Campaign to Deliver MgBot Malware
China-linked Evasive Panda used DNS poisoning to deliver the MgBot backdoor in targeted espionage attacks from 2022 to 2024.
The Hacker News
December 26, 2025
Critical LangChain Core Vulnerability Exposes Secrets via Serialization Injection
A critical LangChain Core vulnerability (CVE-2025-68664, CVSS 9.3) allows secret theft and prompt injection through unsafe serialization; up...
The Hacker News
December 25, 2025
ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More Stories
Weekly roundup exploring how cyber threats, AI misuse, and digital deception are reshaping global security trends.
The Hacker News
December 25, 2025
LastPass 2022 Breach Led to Years-Long Cryptocurrency Thefts, TRM Labs Finds
Stolen LastPass vaults from the 2022 breach enabled about $35M in crypto thefts through 2025, according to TRM Labs.
The Hacker News
December 25, 2025
Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability
Fortinet reports active attacks exploiting CVE-2020-12812, a FortiOS SSL VPN flaw that can bypass two-factor authentication in specific LDAP...
The Hacker News
December 25, 2025
CISA Flags Actively Exploited Digiever NVR Vulnerability Allowing Remote Code Execution
CISA adds an actively exploited Digiever DS-2105 Pro NVR vulnerability to KEV, warning of botnet attacks and urging mitigation for unpatched...
The Hacker News
December 24, 2025
New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper
A new MacSync macOS stealer spreads via a signed, notarized fake installer, bypassing Apple Gatekeeper before Apple revoked the certificate.
The Hacker News
December 24, 2025
Nomani Investment Scam Surges 62% Using AI Deepfake Ads on Social Media
ESET reports a 62% rise in the Nomani investment scam, using AI deepfakes on social media, while detections fell 37% in late 2025.
The Hacker News
December 24, 2025
Attacks are Evolving: 3 Ways to Protect Your Business in 2026
In 2025, small and mid-sized businesses made up 70.5% of data breaches, driven by weaker defenses and high-volume cyberattacks.
The Hacker News
December 24, 2025
SEC Files Charges Over $14 Million Crypto Scam Using Fake AI-Themed Investment Tips
SEC files charges over a $14M crypto scam using fake AI investment tips, WhatsApp groups, and bogus trading platforms to defraud U.S. invest...
The Hacker News
December 24, 2025
Italy Fines Apple €98.6 Million Over ATT Rules Limiting App Store Competition
Italy’s antitrust authority fined Apple €98.6M for ATT rules that forced extra consent steps on third-party apps and harmed competition.
The Hacker News
December 23, 2025
Two Chrome Extensions Caught Secretly Stealing Credentials from Over 170 Sites
Two Chrome Extensions Caught Secretly Stealing Credentials from Over 170 Sites | Read more hacking news on The Hacker News cybersecurity new...
The Hacker News
December 23, 2025
INTERPOL Arrests 574 in Africa; Ukrainian Ransomware Affiliate Pleads Guilty
INTERPOL’s Operation Sentinel led to 574 arrests, $3M recovered, and major ransomware and fraud disruptions across 19 African countries.
The Hacker News
December 23, 2025
Passwd: A walkthrough of the Google Workspace Password Manager
Passwd is a Google Workspace–only password manager using zero-knowledge AES-256 encryption, Google SSO, audit logs, and scalable team pricin...
The Hacker News
December 23, 2025
U.S. DoJ Seizes Fraud Domain Behind $14.6 Million Bank Account Takeover Scheme
The US Justice Department seized a domain used to steal bank logins, causing $14.6 million in losses from 19 US victims.
The Hacker News
December 23, 2025
Critical n8n Flaw (CVSS 9.9) Enables Arbitrary Code Execution Across Thousands of Instances
Critical n8n flaw CVE-2025-68613 (CVSS 9.9) lets authenticated users run arbitrary code; versions 0.211.0–1.120.4 affected, patched in newer...
The Hacker News
December 23, 2025
FCC Bans Foreign-Made Drones and Key Parts Over U.S. National Security Risks
The FCC bans foreign-made drones and critical components under U.S. law, citing national security, surveillance, and airspace safety risks.
The Hacker News
December 22, 2025
Fake WhatsApp API Package on npm Steals Messages, Contacts, and Login Tokens
A malicious npm package posing as a WhatsApp API intercepts messages, steals credentials, and links attacker devices after 56,000 downloads.
The Hacker News
December 22, 2025
⚡ Weekly Recap: Firewall Exploits, AI Data Theft, Android Hacks, APT Attacks, Insider Leaks & More
Weekly cybersecurity recap on exploited network flaws, new APT attacks, major CVEs, and defense insights.
The Hacker News
December 22, 2025
How to Browse the Web More Sustainably With a Green Browser
Learn what eco-friendly browsing means and how a green browser like Wave Browser helps reduce digital waste while supporting more sustainabl...
The Hacker News
December 22, 2025
Android Malware Operations Merge Droppers, SMS Theft, and RAT Capabilities at Scale
Android attackers use fake apps and droppers to spread the Wonderland SMS stealer, stealing OTPs, SMS data, and bank funds, mainly in Uzbeki...
The Hacker News
December 22, 2025
Purdue University’s Real-World Deepfake Detection Benchmark Raises the Bar for Enterprise Models
Purdue’s PDID benchmark tests deepfake tools on real social media content, showing why false-acceptance rates matter for enterprise security...
The Hacker News
December 21, 2025
Iranian Infy APT Resurfaces with New Malware Activity After Years of Silence
Iranian APT Infy resurfaced after years of silence, using updated Foudre & Tonnerre malware, phishing delivery, resilient C2 infrastructure...
The Hacker News
December 20, 2025
U.S. DOJ Charges 54 in ATM Jackpotting Scheme Using Ploutus Malware
The DOJ charged 54 people over Ploutus malware attacks on ATMs, linked to Tren de Aragua, causing $40.73 million in U.S. losses since 2021.
The Hacker News
December 19, 2025
Russia-Linked Hackers Use Microsoft 365 Device Code Phishing for Account Takeovers
A Russia-aligned threat group uses Microsoft 365 device code phishing to steal credentials and take over accounts, tracked since September 2...
The Hacker News
December 19, 2025