The Hacker News
Breaking cybersecurity news, vulnerabilities, and threat intelligence.
- Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other MalwareOctober 20, 2026
- Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy BackdoorOctober 19, 2026
- Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring BackdoorOctober 19, 2026
- ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and MoreOctober 19, 2026
- GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub RepositoriesOctober 19, 2026
- From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for SoftwareOctober 19, 2026
- Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent TrafficOctober 19, 2026
- Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on RoutersOctober 19, 2026
- OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API KeysOctober 19, 2026
- ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 TenantsOctober 18, 2026
- MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native AddonOctober 17, 2026
- Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 TenantsOctober 17, 2026
- Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory BugOctober 16, 2026
- Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a BackdoorOctober 16, 2026
- UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM PhishingOctober 16, 2026
- OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart ContractOctober 16, 2026
- AI Decision Models and Their Impact on AI SOC PlatformsOctober 16, 2026
- China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support ServersOctober 16, 2026
- CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During TestingOctober 16, 2026
- PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN SessionsOctober 16, 2026