Install
The Hacker News is the most trusted and popular cybersecurity publication for information security professionals seeking breaking news, actionable insights and analysis.
- 177articles · 30d
- 1+ day agolatest article
- Aug 14, 2026earliest in window
- 11%with images
- 353avg words
- security 165
- cybersecurity 145
- malware 110
- vulnerability 100
- cyber security news 91
- artificial intelligence 70
- cyber security 65
- cybercrime 60
- technology 60
- ai 52
- vulnerabilities 52
- cloud security 38
- windows 36
- network security 34
- remote code execution 33
- infosec 31
- linux 31
- enterprise security 28
- microsoft 28
- cisa 27
- Science & Technology 122
- Software 100
- Computers & Electronics 86
- Conflict, War & Peace 46
- News 38
- Crime & Law 35
- Software Dev. 31
- Internet & Telecom 29
- cyber security news
- cyber news
- cyber security news today
- cyber security updates
- cyber updates
- hacker news
- hacking news
- software vulnerability
- cyber attacks
- data breach
- ransomware malware
- how to hack
- network security
- information security
- the hacker news
- computer security
- top cybersecurity threats
- ⚡ thn weekly recap
Please confirm you are human
This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.
A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.
News
Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data
23+ min ago (734+ words) Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam messages and using passkey-themed social engineering to breach cloud environments. Evidence indicates that the operators behind the campaign…...
Google Play Early Access Abused to Push Thousands of Deceptive Android Apps
2+ day, 19+ hour ago (467+ words) Bad actors are misusing Google Play's Early Access program to push deceptive apps that claim to offer money, rewards, casino winnings, and premium content. "The same feature that shields developers from unfair criticism also strips users of the earliest warning…...
Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key
3+ day, 3+ hour ago (1179+ words) Nearly one in ten of the internet-facing LiteLLM servers that Wiz Research scanned in February accepted sk-1234, the example admin key in LiteLLM's own setup guide. LiteLLM is an open-source AI gateway, the software a company puts between its applications…...
Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA
3+ day, 19+ hour ago (883+ words) Cybercriminals are hijacking artificial intelligence (AI) user accounts via information stealer logs to create "stolen keys" that grant illicit access to tools from model providers like Google, Anthropic, and others. Information stealers like Lumma Stealer or Vidar are equipped to…...
New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root
4+ day, 1+ hour ago (742+ words) cPanel has patched a flaw that it says lets a single hosting account take control of an entire server. An authenticated account holder with mail-related privileges can create files of their choosing on the server through EmailTrack and, from there,…...
ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another Account
4+ day, 20+ hour ago (813+ words) Check Point Research said in a report published today that a single instruction planted in a ChatGPT conversation could cause ChatGPT to quietly work for an attacker while answering the user's question as usual. In the company's proof of concept,…...
WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls
4+ day, 22+ hour ago (733+ words) Researchers at the security firm Calif have built a worm that takes over a WeChat account via an incoming call and demonstrated it spreading among three test phones. The person being called does not have to answer or touch their…...
BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams
5+ day, 1+ hour ago (1052+ words) Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poisoning campaign that paves the way for malware deployment and tech support scams. The campaign, discovered by the DFIR Report in March 2026, has been codenamed BengalSEO. It has…...
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies
6+ day, 2+ hour ago (494+ words) Malvertising campaigns distributing the malware make use of two ZIP archives delivered via PowerShell: one containing the Node.js runtime and the other containing the main payload and other auxiliary components. As recently as last month, ad security platform Confiant…...
Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication
1+ week, 1+ hour ago (390+ words) Attackers are exploiting MikroTik routers with their Secure Shell (SSH) remote-access service, which is reachable from the internet, to gain full administrative control without authentication, according to CERT Polska's attack warning, published on September 5. Successful attacks date to at least…...