Category: Hacker News

F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution

F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution

June 18, 2026
ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories

ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories

June 18, 2026
INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023

INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023

June 18, 2026
Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2

Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2

June 18, 2026
Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Network

Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Network

June 18, 2026
DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic

DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic

June 18, 2026
The Scripts on Your Checkout Page Are Now a PCI DSS Problem

The Scripts on Your Checkout Page Are Now a PCI DSS Problem

June 18, 2026
Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development

Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development

June 17, 2026
Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments

Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments

June 17, 2026
Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline

Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline

June 17, 2026
The Top 10 Attack Surface Exposures in 2026

The Top 10 Attack Surface Exposures in 2026

June 17, 2026
Adversarial Exposure Validation Turns Security Visibility into Confident Prioritization

Adversarial Exposure Validation Turns Security Visibility into Confident Prioritization

June 17, 2026
Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats

Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats

June 17, 2026
144 Mastra npm Packages Compromised via Hijacked Contributor Account

144 Mastra npm Packages Compromised via Hijacked Contributor Account

June 17, 2026
CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution

CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution

June 17, 2026
ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures

ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures

June 16, 2026
Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting

Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting

June 16, 2026
New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds

New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds

June 16, 2026
Survey: 94% of Incidents Involve Anonymized Infrastructure. Teams Are Still Reactive

Survey: 94% of Incidents Involve Anonymized Infrastructure. Teams Are Still Reactive

June 16, 2026
Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week

Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week

June 16, 2026
China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth

China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth

June 16, 2026
Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware

Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware

June 16, 2026
Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flaw

Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flaw

June 16, 2026
CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation

CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation

June 16, 2026
Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails

Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails

June 15, 2026
North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels

North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels

June 15, 2026
LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers

LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers

June 15, 2026
One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes

One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes

June 15, 2026
⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More

⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More

June 15, 2026
Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites

Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites

June 15, 2026
152 Chrome Wallpaper Extensions with 105K Installs Linked to Adware and Fake Traffic

152 Chrome Wallpaper Extensions with 105K Installs Linked to Adware and Fake Traffic

June 15, 2026
The Onboarding Password Mistake That Creates Unnecessary Risk

The Onboarding Password Mistake That Creates Unnecessary Risk

June 15, 2026
Sniper Dz Scams Target MENA Users via Fake Facebook Offers and Browser Alerts

Sniper Dz Scams Target MENA Users via Fake Facebook Offers and Browser Alerts

June 15, 2026
Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw

Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw

June 15, 2026
Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication

Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication

June 13, 2026
U.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign Nationals

U.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign Nationals

June 13, 2026
China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade

China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade

June 12, 2026
Google Sues Chinese Smishing Network Accused of Using Gemini AI in Phishing

Google Sues Chinese Smishing Network Accused of Using Gemini AI in Phishing

June 12, 2026
Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit

Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit

June 12, 2026
Rethinking MDR as Attackers and Defenders Embrace AI

Rethinking MDR as Attackers and Defenders Embrace AI

June 12, 2026
Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Code

Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Code

June 12, 2026
INTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests Administrator

INTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests Administrator

June 12, 2026
LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution

LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution

June 12, 2026
Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs

Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs

June 12, 2026
ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities

ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities

June 11, 2026
New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files

New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files

June 11, 2026
New Attacks Trick OpenClaw AI Agent Into Running Code and Leaking Secrets

New Attacks Trick OpenClaw AI Agent Into Running Code and Leaking Secrets

June 11, 2026
The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm

The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm

June 11, 2026
ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Action Patch + 28 New Stories

ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Action Patch + 28 New Stories

June 11, 2026
Cybersecurity Stars Awards 2026: Winners Announced Across 95 Categories

Cybersecurity Stars Awards 2026: Winners Announced Across 95 Categories

June 11, 2026