Category: Hacker News

OceanLotus Hits Vietnam Investors With SPECTRALVIPER in FireAnt Attack

OceanLotus Hits Vietnam Investors With SPECTRALVIPER in FireAnt Attack

June 11, 2026
AI Broke Vulnerability Management. That’s Why CISOs Are Moving Budget to BAS.

AI Broke Vulnerability Management. That’s Why CISOs Are Moving Budget to BAS.

June 11, 2026
GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks

GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks

June 11, 2026
CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation

CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation

June 10, 2026
Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities

Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities

June 10, 2026
Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE

Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE

June 10, 2026
China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance

China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance

June 10, 2026
Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs

Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs

June 10, 2026
Your Automated Pentest Looks Clean. See What It Missed in This Expert Webinar

Your Automated Pentest Looks Clean. See What It Missed in This Expert Webinar

June 10, 2026
ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances

ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances

June 10, 2026
Anthropic Releases Claude Fable 5, Its Most Powerful AI Yet, With Cyber Safeguards

Anthropic Releases Claude Fable 5, Its Most Powerful AI Yet, With Cyber Safeguards

June 10, 2026
Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS

Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS

June 10, 2026
Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows

Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows

June 10, 2026
Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code

Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code

June 9, 2026
Meta to Use Off-Site Business Data for Feed and AI Personalization

Meta to Use Off-Site Business Data for Feed and AI Personalization

June 9, 2026
Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues

Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues

June 9, 2026
Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models

Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models

June 9, 2026
Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild – Patch Now

Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild – Patch Now

June 9, 2026
The Hidden Security Risk in Modern Networks: The Work Between Tools

The Hidden Security Risk in Modern Networks: The Work Between Tools

June 9, 2026
WinRAR Flaw Exploited by Russia-Aligned Groups to Deploy Stealers in Ukraine

WinRAR Flaw Exploited by Russia-Aligned Groups to Deploy Stealers in Ukraine

June 9, 2026
New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing

New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing

June 9, 2026
Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer

Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer

June 9, 2026
LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE

LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE

June 9, 2026
One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public

One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public

June 8, 2026
Meta Blocks NSO Group’s New WhatsApp Phishing Attack, Files Contempt Order

Meta Blocks NSO Group’s New WhatsApp Phishing Attack, Files Contempt Order

June 8, 2026
Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups

Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups

June 8, 2026
⚡ Weekly Recap: Instagram Account Hacks, Android Zero-Day, GitHub Worm and More

⚡ Weekly Recap: Instagram Account Hacks, Android Zero-Day, GitHub Worm and More

June 8, 2026
The Hardest Fork

The Hardest Fork

June 8, 2026
AI Phishing Is Crushing SOCs with Alert Volume: How to Reduce Tier 1 Overload

AI Phishing Is Crushing SOCs with Alert Volume: How to Reduce Tier 1 Overload

June 8, 2026
VerdantBamboo Deploys BSD Variant of BRICKSTORM on Linux Appliances

VerdantBamboo Deploys BSD Variant of BRICKSTORM on Linux Appliances

June 8, 2026
VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks

VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks

June 8, 2026
UNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion Campaign

UNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion Campaign

June 8, 2026
New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration

New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration

June 6, 2026
Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AI

Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AI

June 6, 2026
CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog

CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog

June 6, 2026
Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack

Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack

June 6, 2026
AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs

AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs

June 6, 2026
Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available

Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available

June 6, 2026
IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks

IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks

June 5, 2026
Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps

Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps

June 5, 2026
New Threat Cluster OP-512 Targets Microsoft IIS Servers with Custom Web Shell Framework

New Threat Cluster OP-512 Targets Microsoft IIS Servers with Custom Web Shell Framework

June 5, 2026
Only 10% of SOCs Say They’re Getting Excellent Value From AI. Here’s What the Second Wave Has to Deliver

Only 10% of SOCs Say They’re Getting Excellent Value From AI. Here’s What the Second Wave Has to Deliver

June 5, 2026
Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites

Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites

June 5, 2026
FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Logins

FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Logins

June 5, 2026
PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network

PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network

June 5, 2026
Agentic AI Is Transforming Defense, But Only Secure IT Infrastructure Will Maximize It

Agentic AI Is Transforming Defense, But Only Secure IT Infrastructure Will Maximize It

June 4, 2026
Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public

Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public

June 4, 2026
Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories

Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories

June 4, 2026
ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories

ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories

June 4, 2026
FlutterShell Backdoor Spreads to macOS via Malicious Google and YouTube Ads

FlutterShell Backdoor Spreads to macOS via Malicious Google and YouTube Ads

June 4, 2026