The Hacker News News Headlines

06-11-26 (17:57)   Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time
06-11-26 (17:57)   Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot
06-11-26 (17:57)   OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits
06-11-26 (13:57)   Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It
06-11-26 (13:57)   Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers
06-11-26 (12:43)   The Flood is Coming And The Pipes Were Already Full
06-11-26 (09:43)   Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services
06-11-26 (08:12)   Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs
06-11-26 (08:12)   Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login
05-11-26 (22:43)   OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux
05-11-26 (22:43)   Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction
05-11-26 (16:26)   ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories
05-11-26 (14:43)   Is Your Exposure Management Platform Leaving You Exposed? Five Tests to Find Out
05-11-26 (11:57)   5 Active Cyber Threats That Put US Enterprises at Risk in October 2026
05-11-26 (10:43)   Apple to Start Scanning Publicly Shared iCloud Photos and Files for Harmful Content
05-11-26 (10:43)   CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access
05-11-26 (09:26)   Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution
05-11-26 (07:12)   Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
05-11-26 (06:12)   OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run
04-11-26 (18:26)   Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
04-11-26 (18:26)   SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
04-11-26 (18:26)   Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit
04-11-26 (15:43)   APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
04-11-26 (13:26)   Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
04-11-26 (13:26)   Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory
04-11-26 (13:26)   Radio With No Radar: Why Agent Runtime Security Fails Without the Layers Beneath It
04-11-26 (13:26)   China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor
04-11-26 (10:12)   Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure
04-11-26 (10:12)   Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction
04-11-26 (08:26)   CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
03-11-26 (19:57)   mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity
03-11-26 (19:57)   Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes
03-11-26 (18:26)   Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft
03-11-26 (18:26)   Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access
03-11-26 (16:57)   Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges
03-11-26 (16:57)   cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes
03-11-26 (13:57)   Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing
03-11-26 (13:57)   The 4 Elements of Exposure Prioritization and How to Operationalize Them
03-11-26 (13:57)   Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware
03-11-26 (10:26)   Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets
03-11-26 (08:57)   Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
03-11-26 (08:57)   New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull Food
03-11-26 (06:43)   Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors
03-11-26 (06:43)   Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials
02-11-26 (19:43)   ⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
02-11-26 (17:43)   Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access
02-11-26 (15:57)   DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment
02-11-26 (14:26)   Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers
02-11-26 (14:26)   Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy
02-11-26 (12:43)   Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
02-11-26 (12:43)   Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts
02-11-26 (07:12)   New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
01-11-26 (10:43)   CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
01-11-26 (08:57)   Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script
01-11-26 (08:57)   NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection
01-11-26 (08:57)   FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist
31-10-26 (13:26)   Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
31-10-26 (10:26)   Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
31-10-26 (06:57)   A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
31-10-26 (06:57)   Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
30-10-26 (19:12)   Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
30-10-26 (17:43)   TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them
30-10-26 (17:43)   WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
30-10-26 (13:43)   Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis
30-10-26 (13:43)   Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them Moving
30-10-26 (13:43)   Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison
30-10-26 (13:43)   Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor
30-10-26 (09:57)   Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
30-10-26 (08:57)   CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
30-10-26 (06:26)   Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
29-10-26 (21:12)   ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
29-10-26 (17:57)   Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
29-10-26 (16:57)   Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners
29-10-26 (15:12)   Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities
29-10-26 (13:26)   Webinar: How to Build AI Threat Readiness Into Your Security Operations
29-10-26 (13:26)   Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls
29-10-26 (13:26)   The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers
29-10-26 (13:26)   26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories
29-10-26 (12:12)   Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls
29-10-26 (12:12)   GitHub Launches npm Firewall to Block Malicious Packages Before Installation
29-10-26 (12:12)   Attacker Tried to Exploit Alpine Linux's GitLab via CVSS 10.0 Flaw Its Ruby Left Open
29-10-26 (09:57)   Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys
29-10-26 (07:57)   China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
29-10-26 (07:57)   Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces
28-10-26 (19:57)   Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
28-10-26 (18:57)   Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.
28-10-26 (18:57)   Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
28-10-26 (17:26)   PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
28-10-26 (15:26)   Wazuh and AI for Enhanced SOC Workflows
28-10-26 (15:12)   Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch
28-10-26 (15:12)   Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
28-10-26 (12:26)   Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass
28-10-26 (12:26)   American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed
28-10-26 (09:43)   Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
28-10-26 (09:43)   FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering
28-10-26 (08:26)   Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach
28-10-26 (08:26)   Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
28-10-26 (08:26)   ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
28-10-26 (08:26)   Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
27-10-26 (19:57)   CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets