The Hacker News News Headlines

01-08-26 (19:43)   Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes
01-08-26 (11:43)   Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites
01-08-26 (09:26)   Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction
01-08-26 (09:26)   Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware
31-07-26 (21:26)   Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk
31-07-26 (19:57)   HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm
31-07-26 (17:43)   Cheap Android TV Boxes Pose as Phones and Turn Owners' Broadband Into Proxies
31-07-26 (16:43)   Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined
31-07-26 (16:43)   Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw
31-07-26 (13:57)   6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026
31-07-26 (13:57)   Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks
31-07-26 (13:57)   Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations
30-07-26 (21:26)   DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware
30-07-26 (18:12)   ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories
30-07-26 (16:43)   Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database
30-07-26 (14:26)   Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents
30-07-26 (14:26)   The Network Has Become the Control Plane for AI Security
30-07-26 (12:57)   Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts
30-07-26 (12:57)   SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT
30-07-26 (09:57)   Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation
30-07-26 (09:57)   FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks
30-07-26 (08:57)   Amazon Links Debug and Chalk npm Hijack to North Korea's Sapphire Sleet
30-07-26 (07:57)   Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data
29-07-26 (20:26)   Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads
29-07-26 (17:57)   Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
29-07-26 (17:57)   Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape
29-07-26 (16:43)   Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline
29-07-26 (16:43)   Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments
29-07-26 (14:43)   Mythos Asks the Right Question. It Doesn't Answer It.
29-07-26 (14:43)   Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser
29-07-26 (14:43)   73% of Organizations Say They Are Not Fully Ready for a Major Cyberattack
29-07-26 (13:12)   Russia Charges Telegram Founder Pavel Durov With Aiding Terrorist Activity
29-07-26 (11:12)   Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass
29-07-26 (11:12)   New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands
29-07-26 (09:57)   Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates
29-07-26 (08:57)   OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach
29-07-26 (06:26)   Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js
28-07-26 (21:26)   Claude AI Just Cracked a Post-Quantum Test Scheme and Found a Faster 7-Round AES Attack
28-07-26 (17:26)   Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process
28-07-26 (17:26)   24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login
28-07-26 (15:57)   JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach
28-07-26 (15:57)   Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root
28-07-26 (14:43)   Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays
28-07-26 (12:12)   Microsoft Says New Cybersecurity AI Model Helps MDASH Score 95.95% at Half the Cost
28-07-26 (11:12)   Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In
28-07-26 (11:12)   Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit
28-07-26 (07:43)   Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw
27-07-26 (21:57)   NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework
27-07-26 (19:57)   Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption
27-07-26 (17:43)   Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw
27-07-26 (16:43)   ⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More
27-07-26 (15:43)   n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
27-07-26 (15:43)   Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update
27-07-26 (13:57)   Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware
27-07-26 (11:12)   TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments
27-07-26 (11:12)   GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption
25-07-26 (22:12)   Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable
25-07-26 (15:43)   Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available
25-07-26 (13:57)   CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking
25-07-26 (13:57)   Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE
25-07-26 (13:57)   DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts
25-07-26 (10:43)   Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git
24-07-26 (18:26)   BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery
24-07-26 (16:57)   Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller
24-07-26 (15:12)   ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
24-07-26 (15:12)   Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers
24-07-26 (13:43)   Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do
24-07-26 (12:43)   Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry
24-07-26 (12:43)   Golden Chickens Resurfaces With Four New Malware Families and Modular Implants
24-07-26 (10:57)   NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats
24-07-26 (10:57)   Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say
24-07-26 (09:12)   Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks
23-07-26 (20:43)   Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
23-07-26 (18:57)   ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories
23-07-26 (16:57)   Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files
23-07-26 (16:57)   Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge
23-07-26 (16:57)   China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks
23-07-26 (14:12)   How Synthetic Identity Fraud is Coming for Machine Identities
23-07-26 (14:12)   Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers
23-07-26 (14:12)   Google Adds Selfie Video Recovery for Users Locked Out of Their Accounts
23-07-26 (11:57)   Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs
23-07-26 (10:12)   Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access
22-07-26 (22:26)   GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier
22-07-26 (20:43)   Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs
22-07-26 (20:43)   Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data
22-07-26 (15:57)   Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication
22-07-26 (15:57)   The Fastest Path to AI Adoption Runs Through Security
22-07-26 (13:43)   Why Modern SOCs Need Multi-Layered Detections
22-07-26 (09:43)   Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA
22-07-26 (08:12)   Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library
22-07-26 (08:12)   Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents
22-07-26 (08:12)   OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark
21-07-26 (22:12)   Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs
21-07-26 (18:43)   AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code
21-07-26 (18:43)   Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities
21-07-26 (17:12)   Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC
21-07-26 (16:12)   Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access
21-07-26 (16:12)   Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities
21-07-26 (14:26)   Open-Source Android AI Agents Could Let Invisible Screen Text Run Code on Host PCs
21-07-26 (14:26)   N-day is Becoming N-Hour. Patching Faster Won't Save You.