The Hacker News
NEWS · ALERTS · RESEARCH
Threat intelligence
Industry reporting, official advisories and security research, collected in one place. Headlines link to the original publisher.
219 sourced updates · Publication dates or labeled coverage weeks shown · Read full coverage at the source
The Hacker News
Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers ↗
Industry newsThe Hacker News
One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude ↗
Industry newsSecurityWeek
Virtual Event Today: Attack Surface Management Summit ↗
Industry newsThe Hacker News
Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories ↗
Industry newsThe Hacker News
Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix ↗
Industry newsSecurityWeek
Pixel Modem Zero-Day Exploited in Targeted Attacks ↗
Industry newsSecurityWeek
US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware ↗
Industry newsCISA Cybersecurity Advisories
CISA Adds One Known Exploited Vulnerability to Catalog ↗
Agency · CISACISA Cybersecurity Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog ↗
Agency · CISACISA Cybersecurity Advisories
Using Cyber Decoys to Strengthen Detection and Response ↗
Agency · CISAThe Hacker News
N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security ↗
Industry newsThe Hacker News
Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation ↗
Industry newsThe Hacker News
Threat Intelligence Alone Won't Close the Exploitation Gap ↗
Industry newsThe Hacker News
Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks ↗
Industry newsSecurityWeek
Acronis Patches Exploited Vulnerability in cPanel Backup Plugin ↗
Industry newsSecurityWeek
Enterprises Warned of Attacks Exploiting WSO2 Vulnerability ↗
Industry newsThe Hacker News
Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells ↗
Industry newsThe Hacker News
Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens ↗
Industry newsThe Hacker News
KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens ↗
Industry newsThe Hacker News
Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists ↗
Industry newsThe Hacker News
BambooToken Malware Uses MQTT to Control Windows and Linux Systems ↗
Industry newsFBI / IC3 Industry Alerts
Iranian Cyber Targeting of Dissidents, Activists and Journalists ↗
Agency · FBIFBI / IC3 Industry Alerts
Update on Government of Iran Cyber Actors' Deployment of Telegram C2 to Push Malware to Identified Targets ↗
Agency · FBISecurityWeek
Thai Broadband Provider Hacked via Fortinet Vulnerability ↗
Industry newsSecurityWeek
OpenAI Investigates Report Linking AI Agents to RubyGems Attack ↗
Industry newsCISA Cybersecurity Advisories
Siemens Reyrolle 7SR5 ↗
Agency · CISACISA Cybersecurity Advisories
CareCam CM2507 ↗
Agency · CISACISA Cybersecurity Advisories
Protecting Tokens and Assertions from Forgery, Theft, and Misuse: Implementation Recommendations for Agencies and Cloud Service Providers ↗
Agency · CISACISA Cybersecurity Advisories