All News
The Hacker News
The Hacker News
July 31, 2025
Secret Blizzard Deploys Malware in ISP-Level AitM Attacks on Moscow Embassies
Russian APT Secret Blizzard uses ISP-level AitM attacks to deploy ApolloShadow malware on embassy devices in Moscow.
The Hacker News
July 31, 2025
Experts Detect Multi-Layer Redirect Tactic Used to Steal Microsoft 365 Login Credentials
Threat actors abuse Proofpoint and Intermedia link wrapping to deliver phishing emails and steal Microsoft 365 credentials.
The Hacker News
July 31, 2025
N. Korean Hackers Used Job Lures, Cloud Account Access, and Malware to Steal Millions in Crypto
UNC4899 used job lures and cloud exploits to breach two firms, steal crypto, and embed malware in open source.
The Hacker News
July 31, 2025
AI-Driven Trends in Endpoint Security: What the 2025 Gartner® Magic Quadrant™ Reveals
SentinelOne boosts enterprise cyber defense with AI-powered endpoint security, cutting response time and risk across industries.
The Hacker News
July 31, 2025
UNC2891 Breaches ATM Network via 4G Raspberry Pi, Tries CAKETAP Rootkit for Fraud
UNC2891 used a 4G Raspberry Pi and Linux rootkits to breach ATM networks, exposing flaws in banking infrastructure.
The Hacker News
July 31, 2025
Alert Fatigue, Data Overload, and the Fall of Traditional SIEMs
SOCs face alert overload and rising costs as SIEMs struggle with cloud complexity and false positives.
The Hacker News
July 31, 2025
Hackers Exploit Critical WordPress Theme Flaw to Hijack Sites via Remote Plugin Install
Critical WordPress flaw CVE-2025-5394 lets attackers take over sites using the "Alone" theme. 120K+ attempts blocked.
The Hacker News
July 30, 2025
Hackers Use Facebook Ads to Spread JSCEAL Malware via Fake Cryptocurrency Trading Apps
Malware campaign using Facebook ads and fake crypto apps delivers JSCEAL, targeting credentials and wallets.
The Hacker News
July 30, 2025
FunkSec Ransomware Decryptor Released Free to Public After Group Goes Dormant
Decryptor for FunkSec ransomware released as group goes dormant; 172 victims affected across 3 sectors.
The Hacker News
July 30, 2025
Critical Dahua Camera Flaws Enable Remote Hijack via ONVIF and File Upload Exploits
Critical RCE flaws in Dahua smart cameras affect 9 models; threat enables device hijack over LAN/Internet.
The Hacker News
July 30, 2025
Chinese Firms Linked to Silk Typhoon Filed 15+ Patents for Cyber Espionage Tools
China-linked firms behind Silk Typhoon filed patents for cyber tools, revealing links to MSS and offensive hacking ops.
The Hacker News
July 30, 2025
Product Walkthrough: A Look Inside Pillar's AI Security Platform
Pillar Security unveils full-lifecycle AI platform securing assets from design to runtime—critical for safe AI deployment.
The Hacker News
July 30, 2025
Apple Patches Safari Vulnerability Also Exploited as Zero-Day in Google Chrome
Apple and Google fix CVE-2025-6558, a zero-day bug in Chrome and Safari risking browser security.
The Hacker News
July 30, 2025
Google Launches DBSC Open Beta in Chrome and Enhances Patch Transparency via Project Zero
Google unveils DBSC in Chrome and new Project Zero disclosure rules to boost account and patch security.
The Hacker News
July 30, 2025
Hackers Exploit SAP Vulnerability to Breach Linux Systems and Deploy Auto-Color Malware
SAP flaw CVE-2025-31324 exploited to deploy Auto-Color malware at U.S. chemicals firm; Linux systems targeted.
The Hacker News
July 30, 2025
Scattered Spider Hacker Arrests Halt Attacks, But Copycat Threats Sustain Security Pressure
Recent arrests slowed Scattered Spider, giving businesses a chance to study tactics and boost defenses.
The Hacker News
July 29, 2025
Wiz Uncovers Critical Access Bypass Flaw in AI-Powered Vibe Coding Platform Base44
Wiz found a critical Base44 flaw letting attackers access private apps via public app_id. Fixed by Wix.
The Hacker News
July 29, 2025
PyPI Warns of Ongoing Phishing Campaign Using Fake Verification Emails and Lookalike Domain
Phishing emails mimicking PyPI target developers to steal credentials via fake sites. Users urged to stay alert.
The Hacker News
July 29, 2025
Chaos RaaS Emerges After BlackSuit Takedown, Demanding $300K from U.S. Victims
Chaos ransomware rises after BlackSuit takedown, hitting U.S. targets with $300K demands and stealthy evasion tactics.
The Hacker News
July 29, 2025
How the Browser Became the Main Cyber Battleground
Browser-based identity attacks surge in 2025, targeting SaaS apps and weak credentials across enterprise accounts.
The Hacker News
July 29, 2025
Cybercriminals Use Fake Apps to Steal Data and Blackmail Users Across Asia’s Mobile Networks
A massive mobile malware campaign targets Android and iOS users in Asia, stealing personal data through fake apps.
The Hacker News
July 29, 2025
Why React Didn't Kill XSS: The New JavaScript Injection Playbook
JavaScript injection attacks surged in 2024, hitting major brands via Polyfill.io. Learn why frameworks failed.
The Hacker News
July 29, 2025
CISA Adds PaperCut NG/MF CSRF Vulnerability to KEV Catalog Amid Active Exploitation
A CSRF flaw in PaperCut NG/MF is under active attack; CISA mandates patching for federal systems.
The Hacker News
July 28, 2025
Hackers Breach Toptal GitHub, Publish 10 Malicious npm Packages With 5,000 Downloads
Hackers breached Toptal’s GitHub to publish npm malware, risking dev systems and cloud data integrity.
The Hacker News
July 28, 2025
⚡ Weekly Recap — SharePoint Breach, Spyware, IoT Hijacks, DPRK Fraud, Crypto Drains and More
From insider arrests to AI-powered fraud, here’s what mattered in cyber this week—no fluff, just the signal.
The Hacker News
July 28, 2025
Email Security Is Stuck in the Antivirus Era: Why It Needs a Modern Approach
Legacy email filters miss post-delivery threats in Microsoft 365 and Google Workspace, exposing data. Here's how EDR-style tools change the...
The Hacker News
July 28, 2025
Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure
Scattered Spider targets VMware ESXi in fast, stealthy ransomware attacks across U.S. retail and airline sectors.
The Hacker News
July 28, 2025
EDR Detects, EPM Prevents. Why Using Both is a Winning Formula for Modern Endpoint Protection
EPM and EDR together protect endpoints by closing identity-based gaps that malware-free attackers exploit.
The Hacker News
July 28, 2025
Critical Flaws in Niagara Framework Threaten Smart Buildings and Industrial Systems Worldwide
Tridium Niagara flaws expose critical infrastructure to takeover if misconfigured, affecting security and system uptime.
The Hacker News
July 25, 2025
U.S. Sanctions Firm Behind N. Korean IT Scheme; Arizona Woman Jailed for Running Laptop Farm
U.S. sanctions North Korean front company, 3 individuals for $17M IT worker fraud funding WMDs.
The Hacker News
July 25, 2025
Patchwork Targets Turkish Defense Firms with Spear-Phishing Using Malicious LNK Files
Patchwork targets Turkish defense firms with LNK phishing to steal UAV, missile data amid geopolitical tension.
The Hacker News
July 25, 2025
Cyber Espionage Campaign Hits Russian Aerospace Sector Using EAGLET Backdoor
Russian defense firms hit by cyberattacks using EAGLET malware via phishing lures; threat actors linked to Head Mare and Hive0156.
The Hacker News
July 25, 2025
Soco404 and Koske Malware Target Cloud Services with Cross-Platform Cryptomining Attacks
Two malware campaigns, Soco404 and Koske, target cloud services with cryptominers via images and misconfigurations.
The Hacker News
July 25, 2025
Overcoming Risks from Chinese GenAI Tool Usage
China-based GenAI tools used by 1,059 employees exposed sensitive enterprise data, raising global compliance concerns.
The Hacker News
July 24, 2025
Critical Mitel Flaw Lets Hackers Bypass Login, Gain Full Access to MiVoice MX-ONE Systems
Mitel fixes critical MiVoice and MiCollab flaws that allow account access and SQL attacks. Users must update to avoid system compromise.
The Hacker News
July 24, 2025
Fire Ant Exploits VMware Flaws to Compromise ESXi Hosts and vCenter Environments
Fire Ant exploited VMware flaws to breach ESXi and vCenter, targeting isolated systems for persistent access.
The Hacker News
July 24, 2025
CastleLoader Malware Infects 469 Devices Using Fake GitHub Repos and ClickFix Phishing
CastleLoader malware infected 469 devices via ClickFix, GitHub, and phishing since May 2025. Malware delivery is evolving fast.
The Hacker News
July 24, 2025
Sophos and SonicWall Patch Critical RCE Flaws Affecting Firewalls and SMA 100 Devices
Sophos and SonicWall patched critical RCE flaws in firewall and SMA 100 products affecting select users.
The Hacker News
July 24, 2025
Watch This Webinar to Uncover Hidden Flaws in Login, AI, and Digital Trust
Discover 2025's top identity trends from Auth0. Learn how AI reshapes logins, trust, and security.
The Hacker News
July 24, 2025
Pentests once a year? Nope. It’s time to build an offensive SOC
Continuous validation with Picus helped cut vulnerabilities by 50%, boosting security teams’ speed and effectiveness.
The Hacker News
July 24, 2025
China-Based APTs Deploy Fake Dalai Lama Apps to Spy on Tibetan Community
Chinese hackers used fake Dalai Lama birthday apps to spy on Tibetans, risking community privacy and safety.
The Hacker News
July 24, 2025
Storm-2603 Exploits SharePoint Flaws to Deploy Warlock Ransomware on Unpatched Systems
Storm-2603 exploits SharePoint flaws to deploy Warlock ransomware, affecting 400+ victims. Microsoft urges mitigation.
The Hacker News
July 24, 2025
Europol Arrests XSS Forum Admin in Kyiv After 12-Year Run Operating Cybercrime Marketplace
XSS.is admin arrested in Kyiv after years enabling cybercrime; Europol disrupts major forum of 50K users.
The Hacker News
July 24, 2025
Hackers Deploy Stealth Backdoor in WordPress Mu-Plugins to Maintain Admin Access
Malware hidden in WordPress mu-plugins grants attackers full access and admin control, putting websites and users at serious risk.
The Hacker News
July 23, 2025
Threat Actor Mimo Targets Magento and Docker to Deploy Crypto Miners and Proxyware
Mimo exploits Craft, Magento, and Docker systems with crypto miners and proxyware to maximize profit.
The Hacker News
July 23, 2025
New Coyote Malware Variant Exploits Windows UI Automation to Steal Banking Credentials
Coyote malware uses Windows UI Automation to target 75 banks and crypto sites in Brazil, risking credential theft.
The Hacker News
July 23, 2025
Kerberoasting Detections: A New Approach to a Decade-Old Challenge
New BeyondTrust research shows statistical models outperform heuristics in detecting Kerberoasting attacks. Better accuracy, fewer false pos...
The Hacker News
July 23, 2025
Google Launches OSS Rebuild to Expose Malicious Code in Widely Used Open-Source Packages
Google’s OSS Rebuild checks package builds to stop supply chain attacks in Python, npm, and Rust.
The Hacker News
July 23, 2025
CISA Orders Urgent Patching After Chinese Hackers Exploit SharePoint Flaws in Live Attacks
CISA flags Microsoft SharePoint flaws under active attack by Chinese hackers. U.S. agencies must patch by July 23
The Hacker News
July 23, 2025