The Hacker News Most trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.com
- Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
en 26 de octubre de 2026An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to […]
- PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
en 26 de octubre de 2026PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages […]
- Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
en 26 de octubre de 2026Cybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in which threat actors […]
- ⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More
en 26 de octubre de 2026This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up […]
- Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes
en 26 de octubre de 2026Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox […]
- Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses
en 26 de octubre de 2026Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed. Network data, like that from a network […]
- uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts
en 26 de octubre de 2026A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi […]
- Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
en 26 de octubre de 2026Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in […]
- Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs
en 26 de octubre de 2026An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then […]
- Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
en 26 de octubre de 2026A malicious instruction file sitting in a developer's Downloads folder tried to make their AI coding agent install a known-malicious npm package, security […]
- Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
en 25 de octubre de 2026A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published […]
- PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity
en 25 de octubre de 2026In an update, Palo Alto Networks Unit 42 said it's retracting its earlier assessment that the post-compromise activity targeting the European government agency […]
- OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
en 25 de octubre de 2026OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal […]
- Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
en 24 de octubre de 2026A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, Microsoft's .NET, the […]
- Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
en 24 de octubre de 2026LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the […]
