The Hacker News Most trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.com
- Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
en 6 de octubre de 2026Cybersecurity researchers have disclosed details of a "human-operated phishing platform" that impersonates advertising products for artificial intelligence […]
- Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan
en 6 de octubre de 2026Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly […]
- LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
en 6 de octubre de 2026A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researchers have shown. There […]
- Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies
en 6 de octubre de 2026The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on its platforms, including unsuccessful […]
- Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers
en 6 de octubre de 2026In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol […]
- Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports
en 6 de octubre de 2026Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in effect since October 1, […]
- Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
en 6 de octubre de 2026A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in each […]
- FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach
en 6 de octubre de 2026The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of […]
- Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account
en 6 de octubre de 2026Unauthorized parties have gained access to the names, addresses, and personal identification numbers of about 8.8 million people, living and dead, in Denmark's […]
- ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits
en 6 de octubre de 2026A new type of ClickFix attack is using compromised websites to trick users into executing a malicious payload cached in a web browser's cache. "Instead of […]
- Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
en 5 de octubre de 2026Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate […]
- ⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests
en 5 de octubre de 2026A blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramatic, which is partly the problem. This week’s threats keep […]
- The Credential Layer Is Expanding Faster Than Security Teams Can See It
en 5 de octubre de 2026Every modern enterprise depends on credentials. This is how humans, systems, and now AI, all connect to data, services, and each other securely. GitGuardian […]
- Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2
en 5 de octubre de 2026Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit (SDK) to […]
- Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access
en 5 de octubre de 2026Apple has announced that it's taking steps to tighten controls around a macOS setting called Full Disk Access (FDA) due to security risks posed by artificial […]
