Install
The Hacker News is the most trusted and popular cybersecurity publication for information security professionals seeking breaking news, actionable insights and analysis.
- 1,797articles · 365d
- 9+ min agolatest article
- Sep 14, 2025earliest in window
- 20%with images
- 353avg words
- security 1,625
- cybersecurity 1,614
- malware 1,072
- cyber security news 1,018
- vulnerability 772
- cyber security 752
- artificial intelligence 596
- technology 543
- ai 471
- network security 435
- computer security 431
- cybercrime 428
- vulnerabilities 371
- windows 332
- software 313
- data breach 291
- phishing 270
- linux 257
- microsoft 235
- cloud security 229
- science and technology 1,179
- SOF 933
- CE 923
- conflict war and peace 511
- NW 430
- SOD 377
- CRL 361
- IT 256
- cyber security news
- cyber news
- cyber security news today
- cyber security updates
- cyber updates
- hacker news
- hacking news
- software vulnerability
- cyber attacks
- data breach
- ransomware malware
- how to hack
- network security
- information security
- the hacker news
- computer security
- top cybersecurity threats
- ⚡ thn weekly recap
Please confirm you are human
This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.
A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.
News
Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks
5+ day, 18+ hour ago (360+ words) shares significant tradecraft similarities with a data extortion group that Google-owned Mandiant calls UNC6671. It also said that the data extortion threat actor known as Cinder likely represents...deploy phishing-resistant MFA, restrict the scope of data that users have access to…...
“Jingle Thief” Hackers Exploit Cloud Infrastructure to Steal Millions in Gift Cards
10+ mon, 3+ week ago (804+ words) phishing attacks to obtain credentials necessary to breach victims' cloud infrastructure. In one campaign,...legitimate users, gain unauthorized access to sensitive data, and carry out gift card fraud at scale," the...
New Research: 64% of 3rd-Party Applications Access Sensitive Data Without Justification
7+ mon, 4+ week ago (654+ words) a single vendor compromise can trigger a massive data breach by injecting code to harvest credentials or skim...over-permissioned applications are granted access to sensitive data fields they don't functionally need. This research analyzes exactly what data these third-party apps…...
⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More
5+ mon, 3+ week ago (290+ words) There are quiet state-backed activities, exposed data from open directories, growing mobile threats, and...
ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories
2+ mon, 3+ day ago (191+ words) the quiet process already has somewhere to send data. Watch the normal paths instead. Names that look...
Vercel Breach Tied to Context AI Hack Exposes Limited Customer Credentials
4+ mon, 3+ week ago (430+ words) infrastructure provider Vercel has disclosed a security breach that allows bad actors to gain unauthorized access...Context.ai to better understand the full scope of the breach. A "limited subset" of customers is said...effect. The company is continuing to…...
ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories
2+ mon, 1+ week ago (194+ words) the list with that in mind. The loud part is the breach. The useful part is the quiet mistake that made...ThreatsDay. Learn how to uncover hidden AI use, see what data it can access, map every AI action to…...
Chinese Hackers Use Anthropic's AI to Launch Automated Cyber Espionage Campaign
9+ mon, 4+ week ago (592+ words) lateral movement, and making final decisions about data exfiltration scope and retention. The system is...involving credential harvesting, lateral movement, data collection, and extraction. "By presenting...
Attackers Steal METR API Key and Consume AI Credits Worth About $600,000
1+ week, 5+ day ago (594+ words) including an unsuccessful attempt to access internal data via an inadvertently exposed endpoint." According...
LockBit, Qilin, and DragonForce Join Forces to Dominate the Ransomware Ecosystem
11+ mon, 5+ day ago (637+ words) ReliaQuest said it's tracking a total of 81 data leak sites, a significant jump from 51 reported...