A new Mirai-based modular Linux botnet malware called Evooo1Bot has been targeting internet-facing gateway devices, turning ...

A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create ...

BdThemes' compromised JSON feed exploits XSS in seven WordPress plugins, creating rogue admins and installing a PHP web shell without plugin updates.

Researchers have uncovered Mac malware that can steal credentials and drain all or a selected percentage of a cryptocurrency ...

Steam gamers are being targeted by fake troubleshooting fixes that secretly install XMRig crypto miners through PowerShell commands and hijack PC resources.

ServiceNow CVE-2026-6875, a critical unauthenticated RCE in the AI Platform, is under active exploitation. Threat intelligence firm Defused confirmed a second sandbox-escape gadget chain that bypasses ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

In a new disclosure, OpenAI says its agent used exposed logins to gain access to at least four “publicly available services” in its unhinged quest to solve a test.

The OpenAI Hugging Face breach was already alarming. Then at Black Hat, researchers revealed the agents had organized, shared ...

Though the FBI identified a suspect who confessed to investigators, state and federal prosecutors declined to bring charges ...

Jewelbug, a China-linked hack-for-hire group, breached 15 government ministries at once by inserting one script into a shared ...

Forescout discovered 15 TP-Link Omada vulnerabilities, including flaws that can be chained to compromise entire fleets of ...