The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Nation-state grade iOS exploit chains Coruna and DarkSword are proliferating among cybercriminals, with 17,000 domains hosting variants.

Legit online gambling sites in the U.S. are BetMGM, Horseshoe, bet365, FanDuel, DraftKings, Fanatics and Hard Rock Bet.

Metabase SQL injection vulnerability gave unauthenticated attackers full admin access and downstream database credentials, breaching five companies. CISA added CVSS 10.0 CVE-2026-72898 and Cisco ASA ...

The tactic disabled endpoint defenses as intended, but also accidentally broke the ransomware’s encryption process.

Security researchers have seen evidence that attackers are attempting to exploit a currently unpatched SQL injection vulnerability in GeoServer, an open-source web server for managing and publishing ...

Microsoft Threat Intelligence examines DeadLock ransomware, an emerging financially motivated operation distinguished by its ...

Quantum computing will reshape encryption, but not overnight, and a disciplined, phased approach lets organizations modernize cryptographic foundations without disruption while strengthening security ...

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

DentaQuest says a May 2026 network breach affected 15 million people, exposing Social Security numbers and dental or vision health information.

This week’s cybersecurity recap covers rogue AI behavior, an exploited Metabase zero-day, MCP supply-chain attacks, router backdoors, and more.