The Hacker News

Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems https://thehackernews.com/2026/04/anthropics-claude-mythos-finds.html

We Scanned 1 Million Exposed AI Services. Here's How Bad the Security Actually Is https://thehackernews.com/2026/05/we-scanned-1-million-exposed-ai.html

Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account https://thehackernews.com/2026/03/axios-supply-chain-attack-pushes-cross.html

Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS https://thehackernews.com/2026/04/fortinet-patches-actively-exploited-cve.html

China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware https://thehackernews.com/2026/04/china-linked-storm-1175-exploits-zero.html

Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet Campaign https://thehackernews.com/2026/04/over-1000-exposed-comfyui-instances.html

Deterministic + Agentic AI: The Architecture Exposure Validation Requires https://thehackernews.com/2026/04/deterministic-agentic-ai-architecture.html

⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and More https://thehackernews.com/2026/04/weekly-recap-axios-hack-chrome-0-day.html

Your MTTD Looks Great. Your Post-Alert Gap Doesn't https://thehackernews.com/2026/04/your-mttd-looks-great-your-post-alert.html

New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips https://thehackernews.com/2026/04/new-gpubreach-attack-enables-full-cpu.html

CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software https://thehackernews.com/2026/04/cisa-adds-6-known-exploited-flaws-in.html

Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools https://thehackernews.com/2026/04/qilin-and-warlock-ransomware-use.html

April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More https://thehackernews.com/2026/04/april-patch-tuesday-fixes-critical.html

OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident https://thehackernews.com/2026/04/openai-revokes-macos-app-certificate.html

$285 Million Drift Hack Traced to Six-Month DPRK Social Engineering Operation https://thehackernews.com/2026/04/285-million-drift-hack-traced-to-six.html

Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps https://thehackernews.com/2026/04/multi-os-cyberattacks-how-socs-close.html

[Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk https://thehackernews.com/2026/04/webinar-how-to-close-identity-gaps-in.html

Mirax Android RAT Turns Devices into SOCKS5 Proxies, Reaching 220,000 via Meta Ads https://thehackernews.com/2026/04/mirax-android-rat-turns-devices-into.html

DeepLoad Malware Uses ClickFix and WMI Persistence to Steal Browser Credentials https://thehackernews.com/2026/03/deepload-malware-uses-clickfix-and-wmi.html

108 Malicious Chrome Extensions Steal Google and Telegram Data, Affecting 20,000 Users https://thehackernews.com/2026/04/108-malicious-chrome-extensions-steal.html

CPUID Breach Distributes STX RAT via Trojanized CPU-Z and HWMonitor Downloads https://thehackernews.com/2026/04/cpuid-breach-distributes-stx-rat-via.html

JanelaRAT Malware Targets Latin American Banks with 14,739 Attacks in Brazil in 2025 https://thehackernews.com/2026/04/janelarat-malware-targets-latin.html

AI-Driven Pushpaganda Scam Exploits Google Discover to Spread Scareware and Ad Fraud https://thehackernews.com/2026/04/ai-driven-pushpaganda-scam-exploits.html

DPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South Korea https://thehackernews.com/2026/04/dprk-linked-hackers-use-github-as-c2-in.html

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants https://thehackernews.com/2026/04/36-malicious-npm-packages-exploited.html

China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing https://thehackernews.com/2026/04/china-linked-ta416-targets-european.html

Russian State-Linked APT28 Exploits SOHO Routers in Global DNS Hijacking Campaign https://thehackernews.com/2026/04/russian-state-linked-apt28-exploits.html

The Hidden Cost of Recurring Credential Incidents https://thehackernews.com/2026/04/the-hidden-cost-of-recurring-credential.html

Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations https://thehackernews.com/2026/04/iran-linked-password-spraying-campaign.html

Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed https://thehackernews.com/2026/04/flowise-ai-agent-builder-under-active.html

FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts https://thehackernews.com/2026/04/fbi-and-indonesian-police-dismantle.html

North Korea's APT37 Uses Facebook Social Engineering to Deliver RokRAT Malware https://thehackernews.com/2026/04/north-koreas-apt37-uses-facebook-social.html

ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers https://thehackernews.com/2026/04/showdoc-rce-flaw-cve-2025-0520-actively.html

New PHP Composer Flaws Enable Arbitrary Command Execution — Patches Released https://thehackernews.com/2026/04/new-php-composer-flaws-enable-arbitrary.html

How LiteLLM Turned Developer Machines Into Credential Vaults for Attackers https://thehackernews.com/2026/04/how-litellm-turned-developer-machines.html

Analysis of 216M Security Findings Shows a 4x Increase In Critical Risk (2026 Report) https://thehackernews.com/2026/04/analysis-of-216m-security-findings.html

Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access https://thehackernews.com/2026/04/docker-cve-2026-34040-lets-attackers.html

BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks https://thehackernews.com/2026/04/bka-identifies-revil-leaders-behind-130.html

⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More https://thehackernews.com/2026/04/weekly-recap-fiber-optic-spying-windows.html

Google Adds Rust-Based DNS Parser into Pixel 10 Modem to Enhance Security https://thehackernews.com/2026/04/google-adds-rust-based-dns-parser-into.html

Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover https://thehackernews.com/2026/04/critical-nginx-ui-vulnerability-cve.html

OpenAI Launches GPT-5.4-Cyber with Expanded Access for Security Teams https://thehackernews.com/2026/04/openai-launches-gpt-54-cyber-with.html

Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servers https://thehackernews.com/2026/04/microsoft-details-cookie-controlled-php.html

Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities https://thehackernews.com/2026/04/microsoft-issues-patches-for-sharepoint.html