The Hacker News

Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

about 7 hours ago

Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and...

A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You

about 9 hours ago

The private email address GitLab gives you for filing issues by email...

MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

about 9 hours ago

Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative...

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

about 11 hours ago

A Windows malware called CLOSEDQUORUM is built to take orders from a...

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

about 12 hours ago

Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape

about 14 hours ago

A use-after-free in the Linux kernel's AF_UNIX socket subsystem can be used...

Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests

about 14 hours ago

Anthropic and OpenAI on Tuesday announced new models, with both artificial intelligence...

545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent

about 14 hours ago

Autonomous security agents are getting good at finding bugs. Nobody has a...

New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control

about 13 hours ago

A flaw in cPanel's CalDAV and CardDAV service lets anyone with a...

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

about 17 hours ago

A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently...

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

about 17 hours ago

Attackers are exploiting a critical flaw in F5 BIG-IP Access Policy Manager...

Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input

about 18 hours ago

A new security vulnerability in Next.js could allow attackers to run code...