Get all your news in one place.

100's of premium titles.
One app.

Get all your news in one place.

100's of premium titles. One news app.

The Latest Breaking News from The Hacker News

'Each vulnerability exposes a different class of enterprise data': LangChain framework hit by several worrying security issues — here's what we know

LangChain and LangGraph have patched three high-severity and critical bugs.

As if LinkedIn messages couldn't get any worse, hackers are using them to install malware on people's PCs

As if LinkedIn messages couldn't get any worse, hackers are using them to install malware on people's PCs

The good news is that not clicking on unknown links avoids it entirely.

Google patches worrying Chrome zero-day flaw being exploited in the wild - here's how to stay safe

Google patches worrying Chrome zero-day flaw being exploited in the wild - here's how to stay safe

A bug in Google Chrome V8 allowed for arbitrary code execution, and is being actively exploited.

From analysis to the latest developments in health,
read the most diverse news in one place.

inkl

AkiraBot network hits thousands of sites with CAPTCHA bypassing AI spam

Tens of thousands of websites were served spam messages in chat, comment sections, and more.

Microsoft patches three worrying security flaws in its latest critical update, so update now

This month's Patch Tuesday is a big one, as Microsoft fixes three flaws being actively abused.

Thousands of servers potentially at risk from Prometheus security flaw

The Prometheus toolkit has flaws that can be abused for data leaks, DoS attacks, and more.

Cisco warns a decade-old vulnerability is back and targeting users

Cisco bug was also added to CISA's KEV.

inkl

Read news from The Economist, FT, and more,
with one subscription

Javascript files loaded with RATs hits thousands of victims

Javascript files loaded with RATs hits thousands of victims

Hackers are targeting Russians with infostealers deployed via weaponized JavaScript.

Veeam vulnerability exploited to deploy malware via compromised VPN credentials

Veeam vulnerability exploited to deploy malware via compromised VPN credentials

Hackers spotetd deploying Fog and Akira ransomware on at least four occasions.

Critical Ivanti Cloud Service Appliance flaw exploited in the wild

Critical Ivanti Cloud Service Appliance flaw exploited in the wild

A patch is available and should be applied immediately.

Critical ARM vulnerability that could have allowed RCE patched by SolarWinds

Critical ARM vulnerability that could have allowed RCE patched by SolarWinds

The company addressed a deserialization of untrusted data flaw in the latest patch to ARM.

MacOS users of some of the biggest chat apps around are being hit with new malware scam

MacOS users of some of the biggest chat apps around are being hit with new malware scam

Hackers repurpose an old Windows backdoor for macOS to target chat app users.

Urgent Microsoft Windows security warning for millions — 10 critical zero-days found

Urgent Microsoft Windows security warning for millions — 10 critical zero-days found

Microsoft has released a number of fixes as part of its latest round of Patch Tuesday updates to address these Windows security flaws.

AWS patches worrying security flaw that could have led to AWS Apache Airflow hijacking

AWS patches worrying security flaw that could have led to AWS Apache Airflow hijacking

Managed Workflows for Apache Airflow were susceptible to XSS attacks, researchers claim.

Get all your
news in one place.

100's of premium titles.
One news app.

Russian hacker group exploits Microsoft Windows feature in worldwide phishing attack

APT28 is back, impersonating NGOs from all over the world to deploy infostealers and other malware.

This WordPress plugin vulnerability has put millions of websites at risk

A WordPress plugin was found allowing attackers to elevate privileges, but the hole was quickly plugged.

A Google Kubernetes security flaw could let anyone with a Gmail account compromise your business

There was a misconception in how system:authenticated works, but Google has since addressed it.

SEC rules companies now have to report breaches within 4 days

Goal of SEC move is to protect investors, but some believe hackers could use the disclosures to cause even more problems.

Get all your
news in one place.

100's of premium titles.
One news app.

The US State Department told Microsoft that emails in its cloud were hacked last month

Microsoft was tipped off by the DOS on Storm-0558's campaign of data extraction.

These are the most dangerous software security flaws of the year - are you at risk?

MITRE has released its annual list of the biggest software flaws, with the top of the list remaining unchanged.

1

People

From analysis to the latest developments in health,
read the most diverse news in one place.

inkl

Organisations

BleepingComputer

The US State Department

inkl

Read news from The Economist, FT, and more,
with one subscription

Topics

Places

372,195 stories

Fourteen days free

Download the app

One app. One membership.
100+ trusted global sources.

Download on the AppStore

Get it on Google Play