Russian state-backed attackers are using email to carry out a zero-click phishing campaign. Here’s the need-to-know ...

A critical vulnerability in the Node.js sandboxing library, isolated-vm, has exposed a serious risk to AI agents, automation ...

A critical isolated-vm flaw lets untrusted JavaScript escape the V8 sandbox and potentially hijack the host process.

A weekly look at exploited flaws, exposed systems, supply-chain attacks, browser abuse, malware campaigns, and the security risks that mattered most.

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Coldcard firmware flaw led to the theft of at least $38 million in bitcoin, one of the biggest failures of Bitcoin self-custody to date. Security experts say the hack highlights growing operational ...

Security researchers at Searchlight Cyber have used OpenAI’s GPT5.6 Sol Ultra to successfully develop a full exploit chain for two critical WordPress Core vulnerabilities. The first vulnerability, ...

A working exploit for a Linux kernel flaw that has existed since 2011 is now publicly available, and any logged-in user can run it to gain full root control of an affected machine in roughly five ...

A publicly documented exploit now shows any local user on an unpatched Linux system how to gain root access — and do it without leaving a single line in the kernel log or on-disk evidence for ...

Researchers at Paradigm Shift have published the technical details of usbliter8, a new unpatchable iPhone BootROM vulnerability that enables arbitrary code execution on devices powered by Apple’s A12 ...

Security research firm Paradigm Shift today published details of a new BootROM vulnerability affecting Apple's A12 and A13 chips, along with a working proof-of-concept exploit named "usbliter8." The ...