Vulnerability Spotlight: Apple OS X Graphics Kernel Driver Local Privilege Escalation VulnerabilityCisco Talos·Mar 22, 21:57 UTC · Mar 22, 2016VulnerabilityCVE-2016-174335
Android Developer Verification Rollout Begins Ahead of September EnforcementThe Hacker News·Mar 31, 18:28 UTC · Mar 31, 2026Phishing & fraud30
Vertex AI Vulnerability Exposes Google Cloud Data and Private ArtifactsThe Hacker News·Mar 31, 13:09 UTC · Mar 31, 2026Vulnerability55
TA446 Deploys DarkSword iOS Exploit Kit in Targeted SpearThe Hacker News·Mar 31, 08:38 UTC · Mar 31, 2026Vulnerability142
Open VSX Bug Let Malicious VS Code Extensions Bypass PreThe Hacker News·Mar 27, 13:57 UTC · Mar 27, 2026Vulnerability30
Claude Extension Flaw Enabled Zero-Click XSS Prompt Injection via Any WebsiteThe Hacker News·Mar 26, 15:39 UTC · Mar 26, 2026AI safety & security30
Magento PolyShell Flaw Enables Unauthenticated Uploads, RCE and Account TakeoverThe Hacker News·Mar 26, 06:26 UTC · Mar 26, 2026Vulnerability in the wild60
FCC Bans New Foreign-Made Routers Over Supply Chain and Cyber Risk ConcernsThe Hacker News·Mar 25, 07:11 UTC · Mar 25, 2026Policy & legal55
Microsoft Warns IRS Phishing Hits 29,000 Users, Deploys RMM MalwareThe Hacker News·Mar 24, 04:17 UTC · Mar 24, 2026Malware30
Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026The Hacker News·Mar 21, 07:03 UTC · Mar 21, 2026Ransomware in the wildCVE-2026-2013160
Apple Warns Older iPhones Vulnerable to Coruna, DarkSword Exploit Kit AttacksThe Hacker News·Mar 20, 10:22 UTC · Mar 20, 2026Vulnerability55
9 Critical IP KVM Flaws Enable Unauthenticated Root Access Across Four VendorsThe Hacker News·Mar 18, 11:42 UTC · Mar 18, 2026VulnerabilityCVE-2026-32290CVE-2026-32291CVE-2026-32292+11 CVEs60
Google Fixes Two Chrome Zero-Days Exploited in the Wild Affecting Skia and V8The Hacker News·Mar 15, 00:00 UTC · Mar 15, 2026Exploit / PoC in the wildCVE-2026-3909CVE-2026-3910CVE-2026-244160
Android 17 Blocks Non-Accessibility Apps from Accessibility API to Prevent Malware AbuseThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2026Malware30
Storm-2561 Spreads Trojan VPN Clients via SEO Poisoning to Steal CredentialsThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2026Malware30
New "LeakyLooker" Flaws in Google Looker Studio Could Enable CrossThe Hacker News·Mar 10, 14:13 UTC · Mar 10, 2026Exploit / PoC in the wild60
Anthropic Finds 22 Firefox Vulnerabilities Using Claude Opus 4.6 AI ModelThe Hacker News·Mar 7, 11:21 UTC · Mar 7, 2026VulnerabilityCVE-2026-279647
Microsoft Reveals ClickFix Campaign Using Windows Terminal to Deploy Lumma StealerThe Hacker News·Mar 6, 06:44 UTC · Mar 6, 2026Malware30
CoffeeLoader Uses GPU-Based Armoury Packer to Evade EDR and Antivirus DetectionThe Hacker News·Mar 28, 11:57 UTC · Mar 28, 2025Malware30
EncryptHub Exploits Windows Zero-Day to Deploy Rhadamanthys and StealC MalwareThe Hacker News·Mar 28, 04:34 UTC · Mar 28, 2025Exploit / PoCCVE-2025-2663360
Hackers Repurpose RansomHub's EDRKillShifter in Medusa, BianLian, and Play AttacksThe Hacker News·Mar 28, 04:33 UTC · Mar 28, 2025Ransomware57
New Morphing Meerkat Phishing Kit Mimics 114 Brands Using Victims’ DNS Email RecordsThe Hacker News·Mar 28, 04:33 UTC · Mar 28, 2025Phishing & fraud30
APT36 Spoofs India Post Website to Infect Windows and Android Users with MalwareThe Hacker News·Mar 27, 12:31 UTC · Mar 27, 2025Malware42
New Report Explains Why CASB Solutions Fail to Address Shadow SaaS and How to Fix ItThe Hacker News·Mar 27, 11:25 UTC · Mar 27, 2025Phishing & fraud30
Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage AttacksThe Hacker News·Mar 27, 05:51 UTC · Mar 27, 2025Exploit / PoC in the wildCVE-2025-278360
Hackers Using E-Crime Tool Atlantis AIO for Credential Stuffing on 140+ PlatformsThe Hacker News·Mar 26, 08:53 UTC · Mar 26, 2025Data breach57
Hackers Use .NET MAUI to Target Indian and Chinese Users with Fake Banking, Social AppsThe Hacker News·Mar 25, 09:10 UTC · Mar 25, 2025Malware30
Microsoft Adds Inline Data Protection to Edge for Business to Block GenAI Data LeaksThe Hacker News·Mar 25, 03:08 UTC · Mar 25, 2025Ransomware60
U.S. Treasury Lifts Tornado Cash Sanctions Amid North Korea Money Laundering ProbeThe Hacker News·Mar 23, 05:15 UTC · Mar 23, 2025Policy & legal30
Watch This Webinar to Learn How to Eliminate IdentityThe Hacker News·Mar 19, 11:35 UTC · Mar 19, 2025Phishing & fraud30
ClearFake Infects 9,300 Sites, Uses Fake reCAPTCHA and Turnstile to Spread InfoThe Hacker News·Mar 19, 10:59 UTC · Mar 19, 2025VulnerabilityCVE-2017-019947
5 Identity Threat Detection & Response MustThe Hacker News·Mar 19, 10:30 UTC · Mar 19, 2025Vulnerability55
New ‘Rules File Backdoor’ Attack Lets Hackers Inject Malicious Code via AI Code EditorsThe Hacker News·Mar 18, 16:19 UTC · Mar 18, 2025Malware142
Cybercriminals Exploit CSS to Evade Spam Filters and Track Email Users' ActionsThe Hacker News·Mar 17, 11:52 UTC · Mar 17, 2025Threat actor45
New MassJacker Malware Targets Piracy Users, Hijacking Cryptocurrency TransactionsThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2025Malware30
WARNING: Expiring Root Certificate May Disable Firefox AddThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2025Data breach45
Over 400 IPs Exploiting Multiple SSRF Vulnerabilities in Coordinated Cyber AttackThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2025Vulnerability in the wildCVE-2017-0929CVE-2020-7796CVE-2021-21973+7 CVEs60
Apple Releases Patch for WebKit Zero-Day Vulnerability Exploited in Targeted AttacksThe Hacker News·Mar 12, 11:52 UTC · Mar 12, 2025Exploit / PoC in the wildCVE-2025-24201CVE-2025-24085CVE-2025-2420060
Ballista Botnet Exploits Unpatched TP-Link Vulnerability, Targets Over 6,000 DevicesThe Hacker News·Mar 12, 03:46 UTC · Mar 12, 2025Vulnerability in the wildCVE-2023-138960