The Hacker News

Articles by The Hacker News

Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA - The Hacker News

Technology July 23, 2026

German and US law enforcement have taken down the core infrastructure of Kratos, described by German investigators as one of the world's most widely used criminal phishing kits, and Indonesian authorοΏ½...

OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark - The Hacker News

Business July 23, 2026

OpenAI on Tuesday said a combination of its artificial intelligence (AI) models, including GPT-5.6 Sol and an "even more capable pre-release model," was behind the security incident that targeted HugοΏ½...

Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC - The Hacker News

Technology July 22, 2026

A third SharePoint Server flaw patched by Microsoft as part of its Patch Tuesday update for July 2026 has come under active exploitation, per watchTowr. The vulnerability in question is CVE-2026-505οΏ½...

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution - The Hacker News

Technology July 21, 2026

F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patchedοΏ½...

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code - The Hacker News

Technology July 19, 2026

An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable. Every 6.9 and 7.0 site was in range until Friday, when WordPress sοΏ½...

Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack - The Hacker News

Technology July 15, 2026

Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attackers are already exploiting. The release covers 622 of Microsoft's own CVEs by itsΒ Security Upd...

Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS - The Hacker News

Technology July 10, 2026

Ubiquiti has shipped updates to address multiple critical security flaws impacting UniFi Connect, UniFi Talk, UniFi Access, UniFi Protect, and UniFi OS that could result in privilege escalation and aοΏ½...

New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android - The Hacker News

Technology July 5, 2026

A newly disclosed Linux kernel flaw called Bad Epoll (CVE-2026-46242) lets an ordinary user with no special access take full control of a machine as root. It affects Linux desktops, servers, and AndrοΏ½...

Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain - The Hacker News

Technology June 21, 2026

Security researchers atΒ Paradigm ShiftΒ have published a working exploit, dubbedΒ usbliter8, that achieves arbitrary code execution inside the SecureROM of Apple's A12 and A13 chips. That code is bu...

OpenAI Launches Daybreak for AI-Powered Vulnerability Detection and Patch Validation - The Hacker News

Business May 13, 2026

OpenAI has launched Daybreak, a new cybersecurity initiative that brings together frontier artificial intelligence (AI) model capabilities and Codex Security to help organizations identify and patch οΏ½...