The Hacker News

Articles by The Hacker News

Featured Chrome Browser Extension Caught Intercepting Millions of Users' AI Chats - The Hacker News

Technology December 16, 2025

A Google Chrome extension with a "Featured" badge and six million users has been observed silently gathering every prompt entered by users into artificial intelligence (AI)-powered chatbots like OpenοΏ½...

Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild - The Hacker News

Technology December 14, 2025

Apple on Friday released security updates for iOS, iPadOS, macOS, tvOS, watchOS, visionOS, and its Safari web browser to address two security flaws that it said have been exploited in the wild, one oοΏ½...

Warning: WinRAR Vulnerability CVE-2025-6218 Under Active Attack by Multiple Threat Groups - The Hacker News

Technology December 11, 2025

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a security flaw impacting the WinRAR file archiver and compression utility to its Known Exploited Vulnerabilities (KEοΏ½...

Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero-Days - The Hacker News

Technology December 11, 2025

Microsoft closed out 2025 with patches for 56 security flaws in various products across the Windows platform, including one vulnerability that has been actively exploited in the wild. Of the 56 flawοΏ½...

Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation - The Hacker News

Business December 7, 2025

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday formally added a critical security flaw impacting React Server Components (RSC) to its Known Exploited Vulnerabilities (KEV)οΏ½...

Chinese Hackers Have Started Exploiting the Newly Disclosed React2Shell Vulnerability - The Hacker News

Business December 6, 2025

Two hacking groups with ties to China have been observed weaponizing the newly disclosed security flaw in React Server Components (RSC) within hours of it becoming public knowledge. The vulnerabilitοΏ½...

CISA Reports PRC Hackers Using BRICKSTORM for Long-Term Access in U.S. Systems - The Hacker News

Business December 6, 2025

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday released details of a backdoor named BRICKSTORM that has been put to use by state-sponsored threat actors from the People'οΏ½...

Over 70 Malicious npm and VS Code Packages Found Stealing Data and Crypto - The Hacker News

Technology May 27, 2025

As many as 60 malicious npm packages have been discovered in the package registry with malicious functionality to harvest hostnames, IP addresses, DNS servers, and user directories to a Discord-contrοΏ½...