Collaborate Disseminate
Cybersecurity researchers have exposed a new Mirai-derived botnet that self-identifies as xlabs_v1 and targets internet-exposed devices running Android Debug Bridge (ADB) to enlist them in a network capable of carrying out distributed denial-of-service… Continue reading Mirai-Based xlabs_v1 Botnet Exploits ADB to Hijack IoT Devices for DDoS Attacks
The Iranian state-sponsored hacking group known as MuddyWater (aka Mango Sandstorm, Seedworm, and Static Kitten) has been attributed to a ransomware attack in what has been described as a “false flag” operation.
The attack, observed by Rapid7 in early … Continue reading MuddyWater Uses Microsoft Teams to Steal Credentials in False Flag Ransomware Attack
For nearly 20 years, we at The Hacker News have mostly told scary stories about cyberspace — big hacks, broken systems, and new threats.
But behind every headline, there’s a quieter, better story.
It’s the story of leaders making tough calls under pres… Continue reading The Hacker News Launches ‘Cybersecurity Stars Awards 2026’ — Submissions Now Open
Analysts recently confirmed what identity security teams have quietly feared: AI agents are being deployed faster than enterprises can govern them. In their inaugural Market Guide for Guardian Agents, Gartner states that “enterprise adoption of AI agen… Continue reading Your AI Agents Are Already Inside the Perimeter. Do You Know What They’re Doing?
Google has announced expanded Binary Transparency for Android as a way to safeguard the ecosystem from supply chain attacks.
“This new public ledger ensures the Google apps on your device are exactly what we intended to build and distribute,” Google’s … Continue reading Google’s Android Apps Get Public Verification to Stop Supply Chain Attacks
Cybersecurity researchers have disclosed details of an intrusion that involved the use of a CloudZ remote access tool (RAT) and a previous undocumented plugin dubbed Pheno with the aim of facilitating credential theft.
“According to the functionalities… Continue reading Windows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPs
Palo Alto Networks has released an advisory warning that a critical buffer overflow vulnerability in its PAN-OS software has been exploited in the wild.
The vulnerability, tracked as CVE-2026-0300, has been described as a case of unauthenticated remote… Continue reading Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution
The Apache Software Foundation (ASF) has released security updates to address several security vulnerabilities in the HTTP Server, including a severe vulnerability that could potentially lead to remote code execution (RCE).
The vulnerability, tracked a… Continue reading Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE
A newly identified supply chain attack targeting DAEMON Tools software has compromised its installers to serve a malicious payload, according to findings from Kaspersky.
“These installers are distributed from the legitimate website of DAEMON Tools and … Continue reading DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware
A sophisticated China-nexus advanced persistent threat (APT) group has been attributed to attacks targeting government entities in South America since at least late 2024 and government agencies in southeastern Europe in 2025.
The activity is being trac… Continue reading China-Linked UAT-8302 Targets Governments Using Shared APT Malware Across Regions