Endigest

About
Privacy
Terms
Contact
RSS

The Hacker News Articles | Endigest

The Hacker News Articles

The Hacker News

21 min read

Security•2026-04-16

Hidden Passenger? How Taboola Routes Logged-In Banking Sessions to Temu

A banking security vulnerability where Taboola's approved pixel silently redirected authenticated users' sessions to Temu's tracking endpoint without authorization or detection.

The Hacker News

31 min read

Security•2026-04-16

UAC-0247 Targets Ukrainian Clinics and Government in Data-Theft Malware Campaign

CERT-UA disclosed a targeted malware campaign against Ukrainian government and healthcare institutions.

The Hacker News

21 min read

Security•2026-04-15

n8n Webhooks Abused Since October 2025 to Deliver Malware via Phishing Emails

n8n workflow automation platform has been abused by threat actors since October 2025 to deliver malware and conduct phishing campaigns.

The Hacker News

11 min read

Security•2026-04-15

Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover

CVE-2026-33032 is a critical authentication bypass vulnerability in nginx-ui that allows attackers to achieve complete Nginx service takeover through unauthenticated access to the /mcp_message endpoint.

The Hacker News

11 min read

Security•2026-04-15

April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More

This article covers critical security vulnerabilities patched in April 2026.

The Hacker News

11 min read

Security•2026-04-15

Deterministic + Agentic AI: The Architecture Exposure Validation Requires

This article discusses how to properly integrate AI into security exposure validation platforms, advocating for a hybrid deterministic-agentic approach.

The Hacker News

21 min read

Security•2026-04-15

Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities

Microsoft released patches for 169 security vulnerabilities in the largest Patch Tuesday event of the year, with one actively exploited zero-day vulnerability in SharePoint Server.

The Hacker News

21 min read

Security•2026-04-15

OpenAI Launches GPT-5.4-Cyber with Expanded Access for Security Teams

OpenAI has released GPT-5.4-Cyber, a specialized variant of GPT-5.4 optimized for defensive cybersecurity, expanding its Trusted Access for Cyber program to thousands of defenders and security teams.

The Hacker News

41 min read

Security•2026-04-14

New PHP Composer Flaws Enable Arbitrary Command Execution — Patches Released

Two high-severity security vulnerabilities in Composer, a PHP package manager, could enable arbitrary command execution through command injection flaws in the Perforce VCS driver.

The Hacker News

11 min read

Security•2026-04-14

Google Adds Rust-Based DNS Parser into Pixel 10 Modem to Enhance Security

Google integrates a Rust-based DNS parser into Pixel 10 modem firmware to enhance security by reducing memory-safety vulnerabilities.

The Hacker News

51 min read

Security•2026-04-14

AI-Driven Pushpaganda Scam Exploits Google Discover to Spread Scareware and Ad Fraud

Researchers uncover an AI-powered ad fraud campaign called Pushpaganda that exploits Google Discover to distribute scareware and financial scams through push notifications.

The Hacker News

21 min read

Security•2026-04-14

Mirax Android RAT Turns Devices into SOCKS5 Proxies, Reaching 220,000 via Meta Ads

Mirax is an Android RAT distributed via Meta ads to 220,000+ accounts, combining remote access with SOCKS5 proxy capabilities.