Endigest

About
Privacy
Terms
Contact
RSS

The Hacker News Articles | Endigest

The Hacker News Articles

The Hacker News

11 min read

Security•2026-05-26

Iranian Hackers Deploy MiniFast and MiniJunk V2 via Phishing and SEO Poisoning

Iranian state-sponsored threat actor Nimbus Manticore has launched campaigns deploying new backdoors MiniFast and MiniJunk V2 targeting defense, aviation, and software sectors across multiple countries.

The Hacker News

11 min read

Security•2026-05-26

KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike

A critical vulnerability in KnowledgeDeliver LMS was exploited as a zero-day to deploy Godzilla web shell and Cobalt Strike Beacon.

The Hacker News

21 min read

Security•2026-05-25

⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

This weekly security recap covers critical vulnerabilities, supply chain attacks, and widespread security threats discovered across major software platforms and infrastructure.

The Hacker News

01 min read

Security•2026-05-25

Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

Threat actors exploit CVE-2026-26980, an SQL injection flaw in Ghost CMS, compromising 700+ sites for ClickFix attacks.

The Hacker News

11 min read

Security•2026-05-25

The Alert Firehose Finally Meets Its Match

This article explores how agentic AI transforms Network Detection and Response (NDR) from a noisy alert generator into an actionable security tool.

The Hacker News

01 min read

Security•2026-05-25

Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms

RemotePE is a memory-only RAT deployed by Lazarus Group against financial and cryptocurrency organizations.

The Hacker News

11 min read

Security•2026-05-25

TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO

TrapDoor is a coordinated cross-ecosystem software supply chain attack targeting npm, PyPI, and Crates.io with over 34 malicious packages to steal developer credentials and secrets.

The Hacker News

21 min read

Security•2026-05-23

npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

npm has introduced new security controls including staged publishing with 2FA approval and install source flags to prevent supply chain attacks.

The Hacker News

11 min read

Security•2026-05-23

Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware

A coordinated supply chain attack has infected eight Packagist packages with malicious code that downloads and executes a Linux binary from GitHub.

The Hacker News

11 min read

Security•2026-05-23

Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software

Claude Mythos Preview, a frontier AI model, has identified 10,000+ high-severity vulnerabilities in widely-used software through Project Glasswing.

The Hacker News

11 min read

Security•2026-05-23

Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer

This article covers a supply chain attack compromising 700+ versions of Laravel-Lang PHP packages with a credential stealer.

The Hacker News

11 min read

Security•2026-05-23

LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root

A maximum-severity vulnerability (CVE-2026-48172, CVSS 10.0) in LiteSpeed cPanel Plugin is being actively exploited in the wild.