Endigest

About
Privacy
Terms
Contact
RSS

The Hacker News Articles | Endigest

The Hacker News Articles

The Hacker News

11 min read

Security•2026-05-23

Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

A critical SQL injection vulnerability in Drupal Core (CVE-2026-9082) has been added to CISA's Known Exploited Vulnerabilities catalog following active exploitation.

The Hacker News

31 min read

Security•2026-05-22

First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groups

An international law enforcement operation has successfully dismantled First VPN, a criminal VPN service actively used by at least 25 ransomware groups since 2014.

The Hacker News

21 min read

Security•2026-05-22

Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware

Ghostwriter threat actor is targeting Ukrainian government organizations with phishing attacks using Prometheus platform lures.

The Hacker News

01 min read

Security•2026-05-22

Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows

Megalodon campaign pushed 5,718 malicious commits to 5,561 GitHub repositories to exfiltrate secrets and credentials via infected CI/CD workflows.

The Hacker News

01 min read

Security•2026-05-22

Making Vulnerable Drivers Exploitable Without Hardware - The BYOVD Perspective

This article examines how Windows kernel drivers can be exploited without their intended hardware, particularly relevant to BYOVD attacks.

The Hacker News

11 min read

Security•2026-05-22

Kimwolf DDoS Botnet Operator Arrested in Canada Over DDoS-for-Hire Attacks

Canadian man Jacob Butler arrested for operating Kimwolf DDoS botnet, a variant of AISURU used for widespread DDoS-for-hire attacks.

The Hacker News

11 min read

Security•2026-05-22

CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV

CISA added two actively exploited security vulnerabilities to its Known Exploited Vulnerabilities catalog.

The Hacker News

21 min read

Security•2026-05-22

Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access

Cisco patched a critical Secure Workload vulnerability (CVE-2026-20223, CVSS 10.0) from insufficient REST API validation enabling unauthenticated remote data access.

The Hacker News

11 min read

Security•2026-05-21

Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoor

Showboat, a modular Linux malware targeting Middle East telecom since mid-2022, is attributed to China-linked threat actor Calypso.

The Hacker News

11 min read

Security•2026-05-21

ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories

This bulletin covers zero-day exploits, rootkits, and AI-driven intrusions.

The Hacker News

11 min read

Security•2026-05-21

Microsoft Warns of Two Actively Exploited Defender Vulnerabilities

Microsoft has disclosed two actively exploited vulnerabilities in Windows Defender that pose significant security risks.

The Hacker News

01 min read

Security•2026-05-21

When Identity is the Attack Path

Identity has become the primary attack path in security breaches through cached credentials and excessive permissions.