Telegram channel "The Hacker News"

The Hacker News

Public

Attentions : It important to do your own research before placing your trust in any information, particularly if there's a request for money involved.

Can't Join? @thehackernews

154.1k Members

Updated: March 11, 2026 at 3:44 AM

The Hacker News

⭐ Official THN Telegram Channel — A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking. 📨 Contact: [email protected] 🌐 Website: https://thehackernews.com

Follow @thehackernews to stay updated with the latest trusted and independent trends and news

Ranking

Global Ranking

#7505No change

Language Ranking

#1553No change

Category Ranking

#84No change

Participant Growth (Last 30 Days)

Total: 154.1K

24h growth: -905 1%

Latest Posts

The Hacker News

Mar 11, 2026, 01:21 AM

📷 Photo

🚨 North Korea’s UNC4899 breached a crypto firm via AirDrop from a develop’s device.

A poisoned archive ran a fake Kubernetes CLI, opened a backdoor, pivoted into Google Cloud, exposed CI/CD tokens & reset accounts to steal millions.

🔗 Read → https://thehackernews.com/2026/03/unc4899-used-airdrop-file-transfer-and.html

7,020

The Hacker News

Mar 11, 2026, 01:21 AM

📷 Photo

Latest edition of Cybersecurity recap worth reading:

🌐 PhaaS network dismantled
📱 Qualcomm 0-day exploited
🔗 iOS hit with 23-exploit chain
📡 Wi-Fi isolation bypassed
🤖 AI writes malware
🕵️ Iran targets US banks
🏴‍☠️ Phobos operator pleads guilty
🔓 WP plugin drops rogue admins
🦊 AI finds 22 Firefox vulns
☁️ AzCopy abused for exfiltration
🔑 1M+ private keys leaked
🧠 MuddyWater upgrades toolkit
📋 ClickFix drops ransomware
💀 LeakBase taken down
🪤 MCP server backdoored
📲 Fake Google page drops RAT
💸 Ransomware payments drop 8%
🌍 90 zero-days tracked in 2025

🔗 Full RECAP → https://thehackernews.com/2026/03/weekly-recap-qualcomm-0-day-ios-exploit.html

6,460

The Hacker News

Mar 11, 2026, 01:21 AM

📷 Photo

Supply-chain pressure is pushing mid-market firms to meet enterprise security standards. Partners now expect proof of resilience.

A Bitdefender webinar explains how security platform consolidation helps lean IT teams cut complexity and show stronger security posture.

🔗 GravityZone platform approach → https://thehackernews.com/2026/03/can-security-platform-finally-deliver.html

6,340

The Hacker News

Mar 11, 2026, 01:21 AM

📷 Photo

🛑 Two Chrome extensions turned malicious after an ownership transfer.

Researchers say QuickLens (7,000 users) now strips security headers and pulls remote code every 5 minutes. The payload executes via hidden elements, leaving no malicious code in the extension source.

🔗 Read → https://thehackernews.com/2026/03/chrome-extension-turns-malicious-after.html

7,020

The Hacker News

Mar 11, 2026, 01:21 AM

📷 Photo

🔥 OpenAI launched "Codex Security," an AI agent that finds and fixes code vulnerabilities.

In testing it scanned 1.2M commits across open-source repos, uncovering 792 critical and 10,561 high-severity flaws in projects including OpenSSH, GnuTLS, PHP, and Chromium.

🔗 Details → https://thehackernews.com/2026/03/openai-codex-security-scanned-12.html

10,100

The Hacker News

Mar 11, 2026, 01:21 AM

📷 Photo

⚠️ A newly tracked threat cluster is quietly breaching critical infrastructure across Asia.

Unit 42 says attackers exploit web servers, plant web shells, and dump credentials with tools like Mimikatz to move across networks in aviation, energy, and government sectors.

🔗 Read → https://thehackernews.com/2026/03/web-server-exploits-and-mimikatz-used.html

7,490

The Hacker News

Mar 11, 2026, 01:21 AM

📷 Photo

⚡NATO has cleared #iPhone and iPad to handle classified information.

The approval relies on built-in iOS and iPadOS security—no custom hardening or special software required.

Germany’s BSI had already cleared the devices for classified government use.

🔗 Details on NATO approval → https://thehackernews.com/2026/03/threatsday-bulletin-redis-rce-ddr5-bot.html#nato-clears-consumer-iphones-and-ipads

10,100

The Hacker News

Mar 11, 2026, 01:21 AM

📷 Photo

🔥 Anthropic says its #Claude model found 22 Firefox vulnerabilities while scanning ~6,000 C++ files with Mozilla.

14 were high-severity. Turning bugs into exploits proved harder: after hundreds of attempts, the AI succeeded only twice.

🔗 Read → https://thehackernews.com/2026/03/anthropic-finds-22-firefox.html

10,500

The Hacker News

Mar 11, 2026, 01:21 AM

📷 Photo

😮 Car tire pressure sensors may expose where you go.

Researchers found TPMS sensors broadcast unchanging IDs in unencrypted radio signals. Receivers up to 40 m away can capture them and recognize the same vehicle again.

That enables long-term tracking—no cameras, no line of sight.

🔗 How TPMS signals reveal vehicle movement → https://thehackernews.com/2026/03/threatsday-bulletin-redis-rce-ddr5-bot.html#tpms-signals-allow-covert-vehicle-tracking

9,390

The Hacker News

Mar 11, 2026, 01:21 AM

📷 Photo

⚡ Bitdefender says Pakistan-aligned Transparent Tribe (APT36) is targeting Indian government entities with AI-generated malware.

The campaign spreads polyglot implants in Nim, Zig, and Crystal and hides C2 inside Slack, Supabase, and Google Sheets.

🔗 Inside: phishing chain, malware tools, and infrastructure → https://thehackernews.com/2026/03/transparent-tribe-uses-ai-to-mass.html

10,500

The Hacker News

Mar 9, 2026, 08:46 PM

📷 Photo

Your shiny new AI agent can now:

🔗 Browse
🛠️ Execute code
☢️ Touch production systems

Agency Gap = tools + APIs + permissions = new attack surface.

Secure your agents BEFORE they get owned.

🔗 Join the webinar → https://thehacker.news/ai-agents-attack-surface

7,740

The Hacker News

Mar 9, 2026, 08:46 PM

📷 Photo

⚠️ VOID#GEIST malware delivers 3 RATs: XWorm, AsyncRAT, and Xeno RAT through a layered script chain.

Phishing emails pull a batch file from TryCloudflare, open a fake invoice PDF, then use Python to decrypt shellcode and inject it into explorer.exe via Early Bird APC.

🔗 Inside the full fileless attack chain → https://thehackernews.com/2026/03/multi-stage-voidgeist-malware.html

8,010

The Hacker News

Mar 9, 2026, 08:46 PM

📷 Photo

🚨 China-linked APT UAT-9244 has been targeting telecom networks in South America since 2024.

Cisco Talos uncovered 3 new implants across Windows, #Linux, and edge devices—used for persistence, command control, and large-scale brute-force scanning.

🔗 Inside TernDoor, PeerTime, and BruteEntry → https://thehackernews.com/2026/03/china-linked-hackers-use-terndoor.html

7,420

The Hacker News

Mar 9, 2026, 08:46 PM

📷 Photo

🛑 Iran-linked hackers quietly embedded inside multiple U. S. organizations, Broadcom researchers report.

The campaign is tied to MuddyWater, an #Iranian state group. Attackers deployed a Deno-based backdoor and tried exfiltrating data using Rclone to cloud storage.

🔗 Read → https://thehackernews.com/2026/03/iran-linked-muddywater-hackers-target.html

7,450

The Hacker News

Mar 9, 2026, 08:46 PM

📷 Photo

MSPs trying to scale cybersecurity hit the same wall: manual risk assessments that don’t scale.

AI-powered risk management automates assessments, maps compliance, and turns findings into remediation—enabling continuous security services instead of one-off fixes.

🔗 Inside: framework for scalable risk-first cybersecurity services → https://thehackernews.com/2026/03/the-msp-guide-to-using-ai-powered-risk.html

7,340

The Hacker News

Mar 9, 2026, 08:46 PM

📷 Photo

⚠️ CISA added two CVSS 9.8 flaws to its KEV list after active exploitation.

One hits Hikvision devices and can expose sensitive data. The other targets Rockwell Logix controllers and could let attackers alter system configs.

🔗 Details → https://thehackernews.com/2026/03/hikvision-and-rockwell-automation-cvss.html

Federal agencies must patch by March 26.

7,800

The Hacker News

Mar 9, 2026, 08:46 PM

📷 Photo

🛑 ClickFix has moved to Windows Terminal.

Microsoft says victims are told to open wt.exe and paste a command from fake CAPTCHA pages.

That launches PowerShell, pulls payloads, and injects Lumma Stealer into Chrome and Edge to steal saved credentials.

🔗 Read → https://thehackernews.com/2026/03/microsoft-reveals-clickfix-campaign.html

7,720

The Hacker News

Mar 9, 2026, 08:46 PM

📷 Photo

🚨 DDR5 bot scalping, Telegram cybercrime hubs, and new malware campaigns.

This week’s #ThreatsDay Bulletin breaks down the biggest security threats and tactics shaping the threat landscape right now.

🔗 Read → https://thehackernews.com/2026/03/threatsday-bulletin-redis-rce-ddr5-bot.html

8,130

The Hacker News

Mar 9, 2026, 08:46 PM

📷 Photo

⚠️ Cisco confirms active exploitation of two Catalyst SD-WAN Manager flaws.

▶ CVE-2026-20122 enables arbitrary file overwrite via API credentials.
▶CVE-2026-20128 can expose data and grant DCA privileges after login.

🔗 Read → https://thehackernews.com/2026/03/cisco-confirms-active-exploitation-of.html

Patches are out across multiple releases.

8,570

The Hacker News

Mar 8, 2026, 07:33 AM

📷 Photo

🛑 Suspected Iran-linked hackers targeted Iraqi officials by impersonating the foreign ministry and delivering malware.

Tracked as Dust Specter, the campaign deploys SPLITDROP, TWINTASK, TWINTALK, and GHOSTFORM via password-protected archives and DLL sideloading.

🔗 Read → https://thehackernews.com/2026/03/dust-specter-targets-iraqi-officials.html

7,070

The Hacker News

Mar 8, 2026, 07:33 AM

📷 Photo

🔥 ActiveState Launches World's Largest Secure OSS Catalog With 79M Components.

ActiveState has launched the world’s largest secure open-source catalog, uniting 79M components across 12+ languages (Java, Python, Rust, etc.). It cuts CVE exposure by 99% via SLSA-3 builds and reclaims 30% of engineering time by automating manual maintenance and governance.

🔗 Read the release: https://thn.news/open-source-catalog

6,890

The Hacker News

Mar 8, 2026, 07:33 AM

📷 Photo

🚨 Russian-linked hackers are using BadPaw and MeowMeow malware to target Ukrainian entities.

Phishing emails deliver a ZIP with an HTA lure. Code hidden in a PNG loads a . NET dropper that installs a backdoor capable of running PowerShell commands and manipulating files.

🔗 Details → https://thehackernews.com/2026/03/apt28-linked-campaign-deploys-badpaw.html

6,860

The Hacker News

Mar 8, 2026, 07:33 AM

📷 Photo

⚠️ Most encrypted web traffic relies on ECDHE, the TLS key exchange that lets browsers and servers derive a shared secret.

Quantum computers could break the elliptic-curve math behind it. The industry is moving to hybrid exchanges combining ECDHE with post-quantum ML-KEM.

🔗 Learn how hybrid key exchange protects data from future quantum attacks → https://thehackernews.com/expert-insights/2026/03/demystifying-key-exchange-from.html

6,640

The Hacker News

Mar 8, 2026, 07:33 AM

📷 Photo

Authorities have seized #LeakBase, a cybercrime forum used to trade stolen databases and infostealer logs.

Site had 142k+ members and hosted hundreds of millions of stolen credentials & financial records used for account takeovers and fraud.

🔗 Read → https://thehackernews.com/2026/03/fbi-and-europol-seize-leakbase-forum.html

7,070

The Hacker News

Mar 8, 2026, 07:33 AM

📷 Photo

⚡ Authorities dismantled Tycoon 2FA, a major phishing-as-a-service toolkit used to bypass MFA.

The platform sent tens of millions of phishing emails monthly and enabled access to nearly 100,000 organizations by stealing credentials, MFA codes, and session cookies.

🔗 Read → https://thehackernews.com/2026/03/europol-led-operation-takes-down-tycoon.html

7,050

The Hacker News

Mar 6, 2026, 08:59 PM

📷 Photo

Human-led. Rules-based. LLM-powered agentic systems. Each promises efficiency. Each has limits.

The real advantage? Knowing when, and how, to use them together.

The teams pulling ahead aren’t betting on a single model. They’re architecting a custom mix of all three.

On March 12th, join Tines for Workflow clarity: Where AI fits in modern automation. You'll learn how to harness AI with clarity and control, and determine the right combination of workflows for you.

🔗 Register and learn more here: https://thn.news/modern-automation-ai

7,380

The Hacker News

Mar 6, 2026, 08:59 PM

📷 Photo

🛑 Hacktivists launched 149 DDoS attacks targeting 110 organizations in 16 countries after the U. S.–Israel strikes on Iran, security researchers report.

Most attacks hit government systems in the Middle East, with Kuwait, Israel, and Jordan seeing the highest activity.

🔗 Read → https://thehackernews.com/2026/03/149-hacktivist-ddos-attacks-hit-110.html

7,960

The Hacker News

Mar 6, 2026, 08:59 PM

📷 Photo

🛑 ALERT: Google uncovered an #iPhone exploit kit called Coruna containing 23 iOS exploits targeting versions 13–17.2.1.

The framework fingerprints devices and automatically loads the matching WebKit exploit chain. Researchers say it moved from #surveillance vendors to nation-state operators and later cybercrime groups.

🔗 Exploit chains, campaigns, and malware payload details → https://thehackernews.com/2026/03/coruna-ios-exploit-kit-uses-23-exploits.html

7,040

The Hacker News

Mar 6, 2026, 08:59 PM

📷 Photo

⚠️ Multiple infostealers — Arkanix, NovaStealer, DarkCloud, MawaStealer and others — are active in the wild.

Researchers say Arkanix was likely built with LLM assistance, speeding malware development. Stolen logs are filtered and sold to brokers seeking corporate network access.

🔗 Read → https://thehackernews.com/2026/03/weekly-recap-sd-wan-0-day-critical-cves.html#:~:text=MultipleStealerMalwareFamiliesDetected

6,640

The Hacker News

Mar 5, 2026, 06:26 PM

📷 Photo

✅ 5-Step Readiness Checklist for Security Automation.

Security questionnaires are a critical part of security reviews, but manual processes slow teams down and increase risk.

📋 This 5-step automated security readiness checklist outlines the foundational steps GRC and information security teams need to prepare for automation that is accurate, defensible, and scalable.

Download the checklist to assess your readiness and take the first step toward more efficient security reviews

🔗 https://thn.news/automated-sec-checklist

5,780

Showing 30 of 100 posts

Loading posts...

Rating

User Reviews (0)

No reviews yet. Be the first to share your experience!

Loading reviews...

The Hacker News

Follow @thehackernews to stay updated with the latest trusted and independent trends and news

Ranking

Global Ranking

#7505No change

Language Ranking

#1553No change

Category Ranking

#84No change

Participant Growth (Last 30 Days)

Total: 154.1K

24h growth: -905 1%

Latest Posts

The Hacker News

Mar 11, 2026, 01:21 AM

📷 Photo

🚨 North Korea’s UNC4899 breached a crypto firm via AirDrop from a develop’s device.

A poisoned archive ran a fake Kubernetes CLI, opened a backdoor, pivoted into Google Cloud, exposed CI/CD tokens & reset accounts to steal millions.

🔗 Read → https://thehackernews.com/2026/03/unc4899-used-airdrop-file-transfer-and.html

7,020