Kênh Telegram "The Hacker News"

The Hacker News

Public

Chú ý : Điều quan trọng là phải tự nghiên cứu trước khi tin tưởng vào bất kỳ thông tin nào, đặc biệt nếu có yêu cầu liên quan đến tiền bạc.

Không thể tham gia? @thehackernews

154.1k Thành viên

Cập nhật: March 11, 2026 at 3:44 AM

The Hacker News

⭐ Official THN Telegram Channel — A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking. 📨 Contact: [email protected] 🌐 Website: https://thehackernews.com

Follow @thehackernews to stay updated with the latest trusted and independent trends and news

Xếp hạng

Xếp hạng toàn cầu

#7505Không thay đổi

Xếp hạng ngôn ngữ

#1553Không thay đổi

Xếp hạng danh mục

#84Không thay đổi

Tăng trưởng người đăng ký (Trong 30 ngày qua)

Tổng cộng: 154.1K

Tăng trưởng 24 giờ: -905 1%

Bài đăng gần đây

The Hacker News

00:26 13 thg 3, 2026

📷 Photo

🛑 Two critical flaws in #n8n enable remote code execution.

One bug lets attackers inject shell commands via public form inputs. Another escapes the expression sandbox.

Chained together, attackers could decrypt stored credentials including API keys, tokens, and passwords.

🔗 Details → https://thehackernews.com/2026/03/critical-n8n-flaws-allow-remote-code.html

6,460

The Hacker News

00:26 13 thg 3, 2026

📷 Photo

⚠️ Security patches rolled out across 50+ vendors this cycle.

SAP fixed critical Log4j and NetWeaver flaws. Microsoft patched 84 bugs. Adobe resolved 80. HPE closed a CVSS 9.8 Aruba authentication bypass.

Cisco, GitLab, Linux distros, and many others also issued fixes.

🔗 Read → https://thehackernews.com/2026/03/dozens-of-vendors-patch-security-flaws.html

5,600

The Hacker News

00:26 13 thg 3, 2026

🎥 Video

Transform risk into opportunity!

Big news from AuditBoard - they're now Optro. A name change that signals something real — a connected view across audit, risk, and compliance that helps organizations get ahead of risk, not just respond to it. Learn why over 50% of the Fortune 500 trust Optro to transform risk into opportunity.

We are looking forward to watching the next chapter → https://thn.news/compliance-ai

5,790

The Hacker News

00:26 13 thg 3, 2026

🎥 Video

Meta disabled 150,000+ scam accounts tied to fraud compounds across Southeast Asia.

The coordinated action with authorities in 11 countries led to 21 arrests by Thai police. Meta also added scam warnings on Facebook and AI chat-review tools on Messenger and WhatsApp.

🔗 Read → https://thehackernews.com/2026/03/meta-disables-150k-accounts-linked-to.html

6,280

The Hacker News

00:26 13 thg 3, 2026

📷 Photo

⚠️ Five Rust crates on crates-io posed as time tools but secretly stole dev secrets.

They targeted .env files, siphoning API keys and tokens from developer machines and CI pipelines.

Removed now, but stolen credentials may still be active.

🔗 Read → https://thehackernews.com/2026/03/five-malicious-rust-crates-and-ai-bot.html

6,480

The Hacker News

00:26 13 thg 3, 2026

📷 Photo

🛑 Attackers turned the nx npm supply-chain compromise into full AWS admin access in under 72 hours.

Google says UNC6426 stole a developer’s GitHub token via QUIETVAULT, abused GitHub-to-AWS OIDC trust, created a new admin role, then accessed S3 data and destroyed production systems.

🔗 Read → https://thehackernews.com/2026/03/unc6426-exploits-nx-npm-supply-chain.html

6,300

The Hacker News

00:26 13 thg 3, 2026

📷 Photo

⚡ Microsoft patched 84 vulnerabilities in March Patch Tuesday, including 8 critical flaws and two publicly known zero-days in . NET and SQL Server.

Researchers say 55% are privilege-escalation bugs. Fixes also address Azure MCP token-theft risk and an Excel flaw that could enable data exfiltration.

🔗 Key CVEs and risks explained → https://thehackernews.com/2026/03/microsoft-patches-84-flaws-in-march.html

6,050

The Hacker News

00:26 13 thg 3, 2026

📷 Photo

⚠️ Most companies still carry thousands of open CVEs.

AI now automates recon, vuln discovery, and exploit development. What once looked like technical debt is quickly becoming an attack surface.

Backlogs aren’t passive risk anymore.
They’re weapons.

🔗 Why AI is changing vulnerability risk → https://thehackernews.com/2026/03/what-boards-must-demand-in-age-of-ai.html

5,700

The Hacker News

00:26 13 thg 3, 2026

📷 Photo

🛑 KadNap malware has infected 14,000+ devices since Aug 2025, mostly in the U. S.

Targets Asus routers and hides C2 using a peer-to-peer DHT network. Infected devices are sold as residential proxies through the Doppelgänger service.

🔗 Details → https://thehackernews.com/2026/03/kadnap-malware-infects-14000-edge.html

7,160

The Hacker News

00:26 13 thg 3, 2026

📷 Photo

⚠️ Attackers are abusing FortiGate firewalls as entry points.

A SentinelOne report says exploits and weak credentials let intruders extract configs holding Active Directory service account credentials, then enroll rogue machines and scan internal networks.

🔗 FortiGate breach chain and AD access details → https://thehackernews.com/2026/03/fortigate-devices-exploited-to-breach.html

7,600

The Hacker News

01:21 11 thg 3, 2026

📷 Photo

🚨 North Korea’s UNC4899 breached a crypto firm via AirDrop from a develop’s device.

A poisoned archive ran a fake Kubernetes CLI, opened a backdoor, pivoted into Google Cloud, exposed CI/CD tokens & reset accounts to steal millions.

🔗 Read → https://thehackernews.com/2026/03/unc4899-used-airdrop-file-transfer-and.html

7,020

The Hacker News

01:21 11 thg 3, 2026

📷 Photo

Latest edition of Cybersecurity recap worth reading:

🌐 PhaaS network dismantled
📱 Qualcomm 0-day exploited
🔗 iOS hit with 23-exploit chain
📡 Wi-Fi isolation bypassed
🤖 AI writes malware
🕵️ Iran targets US banks
🏴‍☠️ Phobos operator pleads guilty
🔓 WP plugin drops rogue admins
🦊 AI finds 22 Firefox vulns
☁️ AzCopy abused for exfiltration
🔑 1M+ private keys leaked
🧠 MuddyWater upgrades toolkit
📋 ClickFix drops ransomware
💀 LeakBase taken down
🪤 MCP server backdoored
📲 Fake Google page drops RAT
💸 Ransomware payments drop 8%
🌍 90 zero-days tracked in 2025

🔗 Full RECAP → https://thehackernews.com/2026/03/weekly-recap-qualcomm-0-day-ios-exploit.html

6,460

The Hacker News

01:21 11 thg 3, 2026

📷 Photo

Supply-chain pressure is pushing mid-market firms to meet enterprise security standards. Partners now expect proof of resilience.

A Bitdefender webinar explains how security platform consolidation helps lean IT teams cut complexity and show stronger security posture.

🔗 GravityZone platform approach → https://thehackernews.com/2026/03/can-security-platform-finally-deliver.html

6,340

The Hacker News

01:21 11 thg 3, 2026

📷 Photo

🛑 Two Chrome extensions turned malicious after an ownership transfer.

Researchers say QuickLens (7,000 users) now strips security headers and pulls remote code every 5 minutes. The payload executes via hidden elements, leaving no malicious code in the extension source.

🔗 Read → https://thehackernews.com/2026/03/chrome-extension-turns-malicious-after.html

7,020

The Hacker News

01:21 11 thg 3, 2026

📷 Photo

🔥 OpenAI launched "Codex Security," an AI agent that finds and fixes code vulnerabilities.

In testing it scanned 1.2M commits across open-source repos, uncovering 792 critical and 10,561 high-severity flaws in projects including OpenSSH, GnuTLS, PHP, and Chromium.

🔗 Details → https://thehackernews.com/2026/03/openai-codex-security-scanned-12.html

10,100

The Hacker News

01:21 11 thg 3, 2026

📷 Photo

⚠️ A newly tracked threat cluster is quietly breaching critical infrastructure across Asia.

Unit 42 says attackers exploit web servers, plant web shells, and dump credentials with tools like Mimikatz to move across networks in aviation, energy, and government sectors.

🔗 Read → https://thehackernews.com/2026/03/web-server-exploits-and-mimikatz-used.html

7,490

The Hacker News

01:21 11 thg 3, 2026

📷 Photo

⚡NATO has cleared #iPhone and iPad to handle classified information.

The approval relies on built-in iOS and iPadOS security—no custom hardening or special software required.

Germany’s BSI had already cleared the devices for classified government use.

🔗 Details on NATO approval → https://thehackernews.com/2026/03/threatsday-bulletin-redis-rce-ddr5-bot.html#nato-clears-consumer-iphones-and-ipads

10,100

The Hacker News

01:21 11 thg 3, 2026

📷 Photo

🔥 Anthropic says its #Claude model found 22 Firefox vulnerabilities while scanning ~6,000 C++ files with Mozilla.

14 were high-severity. Turning bugs into exploits proved harder: after hundreds of attempts, the AI succeeded only twice.

🔗 Read → https://thehackernews.com/2026/03/anthropic-finds-22-firefox.html

10,500

The Hacker News

01:21 11 thg 3, 2026

📷 Photo

😮 Car tire pressure sensors may expose where you go.

Researchers found TPMS sensors broadcast unchanging IDs in unencrypted radio signals. Receivers up to 40 m away can capture them and recognize the same vehicle again.

That enables long-term tracking—no cameras, no line of sight.

🔗 How TPMS signals reveal vehicle movement → https://thehackernews.com/2026/03/threatsday-bulletin-redis-rce-ddr5-bot.html#tpms-signals-allow-covert-vehicle-tracking

9,390

The Hacker News

01:21 11 thg 3, 2026

📷 Photo

⚡ Bitdefender says Pakistan-aligned Transparent Tribe (APT36) is targeting Indian government entities with AI-generated malware.

The campaign spreads polyglot implants in Nim, Zig, and Crystal and hides C2 inside Slack, Supabase, and Google Sheets.

🔗 Inside: phishing chain, malware tools, and infrastructure → https://thehackernews.com/2026/03/transparent-tribe-uses-ai-to-mass.html

10,500

The Hacker News

20:46 9 thg 3, 2026

📷 Photo

Your shiny new AI agent can now:

🔗 Browse
🛠️ Execute code
☢️ Touch production systems

Agency Gap = tools + APIs + permissions = new attack surface.

Secure your agents BEFORE they get owned.

🔗 Join the webinar → https://thehacker.news/ai-agents-attack-surface

7,740

The Hacker News

20:46 9 thg 3, 2026

📷 Photo

⚠️ VOID#GEIST malware delivers 3 RATs: XWorm, AsyncRAT, and Xeno RAT through a layered script chain.

Phishing emails pull a batch file from TryCloudflare, open a fake invoice PDF, then use Python to decrypt shellcode and inject it into explorer.exe via Early Bird APC.

🔗 Inside the full fileless attack chain → https://thehackernews.com/2026/03/multi-stage-voidgeist-malware.html

8,010

The Hacker News

20:46 9 thg 3, 2026

📷 Photo

🚨 China-linked APT UAT-9244 has been targeting telecom networks in South America since 2024.

Cisco Talos uncovered 3 new implants across Windows, #Linux, and edge devices—used for persistence, command control, and large-scale brute-force scanning.

🔗 Inside TernDoor, PeerTime, and BruteEntry → https://thehackernews.com/2026/03/china-linked-hackers-use-terndoor.html

7,420

The Hacker News

20:46 9 thg 3, 2026

📷 Photo

🛑 Iran-linked hackers quietly embedded inside multiple U. S. organizations, Broadcom researchers report.

The campaign is tied to MuddyWater, an #Iranian state group. Attackers deployed a Deno-based backdoor and tried exfiltrating data using Rclone to cloud storage.

🔗 Read → https://thehackernews.com/2026/03/iran-linked-muddywater-hackers-target.html

7,450

The Hacker News

20:46 9 thg 3, 2026

📷 Photo

MSPs trying to scale cybersecurity hit the same wall: manual risk assessments that don’t scale.

AI-powered risk management automates assessments, maps compliance, and turns findings into remediation—enabling continuous security services instead of one-off fixes.

🔗 Inside: framework for scalable risk-first cybersecurity services → https://thehackernews.com/2026/03/the-msp-guide-to-using-ai-powered-risk.html

7,340

The Hacker News

20:46 9 thg 3, 2026

📷 Photo

⚠️ CISA added two CVSS 9.8 flaws to its KEV list after active exploitation.

One hits Hikvision devices and can expose sensitive data. The other targets Rockwell Logix controllers and could let attackers alter system configs.

🔗 Details → https://thehackernews.com/2026/03/hikvision-and-rockwell-automation-cvss.html

Federal agencies must patch by March 26.

7,800

The Hacker News

20:46 9 thg 3, 2026

📷 Photo

🛑 ClickFix has moved to Windows Terminal.

Microsoft says victims are told to open wt.exe and paste a command from fake CAPTCHA pages.

That launches PowerShell, pulls payloads, and injects Lumma Stealer into Chrome and Edge to steal saved credentials.

🔗 Read → https://thehackernews.com/2026/03/microsoft-reveals-clickfix-campaign.html

7,720

The Hacker News

20:46 9 thg 3, 2026

📷 Photo

🚨 DDR5 bot scalping, Telegram cybercrime hubs, and new malware campaigns.

This week’s #ThreatsDay Bulletin breaks down the biggest security threats and tactics shaping the threat landscape right now.

🔗 Read → https://thehackernews.com/2026/03/threatsday-bulletin-redis-rce-ddr5-bot.html

8,130

The Hacker News

20:46 9 thg 3, 2026

📷 Photo

⚠️ Cisco confirms active exploitation of two Catalyst SD-WAN Manager flaws.

▶ CVE-2026-20122 enables arbitrary file overwrite via API credentials.
▶CVE-2026-20128 can expose data and grant DCA privileges after login.

🔗 Read → https://thehackernews.com/2026/03/cisco-confirms-active-exploitation-of.html

Patches are out across multiple releases.

8,570

The Hacker News

07:33 8 thg 3, 2026

📷 Photo

🛑 Suspected Iran-linked hackers targeted Iraqi officials by impersonating the foreign ministry and delivering malware.

Tracked as Dust Specter, the campaign deploys SPLITDROP, TWINTASK, TWINTALK, and GHOSTFORM via password-protected archives and DLL sideloading.

🔗 Read → https://thehackernews.com/2026/03/dust-specter-targets-iraqi-officials.html

7,070

Showing 30 of 100 posts

Loading posts...

Xếp hạng

Yêu cầu đăng nhập

Đánh giá của người dùng (0)

Chưa có đánh giá nào. Hãy là người đầu tiên chia sẻ trải nghiệm của bạn!

Loading reviews...

The Hacker News

Follow @thehackernews to stay updated with the latest trusted and independent trends and news

Xếp hạng

Xếp hạng toàn cầu

#7505Không thay đổi

Xếp hạng ngôn ngữ

#1553Không thay đổi

Xếp hạng danh mục

#84Không thay đổi

Tăng trưởng người đăng ký (Trong 30 ngày qua)

Tổng cộng: 154.1K

Tăng trưởng 24 giờ: -905 1%

Bài đăng gần đây

The Hacker News

00:26 13 thg 3, 2026

📷 Photo

🛑 Two critical flaws in #n8n enable remote code execution.

One bug lets attackers inject shell commands via public form inputs. Another escapes the expression sandbox.

Chained together, attackers could decrypt stored credentials including API keys, tokens, and passwords.

🔗 Details → https://thehackernews.com/2026/03/critical-n8n-flaws-allow-remote-code.html

6,460