Install
The Hacker News is the most trusted and popular cybersecurity publication for information security professionals seeking breaking news, actionable insights and analysis.
- 122articles · 30d
- 1+ day agolatest article
- Aug 17, 2026earliest in window
- 9%with images
- 353avg words
- security 112
- cybersecurity 102
- malware 75
- vulnerability 67
- cyber security news 61
- artificial intelligence 53
- cybercrime 43
- cyber security 41
- technology 39
- ai 38
- cloud security 31
- vulnerabilities 31
- network security 24
- software 23
- infosec 22
- remote code execution 22
- windows 21
- enterprise security 20
- microsoft 20
- cisa 18
- Science & Technology 83
- Software 67
- Computers & Electronics 60
- Conflict, War & Peace 32
- Crime & Law 25
- News 23
- Software Dev. 22
- Internet & Telecom 20
- cyber security news
- cyber news
- cyber security news today
- cyber security updates
- cyber updates
- hacker news
- hacking news
- software vulnerability
- cyber attacks
- data breach
- ransomware malware
- how to hack
- network security
- information security
- the hacker news
- computer security
- top cybersecurity threats
- ⚡ thn weekly recap
Please confirm you are human
This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.
A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.
News
CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline
4+ day, 1+ hour ago (471+ words) The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added three flaws, each impacting Cisco, Citrix, and Fortinet, to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the patches by September 12, 2026. The vulnerabilities…...
New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root
5+ day, 3+ hour ago (742+ words) cPanel has patched a flaw that it says lets a single hosting account take control of an entire server. An authenticated account holder with mail-related privileges can create files of their choosing on the server through EmailTrack and, from there,…...
SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution
5+ day, 5+ hour ago (526+ words) SAP has released security updates to address multiple vulnerabilities, including a maximum-severity flaw in SAP Extended Passport (EPP) Processing that could have a severe impact on the confidentiality, integrity, and availability of the application The vulnerability, tracked as CVE-2026-44756 (CVSS…...
Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
5+ day, 7+ hour ago (602+ words) Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portfolio, including two flaws that it said have been actively exploited in the wild. September's record-setting security updates come after Microsoft patched 457 vulnerabilities in August,…...
N-able N-central Pre-Auth RCE Flaw Exploited in the Wild
5+ day, 7+ hour ago (245+ words) The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by September 11, 2026. The vulnerability in…...
FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials
6+ day, 37+ min ago (1041+ words) A flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choosing in the directory and end up in the administrators group, Red Hat says. FreeIPA is the system that determines who…...
Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell
6+ day, 2+ hour ago (281+ words) Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active exploitation in the wild. The vulnerability, now tracked as CVE-2026-75650 (CVSS score: 10.0), has been codenamed StyleSmuggler by…...
Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released
1+ week, 56+ min ago (838+ words) A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJAX into unauthenticated remote code execution — but only against applications in a specific non-default configuration, and Progress patched the chain in July. There are no confirmed…...
N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw
1+ week, 3+ hour ago (737+ words) Every on-premises N-central build below 2026.3.1.14 — including servers updated to Hotfix 3 a day earlier — needs Hotfix 4. N-able's incident notice says the flaw has been exploited in the wild; its release notes say that is unconfirmed. N-able has released its fourth hotfix…...
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
1+ week, 1+ day ago (1468+ words) Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server without logging in, Dutch e-commerce security company Sansec said in an advisory published on September…...