Install
The Hacker News is the most trusted and popular cybersecurity publication for information security professionals seeking breaking news, actionable insights and analysis.
- 179articles · 30d
- 1+ day agolatest article
- Aug 14, 2026earliest in window
- 11%with images
- 353avg words
- security 167
- cybersecurity 146
- malware 111
- vulnerability 100
- cyber security news 91
- artificial intelligence 70
- cyber security 65
- cybercrime 62
- technology 61
- ai 52
- vulnerabilities 52
- cloud security 38
- windows 36
- network security 35
- remote code execution 33
- infosec 31
- linux 31
- enterprise security 28
- microsoft 28
- cisa 27
- Science & Technology 122
- Software 100
- Computers & Electronics 86
- Conflict, War & Peace 47
- News 39
- Crime & Law 37
- Software Dev. 31
- Internet & Telecom 29
- cyber security news
- cyber news
- cyber security news today
- cyber security updates
- cyber updates
- hacker news
- hacking news
- software vulnerability
- cyber attacks
- data breach
- ransomware malware
- how to hack
- network security
- information security
- the hacker news
- computer security
- top cybersecurity threats
- ⚡ thn weekly recap
Please confirm you are human
This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.
A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.
News
Your Critical Vulnerabilities Might Not Be Your Biggest Risk
1+ day, 17+ hour ago (1309+ words) Security teams have become exceptionally talented at finding vulnerabilities. Now, it’s time to turn our attention to optimizing the process for determining which of those vulnerabilities actually create a path to compromise. A critical vulnerability may look alarming on a…...
Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE
2+ day, 16+ hour ago (903+ words) Check Point has patched two critical vulnerabilities in the way its firewall and management products handle VPN certificates. The company says both could allow an unauthenticated remote attacker to run code, but only "under specific conditions" that it has not…...
PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances
2+ day, 16+ hour ago (772+ words) A suspected Russian-speaking cyber actor has been attributed to the use of artificial intelligence (AI) to devise exploits targeting a recently disclosed pair of security flaws in PaperCut NG/MF and break into hundreds of instances. According to independent reports…...
CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline
2+ day, 17+ hour ago (471+ words) The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added three flaws, each impacting Cisco, Citrix, and Fortinet, to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the patches by September 12, 2026. The vulnerabilities…...
Webinar: Learn How to Answer “Are We Exposed?” Faster After a New CVE
3+ day, 16+ hour ago (366+ words) A major vulnerability is disclosed. The alert lands immediately. Then comes the harder question: Are we actually exposed? For many security teams, answering that means jumping between vulnerability scanners, endpoint tools, cloud inventories, SBOMs, repositories, and application data to build…...
Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox
3+ day, 18+ hour ago (321+ words) Google on Thursday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation in the wild. The medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 (CVSS score: N/A), has been described as an out-of-bounds bug in V8, Chrome's…...
Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed
3+ day, 21+ hour ago (356+ words) The security researcher known as Chaotic Eclipse has dropped a proof-of-concept (PoC) for yet another zero-day in Microsoft Defender. The vulnerability, codenamed ShieldCrash, is assessed to be a patch bypass for CVE-2026-69414 (CVSS score: 7.8), also called ShieldBreak, which the researcher…...
SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution
3+ day, 21+ hour ago (526+ words) SAP has released security updates to address multiple vulnerabilities, including a maximum-severity flaw in SAP Extended Passport (EPP) Processing that could have a severe impact on the confidentiality, integrity, and availability of the application The vulnerability, tracked as CVE-2026-44756 (CVSS…...
Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
3+ day, 23+ hour ago (602+ words) Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portfolio, including two flaws that it said have been actively exploited in the wild. September's record-setting security updates come after Microsoft patched 457 vulnerabilities in August,…...
N-able N-central Pre-Auth RCE Flaw Exploited in the Wild
3+ day, 23+ hour ago (245+ words) The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by September 11, 2026. The vulnerability in…...