Turla Turns Kazuar Backdoor Into Modular P2P Botnet for Persistent Access on May 15, 2026 Posted by The Hacker News
Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistence on May 15, 2026 Posted by The Hacker News
What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface on May 15, 2026 Posted by The Hacker News
Posted in Hacking news $285 Million Drift Hack Traced to Six-Month DPRK Social Engineering Operation on April 5, 2026 The Hacker News
Posted in Hacking news 36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants on April 4, 2026 The Hacker News
Posted in Hacking news Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS on April 4, 2026 The Hacker News
Posted in Hacking news China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing on April 3, 2026 The Hacker News
Posted in Hacking news Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servers on April 3, 2026 The Hacker News
Posted in Hacking news UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack on April 3, 2026 The Hacker News
Posted in Hacking news Why Third-Party Risk Is the Biggest Gap in Your Clients’ Security Posture on April 3, 2026 The Hacker News
Posted in Hacking news New SparkCat Variant in iOS, Android Apps Steals Crypto Wallet Recovery Phrase Images on April 3, 2026 The Hacker News
Posted in Hacking news Drift Loses $285 Million in Durable Nonce Social Engineering Attack Linked to DPRK on April 3, 2026 The Hacker News
Posted in Hacking news Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials on April 2, 2026 The Hacker News