The Hacker News
@TheHackersNews
The #1 trusted source for cybersecurity news, insights, and analysis — built for defenders and trusted by decision-makers.
If you're in cybersecurity, you've probably heard of CISSP All-in-One, The IDA Pro Book, or Gray Hat Hacking. Now imagine learning directly from someone who co-authored the 4th and 5th edition of Gray Hat Hacking and has worked in global threat teams like Symantec, Mandiant, and…
🚨 Attackers are impersonating you—with AI. From deepfakes to fake LinkedIn accounts, social engineering is now real-time and relentless. Join cybersecurity leader Michael Coates and @DoppelHQ CEO Kevin Tian to learn how AI can fight back → thehacker.news/defeating-digi…
🚨 Shadow AI is exploding inside your org—whether you see it or not. Zscaler tracked 36x more AI traffic in 2024, with 800+ apps in use. Blocking isn’t working—employees are going around it. The real risk? Your IP is training public models. Here’s what to do instead ↓…
🔄 UPDATE | Microsoft has expanded patches for the actively exploited SharePoint RCE flaw (CVE-2025-53770). 🔐 Now also covered: • SharePoint Enterprise Server 2016 • SharePoint Enterprise Server 2016 Language Pack 🛡️ Full guidance → thehackernews.com/2025/07/micros…
🚨 China-linked APT41 breached African gov IT networks using internal SharePoint servers as C2. The attack used stolen admin creds, DLL sideloading, and fake GitHub domains—marking rare APT41 activity in Africa. Full details → thehackernews.com/2025/07/china-…
🚨 New Android spyware linked to Iran’s MOIS is posing as Starlink and VPN apps. DCHSpy hijacks WhatsApp, mic, camera, files, and location—likely targeting dissidents post-Israel-Iran conflict. Still spreading via Telegram. Full report → thehackernews.com/2025/07/iran-l…
🔥 ALERT ➟ Microsoft issues urgent security patches for critical SharePoint RCE flaw (CVE-2025-53770), now under active exploitation worldwide. Hackers are bypassing MFA, stealing keys, and targeting banks, government agencies, hospitals & more. Details →…
60% of breaches in 2025 involved one common risk: humans handling passwords. We may dream of a passwordless future, but today’s real fix is removing users from the login flow. Here’s how teams are doing it—without waiting for full passkey adoption ↓ thehackernews.com/expert-insight…
⚠️ Zero-days are hitting faster than teams can patch. → SharePoint & Chrome under active attack → Hackers exploit NVIDIA, SQLite, CrushFTP → $2.17B stolen in crypto so far this year → AI just stopped a real-world exploit before humans did This week proves: No system is…
🚨 Over 80% of orgs are adopting Zero Trust by 2026—but AI is rewriting the playbook. Predictive models block threats. Generative AI speeds triage. Agentic AI enforces policies autonomously. The catch? Human oversight still makes or breaks security. Learn more ↓…
🚨 Over 3,500 websites hijacked to secretly mine crypto — just by visiting them. The stealthy JavaScript miner hides in plain sight, adjusts intensity based on your device, and runs silently in the background. It's linked to credit card theft too. Read ↓…
