Malicious Solidity Pro VS Code extensions steal crypto wallets, API keys, SSH keys, and developer tokens, then exfiltrate the ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Vulnerabilities can lurk within production code for years or decades — and AI tools have opened a gateway to a glut of new long-hidden discoveries.

Threat-intelligence firm CloudSEK said in a report published August 11, 2026 that it has identified more than 2,500 organizations potentially exposed by the March 2026 supply-chain compromise of ...

Terabytes worth of credentials, many belonging to the world’s biggest and most sensitive organizations, have been exposed in a supply-chain attack on LiteLLM, an open source tool that streamlines ...

Researchers found every major AI provider encrypts reasoning tokens with a single global key—and exploited it to decode a trove of data.

The flaws in Zoom could let someone in a meeting take control of another participant’s device without the victim clicking anything.

LiteLLM supply chain attack exposed 2,500+ companies and 434,000 CI/CD pipelines in 40 minutes. FBI warns threat still live.

Kimsuky North Korea AI hacking expanded significantly: the spy group built a self-hosted LLM lab inside its own attack ...

Security researcher Kevin Beaumont got a call last week from a major US technology company that insisted it had nothing to worry about: all the credentials stolen in March's LiteLLM supply chain ...

Modern internet security relies heavily on mathematical problems that ordinary computers cannot solve within a useful time. A ...

Privacy researchers and digital-rights groups publish recurring lists of the software they consider most invasive on a ...