The Hacker News
前往频道在 Telegram
⭐ Official THN Telegram Channel — A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking. 📨 Contact: admin@thehackernews.com 🌐 Website: https://thehackernews.com
显示更多📈 Telegram 频道 The Hacker News 的分析概览
频道 The Hacker News (@thehackernews) 英语 语言赛道中的 是活跃参与者。目前社区聚集了 162 214 名订阅者，在 技术与应用 类别中位列第 660，并在 美国 地区排名第 111 位。
📊 受众指标与增长动态
自 невідомо 创建以来，项目保持高速增长，吸引了 162 214 名订阅者。
根据 25 八月, 2026 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 158，过去 24 小时变化为 10，整体触达仍然可观。
- 认证状态： 已认证（Telegram 官方确认）
- 互动率 (ER)： 平均受众互动率为 4.47%。内容发布后 24 小时内通常能获得 2.98% 的反应，占订阅者总量。
- 帖子覆盖： 每篇帖子平均可获得 7 255 次浏览，首日通常累积 4 828 次浏览。
- 互动与反馈： 受众积极参与，单帖平均反应数为 14。
- 主题关注点： 内容集中在 attack, credential, cve-2026, github, backdoor 等核心主题上。
📝 描述与内容策略
作者将该频道定位为表达主观观点的平台：
“⭐ Official THN Telegram Channel — A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking.
📨 Contact: admin@thehackernews.com
🌐 Website: https://thehackernews.com”
凭借高频更新（最新数据采集于 26 八月, 2026），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。
162 214
订阅者
+1024 小时
+1137 天
+15830 天
帖子存档
162 215
🔥 FBI shuts down Chinese hacking platforms tied to intrusions at NASA, the Fed, and U.S. Senate.
QScan exploited vulnerable IoT devices, while QTRouter hid attack traffic behind compromised devices, commercial proxies, and VPSs.
How it worked: https://thehackernews.com/2026/08/fbi-disrupts-china-linked-qtfy.html
162 215
🛑 CISA red teams compromised two critical infrastructure organizations. One SOC detected nothing.
The other caught the initial phishing and isolated affected workstations within 2–20 minutes.
Learn why one SOC saw it and the other didn’t: https://thehackernews.com/2026/08/cisa-red-team-compromised-two-critical.html
162 215
Agentic SOCs can investigate alerts before analysts touch them.
AI agents can validate detections, test hypotheses against network telemetry, and return evidence-backed cases in seconds or minutes.
The shift: investigate first, escalate to humans when the evidence warrants it.
How the model works: https://thehackernews.com/2026/08/imagine-soc-without-queue-from-alert.html
162 215
🚨 Unpatched Kaltura (a video management and streaming platform) flaws expose server files and could enable RCE.
The mwEmbed bugs need no authentication. Both stem from unsafe deserialization, and CERT/CC says no fix is available.
Read details here: https://thehackernews.com/2026/08/unpatched-kaltura-mwembed-flaws-could.html
162 215
‼️ Nobody asked #Claude to cancel another gym member's booking.
Aikido rebuilt the Australian gym app and tested Opus 4.6 on #OpenClaw. The model bypassed its browser-only 7-day booking limit in 9 of 10 runs.
In two runs, it also canceled another member’s reservation.
Read: https://thehackernews.com/2026/08/claude-opus-46-bypasses-gym-booking.html
162 215
⚠️ Russian operators used ChatGPT to run an influence operation.
OpenAI banned the accounts after finding they used VPNs to bypass restrictions and generated posts promoting the International Burke Institute across Substack, Telegram, X, Facebook and LinkedIn.
What OpenAI uncovered: https://thehackernews.com/2026/08/openai-bans-russian-chatgpt-accounts.html
162 215
58 arrested in INTERPOL crackdown on West African cyber-enabled fraud.
Operation Jackal IV identified 263 suspects across 22 countries. One Romanian investment scam is estimated to have stolen and laundered €143 million globally.
Inside the operation: https://thehackernews.com/2026/08/interpol-operation-jackal-iv-arrests-58.html
162 215
🚨 Attackers are exploiting a critical Gitea RCE flaw.
CVE-2026-60004 can let an external attacker gain repo write access via open registration and run shell commands as the Gitea service account.
One reported attack dropped cryptocurrency-miner-like malware.
Read: https://thehackernews.com/2026/08/critical-gitea-rce-actively-exploited.html
162 215
⚡ U.S. sanctions Iran-linked hackers tied to critical infrastructure breaches.
Three alleged Mabna Institute members are accused of stealing data from U.S. energy, defense, healthcare, IT, and financial organizations.
TRM Labs linked 30 wallets to $16.8 million.
Who they hit and where the money went: https://thehackernews.com/2026/08/us-sanctions-iran-linked-hackers-behind.html
162 215
UPDATE - Apple fixed the iCloud Private Relay IP leak in iOS 26.6.1 and macOS 26.6.2.
The WebKit issue could bypass proxies and expose users’ real IPs. The fix was not in the iOS 26.6.1 beta.
See the update: https://thehackernews.com/2026/08/webkit-proxy-bypasses-can-expose-real.html
162 215
48% of Mirage2FA-targeted emails were potentially compromised.
ANYRUN uncovered 9,000+ potential compromise events involving password and cookie theft, SSO logins, and 2FA bypass. Activity is potentially linked to 4,532 organization email domains.
See how Mirage2FA works - https://thehackernews.com/2026/08/mirage2fa-surge-hits-4500-us-and-eu.html
162 215
‼️ A malicious webpage could poison the AI running on your own machine.
A NemoClaw weakness can expose Ollama to DNS rebinding, letting an attacker alter its chat template with instructions that persist across conversations.
Read how it works - https://thehackernews.com/2026/08/a-malicious-webpage-could-poison-your.html
162 215
‼️ A Marimo notebook can launch MCP commands before cells run.
CVE-2026-75149 triggers when a crafted notebook is opened in edit mode. It affects versions before 0.23.15.
Marimo fixed it in 0.23.15.
Read the details: https://thehackernews.com/2026/08/marimo-notebook-flaw-could-run-mcp.html
162 215
Under the EU CRA, a single security question can decide your EU market access.
Can your team prove exactly what's inside your digital product when required? With EU CRA Article 14 reporting coming into force, finding an exploited vulnerability triggers a strict 24-hour response clock. Discover your security compliance gaps with a 5-question assessment.
Take the 5-minute assessment - https://thn.news/eu-security-report
162 215
⚡ WhatsApp now supports multiple passkeys per account.
Users can now use phishing-resistant passkeys across iOS and Android. It’s also adding full passwords for two-step verification and more context for unknown Android calls.
WhatsApp says 1 billion+ people already use them.
Read: https://thehackernews.com/2026/08/whatsapp-adds-multiple-passkeys-for.html
162 215
Frontier AI is outpacing traditional vulnerability management.
CVSS, EPSS, and KEV are no longer enough. Teams need exploitability, reachability, misconfigurations, and business impact, plus faster, more automated patching.
See what needs to change - https://thehackernews.com/2026/08/frontier-ai-vulnerability-managements.html
162 215
🚨 24 npm packages are turning unpkg into phishing infrastructure.
They serve fake Cloudflare CAPTCHA pages from trusted unpkg URLs and use attacker-controlled redirect logic.
The packages target visitors, not developers installing them.
See how it works - https://thehackernews.com/2026/08/24-npm-packages-abuse-unpkg-mirrors-to.html
162 215
⚠️ E4del and PINHOLE RATs hide commands in FTP banners.
The campaigns turn FTP server welcome messages into dead drop resolvers to fetch commands or C2 details.
PINHOLE also uses Pinterest and SurveyMonkey for C2 resolution.
See how the technique works - https://thehackernews.com/2026/08/e4del-and-pinhole-rats-turn-ftp-banners.html
162 215
More threat data can make OT security harder, not better.
Jaron Stammler of OMICRON Electronics explains why critical infrastructure teams need threat intelligence tied to the equipment, protocols, and processes they actually run, not another stream of generic indicators.
The real question: Does this threat affect this OT environment?
Read: https://thehackernews.com/expert-insights/2026/08/why-threat-intelligence-needs-ot.html
162 215
🚨 Two miniOrange SAML flaws can give attackers WordPress admin access.
Attackers are probing the authentication bypasses, which let unauthenticated users sign in as any existing account, including administrators.
Read the details - https://thehackernews.com/2026/08/attackers-target-miniorange-saml-flaws.html
