Available now! Telegram Research 2025 โ the year's key insights 
The Hacker News
Open in Telegram
โญ Official THN Telegram Channel โ A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking. ๐จ Contact: admin@thehackernews.com ๐ Website: https://thehackernews.com
Show more๐ Analytical overview of Telegram channel The Hacker News
Channel The Hacker News (@thehackernews) in the English language segment is an active participant. Currently, the community unites 161 608 subscribers, ranking 692 in the Technologies & Applications category and 109 in the USA region.
๐ Audience metrics and dynamics
Since its creation on ะฝะตะฒัะดะพะผะพ, the project has demonstrated rapid growth, gathering an audience of 161 608 subscribers.
According to the latest data from 30 June, 2026, the channel demonstrates stable activity. Although there has been a change in the number of participants by -378 over the last 30 days and by -15 over the last 24 hours, overall reach remains high.
- Verification status: Verified (Officially confirmed by Telegram)
- Engagement rate (ER): The average audience engagement rate is 4.61%. Within the first 24 hours after publication, content typically collects 3.08% reactions from the total number of subscribers.
- Post reach: On average, each post receives 7 453 views. Within the first day, a publication typically gains 4 977 views.
- Reactions and interaction: The audience actively supports content: the average number of reactions per post is 14.
- Thematic interests: Content is focused on key topics such as attack, credential, cve-2026, github, backdoor.
๐ Description and content policy
The author describes the resource as a platform for expressing subjective opinions:
โโญ Official THN Telegram Channel โ A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking.
๐จ Contact: admin@thehackernews.com
๐ Website: https://thehackernews.comโ
Thanks to the high frequency of updates (latest data received on 01 July, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.
161 608
Subscribers
-1524 hours
-907 days
-37830 days
Data loading in progress...
Similar Channels
Tags Cloud
Incoming and Outgoing Mentions
---
---
---
---
---
---
Attracting Subscribers
July '26
July '26
+49
in 1 channels
June '26
+994
in 17 channels
Get PRO
May '26
+1 175
in 24 channels
Get PRO
April '26
+4 326
in 26 channels
Get PRO
March '26
+6 849
in 25 channels
Get PRO
February '26
+1 583
in 27 channels
Get PRO
January '26
+1 516
in 22 channels
Get PRO
December '25
+1 900
in 33 channels
Get PRO
November '25
+1 648
in 24 channels
Get PRO
October '25
+1 634
in 21 channels
Get PRO
September '25
+1 163
in 25 channels
Get PRO
August '25
+1 070
in 17 channels
Get PRO
July '25
+1 318
in 28 channels
Get PRO
June '25
+2 024
in 24 channels
Get PRO
May '25
+1 328
in 24 channels
Get PRO
April '25
+1 758
in 13 channels
Get PRO
March '25
+1 782
in 16 channels
Get PRO
February '25
+2 159
in 19 channels
Get PRO
January '25
+2 315
in 31 channels
Get PRO
December '24
+3 006
in 22 channels
Get PRO
November '24
+3 500
in 12 channels
Get PRO
October '24
+3 385
in 18 channels
Get PRO
September '24
+2 583
in 22 channels
Get PRO
August '24
+2 157
in 16 channels
Get PRO
July '24
+1 844
in 11 channels
Get PRO
June '24
+1 514
in 7 channels
Get PRO
May '24
+1 079
in 9 channels
Get PRO
April '24
+1 306
in 11 channels
Get PRO
March '24
+1 332
in 13 channels
Get PRO
February '24
+630
in 14 channels
Get PRO
January '24
+1 075
in 14 channels
Get PRO
December '23
+973
in 7 channels
Get PRO
November '23
+1 457
in 8 channels
Get PRO
October '23
+3 536
in 5 channels
Get PRO
September '23
+3 177
in 0 channels
Get PRO
August '23
+3 401
in 0 channels
Get PRO
July '23
+2 829
in 0 channels
Get PRO
June '23
+2 847
in 0 channels
Get PRO
May '23
+2 417
in 0 channels
Get PRO
April '23
+2 646
in 0 channels
Get PRO
March '23
+2 345
in 0 channels
Get PRO
February '23
+2 328
in 0 channels
Get PRO
January '23
+2 603
in 0 channels
Get PRO
December '22
+2 541
in 0 channels
Get PRO
November '22
+2 543
in 0 channels
Get PRO
October '22
+3 146
in 0 channels
Get PRO
September '22
+3 951
in 0 channels
Get PRO
August '22
+2 425
in 0 channels
Get PRO
July '22
+2 611
in 0 channels
Get PRO
June '22
+2 636
in 0 channels
Get PRO
May '22
+3 979
in 0 channels
Get PRO
April '22
+4 171
in 0 channels
Get PRO
March '22
+6 802
in 0 channels
Get PRO
February '22
+3 153
in 0 channels
Get PRO
January '22
+4 050
in 0 channels
Get PRO
December '21
+4 346
in 0 channels
Get PRO
November '21
+4 152
in 0 channels
Get PRO
October '21
+6 200
in 0 channels
Get PRO
September '21
+5 226
in 0 channels
Get PRO
August '21
+5 134
in 0 channels
Get PRO
July '21
+6 261
in 0 channels
Get PRO
June '21
+2 427
in 0 channels
Get PRO
May '21
+731
in 0 channels
Get PRO
April '21
+1 029
in 0 channels
Get PRO
March '21
+1 300
in 0 channels
Get PRO
February '21
+786
in 0 channels
Get PRO
January '21
+1 163
in 0 channels
Get PRO
December '20
+22 087
in 0 channels
| Date | Subscriber Growth | Mentions | Channels | |
| 01 July | +49 |
Channel Posts
๐จ ALERT - Attackers are trying to exploit CVE-2026-8037 in Progress Kemp LoadMaster.
The CVSS 9.6 flaw enables unauthenticated OS command injection and arbitrary code execution on vulnerable appliances.
eSentire says the attempts it saw failed, but PoC details are now public.
Read: https://thehackernews.com/2026/07/latest-progress-kemp-loadmaster-pre.html
| 2 |  ๐จ Chromium File System Access API turns browser permission into #ransomware access on Windows and Android.
AI-generated sample shows files can be encrypted after user-granted folder access.
No native payload required.
Details here ๐ https://thehackernews.com/2026/07/ai-generated-browser-ransomware-abuses.html | 1 437 |
| 3 | ๐ The Most Dangerous Code in Your Stack Is Code You Never Wrote.
Open-source dependencies are trusted by default, but one compromised package can put every downstream project at risk.
Supply chain security now means looking beyond known CVEs and watching how code behaves at runtime.
See how defenders are adapting: https://awards.thehackernews.com/blog/the-danger-in-your-dependencies/ | 1 561 |
| 4 |  55.2% of breached respondents said they were told to keep quiet.
Bitdefender's 2026 survey of 1,200 IT and security pros shows where teams are still struggling: Shadow AI visibility, attack surface reduction, LOTL awareness, and breach transparency.
Details here: https://thehackernews.com/2026/07/2026-cybersecurity-assessment-gap.html | 2 099 |
| 5 |  โก Microsoft now has a 2029 target for post-quantum cryptography.
The company says quantum advances have shifted the risk timeline.
Its roadmap brings PQC into SFI and focuses on TLS 1.3, crypto-agility, and trust chains for signing, certificates, keys, and updates.
Why Microsoft moved the timeline: https://thehackernews.com/2026/07/microsoft-accelerates-post-quantum.html | 2 624 |
| 6 |  ๐ "Phantom squatting" is already in the wild.
AI models invent domains. Attackers register them first. Users can get the bad link from the AI itself.
Researchers found roughly 250,000 unowned AI-invented domains.
Details here: https://thehackernews.com/2026/07/phantom-squatting-uses-ai-hallucinated.html | 3 872 |
| 7 |  ๐ฅ Anthropic is putting #Claude Fable 5 back online worldwide.
The U.S. lifted June 12 export controls tied to an Amazon-reported jailbreak that surfaced vulnerability-finding and exploit-code behavior.
Fable 5 returns July 1 across Claude platforms.
#Anthropic says its new classifier blocks the method in 99%+ of tries.
Read: https://thehackernews.com/2026/07/anthropic-restores-claude-fable-5-after.html | 4 046 |
| 8 |  โ ๏ธ 81M+ Azure CLI login attempts. At least 78 Microsoft accounts compromised.
The June 12-26 campaign used old breached passwords and the deprecated ROPC OAuth flow.
MFA was enabled in many cases, but Azure CLI sign-ins were still exposed.
Details here: https://thehackernews.com/2026/07/azure-cli-password-spray-hits-at-least.html | 3 909 |
| 9 |  ๐จ ClickFix is no longer just a fake CAPTCHA trick.
A researcher analyzed roughly 3,000 live payloads and found API-driven servers generating fresh obfuscated commands on request.
A newer Downloads-folder method keeps the bad code out of the clipboard to slip past AMSI.
Read: https://thehackernews.com/2026/07/researcher-analyzes-3000-live-clickfix.html | 3 802 |
| 10 |  โ ๏ธ Citrix patched six NetScaler ADC and Gateway flaws, including an unauthenticated arbitrary file read.
Other bugs can trigger memory overread or DoS in specific SAML, Gateway, AAA, DNS, Oracle LB, TCP Profile, and HTTP/2 setups.
Details here: https://thehackernews.com/2026/07/citrix-patches-six-netscaler-flaws.html | 3 995 |
| 11 |  โ ๏ธ Microsoft is warning about a new way AI agents can be manipulated through MCP tools.
The issue is not a broken rule or a software bug.
A malicious tool description can hide instructions that make an agent collect company data, such as unpaid invoices, and send it out through a normal-looking tool call.
Details here: https://thehackernews.com/2026/06/microsoft-warns-poisoned-mcp-tool.html | 5 317 |
| 12 |  ๐ A new RustDuck botnet is turning routers, cameras, Android boxes, and poorly secured servers into DDoS nodes.
It spreads through weak Telnet/SSH logins, exposed ADB, and old flaws, while its newer core is being rewritten in Rust.
Details ๐ https://thehackernews.com/2026/06/rustduck-botnet-rebuilds-in-rust-to.html | 4 941 |
| 13 |  ๐จ CVE-2026-33017 is being exploited against Langflow.
Attackers abuse an unauthenticated API endpoint to run Python code, drop Lambsys, and launch a Monero miner.
Lambsys can spread via reused SSH keys.
Langflow attack chain: https://thehackernews.com/2026/06/langflow-rce-exploited-to-deploy-monero.html | 5 059 |
| 14 |  โ ๏ธ A fake โGoogle Notesโ extension is swapping #cryptocurrency wallet addresses inside Chromium browsers.
Experts call it "Silent Swap"
Unsigned .NET and Golang installers inject the extension, alter browser preference files, and use EtherHiding to rotate C2.
Details here โ https://thehackernews.com/2026/06/silent-swap-crypto-clipper-uses-fake.html | 5 106 |
| 15 |  ๐ Old shell tricks didnโt die. They found a new target ๐ AI coding agents.
Researchers shows how Bash parsing can slip past weak text-based command guards, letting r''m become rm before execution.
GuardFall bypass worked on 10 of 11 open-source agents tested.
Read how it works: https://thehackernews.com/2026/06/guardfall-exposes-open-source-ai-coding.html | 4 834 |
| 16 |  ๐ A leaked AI key is not just a secret anymore.
It is a running bill.
Researchers tested 444 iOS AI chatbot apps. Over 250 exposed paid LLM access through network traffic.
> Plaintext keys
> Replayable tokens
> Open backend proxies with no auth
Read the THN report: https://thehackernews.com/2026/06/282-ios-apps-found-leaking-llm-api-keys.html | 4 768 |
| 17 |  Fraud infrastructure for FIFA World Cup 2026 was already in place before June 11 kickoff.
Check Point saw 60x spike in fake sportsbook apps (64 samples) + large-scale travel/phishing domains, some with MX set for email interception.
Full report: https://thehackernews.com/2026/06/what-numbers-say-about-fifa-2026-cyber.html | 4 886 |
| 18 |  ๐ SimpleHelp RMM CVE-2026-48558 exploited for OIDC authentication bypass.
Attackers gain technician sessions to deploy TaskWeaver and Djinn Stealer. Djinn Stealer targets cloud, code, AI tools, browsers, SSH, and wallets.
Read the full story: https://thehackernews.com/2026/06/attackers-exploit-simplehelp-cve-2026.html | 5 143 |
| 19 |  ๐จ Nearby file sharing has a local blind spot.
Researchers found six flaws in AirDrop and Quick Share that can crash sharing services, bypass Samsung session checks, and trigger a crash in Googleโs Windows app.
Apple and Google have started fixes.
Read: https://thehackernews.com/2026/06/airdrop-and-quick-share-flaws-let.html | 5 389 |
| 20 |  ๐ฎ Tell an AI browser itโs just playing a game.
Researchers say "BioShocking" tricked six AI agents, including #ChatGPT Atlas, Comet, and #Claude, into copying GitHub SSH credentials from a signed-in session.
Read how the attack chain worked: https://thehackernews.com/2026/06/new-bioshocking-attack-tricks-ai.html | 5 169 |
