The Hacker News
⭐ Official THN Telegram Channel — A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking. 📨 Contact: admin@thehackernews.com 🌐 Website: https://thehackernews.com
Show more📈 Analytical overview of Telegram channel The Hacker News
Channel The Hacker News (@thehackernews) in the English language segment is an active participant. Currently, the community unites 164 038 subscribers, ranking 661 in the Technologies & Applications category and 97 in the USA region.
📊 Audience metrics and dynamics
Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 164 038 subscribers.
According to the latest data from 26 October, 2026, the channel demonstrates stable activity. Although there has been a change in the number of participants by -113 over the last 30 days and by 97 over the last 24 hours, overall reach remains high.
- Verification status: Verified (Officially confirmed by Telegram)
- Engagement rate (ER): The average audience engagement rate is 4.25%. Within the first 24 hours after publication, content typically collects 3.10% reactions from the total number of subscribers.
- Post reach: On average, each post receives 6 961 views. Within the first day, a publication typically gains 5 089 views.
- Reactions and interaction: The audience actively supports content: the average number of reactions per post is 12.
- Thematic interests: Content is focused on key topics such as attack, credential, cve-2026, github, backdoor.
📝 Description and content policy
The author describes the resource as a platform for expressing subjective opinions:
“⭐ Official THN Telegram Channel — A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking.
📨 Contact: admin@thehackernews.com
🌐 Website: https://thehackernews.com”
Thanks to the high frequency of updates (latest data received on 27 October, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.
Loading data
| Date | Subscriber Growth | Mentions | Channels | |
| 27 October | +68 | |||
| 26 October | +98 | |||
| 25 October | +118 | |||
| 24 October | +107 | |||
| 23 October | +144 | |||
| 22 October | +198 | |||
| 21 October | +171 | |||
| 20 October | +26 | |||
| 19 October | +35 | |||
| 18 October | +27 | |||
| 17 October | +12 | |||
| 16 October | +25 | |||
| 15 October | +26 | |||
| 14 October | +33 | |||
| 13 October | +12 | |||
| 12 October | +17 | |||
| 11 October | +34 | |||
| 10 October | +32 | |||
| 09 October | +38 | |||
| 08 October | +25 | |||
| 07 October | +15 | |||
| 06 October | +19 | |||
| 05 October | +1 | |||
| 04 October | +20 | |||
| 03 October | +11 | |||
| 02 October | +6 | |||
| 01 October | +27 |
| 2 | ‼️ WARNING - Hundreds of millions of devices run GoAhead's embedded web server.
Now, 3 TLS vulnerabilities have been disclosed that can allow revoked client certificates to authenticate or expose encrypted sessions to decryption.
Affected builds use specific OpenSSL, LibreSSL, or Mbed TLS configurations.
Read more: https://thehackernews.com/2026/10/goahead-tls-flaws-allow-revoked-client.html | 3 406 |
| 3 | 🚨 Apple patches a possibly exploited CoreGraphics flaw on older iPhones and iPads.
CVE-2026-86950 could allow arbitrary code execution. Apple says it may have been used in targeted attacks against specific individuals.
The fix is now available in iOS 18.7.11 and iPadOS 18.7.11.
Details → https://thehackernews.com/2026/10/apple-backports-fix-for-exploited.html | 3 145 |
| 4 | ⚠️ Fake login pages aren't just stealing passwords anymore.
AI makes phishing pages easier to clone and personalize. Some attacks go further, stealing MFA codes or hijacking authenticated sessions to access corporate accounts.
How these attacks work and what stops them ↓ https://thehackernews.com/2026/10/ai-generated-fake-login-pages-are.html | 3 261 |
| 5 | 🚨 Microsoft Authenticator flaw let malicious Android apps impersonate Teams and obtain work account sign-in tokens.
No app permissions needed. Researchers demonstrated access to email, files, and calendars.
Microsoft has patched it.
🔗 Read more ↓ https://thehackernews.com/2026/10/microsoft-authenticator-flaw-let.html | 3 857 |
| 6 | ⚠️ A Gemini agent in a security test reportedly accessed 3 real companies, one by guessing a password.
Anthropic says a fake “discounted Claude” reseller stole buyers’ credentials. Same weak point: a credential someone can guess, find, or steal.
Read: https://thn.news/ai-security-risks | 3 657 |
| 7 | 🚨 Keystone to destroy 18,835 hardware wallets after hackers stole its device verification key.
The stolen key could let counterfeit wallets pass as genuine. The breach also affected 25,964 buyer records.
What to do ↓ https://thehackernews.com/2026/10/keystone-to-destroy-18835-hardware.html | 3 599 |
| 8 | ⚠️ Lazarus hackers are exploiting South Korean banking security software to deploy malware in a new espionage campaign.
The attacks use GitHub-hosted payloads, new backdoors, and malware communications protected by post-quantum encryption.
Read: https://thehackernews.com/2026/10/lazarus-abuses-south-korean-security.html | 3 712 |
| 9 | 🛑 Australia says it gained access to an Amadey malware operation's backend and cut off a cybercriminal's control over 180,000 infected computers worldwide.
The malware wasn't removed, but the operator lost access.
Here's what happened: https://thehackernews.com/2026/10/australia-gets-into-amadey-malware.html | 4 349 |
| 10 | ‼️ OpenAI encrypts its AI models' hidden reasoning to keep it unreadable. Researchers found a way to extract it as plaintext using OpenAI's own compaction feature.
The method bypassed earlier protections. OpenAI has now patched the flaw.
Here's how it worked ↓ https://thehackernews.com/2026/10/openai-compaction-flaw-let-researchers.html | 4 644 |
| 11 | 🚨 Ransomware attackers know your recovery plan. That's why they target your backups first.
Stolen admin credentials, deleted shadow copies, compromised backup storage.
Having backups isn't the same as being able to recover.
Here's what actually protects recovery → https://thehackernews.com/expert-insights/2026/10/your-backup-isnt-ransomware-proof-just.html | 4 769 |
| 12 | 🚨 Dahua IP cameras compromised in Ukraine.
CERT-UA confirms attackers gained access to video feeds, changed device settings, and created rogue accounts.
The attacks exploit Easy4IP P2P access alongside weak passwords or authentication bypass flaws.
Full details ↓ https://thehackernews.com/2026/10/attackers-hijack-dahua-ip-cameras-in.html | 4 848 |
| 13 | ‼️ UPDATE - Tailscale confirms the Tailworm SSH flaws are real.
Its new investigation page says most of what it found is privilege escalation and calls the issues “serious.” Fix targeted within 24 hours — no CVE or patched version out yet.
Mitigate now:
→ Set TS_SSH_DISABLE_FORWARDING=1 in the tailscaled service and restart
→ Tighten SSH access rules to the users/devices that need them
Read: https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html | 5 060 |
| 14 | 🚨 CISA adds two PHP2Shell bugs to its KEV catalog after confirming active exploitation.
CVE-2026-109618 and CVE-2026-109619 enable unauthenticated remote code execution on affected PHP deployments.
Read ↓ https://thehackernews.com/2026/10/cisa-confirms-active-exploitation-of.html | 5 521 |
| 15 | 🚨 953 online stores infected in a stealthy malware campaign, most running Magento.
Hackers injected malicious JavaScript that filters out security scanners while serving malicious code to real shoppers.
How it works ↓ https://thehackernews.com/2026/10/hackers-infect-953-online-stores-with.html | 6 652 |
| 16 | ‼️ PHP patches Windows builds AGAIN, just 5 days after the PHP2Shell fixes.
This time, a Brotli flaw could allow code execution when cURL automatically decompresses crafted HTTP responses.
Updated builds cover PHP 8.2–8.5.
Full details: https://thehackernews.com/2026/10/php-issues-second-windows-security.html | 6 903 |
| 17 | 🚨 Microsoft Teams IT support scams are leading to malware and ransomware attacks.
Researchers tracked hundreds of cases where attackers flood inboxes with emails, impersonate IT staff on Teams, and trick employees into granting remote access.
How the attacks work ↓ https://thehackernews.com/2026/10/attackers-use-microsoft-teams-it.html | 6 610 |
| 18 | This2Shell. That2Shell. Everything2Shell.
WHAT A WEEK IN #CYBERSECURITY.
> Critical RCEs dropping everywhere.
> Millions of exploit attempts.
> AI agents getting hijacked.
> Leaked keys poisoning software packages.
> Old bugs coming back to haunt us.
> And yes, some sites just went offline.
One week. Too many ways to get hacked.
⚡ Full Recap: https://thehackernews.com/2026/10/weekly-recap-this2shell-that2shell.html | 7 125 |
| 19 | Get real AI adoption data
Every unused AI license is money that could go somewhere else.
NordLayer AI Scout gives you the answers on real AI usage in your company:
✅ See who’s provisioned yet not adopting the tools
✅ Check usage broken down by person, app, department, and team.
✅ Discover when AI gets used, which slots are busiest, and how much happens outside working hours.
✅ No prompt content is ever shown, only trends.
Know which seats are working and which ones you’re overpaying for 👉 https://thn.news/vault-credentials | 6 342 |
| 20 | ‼️ ALERT - 2 New critical Wasmtime flaws (CVSS 9.9) could let malicious WebAssembly modules escape their sandbox.
• CVE-2026-115889 Affects multiple architectures
• CVE-2026-115893 ARM64-only, present since 2020
Embedded apps need rebuilding.
Read ↓ https://thehackernews.com/2026/10/two-critical-wasmtime-flaws-could-let.html | 6 213 |
