The Hacker News
Open in Telegram
β Official THN Telegram Channel β A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking. π¨ Contact: admin@thehackernews.com π Website: https://thehackernews.com
Show moreπ Analytical overview of Telegram channel The Hacker News
Channel The Hacker News (@thehackernews) in the English language segment is an active participant. Currently, the community unites 163 461 subscribers, ranking 654 in the Technologies & Applications category and 106 in the USA region.
π Audience metrics and dynamics
Since its creation on Π½Π΅Π²ΡΠ΄ΠΎΠΌΠΎ, the project has demonstrated rapid growth, gathering an audience of 163 461 subscribers.
According to the latest data from 06 October, 2026, the channel demonstrates stable activity. Although there has been a change in the number of participants by 1 189 over the last 30 days and by -43 over the last 24 hours, overall reach remains high.
- Verification status: Verified (Officially confirmed by Telegram)
- Engagement rate (ER): The average audience engagement rate is 4.26%. Within the first 24 hours after publication, content typically collects 2.88% reactions from the total number of subscribers.
- Post reach: On average, each post receives 6 966 views. Within the first day, a publication typically gains 4 716 views.
- Reactions and interaction: The audience actively supports content: the average number of reactions per post is 10.
- Thematic interests: Content is focused on key topics such as attack, credential, cve-2026, github, backdoor.
π Description and content policy
The author describes the resource as a platform for expressing subjective opinions:
ββ Official THN Telegram Channel β A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking.
π¨ Contact: admin@thehackernews.com
π Website: https://thehackernews.comβ
Thanks to the high frequency of updates (latest data received on 07 October, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.
163 461
Subscribers
-4324 hours
-4497 days
+1 18930 days
Data loading in progress...
Similar Channels
Tags Cloud
Incoming and Outgoing Mentions
---
---
---
---
---
---
Attracting Subscribers
October '26Oct '26
October '26
+99
in 8 channels
September '26
+3 382
in 13 channels
Get PRO
August '26
+1 157
in 23 channels
Get PRO
July '26
+1 477
in 20 channels
Get PRO
June '26
+994
in 18 channels
Get PRO
May '26
+1 175
in 24 channels
Get PRO
April '26
+4 326
in 26 channels
Get PRO
March '26
+6 849
in 26 channels
Get PRO
February '26
+1 583
in 27 channels
Get PRO
January '26
+1 516
in 23 channels
Get PRO
December '25
+1 900
in 34 channels
Get PRO
November '25
+1 648
in 25 channels
Get PRO
October '25
+1 634
in 21 channels
Get PRO
September '25
+1 163
in 25 channels
Get PRO
August '25
+1 070
in 17 channels
Get PRO
July '25
+1 318
in 28 channels
Get PRO
June '25
+2 024
in 24 channels
Get PRO
May '25
+1 328
in 24 channels
Get PRO
April '25
+1 758
in 13 channels
Get PRO
March '25
+1 782
in 16 channels
Get PRO
February '25
+2 159
in 19 channels
Get PRO
January '25
+2 315
in 31 channels
Get PRO
December '24
+3 006
in 22 channels
Get PRO
November '24
+3 500
in 12 channels
Get PRO
October '24
+3 385
in 18 channels
Get PRO
September '24
+2 583
in 22 channels
Get PRO
August '24
+2 157
in 16 channels
Get PRO
July '24
+1 844
in 11 channels
Get PRO
June '24
+1 514
in 7 channels
Get PRO
May '24
+1 079
in 9 channels
Get PRO
April '24
+1 306
in 11 channels
Get PRO
March '24
+1 332
in 13 channels
Get PRO
February '24
+630
in 14 channels
Get PRO
January '24
+1 075
in 14 channels
Get PRO
December '23
+973
in 7 channels
Get PRO
November '23
+1 457
in 8 channels
Get PRO
October '23
+3 536
in 5 channels
Get PRO
September '23
+3 177
in 0 channels
Get PRO
August '23
+3 401
in 0 channels
Get PRO
July '23
+2 829
in 0 channels
Get PRO
June '23
+2 847
in 0 channels
Get PRO
May '23
+2 417
in 0 channels
Get PRO
April '23
+2 646
in 0 channels
Get PRO
March '23
+2 345
in 0 channels
Get PRO
February '23
+2 328
in 0 channels
Get PRO
January '23
+2 603
in 0 channels
Get PRO
December '22
+2 541
in 0 channels
Get PRO
November '22
+2 543
in 0 channels
Get PRO
October '22
+3 146
in 0 channels
Get PRO
September '22
+3 951
in 0 channels
Get PRO
August '22
+2 425
in 0 channels
Get PRO
July '22
+2 611
in 0 channels
Get PRO
June '22
+2 636
in 0 channels
Get PRO
May '22
+3 979
in 0 channels
Get PRO
April '22
+4 171
in 0 channels
Get PRO
March '22
+6 802
in 0 channels
Get PRO
February '22
+3 153
in 0 channels
Get PRO
January '22
+4 050
in 0 channels
Get PRO
December '21
+4 346
in 0 channels
Get PRO
November '21
+4 152
in 0 channels
Get PRO
October '21
+6 200
in 0 channels
Get PRO
September '21
+5 226
in 0 channels
Get PRO
August '21
+5 134
in 0 channels
Get PRO
July '21
+6 261
in 0 channels
Get PRO
June '21
+2 427
in 0 channels
Get PRO
May '21
+731
in 0 channels
Get PRO
April '21
+1 029
in 0 channels
Get PRO
March '21
+1 300
in 0 channels
Get PRO
February '21
+786
in 0 channels
Get PRO
January '21
+1 163
in 0 channels
Get PRO
December '20
+22 087
in 0 channels
| Date | Subscriber Growth | Mentions | Channels | |
| 07 October | +15 | |||
| 06 October | +19 | |||
| 05 October | +1 | |||
| 04 October | +20 | |||
| 03 October | +11 | |||
| 02 October | +6 | |||
| 01 October | +27 |
Channel Posts
βΌοΈ Attackers hijacked the .gh, .sl and .as ccTLD registries, changed authoritative DNS, and obtained at least 12 unauthorized TLS certificates for Google and YouTube domains.
Google says its systems were not breached. All 12 certificates were revoked.
Read - https://thehackernews.com/2026/10/attackers-hijack-gh-sl-and-as.html
| 2 |  π¨ Malicious npm packages are abusing lifecycle hooks to deliver Windows malware.
Eight packages tied to the MALFEX campaign logged 40,767 downloads and can deploy Overlord RAT and a Node.js stealer.
Read - https://thehackernews.com/2026/10/eight-malicious-npm-packages-downloaded.html | 1 863 |
| 3 |  β οΈ SonicWall has patched a CVSS 10.0 WorkPlace SSRF that requires no login.
CVE-2026-102255 can reach internal functions before authentication. SonicWall says it has no evidence of exploitation.
Read - https://thehackernews.com/2026/10/sonicwall-patches-cvss-100-pre.html | 2 277 |
| 4 |  βΌοΈ UNPATCHED >> A single network message can trigger code execution on an LMCache multiprocess server without authentication when the server is bound to a routable address.
CVE-2026-105192 affects LMCache 0.3.9 through 0.5.5, plus 0.5.6 release candidates.
Details β https://thehackernews.com/2026/10/unpatched-critical-lmcache-flaw-lets.html | 2 637 |
| 5 |  β οΈ PoeLLM has infected 3,400+ servers in a crypto-mining campaign targeting exposed AI/LLM infrastructure.
The malware hides its C2 address inside a GitHub-hosted poem and repurposes some compromised hosts to scan for more vulnerable systems.
Read more: https://thehackernews.com/2026/10/poellm-malware-infects-3400-servers-to.html | 2 385 |
| 6 |  Join Mikko HyppΓΆnen and security leaders from the NFL, CHANEL, and Atlassian at The Validation Summit β26.
Hosted by Picus Security, this two-hour digital summit focuses on how to build a security program that keeps pace with attackers using AI.
Youβll hear why patching and periodic tests leave gaps, how a validation program can address them, and what security leaders are changing in their own teams.
Then watch a live demo follow a new vulnerability from disclosure through remediation. See how to check exposure before a working exploit exists, test what your controls stop, and prove the fix worked.
October 14, 1 PM ET | October 15, 11 AM BST. Choose the broadcast that suits you.
Save your seat: https://thn.news/validation-summit | 2 639 |
| 7 |  79% of CISOs now rank human risk as their biggest cyber vulnerability. 78% see GenAI as a security risk.
What changed in 2026, and where security priorities are shifting:
Read the full analysis: https://thehackernews.com/2026/10/the-sixth-voice-of-ciso-data-shows.html | 3 033 |
| 8 |  π FBI and Secret Service warn FortiBleed remains active against internet-facing Fortinet firewalls and SSL VPN gateways.
Attackers are still scanning exposed firewalls using previously compromised credentials. The campaign had amassed 86,644+ working device credentials across 194 countries as of June 19.
Read: https://thehackernews.com/2026/10/fbi-warns-fortibleed-remains-active.html | 3 311 |
| 9 |  A hacker is looking at your network right now. Do you see what he sees?
Jaime Woodruff does. He's an ethical hacker who's broken into real environments β and on October 14, he's going live to show MSPs and IT pros exactly how attackers get in.
But that's just the beginning.
The Kaseya Cybersecurity Summit packs two hours of content you can actually use:
β
Live ransomware demo from an ethical hacker
β
Real attack replays showing where defenses failed
β
Compliance decoded: FIPS 140-3, NIS2, cyber insurance
β
Resilience strategies for when prevention falls short
Free. Virtual. October 14 | 10:30 AM β 12:45 PM ET.
π₯ Seats are filling fast β don't get locked out.
π Register now: https://thn.news/cybersecurity-summit | 3 174 |
| 10 |  βΌοΈ Two hours.
Thatβs how quickly exploitation attempts followed public details for Atlassian CVE-2026-21589.
The flaw lets unauthenticated attackers access specific webroot files when exact paths are known. Fixes are available.
Read - https://thehackernews.com/2026/10/atlassian-data-center-flaw-draws.html | 2 920 |
| 11 |  Agentic pentesting can prove real attack paths. But can it validate fast enough, across enough of the enterprise?
Picus breaks down the speed and coverage gaps, and why continuous validation needs more than pentesting alone.
Read more: https://thehackernews.com/2026/10/what-is-agentic-pentesting-what-it.html | 3 049 |
| 12 |  Anthropic is giving vetted cyber teams broader access to Claude with reduced safeguards.
The move comes as Project Glasswing reports at least 129,000 verified vulnerabilities, including 33,000+ rated critical or high severity.
Read - https://thehackernews.com/2026/10/anthropic-expands-claude-access-for.html | 3 425 |
| 13 |  π¨ 100+ compromised websites are serving fake Cloudflare verification pages to Windows users arriving from search results.
Following the ClickFix prompt installs an MSI that delivers LunexStealer, which steals browser cookies, history, and credentials.
Read the full story - https://thehackernews.com/2026/10/100-compromised-websites-use-fake.html | 4 501 |
| 14 |  Fake ChatGPT, Gemini, Claude, Perplexity, Meta Muse, and Manus ad platforms are being used as phishing lures.
The sites open fake browser login windows to capture credentials and MFA codes, while operators attempt real-time sign-ins.
Read: https://thehackernews.com/2026/10/fake-chatgpt-gemini-and-claude-ad.html | 5 433 |
| 15 |  β οΈ Linux backdoors are hiding behind trusted email security names.
Rapid7 found BPFDoor, BPF Rekoobe, and AVERAT targeting systems in South Korea and Taiwan, impersonating products and processes to blend in. AVERAT even uses SMTP for C2.
Read: https://thehackernews.com/2026/10/linux-backdoors-impersonate-email.html | 6 182 |
| 16 |  Get an inside look at Georgetown's Cybersecurity Master's program. Register for the virtual sample class on October 15.
Sign upΒ β https://thn.news/sample-class-risk | 6 418 |
| 17 |  βΌοΈ Opening a malicious spreadsheet can make LibreOffice or OpenOffice run attacker-controlled code without a macro warning.
The attack requires Java to be enabled. LibreOffice has patched the flaw; OpenOffice 4.1.16 remains affected.
PoC demonstrated, details here - https://thehackernews.com/2026/10/libreoffice-and-openoffice-flaws-let.html | 6 114 |
| 18 |  Can you keep up with SaaS sprawl?
As applications multiply, so do users, permissions, access policies, and the places IT needs visibility. Without a centralized approach, secure access can become fragmented across an ever-growing application environment.
Explore zero-trust network access (ZTNA) with NordLayer.
Learn more βΆοΈ https://thn.news/developer-secrets-webinar | 5 347 |
| 19 |  β οΈ Wikimedia says OpenAI agents tried to compromise Etherpad, modified wiki tooling for proxy use, and sent millions of automated requests.
It found no evidence its systems or data were compromised.
Read - https://thehackernews.com/2026/10/wikimedia-says-openai-agents-tried-to.html | 4 811 |
| 20 |  MCP marketplaces have a trust problem.
OX Security analyzed 15,465 publicly indexed MCP servers across 5 registries and found no marketplace vetting.
Among the findings:
β’ 2.3% of hosts no longer resolve
β’ 6 use expired domains anyone could re-register
β’ 15.6% resolve outside the US
The risk is not MCP itself. It is trusting servers without verifying who runs them or where your data goes.
Read - https://thehackernews.com/2026/10/welcome-to-jungle-what-we-found-inside.html | 4 663 |
