The Hacker News
Открыть в Telegram
⭐ Official THN Telegram Channel — A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking. 📨 Contact: admin@thehackernews.com 🌐 Website: https://thehackernews.com
Больше📈 Аналитический обзор Telegram-канала The Hacker News
Канал The Hacker News (@thehackernews) языкового сегмента Английский является активным участником. Сейчас сообщество объединяет 164 871 подписчиков, занимая 645 место в категории Технологии и приложения и 106 место в регионе США.
📊 Показатели аудитории и динамика
С момента создания невідомо проект демонстрирует стремительный рост, собрав аудиторию из 164 871 подписчиков.
Согласно последним данным от 15 сентября, 2026, канал показывает стабильную активность. За последние 30 дней изменение числа участников составило 162, а за последние 24 часа — -11, при этом общий охват остаётся высоким.
- Статус верификации: Верифицирован (официально подтверждён Telegram)
- Уровень вовлечённости (ER): Средний показатель вовлечённости аудитории составляет 4.57%. В первые 24 часа после публикации контент обычно набирает 2.98% реакций от общего числа подписчиков.
- Охват публикаций: В среднем каждый пост получает 7 411 просмотров. В течение первых суток публикация набирает 4 838 просмотров.
- Реакции и взаимодействия: Аудитория активно поддерживает контент: среднее количество реакций на один пост — 11.
- Тематические интересы: Контент сосредоточен на ключевых темах, таких как attack, credential, cve-2026, github, backdoor.
📝 Описание и контентная политика
Автор описывает ресурс как площадку для выражения субъективного мнения:
“⭐ Official THN Telegram Channel — A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking.
📨 Contact: admin@thehackernews.com
🌐 Website: https://thehackernews.com”
Благодаря высокой частоте обновлений (последние данные получены 16 сентября, 2026) канал поддерживает актуальность и высокий уровень охвата публикаций. Аналитика показывает, что аудитория активно взаимодействует с контентом, что делает его важной точкой влияния в категории Технологии и приложения.
164 871
Подписчики
-1124 часа
-737 дней
+16230 дней
Архив постов
164 852
⚠️ One hijacked AI coding session helped spread Shai-Hulud across about 100 internal repositories.
A poisoned PyPI package installed an infostealer, GitHub OAuth tokens were stolen, and a compromised package in the company’s own namespace caused a second infection.
Read: https://thehackernews.com/2026/09/attacker-hijacks-ai-coding-assistant.html
164 852
⚠️ N0va phishing abuses legitimate sign-in flows to capture access and refresh tokens.
The campaign impersonates Teams, SharePoint, DocuSign, Google Drive, and other trusted services, then can establish SSO access to email, files, and cloud apps.
Inside the attack chain → https://thehackernews.com/2026/09/n0va-phishkit-targets-us-and-eu.html
164 852
🛑 A Parallels Desktop flaw lets non-admin Mac users gain root, but Intel Macs can’t install the version containing the fix.
Tracked as CVE-2026-90894, JFrog demonstrated the flaw on Parallels Desktop 26.4.0 and reports no attacks.
How the root escalation works → https://thehackernews.com/2026/09/parallels-desktop-flaw-lets-non-admin.html
164 852
A leaked credential is only useful intelligence if you know it still works.
Pentera’s Recorded Future integration automatically tests exposed credentials against an organization’s external attack surface to confirm which ones can actually be used.
How the validation works → https://thehackernews.com/2026/09/threat-intelligence-alone-wont-close.html
164 852
‼️ ALERT - Google says a Pixel modem flaw may be under limited, targeted exploitation.
CVE-2026-58704 can enable adjacent privilege escalation without user interaction. Google patched it in the September Pixel update.
What’s known about the attacks → https://thehackernews.com/2026/09/google-patches-pixel-modem-flaw-amid.html
164 852
⚠️ Acronis Backup flaw exploited in limited targeted attacks.
CVE-2026-87886 lets a low-privileged attacker escalate permissions on affected Linux cPanel/WHM and Plesk deployments. Fixes are available.
Which builds need updating → https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html
164 852
A unified security dashboard can still hide a broken incident workflow.
Run one incident from detection to clean recovery. Count every console switch, permission change, and ownership handoff.
Six tests reveal whether consolidation actually reduces operational friction: https://thehackernews.com/expert-insights/2026/09/how-to-evaluate-unified-security.html
164 852
🚨 Attackers are exploiting a critical WooCommerce Wholesale Lead Capture flaw to plant PHP web shells.
Wordfence has blocked over 100,000 exploit attempts since June against CVE-2026-27540, which affects versions through 2.0.3.1.
Read: https://thehackernews.com/2026/09/attackers-exploit-woocommerce-wholesale.html
164 852
⚠️ Forged admin JWTs are being used in WSO2 API Manager exploitation attempts.
CVE-2026-5430 lets unsupported JWT algorithms bypass authentication and can lead to account takeover. Fixes are available.
Read: https://thehackernews.com/2026/09/active-exploitation-attempts-target.html
164 852
🚨 KREMLIN banking malware bypasses Chromium integrity checks to install a Chrome and Edge extension that steals credentials and session tokens.
It also uses Ethereum smart contracts to rotate C2 and payload locations.
How the attack chain works: https://thehackernews.com/2026/09/kremlin-banking-malware-hijacks-chrome.html
164 852
‼️ Iran-attributed HEAVYGRAM, also tracked as CHOSEN BRICK, uses Telegram bots to spy on dissidents and journalists.
A joint U.S.-U.K.-Dutch advisory says the Windows malware can steal messages and passwords, record audio, capture screenshots, and exfiltrate files.
Details → https://thehackernews.com/2026/09/iranian-hackers-use-telegram-controlled.html
164 852
🚨 BambooToken uses MQTT to control Windows and Linux hosts across Asia and South America.
Lumen identified a dozen compromised entities, with activity detected as recently as July 2026.
Learn what's inside the malware’s MQTT command-and-control: https://thehackernews.com/2026/09/bambootoken-malware-uses-mqtt-to.html
164 852
✅ Your Business Continuity Management Checklist.
Most resilience programs look complete on paper. Let's make sure yours holds up when it matters most.
Discover 6 ways to align your BCM program with operational reality.
Get the checklist → https://thn.news/bcm-reality-check
164 852
Phishing puts financial SOCs under constant pressure. Cut the workload with ANY.RUN: faster analysis, fewer escalations, and 21 min lower MTTR.
→ https://thn.news/phishing-soc-detection
164 852
🚨 A human attacker exploited Marimo’s pre-auth RCE and reached an SSH bastion in eight seconds.
The operator used harvested AWS credentials to fetch the private key from Secrets Manager and authenticate over SSH. No AI agent was involved.
Read: https://thehackernews.com/2026/09/human-attacker-exploits-marimo-rce.html
164 852
One attack step can now decide what gets tested next.
OpenAEV’s Attack Chaining feeds live findings like credentials, tokens, and open ports into the next stage, while XTM One can plan and adapt the path inside a defined scope.
How the attack path builds: https://thehackernews.com/2026/09/attack-chains-not-just-attack-surfaces.html
164 852
⚠️ Exposed Vite dev servers are being scanned for cloud credentials.
Attackers are exploiting a Vite flaw to bypass file restrictions and retrieve .env files, AWS and Azure credentials, and infrastructure state.
How the bypass works: https://thehackernews.com/2026/09/mass-scanning-campaign-exploits-vite.html
164 852
Cursor deleted a production database and its backups in nine seconds.
The agent found an unrelated Railway API token with blanket GraphQL permissions while handling a staging task. AI blast radius follows credential reach.
Why access boundaries matter: https://thehackernews.com/expert-insights/2026/09/stop-trying-to-control-ai-behavior.html
164 852
‼️ Warning: LiteSpeed Enterprise before 6.3.7 can let low-privilege website users gain root on shared-hosting servers.
It can bypass CageFS isolation. No CVE is assigned, exploitation is unknown, and 6.3.7 may not auto-update immediately.
Manual update may be required → https://thehackernews.com/2026/09/litespeed-enterprise-flaw-could-let-one.html
164 852
‼️ Attackers are exploiting a Cisco Secure Email Gateway vulnerability that can let a crafted email trigger command execution as root.
Cisco has released fixes, and CISA added CVE-2026-76461 to its KEV catalog.
How the attack works → https://thehackernews.com/2026/09/cisco-secure-email-gateway-flaw.html
