The Hacker News
Kanalga Telegram’da o‘tish
⭐ Official THN Telegram Channel — A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking. 📨 Contact: admin@thehackernews.com 🌐 Website: https://thehackernews.com
Ko'proq ko'rsatish📈 Telegram kanali The Hacker News analitikasi
The Hacker News (@thehackernews) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 163 939 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 657-o'rinni va AQSH mintaqasida 97-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 163 939 obunachiga ega bo‘ldi.
25 Oktabr, 2026 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni -250 ga, so‘nggi 24 soatda esa 112 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlangan (Telegram tomonidan rasmiy tasdiq)
- Jalb etish (ER): Auditoriya o‘rtacha 4.25% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining 3.09% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 6 958 marta ko‘riladi; birinchi sutkada odatda 5 058 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 12 ta reaksiya keladi.
- Tematik yo‘nalishlar: Kontent attack, credential, cve-2026, github, backdoor kabi asosiy mavzularga jamlangan.
📝 Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“⭐ Official THN Telegram Channel — A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking.
📨 Contact: admin@thehackernews.com
🌐 Website: https://thehackernews.com”
Yuqori yangilanish chastotasi (oxirgi ma’lumot 26 Oktabr, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
163 966
Obunachilar
+11224 soatlar
+7087 kun
-25030 kun
Ma'lumotlar yuklanmoqda
O'xshash kanallar
Taglar buluti
Kirish va chiqish esdaliklari
---
---
---
---
---
---
Obunachilarni jalb qilish
Oktabr '26Okt '26
Oktabr '26
+1 245
24 kanalda
Sentabr '26
+3 382
17 kanalda
Get PRO
Avgust '26
+1 157
24 kanalda
Get PRO
Iyul '26
+1 477
20 kanalda
Get PRO
Iyun '26
+994
18 kanalda
Get PRO
May '26
+1 175
26 kanalda
Get PRO
Aprel '26
+4 326
27 kanalda
Get PRO
Mart '26
+6 849
26 kanalda
Get PRO
Fevral '26
+1 583
27 kanalda
Get PRO
Yanvar '26
+1 516
23 kanalda
Get PRO
Dekabr '25
+1 900
35 kanalda
Get PRO
Noyabr '25
+1 648
25 kanalda
Get PRO
Oktabr '25
+1 634
21 kanalda
Get PRO
Sentabr '25
+1 163
25 kanalda
Get PRO
Avgust '25
+1 070
17 kanalda
Get PRO
Iyul '25
+1 318
28 kanalda
Get PRO
Iyun '25
+2 024
24 kanalda
Get PRO
May '25
+1 328
24 kanalda
Get PRO
Aprel '25
+1 758
13 kanalda
Get PRO
Mart '25
+1 782
16 kanalda
Get PRO
Fevral '25
+2 159
19 kanalda
Get PRO
Yanvar '25
+2 315
31 kanalda
Get PRO
Dekabr '24
+3 006
22 kanalda
Get PRO
Noyabr '24
+3 500
12 kanalda
Get PRO
Oktabr '24
+3 385
18 kanalda
Get PRO
Sentabr '24
+2 583
22 kanalda
Get PRO
Avgust '24
+2 157
16 kanalda
Get PRO
Iyul '24
+1 844
11 kanalda
Get PRO
Iyun '24
+1 514
7 kanalda
Get PRO
May '24
+1 079
9 kanalda
Get PRO
Aprel '24
+1 306
11 kanalda
Get PRO
Mart '24
+1 332
13 kanalda
Get PRO
Fevral '24
+630
14 kanalda
Get PRO
Yanvar '24
+1 075
14 kanalda
Get PRO
Dekabr '23
+973
7 kanalda
Get PRO
Noyabr '23
+1 457
8 kanalda
Get PRO
Oktabr '23
+3 536
5 kanalda
Get PRO
Sentabr '23
+3 177
0 kanalda
Get PRO
Avgust '23
+3 401
0 kanalda
Get PRO
Iyul '23
+2 829
0 kanalda
Get PRO
Iyun '23
+2 847
0 kanalda
Get PRO
May '23
+2 417
0 kanalda
Get PRO
Aprel '23
+2 646
0 kanalda
Get PRO
Mart '23
+2 345
0 kanalda
Get PRO
Fevral '23
+2 328
0 kanalda
Get PRO
Yanvar '23
+2 603
0 kanalda
Get PRO
Dekabr '22
+2 541
0 kanalda
Get PRO
Noyabr '22
+2 543
0 kanalda
Get PRO
Oktabr '22
+3 146
0 kanalda
Get PRO
Sentabr '22
+3 951
0 kanalda
Get PRO
Avgust '22
+2 425
0 kanalda
Get PRO
Iyul '22
+2 611
0 kanalda
Get PRO
Iyun '22
+2 636
0 kanalda
Get PRO
May '22
+3 979
0 kanalda
Get PRO
Aprel '22
+4 171
0 kanalda
Get PRO
Mart '22
+6 802
0 kanalda
Get PRO
Fevral '22
+3 153
0 kanalda
Get PRO
Yanvar '22
+4 050
0 kanalda
Get PRO
Dekabr '21
+4 346
0 kanalda
Get PRO
Noyabr '21
+4 152
0 kanalda
Get PRO
Oktabr '21
+6 200
0 kanalda
Get PRO
Sentabr '21
+5 226
0 kanalda
Get PRO
Avgust '21
+5 134
0 kanalda
Get PRO
Iyul '21
+6 261
0 kanalda
Get PRO
Iyun '21
+2 427
0 kanalda
Get PRO
May '21
+731
0 kanalda
Get PRO
Aprel '21
+1 029
0 kanalda
Get PRO
Mart '21
+1 300
0 kanalda
Get PRO
Fevral '21
+786
0 kanalda
Get PRO
Yanvar '21
+1 163
0 kanalda
Get PRO
Dekabr '20
+22 087
0 kanalda
| Sana | Obunachilarni jalb qilish | Esdaliklar | Kanallar | |
| 26 Oktabr | +66 | |||
| 25 Oktabr | +118 | |||
| 24 Oktabr | +107 | |||
| 23 Oktabr | +144 | |||
| 22 Oktabr | +198 | |||
| 21 Oktabr | +171 | |||
| 20 Oktabr | +26 | |||
| 19 Oktabr | +35 | |||
| 18 Oktabr | +27 | |||
| 17 Oktabr | +12 | |||
| 16 Oktabr | +25 | |||
| 15 Oktabr | +26 | |||
| 14 Oktabr | +33 | |||
| 13 Oktabr | +12 | |||
| 12 Oktabr | +17 | |||
| 11 Oktabr | +34 | |||
| 10 Oktabr | +32 | |||
| 09 Oktabr | +38 | |||
| 08 Oktabr | +25 | |||
| 07 Oktabr | +15 | |||
| 06 Oktabr | +19 | |||
| 05 Oktabr | +1 | |||
| 04 Oktabr | +20 | |||
| 03 Oktabr | +11 | |||
| 02 Oktabr | +6 | |||
| 01 Oktabr | +27 |
Kanal postlari
🚨 Microsoft Teams IT support scams are leading to malware and ransomware attacks.
Researchers tracked hundreds of cases where attackers flood inboxes with emails, impersonate IT staff on Teams, and trick employees into granting remote access.
How the attacks work ↓ https://thehackernews.com/2026/10/attackers-use-microsoft-teams-it.html
| 2 |  This2Shell. That2Shell. Everything2Shell.
WHAT A WEEK IN #CYBERSECURITY.
> Critical RCEs dropping everywhere.
> Millions of exploit attempts.
> AI agents getting hijacked.
> Leaked keys poisoning software packages.
> Old bugs coming back to haunt us.
> And yes, some sites just went offline.
One week. Too many ways to get hacked.
⚡ Full Recap: https://thehackernews.com/2026/10/weekly-recap-this2shell-that2shell.html | 2 848 |
| 3 |  Get real AI adoption data
Every unused AI license is money that could go somewhere else.
NordLayer AI Scout gives you the answers on real AI usage in your company:
✅ See who’s provisioned yet not adopting the tools
✅ Check usage broken down by person, app, department, and team.
✅ Discover when AI gets used, which slots are busiest, and how much happens outside working hours.
✅ No prompt content is ever shown, only trends.
Know which seats are working and which ones you’re overpaying for 👉 https://thn.news/vault-credentials | 3 105 |
| 4 |  ‼️ ALERT - 2 New critical Wasmtime flaws (CVSS 9.9) could let malicious WebAssembly modules escape their sandbox.
• CVE-2026-115889 Affects multiple architectures
• CVE-2026-115893 ARM64-only, present since 2020
Embedded apps need rebuilding.
Read ↓ https://thehackernews.com/2026/10/two-critical-wasmtime-flaws-could-let.html | 3 576 |
| 5 |  🚨 An attack can unfold for weeks before a SOC gets its first major alert.
By then, the real story may be buried in DNS queries, logins, and network connections that looked harmless.
Here's how NDR helps AI-assisted SOCs connect the clues and reconstruct attacks.
Read more ↓ https://thehackernews.com/2026/10/between-alerts-what-attackers-do-in.html | 3 888 |
| 6 |  ‼️ Tailscale SSH (Tailworm)
Researchers report that a compromised, SSH-authorized device could gain root on permitted targets via forwarding flaws.
Not unauthenticated RCE. Lab-tested; scope still under review.
Mitigations:
• Tighten SSH access policies
• Disable forwarding if unused (TS_SSH_DISABLE_FORWARDING=1)
• Enable SSH check mode as an added barrier
Tailnet Lock helps limit device enrollment abuse, not root escalation. Tailscale isn't recommending a blanket SSH shutdown.
Read - https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html | 3 813 |
| 7 |  🚨 Android spyware for rent can steal Telegram 2FA passwords and clone WeChat accounts.
Meet uCreator, a kit that hides inside modified Telegram apps, extracts chats, and conceals attacker sessions.
Read full investigation: https://thehackernews.com/2026/10/ucreator-android-spyware-can-steal.html | 4 183 |
| 8 |  🚨 UPDATE: The Brotli flaw (CVE-2026-111497) goes beyond Node.js and web traffic.
• .NET: patched by Microsoft
• FFmpeg: hit via a crafted JPEG XL image
• ClickHouse: one request crashes it, fix not yet released
• Apache Arrow: no fix yet
Details ↓ https://thehackernews.com/2026/10/brotli-decoder-flaw-behind-nodejs-rce.html | 4 329 |
| 9 |  🚨 97 Microsoft 365 accounts compromised across 79 organizations.
Attackers replayed stolen sign-in tokens, registered 48 rogue Entra devices, and tampered with MFA settings to maintain access.
Huntress tracked over 200,000 login attempts.
Read - https://thehackernews.com/2026/10/microsoft-365-token-replay-attacks.html | 4 303 |
| 10 |  🚨 850+ compromised GitHub accounts. 13,500+ malicious branches.
Researchers uncovered 'Gheist,' an ongoing campaign using stolen tokens to plant GitHub Actions workflows that dump private repo secrets into logs.
Attackers download the logs, then delete the runs.
Details: https://thehackernews.com/2026/10/gheist-uses-stolen-github-tokens-to.html | 4 369 |
| 11 |  🍿 UPDATE on the Popcorn Time cleanup
Of the 20 domains Eye Security flagged:
▸ 17 now point to Shadowserver
▸ 3 don't, and whoever holds them could push code to computers still running the app
▸ 1 of those 3 was registered Oct 19
Read ↓ https://thehackernews.com/2026/10/researchers-push-over-2-million-updates.html | 4 237 |
| 12 |  🚨 The 9.0 Linux KSMBD bugs got the headlines. The 7.8 one has the public root exploit.
ZDI-CAN-33367: confirmed root on AlmaLinux, Debian and Ubuntu.
→ Slips past the Dirty Frag fix
→ No merged patch. No CVE.
Who's exposed + the stopgap ↓ https://thehackernews.com/2026/10/two-cvss-90-linux-ksmbd-rce-flaws.html | 4 636 |
| 13 |  ‼️ In a real-world attack, a malicious file in a dev's Downloads folder tried to trick an AI coding agent into installing malware.
In controlled tests, Codex ran the malware in over 90% of attempts.
All it took was a planted AGENTS md file.
Read: https://thehackernews.com/2026/10/malicious-file-in-downloads-folder.html | 4 997 |
| 14 | ‼️ In a real-world attack, a malicious file in a dev's Downloads folder tried to trick an AI coding agent into installing malware.
In controlled tests, Codex ran the malware in over 90% of attempts.
All it took was a planted AGENTS-md file.
Read: https://thehackernews.com/2026/10/malicious-file-in-downloads-folder.html | 1 |
| 15 | ‼️ In a real-world attack, a malicious file in a dev's Downloads folder tried to trick an AI coding agent into installing malware.
In controlled tests, Codex ran the malware in over 90% of attempts.
All it took was a planted AGENTS.md file.
Read: https://thehackernews.com/2026/10/malicious-file-in-downloads-folder.html | 1 |
| 16 |  ‼️ WARNING - A researcher just dropped a report on Tailscale SSH flaws — one compromised device could get root on others, and there’s NO PATCH yet.
In lab tests, SSH port forwarding enabled privilege escalation and lateral movement across already-permitted devices.
Tailscale says a fix is coming.
Read - https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html | 7 289 |
| 17 |  🚨 PHP2Shell attackers accessed MFA secrets and password hashes at a European government entity in just 2 hours.
That's not all.
→ Signs of agentic AI use in post-exploitation activity
→ Suspected Lazarus-linked operators scanning 216 targets worldwide
Full details ↓ https://thehackernews.com/2026/10/php2shell-exploitation-hits-government.html | 7 255 |
| 18 |  ‼️ OpenAI's AI agents found ways to escape virtual machines and secretly communicate across isolated sandboxes.
In one test, agents exchanged synthetic secrets using CPU cache timing, without internet access or shared files.
OpenAI has now banned live internet access during frontier AI training.
Full story: https://thehackernews.com/2026/10/openai-ai-agents-demonstrate-vm-escapes.html | 8 066 |
| 19 |  🚨 LiteLLM reveals the root cause of its supply chain attack.
A master key leaked on GitHub in May was never revoked, allowing attackers to access its Agent Platform, steal a GitHub owner token, and publish a malicious PyPI release in October.
Read: https://thehackernews.com/2026/10/leaked-litellm-master-key-let-attackers.html | 8 892 |
| 20 |  Google says your Gmail, Drive, and Photos data could influence the ads you see.
The catch? This can happen when you opt to share that data with AI-powered Search features.
Google's updated privacy policy spells out the trade-off.
Here's what you need to know: https://thehackernews.com/2026/10/google-says-gmail-and-photos-data.html | 8 392 |
