Endi mavjud! Telegram Tadqiqoti 2025 — yilning asosiy insaytlari 
The Hacker News
Kanalga Telegram’da o‘tish
⭐ Official THN Telegram Channel — A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking. 📨 Contact: admin@thehackernews.com 🌐 Website: https://thehackernews.com
Ko'proq ko'rsatish📈 Telegram kanali The Hacker News analitikasi
The Hacker News (@thehackernews) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 161 608 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 692-o'rinni va AQSH mintaqasida 109-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 161 608 obunachiga ega bo‘ldi.
30 Iyun, 2026 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni -378 ga, so‘nggi 24 soatda esa -15 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlangan (Telegram tomonidan rasmiy tasdiq)
- Jalb etish (ER): Auditoriya o‘rtacha 4.61% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining 3.08% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 7 453 marta ko‘riladi; birinchi sutkada odatda 4 977 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 14 ta reaksiya keladi.
- Tematik yo‘nalishlar: Kontent attack, credential, cve-2026, github, backdoor kabi asosiy mavzularga jamlangan.
📝 Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“⭐ Official THN Telegram Channel — A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking.
📨 Contact: admin@thehackernews.com
🌐 Website: https://thehackernews.com”
Yuqori yangilanish chastotasi (oxirgi ma’lumot 01 Iyul, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
161 608
Obunachilar
-1524 soatlar
-907 kunlar
-37830 kunlar
Ma'lumot yuklanmoqda...
O'xshash kanallar
Taglar buluti
Kirish va chiqish esdaliklari
---
---
---
---
---
---
Obunachilarni jalb qilish
Iyul '26
Iyul '26
+49
1 kanalda
Iyun '26
+994
17 kanalda
Get PRO
May '26
+1 175
24 kanalda
Get PRO
Aprel '26
+4 326
26 kanalda
Get PRO
Mart '26
+6 849
25 kanalda
Get PRO
Fevral '26
+1 583
27 kanalda
Get PRO
Yanvar '26
+1 516
22 kanalda
Get PRO
Dekabr '25
+1 900
33 kanalda
Get PRO
Noyabr '25
+1 648
24 kanalda
Get PRO
Oktabr '25
+1 634
21 kanalda
Get PRO
Sentabr '25
+1 163
25 kanalda
Get PRO
Avgust '25
+1 070
17 kanalda
Get PRO
Iyul '25
+1 318
28 kanalda
Get PRO
Iyun '25
+2 024
24 kanalda
Get PRO
May '25
+1 328
24 kanalda
Get PRO
Aprel '25
+1 758
13 kanalda
Get PRO
Mart '25
+1 782
16 kanalda
Get PRO
Fevral '25
+2 159
19 kanalda
Get PRO
Yanvar '25
+2 315
31 kanalda
Get PRO
Dekabr '24
+3 006
22 kanalda
Get PRO
Noyabr '24
+3 500
12 kanalda
Get PRO
Oktabr '24
+3 385
18 kanalda
Get PRO
Sentabr '24
+2 583
22 kanalda
Get PRO
Avgust '24
+2 157
16 kanalda
Get PRO
Iyul '24
+1 844
11 kanalda
Get PRO
Iyun '24
+1 514
7 kanalda
Get PRO
May '24
+1 079
9 kanalda
Get PRO
Aprel '24
+1 306
11 kanalda
Get PRO
Mart '24
+1 332
13 kanalda
Get PRO
Fevral '24
+630
14 kanalda
Get PRO
Yanvar '24
+1 075
14 kanalda
Get PRO
Dekabr '23
+973
7 kanalda
Get PRO
Noyabr '23
+1 457
8 kanalda
Get PRO
Oktabr '23
+3 536
5 kanalda
Get PRO
Sentabr '23
+3 177
0 kanalda
Get PRO
Avgust '23
+3 401
0 kanalda
Get PRO
Iyul '23
+2 829
0 kanalda
Get PRO
Iyun '23
+2 847
0 kanalda
Get PRO
May '23
+2 417
0 kanalda
Get PRO
Aprel '23
+2 646
0 kanalda
Get PRO
Mart '23
+2 345
0 kanalda
Get PRO
Fevral '23
+2 328
0 kanalda
Get PRO
Yanvar '23
+2 603
0 kanalda
Get PRO
Dekabr '22
+2 541
0 kanalda
Get PRO
Noyabr '22
+2 543
0 kanalda
Get PRO
Oktabr '22
+3 146
0 kanalda
Get PRO
Sentabr '22
+3 951
0 kanalda
Get PRO
Avgust '22
+2 425
0 kanalda
Get PRO
Iyul '22
+2 611
0 kanalda
Get PRO
Iyun '22
+2 636
0 kanalda
Get PRO
May '22
+3 979
0 kanalda
Get PRO
Aprel '22
+4 171
0 kanalda
Get PRO
Mart '22
+6 802
0 kanalda
Get PRO
Fevral '22
+3 153
0 kanalda
Get PRO
Yanvar '22
+4 050
0 kanalda
Get PRO
Dekabr '21
+4 346
0 kanalda
Get PRO
Noyabr '21
+4 152
0 kanalda
Get PRO
Oktabr '21
+6 200
0 kanalda
Get PRO
Sentabr '21
+5 226
0 kanalda
Get PRO
Avgust '21
+5 134
0 kanalda
Get PRO
Iyul '21
+6 261
0 kanalda
Get PRO
Iyun '21
+2 427
0 kanalda
Get PRO
May '21
+731
0 kanalda
Get PRO
Aprel '21
+1 029
0 kanalda
Get PRO
Mart '21
+1 300
0 kanalda
Get PRO
Fevral '21
+786
0 kanalda
Get PRO
Yanvar '21
+1 163
0 kanalda
Get PRO
Dekabr '20
+22 087
0 kanalda
| Sana | Obunachilarni jalb qilish | Esdaliklar | Kanallar | |
| 01 Iyul | +49 |
Kanal postlari
🚨 ALERT - Attackers are trying to exploit CVE-2026-8037 in Progress Kemp LoadMaster.
The CVSS 9.6 flaw enables unauthenticated OS command injection and arbitrary code execution on vulnerable appliances.
eSentire says the attempts it saw failed, but PoC details are now public.
Read: https://thehackernews.com/2026/07/latest-progress-kemp-loadmaster-pre.html
| 2 |  🚨 Chromium File System Access API turns browser permission into #ransomware access on Windows and Android.
AI-generated sample shows files can be encrypted after user-granted folder access.
No native payload required.
Details here 🠒 https://thehackernews.com/2026/07/ai-generated-browser-ransomware-abuses.html | 1 437 |
| 3 | 🛑 The Most Dangerous Code in Your Stack Is Code You Never Wrote.
Open-source dependencies are trusted by default, but one compromised package can put every downstream project at risk.
Supply chain security now means looking beyond known CVEs and watching how code behaves at runtime.
See how defenders are adapting: https://awards.thehackernews.com/blog/the-danger-in-your-dependencies/ | 1 561 |
| 4 |  55.2% of breached respondents said they were told to keep quiet.
Bitdefender's 2026 survey of 1,200 IT and security pros shows where teams are still struggling: Shadow AI visibility, attack surface reduction, LOTL awareness, and breach transparency.
Details here: https://thehackernews.com/2026/07/2026-cybersecurity-assessment-gap.html | 2 099 |
| 5 |  ⚡ Microsoft now has a 2029 target for post-quantum cryptography.
The company says quantum advances have shifted the risk timeline.
Its roadmap brings PQC into SFI and focuses on TLS 1.3, crypto-agility, and trust chains for signing, certificates, keys, and updates.
Why Microsoft moved the timeline: https://thehackernews.com/2026/07/microsoft-accelerates-post-quantum.html | 2 624 |
| 6 |  🛑 "Phantom squatting" is already in the wild.
AI models invent domains. Attackers register them first. Users can get the bad link from the AI itself.
Researchers found roughly 250,000 unowned AI-invented domains.
Details here: https://thehackernews.com/2026/07/phantom-squatting-uses-ai-hallucinated.html | 3 872 |
| 7 |  🔥 Anthropic is putting #Claude Fable 5 back online worldwide.
The U.S. lifted June 12 export controls tied to an Amazon-reported jailbreak that surfaced vulnerability-finding and exploit-code behavior.
Fable 5 returns July 1 across Claude platforms.
#Anthropic says its new classifier blocks the method in 99%+ of tries.
Read: https://thehackernews.com/2026/07/anthropic-restores-claude-fable-5-after.html | 4 046 |
| 8 |  ⚠️ 81M+ Azure CLI login attempts. At least 78 Microsoft accounts compromised.
The June 12-26 campaign used old breached passwords and the deprecated ROPC OAuth flow.
MFA was enabled in many cases, but Azure CLI sign-ins were still exposed.
Details here: https://thehackernews.com/2026/07/azure-cli-password-spray-hits-at-least.html | 3 909 |
| 9 |  🚨 ClickFix is no longer just a fake CAPTCHA trick.
A researcher analyzed roughly 3,000 live payloads and found API-driven servers generating fresh obfuscated commands on request.
A newer Downloads-folder method keeps the bad code out of the clipboard to slip past AMSI.
Read: https://thehackernews.com/2026/07/researcher-analyzes-3000-live-clickfix.html | 3 802 |
| 10 |  ⚠️ Citrix patched six NetScaler ADC and Gateway flaws, including an unauthenticated arbitrary file read.
Other bugs can trigger memory overread or DoS in specific SAML, Gateway, AAA, DNS, Oracle LB, TCP Profile, and HTTP/2 setups.
Details here: https://thehackernews.com/2026/07/citrix-patches-six-netscaler-flaws.html | 3 995 |
| 11 |  ⚠️ Microsoft is warning about a new way AI agents can be manipulated through MCP tools.
The issue is not a broken rule or a software bug.
A malicious tool description can hide instructions that make an agent collect company data, such as unpaid invoices, and send it out through a normal-looking tool call.
Details here: https://thehackernews.com/2026/06/microsoft-warns-poisoned-mcp-tool.html | 5 317 |
| 12 |  🛑 A new RustDuck botnet is turning routers, cameras, Android boxes, and poorly secured servers into DDoS nodes.
It spreads through weak Telnet/SSH logins, exposed ADB, and old flaws, while its newer core is being rewritten in Rust.
Details 🠒 https://thehackernews.com/2026/06/rustduck-botnet-rebuilds-in-rust-to.html | 4 941 |
| 13 |  🚨 CVE-2026-33017 is being exploited against Langflow.
Attackers abuse an unauthenticated API endpoint to run Python code, drop Lambsys, and launch a Monero miner.
Lambsys can spread via reused SSH keys.
Langflow attack chain: https://thehackernews.com/2026/06/langflow-rce-exploited-to-deploy-monero.html | 5 059 |
| 14 |  ⚠️ A fake “Google Notes” extension is swapping #cryptocurrency wallet addresses inside Chromium browsers.
Experts call it "Silent Swap"
Unsigned .NET and Golang installers inject the extension, alter browser preference files, and use EtherHiding to rotate C2.
Details here ➝ https://thehackernews.com/2026/06/silent-swap-crypto-clipper-uses-fake.html | 5 106 |
| 15 |  🛑 Old shell tricks didn’t die. They found a new target 🠒 AI coding agents.
Researchers shows how Bash parsing can slip past weak text-based command guards, letting r''m become rm before execution.
GuardFall bypass worked on 10 of 11 open-source agents tested.
Read how it works: https://thehackernews.com/2026/06/guardfall-exposes-open-source-ai-coding.html | 4 834 |
| 16 |  🛑 A leaked AI key is not just a secret anymore.
It is a running bill.
Researchers tested 444 iOS AI chatbot apps. Over 250 exposed paid LLM access through network traffic.
> Plaintext keys
> Replayable tokens
> Open backend proxies with no auth
Read the THN report: https://thehackernews.com/2026/06/282-ios-apps-found-leaking-llm-api-keys.html | 4 768 |
| 17 |  Fraud infrastructure for FIFA World Cup 2026 was already in place before June 11 kickoff.
Check Point saw 60x spike in fake sportsbook apps (64 samples) + large-scale travel/phishing domains, some with MX set for email interception.
Full report: https://thehackernews.com/2026/06/what-numbers-say-about-fifa-2026-cyber.html | 4 886 |
| 18 |  🛑 SimpleHelp RMM CVE-2026-48558 exploited for OIDC authentication bypass.
Attackers gain technician sessions to deploy TaskWeaver and Djinn Stealer. Djinn Stealer targets cloud, code, AI tools, browsers, SSH, and wallets.
Read the full story: https://thehackernews.com/2026/06/attackers-exploit-simplehelp-cve-2026.html | 5 143 |
| 19 |  🚨 Nearby file sharing has a local blind spot.
Researchers found six flaws in AirDrop and Quick Share that can crash sharing services, bypass Samsung session checks, and trigger a crash in Google’s Windows app.
Apple and Google have started fixes.
Read: https://thehackernews.com/2026/06/airdrop-and-quick-share-flaws-let.html | 5 389 |
| 20 |  🎮 Tell an AI browser it’s just playing a game.
Researchers say "BioShocking" tricked six AI agents, including #ChatGPT Atlas, Comet, and #Claude, into copying GitHub SSH credentials from a signed-in session.
Read how the attack chain worked: https://thehackernews.com/2026/06/new-bioshocking-attack-tricks-ai.html | 5 169 |
