The Hacker News
Kanalga Telegramβda oβtish
β Official THN Telegram Channel β A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking. π¨ Contact: admin@thehackernews.com π Website: https://thehackernews.com
Ko'proq ko'rsatishπ Telegram kanali The Hacker News analitikasi
The Hacker News (@thehackernews) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 164 038 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 661-o'rinni va AQSH mintaqasida 97-o'rinni egallagan.
π Auditoriya koβrsatkichlari va dinamika
Π½Π΅Π²ΡΠ΄ΠΎΠΌΠΎ sanasidan buyon loyiha tez oβsib, 164 038 obunachiga ega boβldi.
26 Oktabr, 2026 dagi oxirgi maβlumotlarga koβra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni -113 ga, soβnggi 24 soatda esa 97 ga oβzgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlangan (Telegram tomonidan rasmiy tasdiq)
- Jalb etish (ER): Auditoriya oβrtacha 4.25% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining 3.10% ini tashkil etuvchi reaksiyalarni toβplaydi.
- Post qamrovi: Har bir post oβrtacha 6 961 marta koβriladi; birinchi sutkada odatda 5 089 ta koβrish yigβiladi.
- Reaksiyalar va oβzaro taβsir: Auditoriya faol: har bir postga oβrtacha 12 ta reaksiya keladi.
- Tematik yoβnalishlar: Kontent attack, credential, cve-2026, github, backdoor kabi asosiy mavzularga jamlangan.
π Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida taβriflaydi:
ββ Official THN Telegram Channel β A trusted, widely read, independent source for breaking news and tech coverage about cybersecurity and hacking.
π¨ Contact: admin@thehackernews.com
π Website: https://thehackernews.comβ
Yuqori yangilanish chastotasi (oxirgi maβlumot 27 Oktabr, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli boβlib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim taβsir nuqtasiga aylantirishini koβrsatadi.
163 990
Obunachilar
+9724 soatlar
+8027 kun
-11330 kun
Postlar arxiv
163 992
π¨ Microsoft Authenticator flaw let malicious Android apps impersonate Teams and obtain work account sign-in tokens.
No app permissions needed. Researchers demonstrated access to email, files, and calendars.
Microsoft has patched it.
π Read more β https://thehackernews.com/2026/10/microsoft-authenticator-flaw-let.html
163 992
β οΈ A Gemini agent in a security test reportedly accessed 3 real companies, one by guessing a password.
Anthropic says a fake βdiscounted Claudeβ reseller stole buyersβ credentials. Same weak point: a credential someone can guess, find, or steal.
Read: https://thn.news/ai-security-risks
163 992
π¨ Keystone to destroy 18,835 hardware wallets after hackers stole its device verification key.
The stolen key could let counterfeit wallets pass as genuine. The breach also affected 25,964 buyer records.
What to do β https://thehackernews.com/2026/10/keystone-to-destroy-18835-hardware.html
163 992
β οΈ Lazarus hackers are exploiting South Korean banking security software to deploy malware in a new espionage campaign.
The attacks use GitHub-hosted payloads, new backdoors, and malware communications protected by post-quantum encryption.
Read: https://thehackernews.com/2026/10/lazarus-abuses-south-korean-security.html
163 992
π Australia says it gained access to an Amadey malware operation's backend and cut off a cybercriminal's control over 180,000 infected computers worldwide.
The malware wasn't removed, but the operator lost access.
Here's what happened: https://thehackernews.com/2026/10/australia-gets-into-amadey-malware.html
163 992
βΌοΈ OpenAI encrypts its AI models' hidden reasoning to keep it unreadable. Researchers found a way to extract it as plaintext using OpenAI's own compaction feature.
The method bypassed earlier protections. OpenAI has now patched the flaw.
Here's how it worked β https://thehackernews.com/2026/10/openai-compaction-flaw-let-researchers.html
163 992
π¨ Ransomware attackers know your recovery plan. That's why they target your backups first.
Stolen admin credentials, deleted shadow copies, compromised backup storage.
Having backups isn't the same as being able to recover.
Here's what actually protects recovery β https://thehackernews.com/expert-insights/2026/10/your-backup-isnt-ransomware-proof-just.html
163 992
π¨ Dahua IP cameras compromised in Ukraine.
CERT-UA confirms attackers gained access to video feeds, changed device settings, and created rogue accounts.
The attacks exploit Easy4IP P2P access alongside weak passwords or authentication bypass flaws.
Full details β https://thehackernews.com/2026/10/attackers-hijack-dahua-ip-cameras-in.html
163 992
βΌοΈ UPDATE - Tailscale confirms the Tailworm SSH flaws are real.
Its new investigation page says most of what it found is privilege escalation and calls the issues βserious.β Fix targeted within 24 hours β no CVE or patched version out yet.
Mitigate now:
β Set TS_SSH_DISABLE_FORWARDING=1 in the tailscaled service and restart
β Tighten SSH access rules to the users/devices that need them
Read: https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html
163 992
π¨ CISA adds two PHP2Shell bugs to its KEV catalog after confirming active exploitation.
CVE-2026-109618 and CVE-2026-109619 enable unauthenticated remote code execution on affected PHP deployments.
Read β https://thehackernews.com/2026/10/cisa-confirms-active-exploitation-of.html
163 992
π¨ 953 online stores infected in a stealthy malware campaign, most running Magento.
Hackers injected malicious JavaScript that filters out security scanners while serving malicious code to real shoppers.
How it works β https://thehackernews.com/2026/10/hackers-infect-953-online-stores-with.html
163 992
βΌοΈ PHP patches Windows builds AGAIN, just 5 days after the PHP2Shell fixes.
This time, a Brotli flaw could allow code execution when cURL automatically decompresses crafted HTTP responses.
Updated builds cover PHP 8.2β8.5.
Full details: https://thehackernews.com/2026/10/php-issues-second-windows-security.html
163 992
π¨ Microsoft Teams IT support scams are leading to malware and ransomware attacks.
Researchers tracked hundreds of cases where attackers flood inboxes with emails, impersonate IT staff on Teams, and trick employees into granting remote access.
How the attacks work β https://thehackernews.com/2026/10/attackers-use-microsoft-teams-it.html
163 992
This2Shell. That2Shell. Everything2Shell.
WHAT A WEEK IN #CYBERSECURITY.
> Critical RCEs dropping everywhere.
> Millions of exploit attempts.
> AI agents getting hijacked.
> Leaked keys poisoning software packages.
> Old bugs coming back to haunt us.
> And yes, some sites just went offline.
One week. Too many ways to get hacked.
β‘ Full Recap: https://thehackernews.com/2026/10/weekly-recap-this2shell-that2shell.html
163 992
Get real AI adoption data
Every unused AI license is money that could go somewhere else.
NordLayer AI Scout gives you the answers on real AI usage in your company:
β
See whoβs provisioned yet not adopting the tools
β
Check usage broken down by person, app, department, and team.
β
Discover when AI gets used, which slots are busiest, and how much happens outside working hours.
β
No prompt content is ever shown, only trends.
Know which seats are working and which ones youβre overpaying for π https://thn.news/vault-credentials
163 992
βΌοΈ ALERT - 2 New critical Wasmtime flaws (CVSS 9.9) could let malicious WebAssembly modules escape their sandbox.
β’ CVE-2026-115889 Affects multiple architectures
β’ CVE-2026-115893 ARM64-only, present since 2020
Embedded apps need rebuilding.
Read β https://thehackernews.com/2026/10/two-critical-wasmtime-flaws-could-let.html
163 992
π¨ An attack can unfold for weeks before a SOC gets its first major alert.
By then, the real story may be buried in DNS queries, logins, and network connections that looked harmless.
Here's how NDR helps AI-assisted SOCs connect the clues and reconstruct attacks.
Read more β https://thehackernews.com/2026/10/between-alerts-what-attackers-do-in.html
163 992
βΌοΈ Tailscale SSH (Tailworm)
Researchers report that a compromised, SSH-authorized device could gain root on permitted targets via forwarding flaws.
Not unauthenticated RCE. Lab-tested; scope still under review.
Mitigations:
β’ Tighten SSH access policies
β’ Disable forwarding if unused (TS_SSH_DISABLE_FORWARDING=1)
β’ Enable SSH check mode as an added barrier
Tailnet Lock helps limit device enrollment abuse, not root escalation. Tailscale isn't recommending a blanket SSH shutdown.
Read - https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html
163 992
π¨ Android spyware for rent can steal Telegram 2FA passwords and clone WeChat accounts.
Meet uCreator, a kit that hides inside modified Telegram apps, extracts chats, and conceals attacker sessions.
Read full investigation: https://thehackernews.com/2026/10/ucreator-android-spyware-can-steal.html
163 992
π¨ UPDATE: The Brotli flaw (CVE-2026-111497) goes beyond Node.js and web traffic.
β’ .NET: patched by Microsoft
β’ FFmpeg: hit via a crafted JPEG XL image
β’ ClickHouse: one request crashes it, fix not yet released
β’ Apache Arrow: no fix yet
Details β https://thehackernews.com/2026/10/brotli-decoder-flaw-behind-nodejs-rce.html
