The Hacker News

markdown !https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgv9W2lSuCdHjvqeLUN5WtqUOgCwe2FAyP1Y_z4oUr1LgM1MdOE5A83gkzSOfGjIosfdlfB4SuLbeVbydeuParENW4MH...

Cybersecurity researchers have disclosed a nine‑year‑old vulnerability in the Linux kernel that allows an unprivileged local user to read sensitive files and ex...

GitHub on Wednesday officially confirmed that the breach of its internal repositories was the result of a compromise of an employee device involving a poisoned...

Image: Drupal flaw Vulnerability Overview Drupal has released security updates for a highly critical vulnerability in Drupal Core that can be exploited for remo...

Microsoft has unveiled two new open-source tools called RAMPART and Clarity to assist developers in better testing the security of artificial intelligence AI ag...

마이크로소프트는 화요일에 malware‑signing‑as‑a‑service(MSaaS) 운영을 차단했으며, 이가 회사의 Artifact Signing 시스템을 무기로 악성 코드를 전달했다고 밝혔다.

사이버보안 연구원들은 2025년에 중국과 연계된 위협 행위자 Webworm이 새로운 활동을 보였으며, Discord를 이용하는 맞춤형 백도어를 배포하고 있다고 경고했습니다.

The Hacker News May 20, 2026 – Identity Security / Enterprise Security !Agent AIhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjYQaF0euKIc86WLed9RL...

Microsoft on Tuesday released a mitigation for a BitLocker bypass vulnerability named YellowKey following its public disclosure last week. The zero‑day flaw, no...

!Grafana 침해 https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1N3gjAFZQ-1hptUuKwQmHMjlZwIMDn6H6mKc9UuDELAKWl_3Kow6EcD72IkWpBf8ZB2Db8wrZW86zVxKaEgQZ...

사이버보안 연구원들은 Android 기기 사용자를 대상으로 하는 “Trapdoor”라는 새로운 광고 사기 및 악성 광고 운영에 대한 세부 정보를 공개했습니다. 이 활동은…

Proof-of-concept PoC exploit code has now been released for a recently patched security flaw in the Linux kernel that could allow for local privilege escalation...

In February 2026, a phishing‑as‑a‑service PhaaS platform called EvilTokens went live. Within five weeks, it had compromised more than 340 Microsoft 365 organiza...

Release Details Drupal has issued an alert that a core security release will be deployed for all supported branches on May 20 2026, between 5 – 9 p.m. UTC. > “...

SEPPMail Secure E‑Mail Gateway에서 중요한 보안 취약점이 공개되었으며, 이는 enterprise‑grade email security solution인 해당 제품에서 악용될 수 있습니다…

Cybersecurity researchers have flagged a compromised version of the Nx Console extension that was published to the Microsoft Visual Studio Code VS Code Marketpl...

!StepSecurity 분석 일러스트레이션 https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgc7jpVO6HhBuEBTjkwmNjYhKlFmhhmytOqNZHYuGP-dNWrf3AoyE68yoKj77elddOX...

!GitHub Actions supply chain attack illustrationhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgc7jpVO6HhBuEBTjkwmNjYhKlFmhhmytOqNZHYuGP-dNWrf3AoyE6...

Monday opens with a trust problem. A mail server flaw is under active use. A network control system was targeted. Trusted packages were poisoned. A fake model p...

What happens when a phishing email looks clean enough to pass through security, but dangerous enough to expose the business after one click? That is the gap man...

Supply chain attackers are not only trying to slip malicious code into trusted software. They are trying to steal the access that makes trusted software possibl...

Overview Ivanti, Fortinet, n8n, SAP, and VMware have released security fixes for a range of vulnerabilities that could be exploited by malicious actors to bypa...

!npm hackinghttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhbN7WbW1cUkMzMJl0HPvRrQQUc5MQEE3Pvrc735aG7RGwpguum4POxa4yeQjyIyiAYBDj_Zl6Ud8esex0AnQSG2J6...

Ravie Lakshmanan 2026년 5월 18일 – 산업 사보타주 / Malware

요약: 최근 공개된 Windows 결함 YellowKey와 GreenPlasma의 보안 연구원인 Chaotic Eclipse가 ...에 대한 proof‑of‑concept PoC를 공개했습니다.

Ravie LakshmananMay 17, 2026Server Security / Vulnerability !https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdFtAiSRukEdQXVvEzXdQKy0O9SY7RCuqFLuAE...

Ravie LakshmananMay 17, 2026Data Breach / Cybercrime !https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNcCJY0s2GwOwFeSuqVz941pWrGK3theum-FBFyYO97Jn...

Ravie LakshmananMay 16, 2026Vulnerability / Website Security !https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYS8AhChFEeH6IwT4x1eB5VAeGfriF4VVcwIN...

Ravie LakshmananMay 15, 2026Botnet / Threat Intelligence !https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8BT1AOScncZQM_A-0WBdCzTDAHGHSey48_Mywhij...

Ravie LakshmananMay 15, 2026Vulnerability / AI Security !OpenClaw Flawshttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgz_tK9S8jS_n5CK694-FLGjQP5_M...

The Hacker NewsMay 15, 2026Endpoint Security / Threat Detection !https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVcSUDrpIZyFrHqIlIGnXfIShsEamRNvia...

!https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1l4Vq20M4553fkDfGbO9VqLV9Au-6EefivLp8HT2W5QxJvgWf1mr6pg5xsbC5j3FCJzOOCJv_CImY1LjjFYIN_25ajki1iS_EVP...

Ravie LakshmananMay 15, 2026Microsoft / Vulnerability !https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEirN79ZRjEd5wnVbOTlJJsWjQ54cwSj2bM5NDzBSgAFO8...

Ravie LakshmananMay 15, 2026Vulnerability / Credential Theft !https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4XG5z00sF3uL0ZbhtZNiergQ9QVaZJydwP1p...