Category: TheHackerNews

Microsoft Develops Scanner to Detect Backdoors in Open-Weight Large Language Models
04
Feb
2026

Microsoft Develops Scanner to Detect Backdoors in Open-Weight Large Language Models

Ravie LakshmananFeb 04, 2026Artificial Intelligence / Software Security Microsoft on Wednesday said it built a lightweight scanner that it said…

China-Linked Amaranth-Dragon Exploits WinRAR Flaw in Espionage Campaigns
04
Feb
2026

China-Linked Amaranth-Dragon Exploits WinRAR Flaw in Espionage Campaigns

Threat actors affiliated with China have been attributed to a fresh set of cyber espionage campaigns targeting government and law…

Orchid Security Introduces Continuous Identity Observability for Enterprise Applications
04
Feb
2026

Orchid Security Introduces Continuous Identity Observability for Enterprise Applications

The Hacker NewsFeb 04, 2026Identity Security / Security Operations An innovative approach to discovering, analyzing, and governing identity usage beyond…

How Early Decisions Shape Incident Response Investigations
04
Feb
2026

How Early Decisions Shape Incident Response Investigations

Many incident response failures do not come from a lack of tools, intelligence, or technical skills. They come from what…

macOS via Fake Ads and Installers
04
Feb
2026

Microsoft Warns Python Infostealers Target macOS via Fake Ads and Installers

Ravie LakshmananFeb 04, 2026Malvertising / Infostealer Microsoft has warned that information-stealing attacks are “rapidly expanding” beyond Windows to target Apple…

CISA Adds Actively Exploited SolarWinds Web Help Desk RCE to KEV Catalog
04
Feb
2026

CISA Adds Actively Exploited SolarWinds Web Help Desk RCE to KEV Catalog

Ravie LakshmananFeb 04, 2026Software Security / Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical…

Open VSX Extensions
04
Feb
2026

Eclipse Foundation Mandates Pre-Publish Security Checks for Open VSX Extensions

Ravie LakshmananFeb 04, 2026Supply Chain Security / Secure Coding The Eclipse Foundation, which maintains the Open VSX Registry, has announced…

Docker Fixes Critical Ask Gordon AI Flaw Allowing Code Execution via Image Metadata
03
Feb
2026

Docker Fixes Critical Ask Gordon AI Flaw Allowing Code Execution via Image Metadata

Ravie LakshmananFeb 03, 2026Artificial Intelligence / Vulnerability Cybersecurity researchers have disclosed details of a now-patched security flaw impacting Ask Gordon,…

Hackers Exploit Metro4Shell RCE Flaw in React Native CLI npm Package
03
Feb
2026

Hackers Exploit Metro4Shell RCE Flaw in React Native CLI npm Package

Ravie LakshmananFeb 03, 2026Open Source / Vulnerability Threat actors have been observed exploiting a critical security flaw impacting the Metro…

Learn What to Build, Buy, and Automate
03
Feb
2026

Learn What to Build, Buy, and Automate

The Hacker NewsFeb 03, 2026Threat Detection / Enterprise Security Most security teams today are buried under tools. Too many dashboards….

When Cloud Outages Ripple Across the Internet
03
Feb
2026

When Cloud Outages Ripple Across the Internet

Recent major cloud service outages have been hard to miss. High-profile incidents affecting providers such as AWS, Azure, and Cloudflare…

Microsoft Office
03
Feb
2026

APT28 Uses Microsoft Office CVE-2026-21509 in Espionage-Focused Malware Attacks

Ravie LakshmananFeb 03, 2026Vulnerability / Malware The Russia-linked state-sponsored threat actor known as APT28 (aka UAC-0001) has been attributed to…