Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations
Anthropic on Thursday became the latest artificial intelligence (AI) company to reveal that three of its models, including Claude Opus 4.7, Mythos 5, and an…
Category: TheHackerNews
Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks
Swati KhandelwalJul 31, 2026Artificial Intelligence / Cyber Attack Palo Alto Networks’ Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent…
6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026
Device code phishing – the abuse of the OAuth 2.0 device authorization grant to steal access tokens – has evolved from a niche red-team technique…
Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw
An academic study has disclosed a “widespread class” of security vulnerabilities impacting 4G and 5G core networks that, if successfully exploited, could trigger denial-of-service (DoS)…
Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware
Swati KhandelwalAug 01, 2026Malware / Cyber Espionage A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access…
Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes
Swati KhandelwalAug 01, 2026Vulnerability / Threat Intelligence An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2…
Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction
Ravie LakshmananAug 01, 2026Vulnerability / Enterprise Security Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing…
Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites
Swati KhandelwalAug 01, 2026Web Security / Supply Chain Attack Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side…
Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies
Bitsight says some cheap Android TV boxes have shipped with apps that rewrite their hardware identity to mimic Samsung, Huawei, Xiaomi, or Vivo phones, then…
HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm
Ravie LakshmananJul 31, 2026Endpoint Security / Malware Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware…
Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk
A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central Asia, including Afghanistan,…
Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined
Ravie LakshmananJul 31, 2026Vulnerability / Browser Security Google on Thursday announced that it fixed a whopping 1,072 security bugs in Chrome versions 149 and 150,…