Category: TheHackerNews

How To Browse Faster and Get More Done Using Adapt Browser
01
Jan
2026

How To Browse Faster and Get More Done Using Adapt Browser

As web browsers evolve into all-purpose platforms, performance and productivity often suffer. Feature overload, excessive background processes, and fragmented workflows…

RondoDox Botnet
01
Jan
2026

RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web Servers

Jan 01, 2026Ravie LakshmananNetwork Security / Vulnerability Cybersecurity researchers have disclosed details of a persistent nine-month-long campaign that has targeted…

Trust Wallet Chrome Extension Hack Drains $8.5M via Shai-Hulud Supply Chain Attack
31
Dec
2025

Trust Wallet Chrome Extension Hack Drains $8.5M via Shai-Hulud Supply Chain Attack

Dec 31, 2026Ravie LakshmananSoftware Security / Data Breach Trust Wallet on Tuesday revealed that the second iteration of the Shai-Hulud…

DarkSpectre Browser Extension
31
Dec
2025

DarkSpectre Browser Extension Campaigns Exposed After Impacting 8.8 Million Users Worldwide

The threat actor behind two malicious browser extension campaigns, ShadyPanda and GhostPoster, has been attributed to a third attack campaign…

Researchers Spot Modified Shai-Hulud Worm Testing Payload on npm Registry
31
Dec
2025

Researchers Spot Modified Shai-Hulud Worm Testing Payload on npm Registry

Dec 31, 2026Ravie LakshmananCybersecurity / Malware Cybersecurity researchers have disclosed details of what appears to be a new strain of…

API Connect Bug
31
Dec
2025

IBM Warns of Critical API Connect Bug Allowing Remote Authentication Bypass

Dec 31, 2026Ravie LakshmananAPI Security / Vulnerability IBM has disclosed details of a critical security flaw in API Connect that…

U.S. Treasury Lifts Sanctions on Three Individuals Linked to Intellexa and Predator Spyware
31
Dec
2025

U.S. Treasury Lifts Sanctions on Three Individuals Linked to Intellexa and Predator Spyware

Dec 31, 2026Ravie LakshmananSpyware / Mobile Security The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) on…

CSA Issues Alert on Critical SmarterMail Bug Allowing Remote Code Execution
30
Dec
2025

CSA Issues Alert on Critical SmarterMail Bug Allowing Remote Code Execution

Dec 30, 2026Ravie LakshmananVulnerability / Email Security The Cyber Security Agency of Singapore (CSA) has issued a bulletin warning of…

Silver Fox Targets Indian Users With Tax-Themed Emails Delivering ValleyRAT Malware
30
Dec
2025

Silver Fox Targets Indian Users With Tax-Themed Emails Delivering ValleyRAT Malware

The threat actor known as Silver Fox has turned its focus to India, using income tax-themed lures in phishing campaigns…

AI SOC Workflows
30
Dec
2025

How to Integrate AI into Modern SOC Workflows

Artificial intelligence (AI) is making its way into security operations quickly, but many practitioners are still struggling to turn early…

Mustang Panda Uses Signed Kernel-Mode Rootkit to Load TONESHELL Backdoor
30
Dec
2025

Mustang Panda Uses Signed Kernel-Mode Rootkit to Load TONESHELL Backdoor

Dec 30, 2026Ravie LakshmananMalware / Cyber Espionage The Chinese hacking group known as Mustang Panda has leveraged a previously undocumented…

27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials
29
Dec
2025

27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials

Cybersecurity researchers have disclosed details of what has been described as a “sustained and targeted” spear-phishing campaign that has published…