UNC6426 used stolen GitHub tokens from the 2025 nx npm breach to gain AWS admin access in under 72 hours, enabling data theft ...
Hackers are increasingly exploiting newly disclosed vulnerabilities in third-party software to gain initial access to cloud environments, with the window for attacks shrinking from weeks to just days.
The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...
Cloud attacks are getting faster and deadlier - here's your best defense plan ...
A government-grade iOS exploit kit called DarkSword has been leaked on GitHub, putting hundreds of millions of iPhones ...
The Glassworm campaign has compromised over 151 GitHub repositories and npm packages using invisible Unicode payloads that ...
OpenAI announced Thursday that it has entered into an agreement to acquire Astral, the company behind popular open source Python development tools such as uv, Ruff, and ty, and integrate the company ...
The exploit is now publicly available on GitHub, increasing the urgency for older iPhones and iPads to run the latest ...
The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package ...
A new hacking group has been rampaging the Internet in a persistent campaign that spreads a self-propagating and never-before ...
A leaked iPhone exploit makes outdated iOS devices easy targets — update now or risk full data access from a simple malicious ...