Virexa

Home AI Programming Cloud Security Open Source Games Mobile Games Developer Hub

Sign In Sign Up

Search news, topics or sources

Search news, topics or sources

Sign In Sign Up

AI Programming Cloud Security Open Source Games Mobile Games Developer Hub

Modern AI news aggregation and newsletter platform covering technology, business, AI, games and world news.

Categories

AI
Programming
Cloud
Security
Open Source
Developer Hub

Company

About
Contact
Advertise

Resources

RSS Feed
API
Privacy Policy
Terms of Service

© 2026 Virexa. All rights reserved.

Virexa

Home AI Programming Cloud Security Open Source Games Mobile Games Developer Hub

Sign In Sign Up

Search news, topics or sources

Search news, topics or sources

Sign In Sign Up

AI Programming Cloud Security Open Source Games Mobile Games Developer Hub

Virexa

Home AI Programming Cloud Security Open Source Games Mobile Games Developer Hub

Sign In Sign Up

Search news, topics or sources

Search news, topics or sources

Sign In Sign Up

AI Programming Cloud Security Open Source Games Mobile Games Developer Hub

Home›Search Results

Explore

Search Results

Showing results for:
"Hacker News"

Filters

1,244 results • Page 8 of 104

Sort by

TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

Matched "Hacker News"Found in Description

SecuritySecurity Advisory

TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT. "TWINLOOT is a modular, PyArmor-hardened Python implant designed to operate its entire command-and-control infrastructure inside trusted Microsoft services," Ontinue said in a technical report shared with The Hacker News. "Tasking flows through SharePoint Online file

The Hacker News·August 18, 2026·1 min read

← Previous 1…6 7 8 9 10…104 Next →

🔥

Developer Pulse

What developers are discussing today

GPT-5.5 API9.4K
Next.js 166.2K
Claude Code5.8K
Kubernetes3.4K
Rust2.7K

One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025

A single piece of infrastructure has been pulling records out of Salesforce and ServiceNow customer portals across multiple industries for more than a year, according to research published this week by agent security platform Reco. The activity, which Reco has named the City Forum campaign after a domain tied to the attacker's IP address, traces back to one server: 158.220.87.79, hosted on a

The Hacker News·August 18, 2026·1 min read

16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets

Cybersecurity researchers have flagged a new typosquatting campaign targeting RubyGems users with a Windows-based information stealer. OpenSourceMalware, which discovered the activity on August 15, 2026, is tracking the threat under the moniker StubMaker. The complete list of packages published as part of the campaign is below - ubnuler ubnlder ri18nr reaker rakier orakw joxn

The Hacker News·August 18, 2026·1 min read

SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers

SafePal has disclosed that an authorization flaw in an order-tracking plug-in exposed the names, email addresses, shipping addresses, phone numbers, and purchase details of approximately 39,798 customers. The hardware wallet maker said all affected customers were notified individually by email on August 16 from security@safepal.com, with the subject line "[Important] Your SafePal Order

The Hacker News·August 18, 2026·1 min read

CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical flaw impacting Ray to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Ray is an open-source, Python-native distributed computing framework designed to scale artificial intelligence and machine learning workloads. As of writing, the GitHub project has more than

The Hacker News·August 18, 2026·1 min read

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, under certain conditions, could allow an unauthenticated attacker to remotely modify or delete public projects and user data. The flaw, tracked as CVE-2026-19478, has been rated Critical by GitLab and assigned a CVSS score of 9.4. Released on

The Hacker News·August 17, 2026·1 min read

Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

Matched "Hacker News"Found in Source

ProgrammingSecurity Advisory

Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake's public snowflakedb/snowflake-connector-net repository that it said could be exploited through a crafted GitHub issue to execute commands in a workflow containing internal Jira credentials. The issue was present in .github/workflows/jira_issue.yml, which ran when a

The Hacker News·August 17, 2026·1 min read

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited to achieve arbitrary code execution on susceptible sites. The vulnerability, tracked as CVE-2026-15748, is rated 9.8 out of 10.0 on the CVSS scoring system. It was discovered and reported by a security researcher who goes by the online alias "

The Hacker News·August 17, 2026·1 min read

Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic

Cybersecurity researchers have traced the continued evolution of the Cavern (aka Cav3rn) command-and-control (C2) framework used by Iranian nation-state hackers in attacks targeting entities in Israel. Russian cybersecurity company Kaspersky said its ongoing monitoring of the threat activity cluster since December 2025 has led to the discovery of previously unreported components that expand the

The Hacker News·August 17, 2026·1 min read

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions became attack paths, and supply-chain problems kept spreading farther than the original compromise. A lot of it came down to access that was already there and defenses that assumed nobody would look too closely. So, nothing magical. Just a

The Hacker News·August 17, 2026·1 min read

How MCP Servers Can Expose Enterprise Secrets

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

How MCP Servers Can Expose Enterprise Secrets

MCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned access and prompt injection, often before security teams even know the server is running. As more organizations adopt AI agents into their systems, that exposure can silently become a major gap in MCP server security. The Model Context Protocol (MCP) allows AI agents to reach the tools and data,

The Hacker News·August 17, 2026·1 min read

Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access

Matched "Hacker News"Found in Source

MobileSecurity Advisory

Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access

Security researchers at SSD Secure Disclosure have published a two-stage exploit chain that achieves full Android kernel access on devices running Unisoc modem firmware through a VoLTE video call, with no fix from the chipset maker. The advisory, published August 17, 2026, is the second stage of a chain that began in March 2026, when SSD disclosed remote code execution in the

The Hacker News·August 17, 2026·1 min read

Zero-Day

↘2K

💬

Top Discussion

HN

Hacker News

“GPT-5.5's API pricing is reshaping how startups build AI products”

14.1K932 comments

View discussion→

Filters

Time

TodayLast 7 DaysLast 30 DaysLast 3 MonthsLast Year

Categories

TechnologyBusinessAIGamesMobile GamesWorldScienceSecurityStartupProgrammingMobileRoboticsSpace

Sources

Hacker News36Android Authority30BBC26Al Jazeera25Forbes25Unity Discussions22Google Developers20IGN20TechCrunch18Wired17The Hacker News13Polygon10

Content Type

NewsReleaseTutorialResearchSecurity AdvisoryCertificationOpen Source