The Hacker News

Articles by The Hacker News

New VVS Stealer Malware Targets Discord Accounts via Obfuscated Python Code - The Hacker News

Technology January 6, 2026

Cybersecurity researchers have disclosed details of a new Python-based information stealer called VVS Stealer (also styled as VVS $tealer) that's capable of harvesting Discord credentials and tokens.οΏ½...

DarkSpectre Browser Extension Campaigns Exposed After Impacting 8.8 Million Users Worldwide - The Hacker News

Technology January 1, 2026

The threat actor behind two malicious browser extension campaigns, ShadyPanda and GhostPoster, has been attributed to a third attack campaign codenamed DarkSpectre that has impacted 2.2 million usersοΏ½...

New UEFI Flaw Enables Early-Boot DMA Attacks on ASRock, ASUS, GIGABYTE, MSI Motherboards - The Hacker News

Technology December 20, 2025

Certain motherboard models from vendors like ASRock, ASUSTeK Computer, GIGABYTE, and MSI are affected by a security vulnerability that leaves them susceptible to early-boot direct memory access (DMA)οΏ½...

WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability - The Hacker News

Technology December 20, 2025

WatchGuard has released fixes to address a critical security flaw in Fireware OS that it said has been exploited in real-world attacks. Tracked as CVE-2025-14733 (CVSS score: 9.3), the vulnerabilityοΏ½...

GhostPoster Malware Found in 17 Firefox Add-ons with 50,000+ Downloads - The Hacker News

Technology December 18, 2025

A new campaign named GhostPoster has leveraged logo files associated with 17 Mozilla Firefox browser add-ons to embed malicious JavaScript code designed to hijack affiliate links, inject tracking codοΏ½...

Featured Chrome Browser Extension Caught Intercepting Millions of Users' AI Chats - The Hacker News

Technology December 16, 2025

A Google Chrome extension with a "Featured" badge and six million users has been observed silently gathering every prompt entered by users into artificial intelligence (AI)-powered chatbots like OpenοΏ½...

Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild - The Hacker News

Technology December 14, 2025

Apple on Friday released security updates for iOS, iPadOS, macOS, tvOS, watchOS, visionOS, and its Safari web browser to address two security flaws that it said have been exploited in the wild, one oοΏ½...

Warning: WinRAR Vulnerability CVE-2025-6218 Under Active Attack by Multiple Threat Groups - The Hacker News

Technology December 11, 2025

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a security flaw impacting the WinRAR file archiver and compression utility to its Known Exploited Vulnerabilities (KEοΏ½...

Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero-Days - The Hacker News

Technology December 11, 2025

Microsoft closed out 2025 with patches for 56 security flaws in various products across the Windows platform, including one vulnerability that has been actively exploited in the wild. Of the 56 flawοΏ½...

Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation - The Hacker News

Business December 7, 2025

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday formally added a critical security flaw impacting React Server Components (RSC) to its Known Exploited Vulnerabilities (KEV)οΏ½...